Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa
File:                     34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa (raw, json)
Hash identifier:          GajE+SmGWaNYBKVNw4W3zPMLuW5M9g5AsGBUOwDGmFM=
Subject key identifier:   34:44:2F:AC:C3:76:F7:07:E2:B4:C7:B4:29:BD:B9:28:B9:BB:76:76
Certificate issuer:       /CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
Certificate serial:       0C2D7F7E63F489A18BC81BB485B782EDA0025D57
Authority key identifier: D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa
Signing time:             Wed 19 Mar 2025 14:14:24 +0000
ROA not before:           Wed 19 Mar 2025 14:09:24 +0000
ROA not after:            Wed 18 Mar 2026 14:14:24 +0000
asID:                     266962
IP address blocks:        45.226.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl
                          rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:7f:7e:63:f4:89:a1:8b:c8:1b:b4:85:b7:82:ed:a0:02:5d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BC2857A2908DA9E97EEF422A25745D89F282B3
        Validity
            Not Before: Mar 19 14:09:24 2025 GMT
            Not After : Mar 18 14:14:24 2026 GMT
        Subject: CN=34442FACC376F707E2B4C7B429BDB928B9BB7676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:30:d5:99:5d:53:b9:fb:76:69:bb:ce:b0:
                    6c:8c:43:33:db:58:f3:67:84:c5:39:17:bb:f7:eb:
                    35:4a:f8:58:ad:d4:a5:b3:02:44:42:8e:37:de:04:
                    8f:d8:60:a3:08:4d:1a:fe:1f:e0:18:d9:36:de:bf:
                    7a:d0:ec:37:d1:91:13:b3:df:88:66:5d:8f:93:b6:
                    8d:4c:bd:db:42:ff:35:9a:50:5f:06:de:32:97:ba:
                    15:6e:1a:74:c8:86:12:b6:cb:fe:09:08:0e:a2:55:
                    a2:40:50:96:8f:0d:94:4f:4d:36:a4:6c:8b:02:49:
                    44:ed:23:1b:c4:50:9a:d8:47:e8:fa:aa:22:18:42:
                    91:bc:62:af:49:2d:8e:37:e3:1d:44:99:f6:05:e7:
                    b4:68:c8:9b:ff:d3:be:3b:f1:74:5a:fe:88:99:da:
                    6f:9c:f9:26:2b:f4:8c:12:47:8e:ef:5f:be:fc:b3:
                    72:43:88:61:09:91:6c:da:d8:fa:70:7b:31:5e:4a:
                    72:0e:7f:c0:72:19:71:2e:40:d4:ea:a4:9e:7c:6b:
                    70:20:33:2a:f7:dc:ea:f6:9a:52:e5:0b:ed:61:1f:
                    fe:d0:ea:6a:bc:e0:1b:57:76:12:2a:20:4f:f4:2e:
                    d6:d6:d4:6d:13:b2:4f:69:98:16:d2:43:7a:d1:81:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:2F:AC:C3:76:F7:07:E2:B4:C7:B4:29:BD:B9:28:B9:BB:76:76
            X509v3 Authority Key Identifier:
                keyid:D8:BC:28:57:A2:90:8D:A9:E9:7E:EF:42:2A:25:74:5D:89:F2:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/D8BC2857A2908DA9E97EEF422A25745D89F282B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BC2857A2908DA9E97EEF422A25745D89F282B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMrjkCEyC7ukUzuEW7wRTv7DWZAzetkuU5w7n2S5Mrd6/0/34352e3232362e3132342e302f32322d3234203d3e20323636393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:05:e4:05:11:1e:bb:42:94:7c:95:4b:61:6c:fd:b9:f0:29:
