Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
File:                     34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa (raw, json)
Hash identifier:          yjarssuXmvzqPViBE7VimJv5wG0/a2mGwl4LMmsCf94=
Subject key identifier:   10:F2:BD:90:CA:18:AE:6F:0E:1D:97:0F:BD:8E:B0:16:62:E2:6F:A6
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       1F7776EDB9BC495A31A98B9F2FFD6DE925576914
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     264514
IP address blocks:        45.191.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:77:76:ed:b9:bc:49:5a:31:a9:8b:9f:2f:fd:6d:e9:25:57:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:1b:41:a5:7b:ba:0a:ad:40:66:c3:e1:bc:
                    ec:38:ef:6b:2a:4b:70:17:7f:63:c6:be:b7:ca:03:
                    62:a7:87:f7:81:e4:f6:5d:f4:ae:d9:c0:83:ad:f4:
                    67:3e:7e:c7:ac:a3:a4:67:28:a8:e9:37:b2:5e:cf:
                    9d:b3:a4:08:ca:76:02:9d:31:18:46:f0:5f:e2:66:
                    f9:e8:77:90:2e:96:dd:c1:0c:71:e4:9b:44:99:51:
                    d6:ae:86:a8:a9:9b:b1:18:a2:06:a2:ae:6b:49:c8:
                    dd:f3:13:c2:48:3c:53:1c:de:dd:db:a7:1e:41:cc:
                    55:ea:c2:9f:1f:ff:61:a4:da:8c:58:3c:14:6f:e3:
                    6a:86:9d:5b:d2:fa:75:02:78:68:29:80:8a:3e:f7:
                    10:d2:6b:99:4e:5e:5f:e0:40:b1:cf:50:25:a9:7f:
                    e0:a5:ad:89:5a:23:98:93:05:16:60:34:c8:d6:e7:
                    8e:59:04:15:1f:e2:e8:82:1e:1b:cd:ed:8e:a5:5f:
                    f5:e9:7f:14:08:a5:97:6e:8a:db:79:81:08:03:ce:
                    80:99:c2:30:4d:72:9f:6d:1a:1a:cb:97:e1:6e:21:
                    d5:c3:d2:93:bb:17:ea:1e:88:1a:b4:21:67:b9:3b:
                    b0:14:5c:7e:8d:3a:30:0d:01:aa:8e:63:27:d0:87:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:BD:90:CA:18:AE:6F:0E:1D:97:0F:BD:8E:B0:16:62:E2:6F:A6
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:4a:2b:4e:a1:7f:ae:4d:d4:99:23:3e:f0:3a:ed:14:f7:
         ff:54:ed:88:9b:ad:ba:b6:9f:4e:cb:4a:57:7b:23:20:1e:64:
         db:5b:c1:95:6c:46:85:21:8d:36:38:6a:c4:e5:cf:a0:1b:bb:
         76:f7:5d:9c:d7:98:40:4a:3b:ae:a7:16:4f:1a:b0:3a:a8:3e:
         41:c0:af:94:78:11:da:f5:1a:d7:f6:3e:7c:7b:ff:66:17:c4:
         2a:f2:0b:83:e7:b0:d4:70:64:ce:7f:a5:2b:05:0b:88:94:ed:
         47:c9:53:c3:bb:15:5b:cd:13:fd:9f:aa:3c:d2:2b:ae:3c:a1:
         9a:68:42:1b:ac:77:b5:6e:ed:fd:21:2e:b3:30:ab:e9:1f:b5:
         35:bf:80:54:37:40:91:50:26:ac:b3:7f:44:3d:05:6d:dc:a1:
         11:29:4c:cb:34:10:3f:9f:a1:3b:10:49:11:77:a7:e4:f9:d0:
         c0:36:28:be:5e:d7:2f:23:73:09:fa:b1:30:b6:7a:4c:d2:68:
         12:55:26:85:d4:8a:d4:ce:0e:59:a3:3e:57:aa:3e:1b:05:66:
         44:9a:b2:6a:4e:50:1a:15:10:8c:34:78:5a:c6:03:f9:77:f3:
         a0:d4:98:23:01:70:c9:3d:42:e3:64:d5:46:0b:fb:90:8c:d5:
         38:2f:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:05 2025 by rpki-client