Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa
File:                     34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa (raw, json)
Hash identifier:          v6FfJeuumfXIYCweQXjbAZeYc74haJwQ/f96fMOUpQw=
Subject key identifier:   7F:97:8F:E1:C4:5B:ED:36:29:A2:53:2B:2F:B5:64:94:DB:D0:58:2E
Certificate issuer:       /CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
Certificate serial:       1BA27E38FD366F216AB3878A92B14AB79D912C13
Authority key identifier: 63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa
Signing time:             Mon 15 Jul 2024 14:57:26 +0000
ROA not before:           Mon 15 Jul 2024 14:52:26 +0000
ROA not after:            Mon 14 Jul 2025 14:57:26 +0000
asID:                     269420
IP address blocks:        45.186.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl
                          rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:7e:38:fd:36:6f:21:6a:b3:87:8a:92:b1:4a:b7:9d:91:2c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB
        Validity
            Not Before: Jul 15 14:52:26 2024 GMT
            Not After : Jul 14 14:57:26 2025 GMT
        Subject: CN=7F978FE1C45BED3629A2532B2FB56494DBD0582E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:29:8d:5b:8b:3f:59:d9:0b:6a:cd:c1:df:
                    a9:1f:2a:57:96:12:57:ef:7a:de:12:27:69:56:09:
                    62:64:81:4b:63:bf:29:f5:c1:63:2e:5c:03:c0:24:
                    d8:84:17:46:2c:01:0d:32:54:f3:7f:89:05:03:1f:
                    3e:28:d5:fb:94:0f:06:c0:3d:43:88:e2:71:e7:35:
                    6f:7a:af:b7:8c:96:7d:65:19:ec:29:09:6c:7d:2c:
                    9d:fa:4b:3e:68:21:18:ac:55:6a:bc:05:45:b0:4c:
                    f0:3d:18:31:5a:8d:ab:6d:dc:44:9d:b3:dd:a4:5c:
                    1f:04:37:98:3f:61:71:ae:f9:86:d8:4f:31:5c:db:
                    50:74:67:83:c6:2e:39:86:fb:d5:88:82:a0:69:5c:
                    53:f7:ed:52:b3:a7:e7:4b:86:34:dc:84:42:36:4c:
                    73:46:10:c6:f0:e7:41:50:c1:ef:ea:a8:39:7a:6c:
                    7f:c1:98:9d:cf:ca:67:ca:44:d4:c8:e3:c8:e3:b2:
                    8b:c8:fa:48:de:c1:83:18:89:2b:aa:71:04:4d:65:
                    df:08:4c:30:f7:9b:98:15:22:de:90:6e:f3:30:c3:
                    f5:92:5d:b9:26:90:d4:67:cb:b0:af:da:a0:4d:4e:
                    90:a6:c7:36:a4:97:23:c3:29:f5:ae:e2:c5:49:b3:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:97:8F:E1:C4:5B:ED:36:29:A2:53:2B:2F:B5:64:94:DB:D0:58:2E
            X509v3 Authority Key Identifier:
                keyid:63:BA:A2:1C:6C:6C:9C:D9:90:D0:B9:F4:79:04:C1:CD:15:7C:F5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63BAA21C6C6C9CD990D0B9F47904C1CD157CF5DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HB3JfCJY1CAJQAUs6iewCcTX3Sgsbs52wyrSq7RbJQmb/0/34352e3138362e3131362e302f32322d3234203d3e20323639343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:1d:02:28:a7:61:51:ae:04:cb:3c:00:5d:4d:ce:e6:b3:
         5c:b6:d9:c1:01:1d:5a:29:b8:2b:06:56:df:98:a5:5e:9c:45:
         ed:df:16:e3:6c:43:5e:69:88:a2:ce:41:30:8c:0e:80:ce:c3:
         b3:9a:2f:80:77:f1:2d:41:a4:51:96:d5:a6:54:b1:36:8f:28:
         99:0b:de:20:c5:be:20:34:fd:e3:84:44:a9:d9:5f:13:d2:bd:
         e4:a6:5a:72:de:30:17:4c:a0:a7:fb:b2:34:3d:1c:be:a4:d5:
         e3:53:82:41:5b:23:71:f4:05:d6:5e:1f:fe:2f:8f:4c:87:26:
         1f:dd:6f:70:d9:cb:cc:02:be:b3:ea:29:74:d4:39:29:38:c6:
         8c:1a:9f:ca:42:45:7c:eb:3a:10:a9:c1:ed:ac:2e:2d:b5:a5:
         91:b8:96:38:05:a2:ef:83:73:aa:22:51:10:b2:17:bd:b2:36:
         ed:78:94:cc:aa:27:2d:9b:c7:f3:50:4e:1d:9b:71:c9:33:80:
         1c:07:2d:3a:ab:a6:52:9b:8f:ca:9a:d0:e6:af:e1:49:76:aa:
         b7:6c:71:3a:0e:23:74:e0:95:60:8c:e8:70:57:8a:85:c4:d7:
         27:fa:1b:81:02:40:8c:5c:24:c4:63:e3:b1:8e:05:8a:aa:df:
         34:ee:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:10 2025 by rpki-client