Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          iDaK3UcUC/9vdqvALRkrkIRYJiVVQwnqyf5yxJvZy2o=
Subject key identifier:   70:1E:9B:D1:93:10:30:F4:DE:16:A8:E8:4D:2E:30:5F:A5:8E:FC:E3
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       61BC882A0E322EB4EEDE93C4060D0E7D93F94DAA
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        45.181.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:88:2a:0e:32:2e:b4:ee:de:93:c4:06:0d:0e:7d:93:f9:4d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=701E9BD1931030F4DE16A8E84D2E305FA58EFCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:b0:fb:c2:8a:67:9a:c0:2c:69:8e:6d:de:
                    c7:e4:16:00:73:91:ed:22:f5:97:8b:a4:f2:3b:0f:
                    21:40:bb:f1:eb:4e:ae:b1:e0:0d:a1:40:ca:7f:6e:
                    68:3d:c7:20:02:cd:2e:32:25:44:57:95:a1:2e:42:
                    2c:bb:cc:eb:33:64:31:56:df:e1:70:a7:e1:59:e3:
                    95:6e:e8:c4:cb:1f:0d:d8:4f:b0:ec:a3:3f:f3:75:
                    36:6a:73:e9:91:2f:31:ea:3d:0d:d6:8c:e5:a2:22:
                    fa:e8:68:55:17:e5:88:3a:83:a6:b8:67:0f:fe:6a:
                    c1:1a:27:be:40:77:66:8d:2e:8f:51:7a:e0:7e:09:
                    2b:e3:fb:a8:81:89:c5:ec:ef:44:e9:bc:61:62:03:
                    9d:c6:2f:5b:bd:7e:ba:7f:a5:15:ac:7d:e0:fd:a9:
                    35:e5:e2:8a:18:b1:4a:79:aa:d7:c7:34:67:d8:b9:
                    f6:02:79:5e:39:bc:e2:0d:76:46:b0:79:d3:7a:d8:
                    bf:94:d1:b3:26:14:52:91:74:d6:07:ed:59:24:a2:
                    72:37:e7:e0:4a:79:e0:b7:e5:39:4b:b5:fb:e7:90:
                    e3:0a:6b:8b:40:b9:2c:4a:8a:03:76:31:54:a7:9f:
                    29:38:ae:4b:9f:f6:04:72:9f:59:c9:34:d7:78:2e:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1E:9B:D1:93:10:30:F4:DE:16:A8:E8:4D:2E:30:5F:A5:8E:FC:E3
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:1d:4d:f2:2a:d8:05:3e:67:f0:a9:80:81:a2:f0:33:90:cc:
         7d:83:87:ef:0d:77:fb:20:f2:9b:11:0d:a9:ba:af:53:97:00:
         6a:ba:96:cc:7e:f0:05:56:c9:0d:a1:ed:2d:38:47:29:84:d4:
         62:19:b2:ef:59:bd:7d:29:d1:ea:41:05:37:77:f3:22:a0:93:
         1b:53:ba:34:a4:ae:01:55:a9:2f:17:9c:31:ae:67:2e:d0:f3:
         02:22:c3:48:4e:b3:97:f7:c5:a7:43:8d:f4:d6:73:b4:fc:80:
         74:9e:f2:23:cd:e5:0e:58:7d:1e:3b:71:e8:fc:a7:f2:ad:78:
         86:a3:cf:8c:5e:95:0f:09:9c:8c:32:b5:96:df:cc:fa:57:41:
         e8:33:0b:f0:73:e0:da:23:d0:a4:8e:24:cc:1c:4f:98:0d:ef:
         cf:6f:b2:c4:d9:7f:b2:c6:b0:1c:f8:b4:2d:63:64:f5:fd:6e:
         5a:67:93:86:e2:bd:54:39:38:60:c4:2f:97:b0:fd:30:37:28:
         52:12:74:57:f2:a9:86:2a:23:55:c6:2f:d1:31:b6:a0:08:b7:
         05:1f:dd:68:94:cf:83:c4:66:e9:15:91:ef:ca:7b:0a:69:63:
         c7:27:aa:ae:4f:40:8b:1a:3d:0b:68:ec:65:94:9b:e0:a1:a5:
         f9:77:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:32 2025 by rpki-client