Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
File:                     34352e3139312e32322e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier:          X0pJMrtjS0W7zyprjDJ14UaMZ8ZYghczxD+usmopCAM=
Subject key identifier:   1A:5E:A4:DE:32:74:4A:90:2C:BA:67:56:4B:8F:98:A6:A8:B2:58:62
Certificate issuer:       /CN=B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3
Certificate serial:       7F0546E0B641AA6ED668B20EE415F828B0467DF1
Authority key identifier: B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
Signing time:             Wed 30 Apr 2025 18:22:32 +0000
ROA not before:           Wed 30 Apr 2025 18:17:32 +0000
ROA not after:            Wed 29 Apr 2026 18:22:32 +0000
asID:                     269664
IP address blocks:        45.191.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 19:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:05:46:e0:b6:41:aa:6e:d6:68:b2:0e:e4:15:f8:28:b0:46:7d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3
        Validity
            Not Before: Apr 30 18:17:32 2025 GMT
            Not After : Apr 29 18:22:32 2026 GMT
        Subject: CN=1A5EA4DE32744A902CBA67564B8F98A6A8B25862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:f1:86:86:3f:96:df:f1:7f:03:97:8f:a1:
                    a8:e5:55:4c:3b:7e:62:5a:15:1d:55:a0:2a:09:d8:
                    3c:e3:92:36:5a:86:5e:90:15:b8:3f:da:e8:e9:b0:
                    a0:6a:03:5c:87:14:61:46:1f:0b:c1:1a:4b:a6:74:
                    86:09:80:f2:e2:85:b2:3e:55:d1:a5:de:ba:f3:2f:
                    d8:9b:77:7c:53:ed:9c:72:ae:e2:36:5e:c2:93:fa:
                    41:cc:6e:80:db:28:bb:a1:4e:05:06:ee:9f:90:ee:
                    d3:02:e0:97:23:31:7e:ac:86:a5:80:22:da:42:55:
                    10:54:dd:3d:67:25:f9:9f:db:b5:bc:1f:0b:e4:fc:
                    fb:83:88:bf:6f:5c:95:10:c3:67:4e:5b:78:fc:d0:
                    7f:cb:16:66:44:8a:3f:ba:7a:68:5e:8b:e9:e8:40:
                    8b:99:bf:ea:7f:2e:0c:23:68:a1:88:1c:7e:6b:83:
                    74:af:e0:43:57:e8:ad:82:dd:71:e2:de:c6:ee:c6:
                    1c:02:35:e6:86:be:e5:e7:1c:4a:e9:98:97:11:96:
                    7d:d5:ab:61:68:87:ee:6e:bc:a6:fc:df:7c:3c:70:
                    40:74:5a:56:0b:70:5b:d1:e7:56:29:49:ca:bb:ae:
                    cb:53:b5:68:bf:3f:f8:f0:4f:a4:b1:14:6e:e0:02:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5E:A4:DE:32:74:4A:90:2C:BA:67:56:4B:8F:98:A6:A8:B2:58:62
            X509v3 Authority Key Identifier:
                keyid:B1:EA:6E:BF:8A:29:DA:2A:71:1A:40:FA:F7:5D:6D:D2:7F:56:17:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1EA6EBF8A29DA2A711A40FAF75D6DD27F5617A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:31:e3:d6:b7:d1:13:1f:72:3b:2d:fe:a4:af:fb:48:51:ff:
         29:13:47:47:6b:9c:99:e1:c1:8b:9e:d4:e6:79:b6:94:dc:89:
         1c:34:c6:23:b7:d1:ca:98:c5:87:eb:58:d5:46:01:7d:08:08:
         46:3d:3c:99:8c:e4:75:e2:fa:a0:6f:21:53:f0:e1:7b:81:42:
         7f:de:23:77:ff:9a:5b:e0:c3:ff:d1:08:ce:20:4a:ca:15:71:
         a5:69:8f:90:61:11:31:fc:39:69:51:c2:29:9a:b5:74:8c:f3:
         d5:f3:2f:1f:65:49:50:dc:d7:e2:51:0a:07:6f:d3:d2:f4:06:
         7c:52:9d:5c:6d:2a:33:4e:c6:58:6c:83:f3:af:1e:ec:f9:c9:
         93:c8:bf:bf:31:ee:6d:5a:71:a0:99:25:05:c0:36:6b:eb:cb:
         5f:29:53:81:b7:11:73:e5:c8:a2:ab:43:36:1c:d8:6e:35:79:
         23:51:39:b6:94:65:8d:76:96:52:17:59:1a:2c:9a:45:2f:09:
         7c:e0:d2:c6:ab:e1:cc:7c:ee:98:f6:09:bc:74:06:b8:7a:f7:
         83:37:63:1d:97:7c:53:83:c4:78:38:97:a7:6c:c5:5c:4e:c9:
         83:15:e2:8d:01:3b:19:cb:a6:f6:63:4a:9b:6d:6c:ce:3f:bd:
         8b:b8:70:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:16:04 2025 by rpki-client