Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
File:                     34352e36352e3232302e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          j5xWu/EVFW9ukhAiwi1QRme12gZvEGiS4HhsB66VLnM=
Subject key identifier:   FD:63:9C:39:07:3B:52:7A:95:20:90:3D:2B:A8:E6:2F:7C:75:5C:92
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       1B6A5B47167A4E1B05F99950A2A1C049C6CFE70E
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa
Signing time:             Thu 06 Mar 2025 04:06:00 +0000
ROA not before:           Thu 06 Mar 2025 04:01:00 +0000
ROA not after:            Thu 05 Mar 2026 04:06:00 +0000
asID:                     266539
IP address blocks:        45.65.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6a:5b:47:16:7a:4e:1b:05:f9:99:50:a2:a1:c0:49:c6:cf:e7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Mar  6 04:01:00 2025 GMT
            Not After : Mar  5 04:06:00 2026 GMT
        Subject: CN=FD639C39073B527A9520903D2BA8E62F7C755C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:43:c0:c1:b7:09:6e:80:c8:d5:9b:db:ee:
                    47:cc:7d:7c:54:bc:d5:4b:9f:4a:99:98:d6:b0:03:
                    71:99:a1:55:e8:71:9a:f4:cb:a6:99:10:10:d2:62:
                    7c:fe:e4:d2:83:58:ee:82:17:91:ea:8a:83:26:07:
                    e1:77:a4:ad:ea:a7:b1:8f:0e:11:13:52:6c:7d:a1:
                    62:4e:4f:b1:1d:af:bd:5a:27:e1:da:8c:07:60:2f:
                    b8:e4:0b:d7:df:48:21:8b:43:bc:80:49:49:e8:5b:
                    56:7e:38:0a:c5:88:13:06:89:2d:2f:40:96:9b:e7:
                    dd:91:68:0e:14:3a:2b:f5:13:62:de:69:3e:2c:8b:
                    f8:5a:51:fe:ff:f5:5e:09:da:f8:e4:7f:f4:ab:d0:
                    1f:a2:77:63:8c:2f:d1:0c:9a:5b:0d:1b:e3:ae:91:
                    ee:e5:c3:70:42:5e:a9:17:5a:85:9c:39:86:3b:a8:
                    04:cd:ab:a2:c7:23:a5:16:bf:52:52:c1:58:53:f6:
                    d4:8d:b2:1a:6e:79:fd:70:da:a8:de:b4:54:01:70:
                    a4:fd:57:36:b3:bf:46:59:b2:ed:24:4d:23:11:d0:
                    97:db:97:5d:37:34:d7:86:b8:b6:aa:b2:bf:4d:16:
                    c1:ab:a5:86:84:55:72:0d:70:98:d4:24:cb:10:da:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:9C:39:07:3B:52:7A:95:20:90:3D:2B:A8:E6:2F:7C:75:5C:92
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/34352e36352e3232302e302f32322d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:7c:50:f4:b9:a2:8f:f0:24:a0:31:c1:db:8a:a7:8c:f2:a0:
         af:ad:fc:5b:18:1f:06:77:0f:30:ce:aa:8b:57:21:6f:59:4f:
         82:5f:11:dc:d7:fb:58:65:cc:7a:97:5f:fa:86:d0:e2:bd:2b:
         c0:e4:11:76:b2:cc:b4:6b:ed:c5:28:60:92:bb:72:36:4b:86:
         29:93:19:f7:93:34:e2:95:04:ff:d0:2b:e4:c7:14:20:56:d8:
         38:5b:d2:2e:51:1f:79:24:33:01:cc:07:d6:a7:11:29:4e:54:
         c9:27:e1:74:50:86:b9:02:2a:d1:7a:42:32:8c:43:53:1b:12:
         a4:cb:ba:ea:f4:70:5e:36:ab:80:21:5b:cf:fa:bd:5b:99:52:
         95:db:82:07:61:bb:9c:ac:28:fe:98:2f:31:95:37:57:61:4c:
         b3:23:41:ee:91:88:ab:02:84:23:6b:1c:8a:40:05:f3:e5:b5:
         11:46:05:90:03:5a:7b:d4:d8:b4:81:c6:d8:e7:b4:67:71:2e:
         d8:b1:98:62:d8:be:48:f2:3a:65:d9:d2:30:de:6e:cc:fb:56:
         14:45:e1:8c:78:99:40:a1:c9:64:20:ff:d8:9e:f2:eb:13:0a:
         35:79:c5:7c:06:ce:b2:be:23:6b:3f:5f:ef:40:43:21:01:39:
         fa:41:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:20 2025 by rpki-client