Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32342d3234203d3e20323638333033.roa
File:                     34352e3233372e3231322e302f32342d3234203d3e20323638333033.roa (raw, json)
Hash identifier:          O0kEP0KdPSjaIUp50OxgtHowcW6v+sy+gr9T3wJKHSw=
Subject key identifier:   13:9F:3A:5A:3B:63:8E:24:E6:F8:E0:4D:6B:78:AA:DF:EB:7A:DE:60
Certificate issuer:       /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial:       064ECE178FCB178BDD0EAB49D2769D3645F62F9E
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32342d3234203d3e20323638333033.roa
Signing time:             Fri 02 May 2025 14:16:01 +0000
ROA not before:           Fri 02 May 2025 14:11:01 +0000
ROA not after:            Fri 01 May 2026 14:16:01 +0000
asID:                     268303
IP address blocks:        45.237.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 18:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4e:ce:17:8f:cb:17:8b:dd:0e:ab:49:d2:76:9d:36:45:f6:2f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Validity
            Not Before: May  2 14:11:01 2025 GMT
            Not After : May  1 14:16:01 2026 GMT
        Subject: CN=139F3A5A3B638E24E6F8E04D6B78AADFEB7ADE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:85:f3:19:3a:ac:a1:5d:3f:60:dc:67:2e:
                    90:12:57:18:6b:1e:98:3a:22:07:72:bb:a4:11:62:
                    87:d1:30:af:cb:e9:ac:66:72:0a:e6:b3:ab:f7:83:
                    41:7b:09:fd:14:ad:79:a0:ae:e5:2c:5b:fb:61:15:
                    53:34:58:3f:9a:3d:fb:86:31:76:d1:ad:58:c9:23:
                    88:51:b1:08:fc:5f:65:fd:bb:10:d5:f6:05:27:52:
                    ab:f4:6d:80:62:43:e1:2d:0c:83:44:cb:87:be:30:
                    82:35:34:c2:d6:96:40:4b:d0:ae:b8:33:a5:e7:8d:
                    a8:f7:6b:65:53:8d:b4:11:79:3f:02:fb:41:db:b5:
                    2a:d3:92:94:42:3c:7c:26:18:8f:95:4c:45:bd:33:
                    a6:df:ae:32:e4:be:ca:e4:0b:a4:74:71:47:50:8b:
                    07:52:68:3b:f4:85:43:e7:ae:ca:f3:a0:7f:e5:8b:
                    0e:d5:80:0f:f7:af:3f:a7:66:c5:e5:37:24:4b:75:
                    10:97:53:ff:44:e0:49:6b:a2:72:e9:39:f0:86:03:
                    52:1b:d7:bd:c3:76:62:95:05:35:da:e5:57:da:87:
                    37:12:5d:aa:ab:d4:5f:df:3b:e8:59:a1:82:d8:93:
                    91:5f:cf:f5:c6:f8:07:b2:8a:11:ba:ad:f8:b9:c9:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:3A:5A:3B:63:8E:24:E6:F8:E0:4D:6B:78:AA:DF:EB:7A:DE:60
            X509v3 Authority Key Identifier:
                keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32342d3234203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:79:75:00:71:0c:23:0b:5e:11:90:00:af:bd:23:ee:d6:44:
         c8:b7:fa:b4:cf:a3:b7:61:bf:ee:1b:a9:58:5f:88:4f:7b:97:
         83:9d:1c:20:b4:1a:07:31:26:74:08:11:2e:65:4b:fc:36:3d:
         f0:6e:d4:3f:87:42:60:bf:7a:02:68:be:40:1d:4f:be:c2:a4:
         36:12:84:d4:f2:ce:df:42:e6:e9:5d:99:10:09:08:30:3d:01:
         2a:82:f5:9f:ad:3a:de:4c:f2:c1:7b:51:0e:3e:70:7f:ca:21:
         85:9f:19:1d:a9:d3:1a:a4:7b:b5:00:06:18:49:1f:de:5b:ba:
         2b:b6:19:54:87:ac:ff:dc:9d:cc:e4:8a:0d:47:8d:bb:0f:67:
         2c:cf:54:65:76:c6:4e:7e:01:5a:da:c0:a6:ae:e9:ef:c4:6d:
         97:f0:a1:76:66:bf:67:75:d7:16:1c:9d:a2:6e:5f:06:46:c9:
         10:92:52:ee:3d:5c:4b:22:ff:cd:8f:ac:0c:0d:35:3e:ac:b3:
         35:72:75:33:ab:c2:ed:4b:6e:b9:98:24:2c:1b:e0:6b:5b:12:
         6f:0f:eb:83:53:32:6f:dc:c9:70:5e:2b:4d:8b:8e:91:c3:d1:
         90:30:e7:1e:c1:22:6b:f1:4b:44:fb:16:12:24:bf:b7:a8:fc:
         33:9f:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:03:56 2025 by rpki-client