Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
File:                     34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier:          xX4qgXumrJj5i5S2NIzs5FXWb8BuSDDag4c8VSOfKTk=
Subject key identifier:   3F:87:5A:41:84:2D:D9:A2:07:EC:2E:D7:A7:A9:4E:D3:BC:51:40:10
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       7E2A99D98E39167645AA0C994916FF261A035D82
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:09 +0000
ROA not before:           Mon 05 May 2025 12:23:09 +0000
ROA not after:            Mon 04 May 2026 12:28:09 +0000
asID:                     268746
IP address blocks:        45.171.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 10:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:99:d9:8e:39:16:76:45:aa:0c:99:49:16:ff:26:1a:03:5d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:09 2025 GMT
            Not After : May  4 12:28:09 2026 GMT
        Subject: CN=3F875A41842DD9A207EC2ED7A7A94ED3BC514010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:f1:a5:af:28:26:62:c8:30:0e:cd:bd:e1:
                    97:fb:cd:24:3f:ba:82:d1:7d:d5:b1:16:f1:c4:ff:
                    e8:b7:73:0d:dd:2e:93:76:89:08:53:6e:a1:fd:a8:
                    af:92:64:1e:59:2a:af:d0:7d:a3:db:ac:fa:5e:92:
                    56:06:ed:af:f5:4d:5a:bc:d6:7b:d8:21:53:cc:b1:
                    54:90:2a:d3:88:ab:4c:0a:7b:1b:d2:96:ca:c4:01:
                    c3:02:7b:68:06:db:1f:21:b4:43:d5:ba:1e:c5:5a:
                    b4:72:d0:6b:85:4a:52:2e:1d:ea:0b:84:a4:d0:ed:
                    4b:f2:ec:51:11:a0:f9:15:8e:98:4b:c7:b4:a9:91:
                    65:67:2e:68:7d:44:b4:e8:1a:b3:b3:6e:8a:a9:bb:
                    aa:85:2f:de:54:38:74:92:fe:13:bc:50:bb:79:d3:
                    74:e2:3d:2e:e6:a1:00:37:bc:c7:a0:1b:03:90:ec:
                    b6:a6:2f:7a:04:3f:f7:47:e4:0f:37:ae:84:56:c6:
                    94:be:9d:c2:0e:f5:cf:50:f5:5f:8e:9b:19:d8:53:
                    2b:a3:3a:d8:7a:b2:24:54:6b:81:bc:07:1c:d0:66:
                    15:01:e1:03:bb:46:d9:73:e3:18:c4:e6:13:6b:99:
                    0c:c9:55:84:63:3b:e0:3d:12:4e:80:62:4c:0c:a7:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:5A:41:84:2D:D9:A2:07:EC:2E:D7:A7:A9:4E:D3:BC:51:40:10
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:18:db:af:f9:20:2d:c0:32:26:53:ab:7f:ab:12:83:42:b9:
         c6:8c:e0:08:22:4f:ad:92:a4:b0:52:45:db:6a:06:f6:e8:28:
         91:44:f3:37:f4:c8:2e:78:93:1b:ff:ed:7f:95:47:69:59:fe:
         11:27:a6:aa:14:1c:ee:ea:fb:2c:f5:bf:26:e4:47:cc:dd:df:
         1f:10:97:bf:27:22:13:b3:e2:90:04:f7:af:7b:02:43:83:f7:
         06:5d:d4:67:9a:7d:0f:6c:3e:9f:04:17:87:90:60:cf:79:8c:
         79:ca:70:12:91:b9:b9:9a:56:9f:32:21:3d:12:26:98:c7:26:
         2a:cf:44:ee:49:0f:56:57:1f:20:0c:0f:36:0a:51:dc:be:2f:
         8c:89:aa:8a:96:6d:fc:f4:cd:4e:de:d8:12:21:33:6a:9f:4c:
         8d:90:12:63:4d:48:18:a1:b6:28:14:60:fd:53:d8:5c:6c:46:
         c1:a1:31:fe:56:c6:86:c4:09:c7:6d:a1:ea:81:5a:cf:e2:62:
         fc:ad:8c:e8:73:58:2d:a3:fa:c1:ff:b5:ef:81:ad:47:37:65:
         2d:c7:56:2a:c5:58:ce:32:f3:d9:06:77:34:ec:a8:4c:4c:52:
         f6:8e:ac:ff:99:6a:fe:eb:ab:14:9b:46:21:ef:d6:b7:9d:42:
         c0:53:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:02 2025 by rpki-client