Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          LSbSIDsRZ1K2usNSGCErr95w+w7AT4cdG2SCqqLT7F4=
Subject key identifier:   76:A2:A2:E0:47:09:7B:8D:47:E3:CD:82:84:DC:3B:13:E0:91:8F:6B
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       28BF94D8FE607ABC331B6053B017D4CAF67F5AA8
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time:             Thu 06 Mar 2025 09:45:11 +0000
ROA not before:           Thu 06 Mar 2025 09:40:11 +0000
ROA not after:            Thu 05 Mar 2026 09:45:11 +0000
asID:                     268035
IP address blocks:        45.168.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 04:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bf:94:d8:fe:60:7a:bc:33:1b:60:53:b0:17:d4:ca:f6:7f:5a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Mar  6 09:40:11 2025 GMT
            Not After : Mar  5 09:45:11 2026 GMT
        Subject: CN=76A2A2E047097B8D47E3CD8284DC3B13E0918F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:2d:21:68:e1:d4:b1:ff:f9:0d:a8:18:ae:
                    0b:ee:d8:66:1d:7a:9d:18:76:51:1e:4e:c2:b9:0b:
                    59:56:49:04:13:41:bb:bf:14:de:98:99:4b:7f:b9:
                    42:0e:64:a3:93:bc:54:15:9a:b3:39:1a:83:ba:31:
                    ab:34:b4:33:78:c0:0c:01:a6:22:95:c0:9f:59:7b:
                    23:bf:3e:7e:94:a9:e3:8d:d6:f0:50:e9:7c:59:99:
                    e6:60:f5:f8:7a:2e:44:ba:8c:0a:dc:bd:9f:b7:98:
                    1a:83:46:fa:d0:fd:71:ff:aa:d2:b6:81:7f:99:e3:
                    df:1c:e3:f4:68:ef:8d:53:85:75:63:c3:87:d8:a5:
                    3f:45:2d:0b:e5:fc:93:60:9c:91:c0:45:b8:d6:5e:
                    44:86:97:91:f7:f6:2d:e2:31:ee:b7:27:e6:33:9c:
                    e2:b3:05:6f:4b:f9:16:4d:5d:4c:6d:eb:7a:de:0a:
                    b1:cc:c3:84:5c:95:38:75:58:2a:44:19:12:35:3d:
                    b5:30:c3:c3:7b:e5:29:bb:2e:d6:6f:dd:69:36:f1:
                    a0:a5:9a:46:91:19:33:cb:97:47:9b:d2:08:b7:b6:
                    fe:e6:d7:28:aa:e4:3a:3d:50:61:32:50:3c:92:8e:
                    d2:40:aa:a9:5d:16:d0:56:b2:d5:e1:42:bb:5b:b4:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:A2:E0:47:09:7B:8D:47:E3:CD:82:84:DC:3B:13:E0:91:8F:6B
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:fd:65:ef:a6:e6:6a:48:29:f2:8d:d9:25:70:f7:a6:5f:
         99:36:57:5f:15:17:02:ca:d1:ec:f8:8a:86:54:1f:b5:da:a5:
         d4:ec:09:09:51:c2:f5:3e:d0:5e:d0:39:08:56:7f:b4:f8:b5:
         b7:3d:63:9e:8e:1f:1b:4f:60:14:ca:29:75:77:98:73:1e:62:
         e5:69:26:18:2e:46:9a:6c:17:10:fb:4f:93:c3:f9:ab:13:f6:
         d1:0f:9f:9c:13:49:da:02:12:88:96:0e:46:b2:e1:25:12:62:
         ed:a9:90:a2:26:47:a9:0c:73:ea:4c:d6:c2:05:1d:85:29:36:
         2e:82:41:be:3e:2a:9d:bc:2a:29:28:48:5c:d0:db:e3:37:b8:
         0a:82:d6:76:6f:04:c7:99:d4:93:fe:a3:6b:19:16:fb:8b:f1:
         f4:ef:7c:c8:f4:72:60:9f:67:5a:6a:03:e8:aa:d7:d1:ce:9e:
         fb:f4:77:67:81:40:e9:5b:69:05:cf:bc:b0:0d:e2:b5:c8:06:
         c8:85:e7:ae:88:c9:0d:6f:f9:01:66:24:da:fd:16:6f:81:33:
         1f:bf:47:09:3b:98:ad:4f:f6:d5:53:90:d4:f8:7b:63:49:94:
         6c:76:a6:95:db:f8:32:ee:a9:bd:73:ec:51:32:3d:16:00:cc:
         86:96:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:19:27 2025 by rpki-client