Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/34352e37302e39362e302f32322d3332203d3e20323637363335.roa
File:                     34352e37302e39362e302f32322d3332203d3e20323637363335.roa (raw, json)
Hash identifier:          gJs+H9UJJ0bMslDR4Hlcbyqf4wGU+lWzPJKKmIfB4gg=
Subject key identifier:   2E:C7:C1:AD:DA:6E:5B:B1:77:37:67:FF:34:C9:15:83:A9:75:E9:31
Certificate issuer:       /CN=806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C
Certificate serial:       581647EEB04ACADB274FFEFA247A511B051EDE1F
Authority key identifier: 80:6F:F8:A4:3E:84:22:4D:BC:F7:D7:99:71:0E:5E:BB:CA:A7:BF:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/34352e37302e39362e302f32322d3332203d3e20323637363335.roa
Signing time:             Tue 15 Apr 2025 19:17:16 +0000
ROA not before:           Tue 15 Apr 2025 19:12:16 +0000
ROA not after:            Tue 14 Apr 2026 19:17:16 +0000
asID:                     267635
IP address blocks:        45.70.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.crl
                          rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 21:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:16:47:ee:b0:4a:ca:db:27:4f:fe:fa:24:7a:51:1b:05:1e:de:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C
        Validity
            Not Before: Apr 15 19:12:16 2025 GMT
            Not After : Apr 14 19:17:16 2026 GMT
        Subject: CN=2EC7C1ADDA6E5BB1773767FF34C91583A975E931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:97:7e:94:6c:d6:e3:16:f7:f7:29:07:2b:
                    8c:ae:26:0b:ae:e9:b3:87:7a:f6:e3:4b:b1:c6:67:
                    67:6b:6c:d4:a6:16:80:80:d8:3e:57:9f:3c:bc:da:
                    a4:83:c8:d2:84:b3:e1:23:40:36:0b:27:71:23:a8:
                    26:64:29:04:43:96:c4:6b:2d:65:ee:c7:a1:ca:a6:
                    5a:e8:3c:20:69:50:a0:95:a7:9b:b4:39:e6:b4:54:
                    f5:08:7f:e4:8d:e1:e9:05:4a:8f:79:8b:68:1d:7e:
                    3c:11:27:b2:e9:1d:3e:8a:48:b9:1d:15:6b:96:2c:
                    c5:c0:43:87:27:ed:9e:34:60:78:21:14:74:46:e0:
                    25:5e:86:7c:ed:42:48:d2:f5:02:cc:6a:e6:f4:84:
                    22:bd:a4:6b:45:88:ad:21:b3:e4:d1:87:64:1e:5b:
                    07:2d:8c:2e:12:62:87:ec:cb:2e:71:a0:7c:1f:d9:
                    7c:85:64:f4:f6:5b:80:f1:13:99:be:ef:f4:d5:a9:
                    53:08:60:42:e8:80:b2:c9:d3:21:d8:f0:40:e4:c0:
                    a2:10:bd:ee:b1:17:62:b7:01:54:ed:fe:fd:81:da:
                    a7:ae:97:69:2a:ec:b7:51:b6:98:94:ab:9a:4d:63:
                    c1:f6:97:d0:f9:67:ca:0f:6f:f4:63:b7:a1:57:55:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:C1:AD:DA:6E:5B:B1:77:37:67:FF:34:C9:15:83:A9:75:E9:31
            X509v3 Authority Key Identifier:
                keyid:80:6F:F8:A4:3E:84:22:4D:BC:F7:D7:99:71:0E:5E:BB:CA:A7:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/806FF8A43E84224DBCF7D799710E5EBBCAA7BF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Vo9qfJQbnU4kkQQTQiGtrESgfjpd2H1qdzR9GCyMjWb/0/34352e37302e39362e302f32322d3332203d3e20323637363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:01:9d:70:79:d0:8d:49:39:30:d3:73:64:05:f8:d4:42:
         b4:25:62:ea:a2:85:fe:50:36:95:1e:cd:c2:20:b1:f2:d3:3d:
         14:e8:84:2d:35:0e:01:fc:a3:52:36:40:37:fe:9c:42:3a:d7:
         01:e5:84:42:ae:cc:d5:99:ad:8a:c2:64:7c:9f:aa:1d:2b:3c:
         47:d6:88:67:97:ef:cf:ff:ce:dd:fb:8c:80:2a:76:1b:85:03:
         e2:01:88:f8:e8:2e:ff:72:cd:35:1f:33:7a:fc:67:55:4c:c5:
         6e:56:dc:e6:bd:02:3f:d5:bf:29:b0:5e:86:6d:ef:79:19:ec:
         32:b8:a1:cd:dc:20:d1:4e:b5:7d:13:e0:83:d6:ee:44:35:8a:
         f6:da:8a:04:07:dc:63:36:05:b2:d5:ac:e5:8c:a5:e3:5d:b8:
         9d:ee:6e:6e:25:63:e5:28:58:9f:bd:b9:8f:9d:77:10:2f:4c:
         6f:10:b8:f7:f6:f3:69:e0:2a:32:1d:45:26:2d:5a:be:e4:ff:
         8a:8a:7e:40:05:a0:4b:12:61:50:73:15:4c:a2:d8:b1:89:46:
         94:ac:5f:5f:32:c4:9b:99:62:e1:c2:0e:bf:b6:78:cb:a1:a4:
         2b:af:a5:fd:0a:d7:cb:87:77:ad:67:c7:88:36:34:95:cb:81:
         2f:95:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:41:04 2025 by rpki-client