Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3332203d3e203532353830.roa
File:                     34352e3137382e3231392e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          Ojbj5CeCzfsJm86izA/WUOVXld2OHuJoYjfSHssLgpU=
Subject key identifier:   1A:1D:9C:C6:03:B8:5A:8D:D3:CE:8D:C2:81:2E:03:FF:9C:05:C7:76
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       3309E7C7D75A30A513E2F628C02F9C2F0EDE25B4
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3332203d3e203532353830.roa
Signing time:             Sat 03 May 2025 08:53:11 +0000
ROA not before:           Sat 03 May 2025 08:48:11 +0000
ROA not after:            Sat 02 May 2026 08:53:11 +0000
asID:                     52580
IP address blocks:        45.178.219.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:09:e7:c7:d7:5a:30:a5:13:e2:f6:28:c0:2f:9c:2f:0e:de:25:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: May  3 08:48:11 2025 GMT
            Not After : May  2 08:53:11 2026 GMT
        Subject: CN=1A1D9CC603B85A8DD3CE8DC2812E03FF9C05C776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:93:4a:36:3d:e2:c9:61:d8:4d:de:b8:d6:
                    46:e2:83:df:45:bb:13:68:0c:0d:b5:14:c1:c4:ed:
                    a3:f4:05:7b:db:7e:34:d7:45:44:99:10:06:16:c3:
                    1d:4e:fe:99:6a:5c:5a:3f:dc:04:98:5b:22:f3:36:
                    10:aa:99:2b:44:a9:81:11:11:d9:0d:fe:69:5f:da:
                    90:e7:48:6c:f2:38:12:79:a8:ae:bf:fc:2f:c4:d3:
                    4f:94:09:bb:4c:3a:d5:a1:fe:57:98:cf:8c:8f:ae:
                    7b:11:dc:9f:32:25:81:c8:46:07:82:52:8d:33:54:
                    c8:82:07:0f:e6:b7:24:4b:69:86:4e:ad:a8:20:e5:
                    45:3d:5d:13:5d:6f:28:91:ef:80:52:97:26:20:7f:
                    aa:c4:b3:61:f9:a9:ba:d7:49:01:4e:4f:93:6a:62:
                    94:65:db:9a:d9:86:a1:1c:d5:32:91:b4:0e:22:85:
                    c0:b2:f5:0c:7d:01:c4:65:02:ef:2b:e1:ee:55:1a:
                    9d:86:d3:80:60:b2:a3:fc:37:90:1c:38:f8:44:2f:
                    08:50:5c:1c:be:b6:78:54:1a:03:86:fb:55:6e:a3:
                    52:81:51:cb:81:ee:27:72:69:06:2f:71:56:dc:d3:
                    07:0f:05:0e:19:1f:9b:ea:90:01:67:41:1e:d3:c7:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:9C:C6:03:B8:5A:8D:D3:CE:8D:C2:81:2E:03:FF:9C:05:C7:76
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231392e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:1e:1f:19:25:a7:d2:28:4d:a1:89:71:4b:67:53:14:da:
         f4:60:f1:76:32:9f:d1:62:61:e4:a2:34:ed:52:ab:d3:83:b8:
         7b:99:8b:a6:4c:ec:2e:8c:55:8d:35:9b:ba:1b:1d:08:e0:27:
         2f:91:9b:63:97:d1:28:b1:12:f5:a7:39:da:06:a9:0f:4c:b1:
         4e:7d:94:46:c5:c9:97:a7:5b:be:e3:24:db:75:70:16:e5:71:
         1b:04:2a:4b:b1:ff:ce:2c:12:bd:9b:fe:c8:4c:ef:ec:49:34:
         f1:b5:c3:cb:14:52:46:85:f9:27:1e:06:fb:cc:0c:39:6d:88:
         a9:3b:4f:7c:cf:80:de:85:51:fe:09:3c:48:26:df:e2:ac:8d:
         14:81:60:7f:cb:f0:e5:2f:7e:c8:87:95:c9:60:fe:a3:f0:9e:
         7d:ba:06:1f:3a:c8:47:a1:cd:7a:71:f4:04:37:9d:18:7c:d6:
         ca:c2:aa:14:8a:b5:c3:15:be:8b:5a:c2:74:19:d1:8a:4a:b8:
         df:c7:0d:e0:e7:25:36:68:ed:94:51:0c:64:22:df:cd:44:32:
         f7:45:ae:72:09:69:aa:3f:ea:6f:20:ff:28:02:e7:7f:20:8c:
         ed:15:0d:01:00:db:9d:af:df:ad:4f:ef:f0:68:5a:52:ec:4e:
         cf:ed:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:20:00 2025 by rpki-client