Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3233312e302f32342d3234203d3e20323639343339.roa
File:                     34352e3138362e3233312e302f32342d3234203d3e20323639343339.roa (raw, json)
Hash identifier:          l2E+3b+QOxfw6IP3FiLwIrEpcYwzeu80m0AlzusWYOE=
Subject key identifier:   9E:75:9E:A3:96:CC:4F:3C:15:0B:59:6B:68:7D:E4:E6:25:41:BA:C9
Certificate issuer:       /CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
Certificate serial:       3B5916AF9ADB5BB4C9F1BB9A108B91FC90561E8A
Authority key identifier: C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3233312e302f32342d3234203d3e20323639343339.roa
Signing time:             Wed 22 Jan 2025 12:55:55 +0000
ROA not before:           Wed 22 Jan 2025 12:50:55 +0000
ROA not after:            Wed 21 Jan 2026 12:55:55 +0000
asID:                     269439
IP address blocks:        45.186.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl
                          rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:16:af:9a:db:5b:b4:c9:f1:bb:9a:10:8b:91:fc:90:56:1e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CF4AE79887639859FD00106058BDCEBA1002AC
        Validity
            Not Before: Jan 22 12:50:55 2025 GMT
            Not After : Jan 21 12:55:55 2026 GMT
        Subject: CN=9E759EA396CC4F3C150B596B687DE4E62541BAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:b0:51:79:55:b3:7d:3e:54:cc:57:98:d3:
                    82:2b:66:2e:20:0e:0d:18:d4:16:e8:ce:b5:56:4b:
                    d1:ec:14:47:5b:e5:54:b1:80:46:47:c4:45:f8:ac:
                    aa:f0:5d:81:11:c2:1f:28:09:07:f0:80:6b:68:31:
                    2b:89:89:3e:00:fb:36:4d:74:51:a3:a4:fe:d0:6a:
                    26:d7:72:49:5c:09:39:48:61:9a:ed:fa:56:a6:76:
                    20:43:89:63:1f:ba:f2:45:03:70:a8:dd:f6:b9:d6:
                    56:b4:02:3c:0e:af:f2:f7:2f:c4:50:d5:81:37:9f:
                    5d:e3:90:f8:c2:68:b5:33:73:a8:89:05:93:ff:cb:
                    c5:05:de:e9:65:1e:51:ea:b5:10:7f:d3:07:d8:6a:
                    3c:27:06:5c:7e:2e:99:96:a1:16:e5:94:88:80:d3:
                    6e:73:50:a6:cd:08:f1:4c:d8:45:e4:b3:a1:e1:44:
                    47:62:36:8c:75:6c:8e:a5:08:9e:98:58:33:88:12:
                    9d:42:bd:eb:86:a6:32:2d:f1:46:cd:31:91:dd:78:
                    9a:2b:c3:7a:40:d1:ae:ec:ef:d0:c1:3e:b8:6e:92:
                    ff:ee:b6:3c:82:1d:71:b0:c3:4b:8b:95:5d:9f:fd:
                    4c:2e:96:5e:af:40:6e:2a:2d:d7:64:f1:41:da:8a:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:75:9E:A3:96:CC:4F:3C:15:0B:59:6B:68:7D:E4:E6:25:41:BA:C9
            X509v3 Authority Key Identifier:
                keyid:C9:CF:4A:E7:98:87:63:98:59:FD:00:10:60:58:BD:CE:BA:10:02:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/C9CF4AE79887639859FD00106058BDCEBA1002AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9CF4AE79887639859FD00106058BDCEBA1002AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/0/34352e3138362e3233312e302f32342d3234203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:8e:55:b3:a5:01:d2:d4:c0:59:4d:98:10:6b:8e:2f:23:
         f2:aa:bb:45:dd:77:c2:b8:3a:fa:f2:25:80:73:0c:6a:1b:61:
         16:2f:dc:39:d1:e8:14:2d:a0:41:0e:24:e2:f3:65:98:50:a3:
         cc:b8:7a:ab:9a:2f:e5:37:9f:ac:86:00:43:b1:f4:82:d5:e0:
         9e:7f:7e:40:f4:ab:13:d0:ba:96:0c:b8:f8:e8:c5:28:a2:cc:
         19:60:55:7e:36:4e:ab:36:37:73:93:7f:75:fc:b5:4b:ff:46:
         f0:f0:d4:cc:af:33:d3:37:5b:46:ff:dc:24:58:4b:46:50:b3:
         49:34:bb:d1:12:fb:46:3e:78:56:a1:a0:b4:1d:82:b0:97:14:
         e3:16:94:82:37:e1:1a:e2:61:0c:78:db:47:f7:9f:d3:6a:0c:
         21:4c:72:f5:e7:2c:96:c4:e2:85:88:8c:d7:33:92:d6:d1:dd:
         e3:92:a8:75:b8:2f:44:8b:5d:f9:6a:41:d1:a1:1d:d1:3d:35:
         fa:b6:7e:cb:71:17:40:36:32:af:9e:6f:31:90:8c:f0:ac:e7:
         0f:09:d2:16:63:7a:9d:32:58:97:b5:09:7a:0c:25:55:4e:85:
         4a:3e:69:fe:e9:f5:e0:bd:44:ab:18:1c:66:c4:17:c8:8a:e8:
         8d:e6:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:59 2025 by rpki-client