Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=
Subject key identifier:   22:81:DA:20:F7:81:6A:25:AE:5F:20:7E:82:FA:0D:11:38:13:2B:AD
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       61FA1D02CC0F915ACF50322067BE65309FE7AA85
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:38 +0000
ROA not before:           Thu 06 Mar 2025 07:20:38 +0000
ROA not after:            Thu 05 Mar 2026 07:25:38 +0000
asID:                     267024
IP address blocks:        45.227.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:1d:02:cc:0f:91:5a:cf:50:32:20:67:be:65:30:9f:e7:aa:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:38 2025 GMT
            Not After : Mar  5 07:25:38 2026 GMT
        Subject: CN=2281DA20F7816A25AE5F207E82FA0D1138132BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:1c:85:cc:55:e7:58:95:b7:42:69:a0:bf:
                    49:66:a7:d7:d1:68:84:3c:a2:f0:18:1d:22:97:11:
                    c1:83:5c:4d:9e:14:ce:e7:3f:9f:b4:23:cf:fe:21:
                    a3:d6:e9:42:de:f0:09:2d:8f:e4:11:51:d6:36:aa:
                    79:ab:75:22:72:89:bf:66:87:b3:3f:24:15:a4:ae:
                    3a:78:17:2b:05:2a:62:61:df:fd:03:94:c7:7c:57:
                    ab:14:21:78:d4:7b:06:0e:d5:ab:ec:83:f2:43:28:
                    03:10:0e:f9:d0:12:af:68:2a:e5:32:ef:13:f7:35:
                    6a:1f:31:c5:4c:a5:09:57:1e:78:5f:41:b3:a1:b8:
                    dc:76:ae:7d:47:89:46:66:9d:fd:1b:65:a7:31:aa:
                    65:d4:d3:c0:bb:ea:cf:29:fe:7b:1a:59:d3:5a:ea:
                    a9:f2:82:46:da:56:81:bb:56:96:d5:d7:f9:5d:66:
                    83:54:ab:41:e7:3f:77:1b:d4:95:64:15:3c:8b:de:
                    6a:06:fb:e4:f9:8f:2b:c6:f5:38:7b:50:00:42:7e:
                    04:7b:40:fd:9e:a5:a0:d6:6f:b7:4e:06:0a:03:f0:
                    33:94:d3:fc:d3:85:a5:28:35:50:f6:b3:c6:0f:36:
                    13:5a:bd:cf:5f:7d:b2:84:85:1d:f5:24:ff:b2:47:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:DA:20:F7:81:6A:25:AE:5F:20:7E:82:FA:0D:11:38:13:2B:AD
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:33:55:2f:5d:e0:57:cc:ad:07:9b:2c:b9:63:07:dc:0f:c4:
         25:aa:b0:69:fc:b3:e2:98:7b:4c:a0:36:0a:47:a7:fa:44:b8:
         ba:c0:1a:26:3b:43:c7:a2:e4:e8:16:65:b0:b5:0a:5d:ac:9f:
         21:2c:19:7f:5e:95:cd:88:35:68:88:95:3e:89:95:3a:d0:8a:
         1a:89:a9:84:52:e4:dd:cf:37:65:4f:4d:85:86:7e:b5:12:f6:
         d8:54:46:12:75:a9:8f:79:ca:19:fd:e5:0b:1e:7c:fc:d5:da:
         e1:57:31:83:ef:aa:f5:7f:30:f4:20:a3:38:46:c9:f9:f2:da:
         93:24:f9:02:bd:55:0f:3c:2d:83:bb:7b:e4:3e:c8:f1:d6:0b:
         d0:8d:d8:c5:24:ba:e1:2e:c7:92:e5:a8:f3:87:1b:33:30:ac:
         81:dc:80:52:95:5d:cd:68:12:c7:58:60:83:28:ab:e8:0b:19:
         40:dd:40:11:f3:5d:87:17:23:8c:e6:22:3d:a1:a7:ba:dd:4d:
         be:ea:de:ce:c8:27:99:0e:f0:5a:4f:c5:e8:25:8e:a2:80:4d:
         81:2f:a3:97:db:72:4f:d0:90:f4:e0:cf:14:02:70:4b:c1:96:
         55:e9:02:19:95:19:1c:fe:d2:4e:12:e2:cc:d5:4c:d5:10:8a:
         d6:f1:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:20 2025 by rpki-client