         40:e4:46:02:8b:ae:a7:45:d6:f0:b6:be:89:4b:df:9e:cd:da:
         96:1d:08:2b:cf:b1:83:e3:5e:84:66:cc:c9:26:d8:65:48:1c:
         b7:8a:93:65:3f:ff:74:3f:8e:6a:92:fb:ba:48:3c:78:5c:e0:
         6e:e7:81:06:17:15:b6:76:cf:47:bd:18:5f:96:f3:ce:a2:e3:
         64:7e:80:de:ed:aa:a0:60:67:22:f8:4f:83:53:04:08:ae:8c:
         2e:b4:29:5e:39:e0:5e:0c:fa:96:7c:ed:bd:f8:3f:e3:4e:64:
         e3:5e:70:b3:5f:36:29:11:34:b5:2a:72:53:c6:ce:7b:c0:f3:
         cb:05:21:96:49:b1:fa:53:87:de:75:55:57:80:f6:62:39:41:
         81:b5:f5:36:a1:c3:bb:ac:83:e5:66:ef:79:01:9f:87:49:3a:
         82:08:9e:cd:6d:1d:c1:a8:4e:66:14:d6:6e:26:53:63:8d:00:
         d0:12:86:5a:5a:73:2f:1a:94:38:a5:d0:1a:61:39:b0:21:98:
         b2:2d:c5:2e:6a:44:06:66:a8:f4:8e:8c:53:eb:61:53:f1:54:
         11:0f:48:a0:40:8a:3f:e5:da:e3:34:60:cb:9d:cc:bf:be:81:
         5c:c5:ea:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDC1/fmP0iaGLyBu0hbeC7aACXVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhCQzI4NTdBMjkwOERBOUU5N0VFRjQyMkEyNTc0NUQ4
OUYyODJCMzAeFw0yNTAzMTkxNDA5MjRaFw0yNjAzMTgxNDE0MjRaMDMxMTAvBgNV
BAMTKDM0NDQyRkFDQzM3NkY3MDdFMkI0QzdCNDI5QkRCOTI4QjlCQjc2NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhDDVmV1Tuft2abvOsGyMQzPb
WPNnhMU5F7v36zVK+Fit1KWzAkRCjjfeBI/YYKMITRr+H+AY2Tbev3rQ7DfRkROz
34hmXY+Tto1MvdtC/zWaUF8G3jKXuhVuGnTIhhK2y/4JCA6iVaJAUJaPDZRPTTak
bIsCSUTtIxvEUJrYR+j6qiIYQpG8Yq9JLY434x1EmfYF57RoyJv/07478XRa/oiZ
2m+c+SYr9IwSR47vX778s3JDiGEJkWza2PpwezFeSnIOf8ByGXEuQNTqpJ58a3Ag
Myr33Or2mlLlC+1hH/7Q6mq84BtXdhIqIE/0LtbW1G0Tsk9pmBbSQ3rRgfNnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNEQvrMN29wfitMe0Kb25KLm7dnYwHwYDVR0j
BBgwFoAU2LwoV6KQjanpfu9CKiV0XYnygrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1yamtDRXlDN3VrVXp1RVc3d1JUdjdEV1pBemV0a3VVNXc3bjJTNU1y
ZDYvMC9EOEJDMjg1N0EyOTA4REE5RTk3RUVGNDIyQTI1NzQ1RDg5RjI4MkIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkMyODU3QTI5MDhEQTlF
OTdFRUY0MjJBMjU3NDVEODlGMjgyQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNcmprQ0V5Qzd1a1V6dUVXN3dSVHY3RFdaQXpldGt1VTV3N24yUzVNcmQ2LzAv
MzQzNTJlMzIzMjM2MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4nwwDQYJKoZIhvcNAQELBQADggEBABUF5AUR
HrtClHyVS2Fs/bnwKUDkRgKLrqdF1vC2volL357N2pYdCCvPsYPjXoRmzMkm2GVI
HLeKk2U//3Q/jmqS+7pIPHhc4G7ngQYXFbZ2z0e9GF+W886i42R+gN7tqqBgZyL4
T4NTBAiujC60KV454F4M+pZ87b34P+NOZONecLNfNikRNLUqclPGznvA88sFIZZJ
sfpTh951VVeA9mI5QYG19Tahw7usg+Vm73kBn4dJOoIIns1tHcGoTmYU1m4mU2ON
ANAShlpacy8alDil0BphObAhmLItxS5qRAZmqPSOjFPrYVPxVBEPSKBAij/l2uM0
YMudzL++gVzF6gg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:27 2025 by rpki-client on console.sobornost.net