Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa
File:                     34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa (raw, json)
Hash identifier:          8oVbRr6f9NCAKLY8ObP6kE+eappGeAXDJ5iO9r+kH04=
Subject key identifier:   06:2D:9F:B4:CD:95:3D:DB:6C:BA:85:9E:ED:18:80:AF:B7:01:19:21
Certificate issuer:       /CN=A942C31B9D70569B2761518A130F2D4756DBFC61
Certificate serial:       4C396A10A45F0AEFD338958D5288CE94829C1975
Authority key identifier: A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     267072
IP address blocks:        45.225.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl
                          rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:6a:10:a4:5f:0a:ef:d3:38:95:8d:52:88:ce:94:82:9c:19:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:cc:48:75:64:21:93:3d:95:e1:cc:70:ec:
                    b1:11:7a:a4:83:15:fd:99:8d:a0:21:26:80:7b:1e:
                    6c:97:b6:6a:8e:bf:1d:aa:b3:6c:39:ec:16:ef:0e:
                    8a:11:b7:2c:7d:15:ba:d2:0e:a4:92:21:f9:3f:4d:
                    b2:ce:a0:92:35:c9:23:87:8d:60:e7:73:d9:fc:7a:
                    d2:fa:df:f2:e6:91:57:2d:fc:dd:b1:84:1c:ca:61:
                    73:76:ad:cf:c4:02:ba:01:79:d5:d5:2f:04:dc:57:
                    1d:e0:21:04:86:17:2b:67:ab:60:72:21:54:3f:15:
                    8e:20:2a:68:66:a7:91:3c:a8:88:0d:5d:9c:dd:80:
                    85:e2:9a:3a:f3:7d:3c:da:f1:5b:9b:dc:5f:6c:08:
                    50:35:fc:fe:3e:d9:ec:15:4d:a0:aa:76:b8:27:7b:
                    63:58:e9:71:06:8f:e2:60:c8:39:87:2d:45:e8:cc:
                    5c:39:29:82:5a:23:fc:fd:c9:ed:c4:4b:71:5d:bb:
                    a4:8f:6d:98:74:71:31:47:72:a4:a9:a2:3e:29:bd:
                    71:b2:74:fd:38:63:69:9e:4f:04:5e:2c:be:bf:82:
                    3e:18:e7:74:7d:e4:db:f0:ea:7a:4c:70:b5:5f:96:
                    ea:cc:13:80:32:3e:6c:68:70:10:13:84:8d:a8:40:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2D:9F:B4:CD:95:3D:DB:6C:BA:85:9E:ED:18:80:AF:B7:01:19:21
            X509v3 Authority Key Identifier:
                keyid:A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/34352e3232352e3230332e302f32342d3234203d3e20323637303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d5:8f:2f:90:1b:e3:dd:a5:87:72:fd:4b:c0:58:50:5f:4b:
         0c:53:b7:6f:18:49:fc:01:46:c1:d3:f4:1d:14:b0:6c:cb:18:
         08:19:15:59:b3:31:18:dc:3b:8d:85:89:2a:36:e8:ac:f9:54:
         90:c7:5e:8f:62:ac:08:2d:85:c1:cd:c7:14:ca:d9:5f:e8:ed:
         ee:c4:a8:0a:fe:23:b0:31:68:ee:ec:38:b2:a0:c2:60:1c:84:
         5d:82:9e:24:9b:21:19:3c:b0:89:8c:fd:cf:05:13:a5:63:4a:
         4c:31:e5:be:5a:48:4e:f9:3c:2d:94:0f:6b:1a:4c:db:35:dd:
         76:5e:99:39:ab:6f:1a:39:1e:e0:2f:84:fa:2d:56:1c:5b:f2:
         ab:4b:19:ae:4b:bd:0d:ba:0b:e8:d9:77:88:5b:e1:69:1a:91:
         70:c3:ac:50:30:ce:cd:0a:98:7c:08:ce:8b:3c:01:69:d4:f7:
         0a:16:f9:7c:fd:38:82:d6:cb:dc:f4:12:85:17:b9:5a:c2:95:
         8f:b9:e0:15:72:97:da:56:bb:60:64:de:65:85:4e:d9:03:24:
         09:55:bb:0f:38:bc:1a:7d:37:09:b4:c0:a4:a5:72:b1:21:8f:
         82:a4:0e:ab:40:e8:20:4a:b9:2d:50:38:a0:5f:82:01:52:d2:
         f8:8a:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:52:02 2025 by rpki-client