Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
File:                     34352e3136342e31302e302f32342d3234203d3e20323638353835.roa (raw, json)
Hash identifier:          xmDdgR04TqBxu7MEmpmuIz19DIQ8rxAWQ5waHyGRjiM=
Subject key identifier:   E7:4C:CD:B1:F7:EE:82:29:3B:8C:11:D7:36:E1:75:C4:A5:46:0F:B4
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       5BB75357350EF9348021A1C9CC67704694C94AE3
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa
Signing time:             Thu 06 Mar 2025 22:52:52 +0000
ROA not before:           Thu 06 Mar 2025 22:47:52 +0000
ROA not after:            Thu 05 Mar 2026 22:52:52 +0000
asID:                     268585
IP address blocks:        45.164.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:53:57:35:0e:f9:34:80:21:a1:c9:cc:67:70:46:94:c9:4a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Mar  6 22:47:52 2025 GMT
            Not After : Mar  5 22:52:52 2026 GMT
        Subject: CN=E74CCDB1F7EE82293B8C11D736E175C4A5460FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:90:cc:a3:70:ce:74:ab:06:d2:d0:97:3f:
                    ea:b3:9f:27:1e:53:92:78:aa:f9:20:fb:cd:0b:71:
                    e2:54:8b:ef:a4:b8:7e:97:84:7a:46:8f:56:c2:23:
                    5c:39:37:46:05:39:55:68:f3:c8:73:0e:78:99:05:
                    14:12:7b:e3:9c:7f:b2:09:30:02:5a:35:1e:a2:23:
                    d1:05:46:08:b2:cb:d9:ff:e6:57:45:e2:60:0f:41:
                    66:64:a5:1d:17:2a:7d:3f:1d:40:a0:7b:90:1b:b8:
                    35:87:77:7e:ff:54:1a:28:4e:ef:e6:4e:c5:c1:41:
                    68:18:59:50:f7:24:a7:76:10:fd:a1:91:4c:2a:c4:
                    29:d5:21:65:4c:1f:f5:f9:72:9d:e4:4f:e1:11:d6:
                    e1:64:0d:7f:94:d8:3d:c5:c3:d9:de:8e:b6:84:a0:
                    2f:b2:7f:a3:3e:8b:9b:81:f0:bd:56:dc:29:cb:d5:
                    9d:ff:e8:e2:f4:26:0b:fc:90:b7:97:09:cd:8d:1c:
                    33:b7:16:60:34:53:f9:a6:53:ad:9a:6b:df:9d:a9:
                    36:e3:0a:29:e4:48:24:9d:74:2a:ba:f8:19:19:d9:
                    e7:0b:c9:fa:81:09:92:e7:ea:7a:5b:87:2f:b8:34:
                    5e:f9:2f:6c:72:b9:19:9d:77:28:2e:07:e4:65:58:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4C:CD:B1:F7:EE:82:29:3B:8C:11:D7:36:E1:75:C4:A5:46:0F:B4
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/34352e3136342e31302e302f32342d3234203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:4f:27:ea:ec:48:2e:0c:62:49:3b:b9:a9:a7:81:62:6a:
         50:b5:24:f4:d1:b2:28:c0:0d:af:79:2b:12:e2:3e:41:d7:dd:
         0f:6e:aa:00:33:2a:99:b0:51:75:97:5e:2e:70:b4:06:96:a7:
         a2:0b:da:3a:92:7a:2a:cf:0c:b3:1a:04:6e:8b:ed:c6:49:25:
         a9:4a:4d:2d:27:a0:6d:c2:10:7c:68:f3:ad:62:e7:0d:2e:44:
         e9:b4:ac:df:d0:f2:3c:71:75:8c:b7:a2:b8:78:f9:f4:1f:d8:
         bc:b7:fd:b8:85:de:cb:b6:4a:cf:b8:de:b0:3a:68:ef:54:2e:
         d8:8d:e1:f5:1e:c2:93:dd:de:c2:82:ea:8e:d7:62:47:af:c5:
         ab:25:d6:99:46:43:d8:94:06:98:76:d2:df:1a:5f:70:2d:b2:
         f0:e6:48:c0:a1:b7:ad:a0:7b:39:92:44:42:c0:bd:76:7d:6c:
         9c:3b:90:4c:35:b2:f0:aa:d2:1b:d0:94:c7:29:a8:2c:bb:a2:
         a7:72:c5:5e:a5:d6:42:b4:21:9d:f4:2c:d6:84:7d:c0:ed:8a:
         34:af:15:73:d8:36:49:48:5e:4d:90:37:6a:4c:7f:ab:2e:29:
         2c:16:fa:2e:ef:cd:cf:61:93:d5:dd:08:49:3c:0a:0a:a5:e3:
         3b:c2:03:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW7dTVzUO+TSAIaHJzGdwRpTJSuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNERDQwODMxOUU1MjY1NzVGMEUzMjdEQkZDMjhFQzlD
RUNERjQxMjAeFw0yNTAzMDYyMjQ3NTJaFw0yNjAzMDUyMjUyNTJaMDMxMTAvBgNV
BAMTKEU3NENDREIxRjdFRTgyMjkzQjhDMTFENzM2RTE3NUM0QTU0NjBGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHpDMo3DOdKsG0tCXP+qznyce
U5J4qvkg+80LceJUi++kuH6XhHpGj1bCI1w5N0YFOVVo88hzDniZBRQSe+Ocf7IJ
MAJaNR6iI9EFRgiyy9n/5ldF4mAPQWZkpR0XKn0/HUCge5AbuDWHd37/VBooTu/m
TsXBQWgYWVD3JKd2EP2hkUwqxCnVIWVMH/X5cp3kT+ER1uFkDX+U2D3Fw9nejraE
oC+yf6M+i5uB8L1W3CnL1Z3/6OL0Jgv8kLeXCc2NHDO3FmA0U/mmU62aa9+dqTbj
CinkSCSddCq6+BkZ2ecLyfqBCZLn6npbhy+4NF75L2xyuRmddyguB+RlWMD9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU50zNsffugik7jBHXNuF1xKVGD7QwHwYDVR0j
BBgwFoAUrN1AgxnlJldfDjJ9v8KOyc7N9BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZp
NHYvMS9BQ0RENDA4MzE5RTUyNjU3NUYwRTMyN0RCRkMyOEVDOUNFQ0RGNDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDREQ0MDgzMTlFNTI2NTc1
RjBFMzI3REJGQzI4RUM5Q0VDREY0MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEZURjYTZTM2V4WFJWSFZiVXR2WFJqdjJORFJ1U0xkY3JTQTlRVHFmaTR2LzEv
MzQzNTJlMzEzNjM0MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaQKMA0GCSqGSIb3DQEBCwUAA4IBAQCV4U8n6uxI
LgxiSTu5qaeBYmpQtST00bIowA2veSsS4j5B190PbqoAMyqZsFF1l14ucLQGlqei
C9o6knoqzwyzGgRui+3GSSWpSk0tJ6BtwhB8aPOtYucNLkTptKzf0PI8cXWMt6K4
ePn0H9i8t/24hd7LtkrPuN6wOmjvVC7YjeH1HsKT3d7CguqO12JHr8WrJdaZRkPY
lAaYdtLfGl9wLbLw5kjAobetoHs5kkRCwL12fWycO5BMNbLwqtIb0JTHKagsu6Kn
csVepdZCtCGd9CzWhH3A7Yo0rxVz2DZJSF5NkDdqTH+rLiksFvou783PYZPV3QhJ
PAoKpeM7wgOv
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:23 2025 by rpki-client