Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa
File:                     34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa (raw, json)
Hash identifier:          k5HFerNVrREghCkE8Wh2bZRfSC3dF+HTHFTn3W3NRaQ=
Subject key identifier:   F8:B3:B7:00:9F:80:D3:D5:77:B5:03:D2:BD:48:B5:2B:BB:58:E2:4E
Certificate issuer:       /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial:       4468DC0C3C9E6EFAD093D0D1C5F54CD92677F20A
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268732
IP address blocks:        45.171.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
                          rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:68:dc:0c:3c:9e:6e:fa:d0:93:d0:d1:c5:f5:4c:d9:26:77:f2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=F8B3B7009F80D3D577B503D2BD48B52BBB58E24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ae:78:3b:39:77:9f:e6:e5:71:7f:43:05:a6:
                    1f:b0:cb:21:48:fc:17:39:bb:84:b7:24:bb:97:5a:
                    62:1c:5c:12:63:65:09:24:2d:6f:e3:83:73:dc:50:
                    77:a9:ba:f0:9c:9c:1e:ae:11:6b:4a:92:c3:8e:93:
                    00:8d:e1:b2:d7:98:84:54:d3:47:fc:ae:4c:ca:b9:
                    e2:be:dc:11:d6:3d:2f:48:16:20:15:2b:88:2e:8e:
                    0d:54:18:15:46:05:7e:27:da:cd:7c:1f:1b:91:16:
                    d7:16:ec:96:bf:0c:0a:3d:38:51:c3:cf:72:fe:3f:
                    aa:1a:4b:d5:c7:f5:9c:a6:c3:f9:81:64:27:7b:03:
                    a5:c8:a6:f3:58:30:1e:19:05:59:e1:83:01:d4:f0:
                    43:73:f0:f7:13:60:be:06:bd:88:0e:9c:51:23:cb:
                    4f:b8:71:10:81:50:a3:dd:61:11:ce:95:0b:cf:af:
                    ed:9c:b2:7d:26:6a:c1:b1:0c:73:62:a1:46:2e:96:
                    d3:60:80:4e:c4:43:15:59:be:b2:e8:ef:2f:6c:97:
                    61:29:8d:10:6d:db:ee:3d:4c:2c:bb:42:92:54:b6:
                    78:4a:28:24:c5:e8:7f:50:1f:c0:60:37:e0:ac:6d:
                    84:e2:42:b2:1e:ae:a9:c4:89:cf:18:ff:e6:2a:d6:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B3:B7:00:9F:80:D3:D5:77:B5:03:D2:BD:48:B5:2B:BB:58:E2:4E
            X509v3 Authority Key Identifier:
                keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32332d3233203d3e20323638373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:1b:fb:78:cb:14:11:a5:7f:5e:f2:d6:68:18:13:4e:72:08:
         ad:36:a0:a9:d1:c0:7f:7a:67:8e:48:32:a9:bb:65:7f:2e:55:
         3d:4a:d6:33:35:9e:df:82:e4:a3:b7:aa:dc:8b:4f:4c:85:7b:
         39:74:02:40:9f:b9:2a:f6:d8:f1:70:00:08:2a:c5:de:4f:a3:
         cd:52:ed:b8:d1:1d:77:c5:df:1b:13:bf:bf:6c:44:5c:26:d6:
         b7:69:02:49:d8:3b:e2:ad:67:bf:c9:e7:06:06:f7:65:a5:76:
         91:63:25:81:1e:5f:aa:a1:30:45:73:e5:dc:39:2b:c2:49:11:
         f2:d6:d7:7a:ba:3e:6d:1b:1f:94:81:d4:bb:2a:c3:0c:34:f5:
         0f:8e:bd:14:a5:06:e8:6c:14:dc:d6:2e:6a:ab:1a:2b:e4:cc:
         75:83:fc:26:c1:25:51:5d:b8:4c:94:f6:37:33:06:68:6e:e9:
         c5:c0:c9:f3:51:5e:78:35:24:15:7b:b1:4c:68:85:8b:3e:18:
         63:73:07:18:39:29:10:26:ba:29:bb:3b:c9:01:92:77:58:80:
         af:c3:a3:53:0f:13:74:35:ca:f1:da:0f:93:8c:e7:52:66:2d:
         47:38:c6:8c:8a:76:12:f2:49:f9:5e:d8:31:28:bb:2e:5a:51:
         77:8b:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:47 2025 by rpki-client