Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
File:                     34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa (raw, json)
Hash identifier:          04tJfZSrNhjb4Eg5sB/A4o4isjaES+P1s2EphqLXKko=
Subject key identifier:   47:FA:BB:98:E3:13:67:87:EE:86:59:9A:4B:75:6C:DC:D3:C0:68:AE
Certificate issuer:       /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial:       19B31B2B56BEBB95F14AD212C57A79A889BFEC08
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
Signing time:             Tue 06 May 2025 12:25:37 +0000
ROA not before:           Tue 06 May 2025 12:20:37 +0000
ROA not after:            Tue 05 May 2026 12:25:37 +0000
asID:                     266983
IP address blocks:        45.226.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b3:1b:2b:56:be:bb:95:f1:4a:d2:12:c5:7a:79:a8:89:bf:ec:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
        Validity
            Not Before: May  6 12:20:37 2025 GMT
            Not After : May  5 12:25:37 2026 GMT
        Subject: CN=47FABB98E3136787EE86599A4B756CDCD3C068AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:89:ea:be:56:12:27:9d:96:91:ce:5c:32:
                    d3:33:c2:cc:5b:14:23:9b:d6:d5:ec:7a:a3:64:48:
                    45:24:4b:5d:ed:17:5c:68:fc:3c:11:76:04:22:4f:
                    79:e8:56:25:a5:71:31:c6:02:3b:e4:76:f8:95:17:
                    9c:3c:92:55:57:be:97:97:f8:85:c0:23:26:59:a0:
                    c8:48:aa:97:d6:fd:87:9f:34:c5:57:b7:6d:40:c1:
                    28:af:36:58:35:ba:8f:49:20:bd:7e:83:96:ac:0a:
                    80:e6:75:df:72:fc:b8:45:0f:56:9b:ca:b2:79:69:
                    56:92:b4:ee:f6:a7:33:c5:61:fb:cc:b7:92:e3:b1:
                    1b:dc:36:28:db:61:8b:71:8f:36:70:78:cd:3e:5f:
                    d0:66:9a:34:92:ab:bf:18:7b:2a:ba:b1:fa:49:13:
                    93:af:64:ca:d2:eb:a4:07:b9:f8:32:6c:00:2b:f8:
                    93:3b:62:78:44:86:a9:f1:e4:43:68:dc:68:94:92:
                    87:ff:70:58:ed:3e:51:64:ef:d5:5f:25:4f:2a:42:
                    25:a5:e4:98:aa:c6:e2:0c:e5:53:23:29:0b:47:cd:
                    ca:42:02:5b:48:76:66:9c:ba:62:dc:c3:68:20:dd:
                    33:37:4e:f7:e8:89:f0:e3:00:5d:74:00:22:e5:10:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FA:BB:98:E3:13:67:87:EE:86:59:9A:4B:75:6C:DC:D3:C0:68:AE
            X509v3 Authority Key Identifier:
                keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:7f:f5:93:fa:1e:87:f1:3d:a9:cd:b3:6e:7f:24:52:3b:
         eb:2e:eb:52:bc:87:61:83:6c:70:19:0d:81:26:de:fd:06:a4:
