Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa
File:                     34352e3233392e35322e302f32322d3332203d3e20323638333533.roa (raw, json)
Hash identifier:          oXAidIStYuvsKe7IKRL94ir6wRdQTmodwBB6Ta01DIk=
Subject key identifier:   8D:BD:7C:D1:4C:19:FB:4E:28:71:BD:37:2B:CD:62:DF:CB:6D:D1:FC
Certificate issuer:       /CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
Certificate serial:       23AE66DF8AB45A3F924127DB768AF4674A4FE947
Authority key identifier: 8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa
Signing time:             Tue 25 Feb 2025 21:44:29 +0000
ROA not before:           Tue 25 Feb 2025 21:39:29 +0000
ROA not after:            Tue 24 Feb 2026 21:44:29 +0000
asID:                     268353
IP address blocks:        45.239.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl
                          rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ae:66:df:8a:b4:5a:3f:92:41:27:db:76:8a:f4:67:4a:4f:e9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
        Validity
            Not Before: Feb 25 21:39:29 2025 GMT
            Not After : Feb 24 21:44:29 2026 GMT
        Subject: CN=8DBD7CD14C19FB4E2871BD372BCD62DFCB6DD1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:19:b2:e5:24:72:ef:7b:45:f2:03:2e:ff:
                    f9:98:bc:d7:db:9c:3f:6a:60:49:a2:7a:fa:01:40:
                    fa:45:9d:2d:1b:4d:b5:00:2a:69:0f:5a:4a:ba:31:
                    5c:0d:d6:ac:bf:8d:fb:f0:35:0c:fa:f6:c9:fe:79:
                    39:a4:09:6d:75:6d:bf:dc:64:76:09:8e:ee:6e:ad:
                    c0:3c:93:8c:6f:30:43:c4:65:82:1b:50:5b:f2:97:
                    dd:c5:06:e3:80:74:02:cd:64:87:0a:99:94:16:11:
                    fb:1b:dc:96:77:db:c6:4e:10:60:56:2a:a3:aa:08:
                    c6:2c:ef:eb:6b:e6:d9:d2:00:70:37:0a:a9:40:82:
                    66:2f:84:ff:f7:a0:99:37:15:2e:90:0e:bf:ad:ed:
                    09:bd:e8:b9:5f:23:16:81:c1:f5:e3:8f:e2:21:0d:
                    5f:12:1c:e9:ca:33:dd:50:b3:87:94:bd:9c:2e:26:
                    99:8d:18:8d:9a:53:94:11:0f:67:0f:f3:ce:a7:8a:
                    07:21:db:78:ee:5d:ba:ec:ab:e3:9c:fc:88:81:02:
                    4c:91:2c:2f:3c:35:76:f9:25:27:42:f3:fd:90:bd:
                    63:6c:e2:33:d5:ac:6f:c4:28:ad:5e:7d:a9:05:e8:
                    07:75:7e:d2:81:d5:5f:ae:c5:8a:eb:0a:3f:d1:68:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BD:7C:D1:4C:19:FB:4E:28:71:BD:37:2B:CD:62:DF:CB:6D:D1:FC
            X509v3 Authority Key Identifier:
                keyid:8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/34352e3233392e35322e302f32322d3332203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:32:f6:4f:df:5f:d1:c8:09:02:97:7e:f3:e6:2b:ed:2d:
         23:e3:6e:66:32:08:fc:6c:1e:b4:5c:74:8a:d1:13:1c:de:16:
         a8:b7:a6:f3:10:0c:4a:8c:be:5c:d2:0d:dd:d0:cb:f9:23:1c:
         6f:39:60:51:09:7b:19:6f:5f:54:34:37:08:4a:76:ec:20:32:
         5c:89:96:81:48:52:9d:39:80:d0:0e:4d:6b:12:d1:bd:63:26:
         6d:cd:3e:ab:80:74:04:3c:1a:ad:b7:d9:42:72:ec:1e:f3:1e:
         4b:62:7b:1b:68:3d:ef:8a:1a:94:ca:59:3c:a2:3d:1e:fe:5e:
         b4:36:16:1c:c1:23:77:d4:cc:7f:1c:b4:bc:d5:30:83:72:20:
         49:70:e0:2c:62:e0:15:85:d9:9a:4a:4e:3a:d9:d0:a1:5d:3c:
         c0:31:4c:6a:36:af:27:eb:f5:9e:15:f1:cb:92:2e:85:c3:73:
         3b:c7:54:bd:c8:e9:cb:50:18:8d:96:ca:86:ed:70:12:35:27:
         ab:a9:ec:00:3f:94:71:66:82:0f:a9:39:a0:89:f8:06:2b:6f:
         72:35:67:0b:3c:e2:4b:2e:4e:39:1b:27:d6:3f:20:b2:80:d8:
         c9:e6:30:e6:29:2b:f1:0b:a3:0f:49:f1:c1:5b:8f:49:69:9b:
         1e:d8:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:34:22 2025 by rpki-client