Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa
File:                     34352e3138332e31362e302f32322d3232203d3e20323639323534.roa (raw, json)
Hash identifier:          T64DJqHFi8KlUuLJ/CT9gmtn5pdFMXJzlQB2yHFu3Zg=
Subject key identifier:   32:E1:2E:66:3E:F4:60:6C:48:D9:89:D1:DE:7F:45:49:C9:5D:C5:FA
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       78700764DEC8A72A9F1C2C9670E2A9EFFDAD78D6
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:45 +0000
ROA not before:           Mon 10 Mar 2025 13:44:45 +0000
ROA not after:            Mon 09 Mar 2026 13:49:45 +0000
asID:                     269254
IP address blocks:        45.183.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:70:07:64:de:c8:a7:2a:9f:1c:2c:96:70:e2:a9:ef:fd:ad:78:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:45 2025 GMT
            Not After : Mar  9 13:49:45 2026 GMT
        Subject: CN=32E12E663EF4606C48D989D1DE7F4549C95DC5FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:69:a1:1e:f7:e8:0c:9c:f1:c9:10:0e:da:
                    40:c6:92:28:35:c8:8b:59:9e:11:09:88:59:f0:a0:
                    a3:ae:2c:17:b3:3d:91:a6:de:c9:86:f8:92:ad:61:
                    97:53:ac:89:81:99:22:b4:ac:82:33:31:7a:30:22:
                    47:c4:a7:0b:d6:7c:f6:ee:91:07:53:49:5b:91:85:
                    8a:60:11:f4:7e:72:30:58:d9:71:cb:7f:14:7c:20:
                    e3:b3:8b:fb:95:cb:19:7e:30:60:32:90:77:34:5f:
                    89:38:6a:a3:49:e8:33:5d:45:25:27:4d:75:16:0c:
                    f5:a8:93:7c:a2:0d:80:26:ae:8a:00:5d:a8:ae:a6:
                    6e:25:e1:19:e9:7f:57:4a:c6:03:c6:92:0c:fc:d4:
                    61:96:f2:b1:bc:42:d0:66:47:42:68:5a:e8:3f:09:
                    82:a9:78:07:50:22:19:57:87:fb:08:7a:44:36:70:
                    0d:08:e7:2f:18:5e:97:20:78:c3:8d:81:1a:23:03:
                    9d:42:7d:14:c6:65:93:06:3f:f1:35:37:1a:cf:b9:
                    b7:76:3b:48:6b:67:c4:a7:d3:fa:33:dd:21:92:3e:
                    2d:42:ca:e4:4f:cf:82:5c:38:61:ae:e9:bd:65:a8:
                    47:f5:b7:00:46:1f:ad:50:f3:e0:09:49:da:10:42:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:2E:66:3E:F4:60:6C:48:D9:89:D1:DE:7F:45:49:C9:5D:C5:FA
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31362e302f32322d3232203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:20:66:0b:23:72:c9:5c:97:59:79:79:84:e5:1c:95:04:
         8b:a3:98:5d:53:c6:82:98:91:dc:7c:21:e0:03:d7:df:2d:7a:
         57:5e:ad:e4:ce:fc:57:3d:d2:16:f0:20:d4:65:c5:10:d6:56:
         f2:83:c6:cc:81:fb:9a:70:e9:16:62:f0:a2:67:e8:43:98:53:
         1f:ec:6a:fa:b2:87:ea:0a:e2:70:c0:c1:d8:c8:fc:dd:6c:fb:
         24:c6:83:e2:8e:f4:37:b1:ea:b2:d4:50:de:f0:16:b6:64:c0:
         4f:2f:c9:29:81:80:83:42:5d:48:3b:fa:58:18:80:f0:d8:67:
         43:7b:68:29:c0:b2:7b:65:c7:1a:92:8b:a0:37:c7:1d:78:de:
         9f:5d:af:6d:31:c8:01:de:af:89:69:57:fa:50:59:19:af:fd:
         21:27:8c:75:c1:23:a5:f4:ad:7e:8b:a8:10:e5:09:fa:bb:a4:
         31:90:85:50:99:c9:50:7a:1e:4d:ee:a9:a5:8d:20:97:34:e6:
         26:85:a6:e1:b3:17:1d:0b:57:f0:ab:49:62:cf:e0:01:4e:7d:
         71:31:e8:5d:c4:11:d1:f8:09:dc:38:e3:ac:64:47:19:92:cc:
         0b:fc:8b:34:d3:61:77:76:ab:2c:49:42:9b:1f:ed:04:05:92:
         1d:ec:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:15 2025 by rpki-client