Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa
File:                     34352e3138322e302e302f32322d3234203d3e20323639323139.roa (raw, json)
Hash identifier:          0xIvosoKrHHC523W4dW+dBchce8vzb/tBArBWnJx6V8=
Subject key identifier:   B1:3F:FC:C0:F0:3B:4C:8E:6B:2E:7D:1A:10:FA:69:96:AB:57:2F:B6
Certificate issuer:       /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial:       1861186057167D1D810720382527DFED2B5494B3
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa
Signing time:             Wed 05 Mar 2025 20:33:44 +0000
ROA not before:           Wed 05 Mar 2025 20:28:44 +0000
ROA not after:            Wed 04 Mar 2026 20:33:44 +0000
asID:                     269219
IP address blocks:        45.182.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
                          rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:18:60:57:16:7d:1d:81:07:20:38:25:27:df:ed:2b:54:94:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Validity
            Not Before: Mar  5 20:28:44 2025 GMT
            Not After : Mar  4 20:33:44 2026 GMT
        Subject: CN=B13FFCC0F03B4C8E6B2E7D1A10FA6996AB572FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:69:29:48:e0:96:23:03:b2:26:6a:a9:7c:
                    ba:59:75:6c:55:3b:c8:1b:89:2f:61:cb:78:35:e2:
                    34:fb:94:ef:99:32:32:c2:68:aa:91:c0:93:b7:ba:
                    60:08:9a:82:28:3c:55:6c:ea:8d:56:ec:f8:9a:82:
                    b2:0d:eb:62:3a:d7:06:f9:f7:da:00:37:cc:4b:8c:
                    90:f5:fd:9c:ab:89:27:4c:3e:6c:81:e5:a3:22:04:
                    83:6b:f9:26:15:3b:47:d0:ea:35:ed:88:ed:eb:a4:
                    3d:b7:f5:0d:be:3e:0a:cc:47:78:84:09:91:7a:05:
                    ea:20:90:f1:c3:72:00:27:6c:98:63:42:33:8e:04:
                    3c:26:4b:01:0f:b9:55:c5:3e:8e:fb:5a:b7:dd:71:
                    12:95:fe:ad:b1:31:d2:32:f3:80:5b:b5:ef:bf:9c:
                    6d:43:a0:d0:60:ba:9e:3d:43:58:25:27:65:8c:c7:
                    b9:8f:64:72:f5:f5:db:89:d8:c1:7d:b4:4e:54:08:
                    32:3d:16:92:5c:1e:72:0f:86:dc:df:50:88:4c:f8:
                    1d:32:6f:dc:1d:00:d6:16:56:01:a9:bc:38:19:5a:
                    67:e9:e3:0b:7d:4b:58:7e:07:f2:e5:5b:00:d9:85:
                    67:fe:8a:83:d6:c3:56:f0:7e:ac:21:07:1e:8b:ca:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3F:FC:C0:F0:3B:4C:8E:6B:2E:7D:1A:10:FA:69:96:AB:57:2F:B6
            X509v3 Authority Key Identifier:
                keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/34352e3138322e302e302f32322d3234203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:9b:78:3f:16:f9:74:7d:67:61:f4:df:f8:30:a8:97:94:
         a5:4b:f6:46:bf:82:e7:9e:cc:94:fb:3e:da:f5:ed:ee:f1:67:
         7d:c3:94:c8:7a:8f:86:89:c0:ba:7f:ce:e5:85:0f:32:7e:b8:
         ae:dd:15:69:38:f1:54:52:8b:da:8c:e6:f7:e2:63:4a:68:85:
         08:8d:e5:26:54:89:dc:5c:e5:c0:5b:a1:9d:11:f3:74:cc:f9:
         0d:10:c0:f6:a3:14:85:a1:5f:13:a8:34:a7:d8:95:ae:d8:58:
         c8:f3:7f:2c:08:2a:38:04:aa:74:c4:cb:56:9d:f0:6f:7a:da:
         01:c5:59:c5:65:40:1e:25:fc:07:e6:7d:73:1b:1b:3b:e6:15:
         0b:cc:84:91:00:e2:27:cd:87:22:29:f0:75:38:43:ee:e6:cf:
         cc:1d:86:8d:34:41:c1:0c:cd:1a:67:2f:e4:ab:ac:1b:cb:8f:
         e7:a3:44:1a:cf:05:f0:67:26:7d:86:ae:f6:d8:43:af:cb:ca:
         e1:67:1e:65:6d:c9:8a:cd:cb:f6:9c:7f:5e:8d:0b:b7:ce:d0:
         4f:4f:e1:c7:f8:cc:20:20:79:72:af:00:94:f5:49:75:de:8d:
         13:ec:cd:66:a6:74:b4:a9:00:82:ba:ee:d5:d7:ff:45:b9:c5:
         75:89:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:29:53 2025 by rpki-client