         d4:4c:f2:7e:bc:62:a8:9b:a1:b2:55:96:ea:b6:49:30:b1:e0:
         a0:27:92:a3:7c:0d:ff:85:0e:08:86:aa:89:b1:7f:2e:6a:ce:
         62:28:32:80:aa:36:2c:a0:79:b2:2f:3d:5f:e8:83:c5:f1:f9:
         49:9a:9b:7f:e8:65:6a:a5:a5:74:bb:32:08:37:36:b7:92:3a:
         76:6b:ac:e2:69:63:7a:fe:e7:94:ad:7b:36:6a:e5:f2:b1:11:
         48:a5:1e:b3:7a:cd:90:3e:f0:9c:a6:b5:79:a1:4a:d4:71:2d:
         68:54:c4:3c:a2:0e:1e:fd:f2:62:e3:db:b2:36:68:b9:03:3d:
         8e:4d:ab:59:df:cb:b3:2a:02:d2:d7:69:81:9f:7d:a1:ee:a8:
         69:04:34:ac:84:2f:35:bd:48:24:4a:69:f4:4d:39:ff:ca:05:
         47:2d:76:ad:d2:65:8b:17:40:ca:07:f7:4b:f3:c9:cc:d1:65:
         60:1f:cf:fa:f0:6d:f8:1d:de:ed:6c:e5:de:af:8a:f1:32:6e:
         f3:dd:f7:78:58:67:e6:f2:e8:ff:ac:7f:59:93:13:bf:e8:0a:
         11:08:06:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGbMbK1a+u5XxStISxXp5qIm/7AgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDMzkxNUIxNjFGMkYxRDRBRUZERjZCRjU4MUVFQzA5
NUIzRDYwRjAeFw0yNTA1MDYxMjIwMzdaFw0yNjA1MDUxMjI1MzdaMDMxMTAvBgNV
BAMTKDQ3RkFCQjk4RTMxMzY3ODdFRTg2NTk5QTRCNzU2Q0RDRDNDMDY4QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhonqvlYSJ52Wkc5cMtMzwsxb
FCOb1tXseqNkSEUkS13tF1xo/DwRdgQiT3noViWlcTHGAjvkdviVF5w8klVXvpeX
+IXAIyZZoMhIqpfW/YefNMVXt21AwSivNlg1uo9JIL1+g5asCoDmdd9y/LhFD1ab
yrJ5aVaStO72pzPFYfvMt5LjsRvcNijbYYtxjzZweM0+X9BmmjSSq78Yeyq6sfpJ
E5OvZMrS66QHufgybAAr+JM7YnhEhqnx5ENo3GiUkof/cFjtPlFk79VfJU8qQiWl
5JiqxuIM5VMjKQtHzcpCAltIdmacumLcw2gg3TM3TvfoifDjAF10ACLlEFdPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR/q7mOMTZ4fuhlmaS3Vs3NPAaK4wHwYDVR0j
BBgwFoAUPcORWxYfLx1K799r9YHuwJWz1g8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01KaHRWOE5kbUdYcXRYWnlaTHVoQXdRWmtYTk1vQlBQaTJDN2N4SFlW
WWgvMC8zREMzOTE1QjE2MUYyRjFENEFFRkRGNkJGNTgxRUVDMDk1QjNENjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQzM5MTVCMTYxRjJGMUQ0
QUVGREY2QkY1ODFFRUMwOTVCM0Q2MEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNSmh0VjhOZG1HWHF0WFp5Wkx1aEF3UVprWE5Nb0JQUGkyQzdjeEhZVlloLzAv
MzQzNTJlMzIzMjM2MmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4owwDQYJKoZIhvcNAQELBQADggEBAF/Af/WT
+h6H8T2pzbNufyRSO+su61K8h2GDbHAZDYEm3v0GpNRM8n68YqibobJVluq2STCx
4KAnkqN8Df+FDgiGqomxfy5qzmIoMoCqNiygebIvPV/og8Xx+Umam3/oZWqlpXS7
Mgg3NreSOnZrrOJpY3r+55StezZq5fKxEUilHrN6zZA+8JymtXmhStRxLWhUxDyi
Dh798mLj27I2aLkDPY5Nq1nfy7MqAtLXaYGffaHuqGkENKyELzW9SCRKafRNOf/K
BUctdq3SZYsXQMoH90vzyczRZWAfz/rwbfgd3u1s5d6vivEybvPd93hYZ+by6P+s
f1mTE7/oChEIBnQ=
-----END CERTIFICATE-----
Generated at Tue May 13 19:18:47 2025 by rpki-client