Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135342e302f32342d3234203d3e20323731373031.roa
File:                     34352e3136342e3135342e302f32342d3234203d3e20323731373031.roa (raw, json)
Hash identifier:          oP/gVtpnleCWXRTqythYTzgB7Y0aEezLUuHCEBEkxqg=
Subject key identifier:   C7:CC:DD:F8:85:33:2C:0D:E4:BA:3C:88:BA:7D:88:51:D5:59:C6:42
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       1CCB01327117BBD625D2B233E4974C869497607D
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135342e302f32342d3234203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:24 +0000
ROA not before:           Tue 13 May 2025 13:55:24 +0000
ROA not after:            Tue 12 May 2026 14:00:24 +0000
asID:                     271701
IP address blocks:        45.164.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cb:01:32:71:17:bb:d6:25:d2:b2:33:e4:97:4c:86:94:97:60:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:24 2025 GMT
            Not After : May 12 14:00:24 2026 GMT
        Subject: CN=C7CCDDF885332C0DE4BA3C88BA7D8851D559C642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:1c:7c:0d:af:1f:f3:bf:d7:c5:07:8e:88:
                    6e:e0:c4:ba:a4:98:b4:7b:20:84:1b:d3:3f:f6:95:
                    27:66:9d:bf:8c:ba:a3:b3:fe:38:0a:ae:6a:36:93:
                    95:bf:7b:a6:ea:e0:bf:4a:cc:6c:8d:7c:ec:d9:51:
                    f6:c4:b9:23:4b:c4:cf:a4:58:6a:90:2c:e2:f5:bb:
                    97:7e:d1:a9:4b:58:9c:b5:3b:ac:c5:40:72:6f:5d:
                    7d:29:95:d2:d2:cc:d1:9b:97:a2:c9:c5:1f:ca:b5:
                    b1:2b:c5:14:0e:17:8c:b4:38:33:56:dc:cc:26:39:
                    d7:21:f9:cd:c6:9f:5f:4f:ec:d8:04:fe:59:bb:fb:
                    af:6c:ba:90:b1:e5:41:27:32:71:05:6d:b9:28:65:
                    8a:e9:3c:84:fa:56:fa:88:69:d7:3f:ab:58:f2:52:
                    e7:94:74:18:33:be:3d:b4:64:3a:fc:37:60:68:ba:
                    a4:d1:c0:6f:32:36:e3:04:4a:94:b9:d2:cb:11:fe:
                    16:69:3f:e6:7f:e6:7f:47:6e:24:b7:e4:4c:3f:74:
                    37:0b:c1:4c:cc:b5:54:a0:cf:e0:d3:e1:c4:cd:78:
                    ee:51:33:11:17:58:59:d1:ac:0c:c2:ff:89:9c:b2:
                    10:e8:62:78:48:35:7d:13:2f:72:73:c7:64:38:51:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:DD:F8:85:33:2C:0D:E4:BA:3C:88:BA:7D:88:51:D5:59:C6:42
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135342e302f32342d3234203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:b7:74:1b:8f:a4:34:21:0e:7f:a1:06:15:90:8a:af:93:
         25:6d:7c:f2:80:07:d8:fd:45:d3:89:79:9b:90:d2:45:68:72:
         8e:c2:a0:c5:18:98:e4:cf:71:fc:be:45:f1:50:cf:6b:10:48:
         26:33:73:3a:dc:d8:a8:ea:d5:d9:b2:0d:2d:f4:f5:fe:c3:9b:
         72:88:61:63:a5:f4:03:ed:ad:a5:cb:17:4a:7a:71:82:c2:0e:
         8d:93:20:7b:e1:83:2b:fc:9a:6c:21:d5:ad:36:23:e8:e6:6e:
         cc:9b:bb:fb:00:b7:50:65:f2:47:77:9a:92:06:3b:29:49:62:
         06:9a:f1:90:49:31:af:ec:d1:bf:e4:57:6f:af:64:a6:51:be:
         fe:8a:47:c5:c9:08:c6:71:1d:8d:7a:57:79:0f:e0:d6:90:08:
         97:57:0c:68:2a:bd:83:9f:f2:cf:46:87:0f:57:72:e3:4b:d3:
         7a:ed:a3:eb:bb:5b:8b:42:53:a4:5a:e8:1a:97:5e:28:08:4f:
         32:9d:83:ac:b3:e7:64:f8:94:a0:48:ac:a8:86:f1:5c:9d:86:
         bd:a6:85:4f:a9:c4:ea:fe:9a:98:93:db:a5:2b:91:3d:48:33:
         a6:d6:fa:bf:34:01:f6:5e:51:0f:dc:e1:05:e2:95:46:b5:c7:
         4e:46:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:13:12 2025 by rpki-client