Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
File:                     34352e3139302e302e302f32322d3234203d3e20323639363036.roa (raw, json)
Hash identifier:          OZEKfX/73iJYCYYREstjZoV7KXK7RX+oM0NEuMojPBQ=
Subject key identifier:   C8:91:E9:63:26:B0:88:7E:E7:9D:2A:C2:D6:81:57:2E:75:C9:AF:DD
Certificate issuer:       /CN=4946A4EA305FB6F5E6A56BA5C5980C19A72848A3
Certificate serial:       04DAF1E2F9DABCF1ACB1D8231CEE86195E3DF79B
Authority key identifier: 49:46:A4:EA:30:5F:B6:F5:E6:A5:6B:A5:C5:98:0C:19:A7:28:48:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
Signing time:             Mon 05 May 2025 17:17:02 +0000
ROA not before:           Mon 05 May 2025 17:12:02 +0000
ROA not after:            Mon 04 May 2026 17:17:02 +0000
asID:                     269606
IP address blocks:        45.190.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.crl
                          rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 00:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:da:f1:e2:f9:da:bc:f1:ac:b1:d8:23:1c:ee:86:19:5e:3d:f7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4946A4EA305FB6F5E6A56BA5C5980C19A72848A3
        Validity
            Not Before: May  5 17:12:02 2025 GMT
            Not After : May  4 17:17:02 2026 GMT
        Subject: CN=C891E96326B0887EE79D2AC2D681572E75C9AFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:66:f3:35:91:b9:c6:8b:9e:ee:2b:31:00:
                    db:86:8d:8b:64:cd:04:c9:e1:a9:81:6e:8f:6a:2a:
                    71:1a:fe:0b:1f:29:3d:0f:8c:d8:5a:d3:9c:2c:d5:
                    2a:39:b7:70:92:d5:15:24:2f:06:6d:6f:5e:32:e7:
                    1d:d9:34:8c:ab:70:1f:12:db:96:e1:28:cf:72:5a:
                    92:b2:8f:a4:25:5a:e0:c2:80:30:a7:91:ce:cc:8d:
                    5b:de:c1:5c:83:c9:ab:ab:e8:8c:4b:7a:dc:2d:87:
                    14:63:fe:95:33:da:d0:81:3f:2c:b5:6f:75:1e:7f:
                    09:3a:8d:41:8a:4c:a4:c1:2e:90:0b:63:68:e0:01:
                    2c:e0:d9:52:02:f3:3b:dd:d4:12:54:1c:e7:c9:ca:
                    33:04:cf:1a:f0:d0:cc:e1:3b:56:44:79:c9:f7:8f:
                    f3:54:5d:73:c0:41:08:5f:e3:96:0d:7b:2e:ef:af:
                    e7:ec:c7:9d:54:2f:41:de:2d:d4:61:5e:15:35:80:
                    e6:18:d8:6d:97:ce:99:f0:69:d8:f3:0c:6f:ac:55:
                    05:dc:95:61:c4:ad:b7:17:67:93:23:41:60:d6:5e:
                    b8:26:6f:f6:00:6d:ed:c3:3e:f4:cd:b9:4f:70:90:
                    ac:14:91:ca:e5:6f:ee:ec:e8:b6:cb:5b:b9:71:62:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:E9:63:26:B0:88:7E:E7:9D:2A:C2:D6:81:57:2E:75:C9:AF:DD
            X509v3 Authority Key Identifier:
                keyid:49:46:A4:EA:30:5F:B6:F5:E6:A5:6B:A5:C5:98:0C:19:A7:28:48:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:a4:dd:63:74:83:30:d1:82:3b:3d:ad:56:5e:49:f7:a2:
         1c:a6:e1:61:34:c5:82:83:40:54:ce:75:41:3a:47:19:37:e2:
         c0:ba:5b:b6:ee:4f:63:dc:b0:c0:d2:5d:12:98:3b:57:5e:08:
         56:d6:80:f8:36:a3:f3:32:49:ba:67:bc:fa:c4:d3:82:8c:b2:
         8c:8a:01:52:f7:ae:4c:7b:ca:6b:95:e0:26:6d:e7:76:c7:ce:
         d4:ff:94:c7:95:d5:a6:21:86:14:08:0f:91:cc:f3:d3:88:3a:
         0a:b6:6e:1a:e5:49:c7:69:6c:4f:1d:86:d1:bc:a1:c9:12:02:
         32:72:4a:e3:62:f6:20:d7:cb:65:cb:d6:f3:6d:4b:74:65:ec:
         24:af:ab:3d:c9:1f:ed:89:b8:2e:49:d7:53:29:c6:19:51:b7:
         3d:ee:bf:08:80:c5:17:92:06:29:cf:a1:46:78:4d:6d:4f:be:
         fd:65:31:98:36:4c:55:05:bd:30:7d:31:fc:36:23:be:4c:a3:
         6c:04:d9:99:5d:11:0c:9a:19:d5:31:50:42:87:a6:69:6c:e2:
         bd:5f:25:87:54:3c:d0:58:d9:35:10:d5:10:89:0f:f3:e6:ce:
         ac:da:f5:ac:30:95:0d:2e:40:4d:a3:c9:7a:e3:2f:81:a4:30:
         77:ba:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:37 2025 by rpki-client