Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
File:                     34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (raw, json)
Hash identifier:          EtPGuSZH3vRBmX/qwPL6+UH0DlEpBn2eWiAs0yBsA2A=
Subject key identifier:   8F:DF:B2:DB:EB:64:41:7A:D8:D6:94:C6:2B:70:52:CA:D6:F6:01:E4
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       6AA25EFACE2B44CDFEFFCCE1EFED530C9ADCE480
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa
Signing time:             Sat 15 Mar 2025 23:30:11 +0000
ROA not before:           Sat 15 Mar 2025 23:25:11 +0000
ROA not after:            Sat 14 Mar 2026 23:30:11 +0000
asID:                     267670
IP address blocks:        45.224.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl
                          rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:5e:fa:ce:2b:44:cd:fe:ff:cc:e1:ef:ed:53:0c:9a:dc:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Mar 15 23:25:11 2025 GMT
            Not After : Mar 14 23:30:11 2026 GMT
        Subject: CN=8FDFB2DBEB64417AD8D694C62B7052CAD6F601E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:03:ed:fb:27:5e:95:79:99:d7:29:07:55:
                    47:6b:9c:ca:e8:8e:83:ba:d9:4c:c8:f5:d8:4d:2e:
                    cd:9b:50:37:64:04:13:ac:cd:6b:cd:e9:a9:56:77:
                    af:fa:bc:4a:72:6a:a4:9e:6f:b0:6a:80:c1:e2:9c:
                    bf:69:cf:f5:c1:b8:b8:5f:c3:88:9e:04:cb:e4:c4:
                    5f:fe:ad:c4:a9:84:09:29:2f:db:54:99:68:b0:16:
                    dd:91:81:6d:ba:a1:e6:64:36:02:ae:ee:4f:22:2f:
                    43:0c:8a:7a:61:87:8f:b5:cb:77:27:5b:d9:15:9a:
                    f9:55:53:d0:e1:dd:47:77:80:1a:cd:80:24:98:07:
                    ee:55:15:a9:52:07:cb:3d:98:73:3f:b0:94:a2:5c:
                    5d:29:8a:67:d9:ba:d6:16:0e:20:1b:93:b3:70:47:
                    fe:0b:5c:82:c3:08:ee:05:44:9e:99:d9:16:f3:cf:
                    fe:fb:8a:fd:8b:88:dd:a5:5d:63:e4:17:cb:be:a6:
                    43:d1:f0:49:e7:21:32:cd:8b:3d:c5:8e:25:44:0f:
                    93:0d:24:30:18:2c:b6:1f:f1:da:50:8e:da:9b:9c:
                    db:4e:69:69:7d:f9:2b:60:1a:2b:38:e0:e7:f8:6a:
                    a8:f7:98:e5:1d:ef:cf:bf:9d:0a:85:aa:80:bf:a1:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:B2:DB:EB:64:41:7A:D8:D6:94:C6:2B:70:52:CA:D6:F6:01:E4
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:6d:56:5c:4d:e6:15:43:44:4f:d5:5e:ca:49:ed:9b:16:
         c0:ee:b9:a2:e7:36:55:4c:7e:c2:3e:77:c6:b2:44:45:6d:84:
         b3:9e:e5:7b:49:bc:ed:e3:e0:24:d6:c5:87:68:8f:70:02:3a:
         43:27:69:33:dc:66:27:bb:8f:d5:eb:20:55:7e:3f:99:d3:0f:
         f9:3d:9f:ee:b3:2d:07:d1:9a:de:f1:1b:e8:aa:83:43:ab:9e:
         95:4e:d6:b5:a2:20:a8:8d:78:8f:3a:9b:73:fd:64:33:6d:fe:
         84:db:b1:82:de:9a:10:a6:d2:26:cd:14:27:4c:f0:0d:98:cc:
         41:d6:7a:d1:a3:33:13:b1:4c:46:96:ec:62:1a:32:e2:f9:61:
         fc:49:ab:ce:13:df:56:c0:e5:6f:a9:e7:9e:73:f5:30:72:c2:
         a0:43:c7:cb:16:78:51:d6:0d:fe:3f:67:a3:3b:3e:43:c0:9f:
         ba:dc:c1:99:c8:e4:68:20:61:ae:38:7b:02:de:71:5b:46:2b:
         cc:b7:21:86:ae:60:97:da:b2:83:67:32:59:02:d2:e6:01:5f:
         f8:b8:80:35:09:c4:44:f1:0b:54:e4:64:a8:1d:fd:dc:37:50:
         02:71:14:f0:06:7c:8a:3b:73:fa:88:2f:39:e6:f4:33:51:7f:
         24:f8:b0:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaqJe+s4rRM3+/8zh7+1TDJrc5IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAxM0RFNDk4QzJCOTA3QTNFRjJFNDgzMzI0OTMwMzlF
N0EyRjk1MzAeFw0yNTAzMTUyMzI1MTFaFw0yNjAzMTQyMzMwMTFaMDMxMTAvBgNV
BAMTKDhGREZCMkRCRUI2NDQxN0FEOEQ2OTRDNjJCNzA1MkNBRDZGNjAxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdiwPt+ydelXmZ1ykHVUdrnMro
joO62UzI9dhNLs2bUDdkBBOszWvN6alWd6/6vEpyaqSeb7BqgMHinL9pz/XBuLhf
w4ieBMvkxF/+rcSphAkpL9tUmWiwFt2RgW26oeZkNgKu7k8iL0MMinphh4+1y3cn
W9kVmvlVU9Dh3Ud3gBrNgCSYB+5VFalSB8s9mHM/sJSiXF0pimfZutYWDiAbk7Nw
R/4LXILDCO4FRJ6Z2Rbzz/77iv2LiN2lXWPkF8u+pkPR8EnnITLNiz3FjiVED5MN
JDAYLLYf8dpQjtqbnNtOaWl9+StgGis44Of4aqj3mOUd78+/nQqFqoC/oW57AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj9+y2+tkQXrY1pTGK3BSytb2AeQwHwYDVR0j
BBgwFoAUgBPeSYwrkHo+8uSDMkkwOeei+VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNu
Z2ovMS84MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMTNERTQ5OEMyQjkwN0Ez
RUYyRTQ4MzMyNDkzMDM5RTdBMkY5NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhdnRMZUFvaHRNQUxFY1FwcWpFbWRGZ2FWZWk5MUVoTVZoRWt6UURzbmdqLzEv
MzQzNTJlMzIzMjM0MmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4MgwDQYJKoZIhvcNAQELBQADggEBAIw+bVZc
TeYVQ0RP1V7KSe2bFsDuuaLnNlVMfsI+d8ayREVthLOe5XtJvO3j4CTWxYdoj3AC
OkMnaTPcZie7j9XrIFV+P5nTD/k9n+6zLQfRmt7xG+iqg0OrnpVO1rWiIKiNeI86
m3P9ZDNt/oTbsYLemhCm0ibNFCdM8A2YzEHWetGjMxOxTEaW7GIaMuL5YfxJq84T
31bA5W+p555z9TBywqBDx8sWeFHWDf4/Z6M7PkPAn7rcwZnI5GggYa44ewLecVtG
K8y3IYauYJfasoNnMlkC0uYBX/i4gDUJxETxC1TkZKgd/dw3UAJxFPAGfIo7c/qI
Lznm9DNRfyT4sA4=
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:41 2025 by rpki-client