Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          Fgdb2V1ajEjSs5A7+TBCGITRfBcAfDTtdOenlLw9X2g=
Subject key identifier:   4A:45:6F:FD:B0:E8:7A:77:CA:E4:16:64:44:B0:7E:01:3A:BD:2A:B1
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       35D02964599C0741C304507413BF6039E80031A1
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa
Signing time:             Thu 24 Apr 2025 18:44:19 +0000
ROA not before:           Thu 24 Apr 2025 18:39:19 +0000
ROA not after:            Thu 23 Apr 2026 18:44:19 +0000
asID:                     267373
IP address blocks:        45.234.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:29:64:59:9c:07:41:c3:04:50:74:13:bf:60:39:e8:00:31:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Apr 24 18:39:19 2025 GMT
            Not After : Apr 23 18:44:19 2026 GMT
        Subject: CN=4A456FFDB0E87A77CAE4166444B07E013ABD2AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:b6:60:72:a0:5b:70:db:80:ac:64:68:2a:
                    76:77:99:b2:fc:92:fe:6c:86:cb:1e:2c:2c:fc:8a:
                    15:36:98:fc:f3:10:23:72:e5:75:03:ef:fe:a2:59:
                    f4:27:90:5c:bc:de:7e:6d:6e:43:fa:6e:d2:60:56:
                    ba:29:c4:08:62:e2:49:7a:a1:2e:1c:a6:45:89:fe:
                    06:c9:b2:9d:81:f4:02:09:21:69:8d:28:46:f7:e1:
                    10:98:4f:70:e1:6f:6b:f2:82:7b:4e:46:fc:46:88:
                    c5:51:fa:22:37:a4:24:e8:ef:ef:28:28:7a:1c:59:
                    83:13:da:fb:19:45:c1:9a:95:f1:31:a9:f3:a3:33:
                    ec:b0:d8:6d:b1:b8:40:8c:c9:99:d0:fc:26:38:38:
                    c2:2b:5f:10:9e:4c:0d:99:f7:9f:c2:43:c6:98:f6:
                    c3:f4:55:cf:21:14:07:bb:1c:39:e1:ba:71:c4:a1:
                    f2:51:03:07:35:e4:73:bc:ab:61:25:f4:54:8a:ee:
                    82:d1:1a:1f:0f:c6:ae:8f:62:5f:24:7e:3c:4d:21:
                    13:ad:f8:a7:66:fd:ce:41:86:4c:ae:81:d7:b2:4c:
                    29:c2:1e:4b:ae:99:1e:ab:2d:57:a1:6e:87:6c:2b:
                    f7:92:de:f2:50:d5:56:be:7d:fa:54:5d:90:f2:57:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:6F:FD:B0:E8:7A:77:CA:E4:16:64:44:B0:7E:01:3A:BD:2A:B1
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231342e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:76:bc:0e:2d:05:dc:bf:01:a1:f2:a5:e0:94:14:bc:45:
         90:98:02:d9:84:60:a9:d9:05:eb:fc:ef:fd:2d:0d:bd:d7:88:
         bd:36:75:f3:0b:2a:b3:c7:48:c8:d6:40:08:89:c4:e8:86:9b:
         dd:1a:af:90:15:62:c3:ca:3e:86:ec:4d:60:d2:99:62:10:bf:
         82:de:57:3e:ce:6d:91:fc:76:34:41:fa:cf:44:07:f9:d2:33:
         4f:66:8b:56:a6:3d:ab:98:7f:0c:dc:09:31:d2:23:2e:bf:16:
         a4:47:97:7b:08:6d:6c:5e:ba:43:80:c2:be:92:27:eb:c9:2b:
         33:51:ef:d5:30:a5:5e:02:b5:1c:c7:90:64:10:3e:1c:6c:f5:
         14:39:e4:7f:6d:9e:46:ec:99:2b:24:54:0b:ed:f4:89:83:f9:
         f1:e3:91:7f:66:cd:44:cc:7c:7d:bb:b5:78:03:b4:2f:94:09:
         e6:9a:9e:f7:47:0d:c9:14:c9:22:7d:bf:6f:64:9f:a8:f3:24:
         82:20:f2:e8:3b:dd:d5:e4:74:b8:1e:96:90:33:32:50:8f:ea:
         48:7b:5b:13:7c:15:6e:b9:03:b8:3c:02:4d:4c:a1:a6:88:fb:
         86:22:ca:9a:ff:17:c3:e1:88:b5:ea:bd:5f:5a:b5:54:09:98:
         4b:51:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:25:09 2025 by rpki-client