Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa
File:                     34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier:          oVjQhgspeltuV28tjxBz4iFQBhqnc2zEoJwPptISWck=
Subject key identifier:   C3:84:69:AE:A5:F1:E7:BC:A6:42:AD:1D:06:AD:80:D0:C3:A7:A6:19
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       5B9F0E3E4A4137CE6311BA07D7C1BFBB86AA34A9
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa
Signing time:             Thu 06 Mar 2025 07:25:41 +0000
ROA not before:           Thu 06 Mar 2025 07:20:41 +0000
ROA not after:            Thu 05 Mar 2026 07:25:41 +0000
asID:                     267024
IP address blocks:        45.227.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9f:0e:3e:4a:41:37:ce:63:11:ba:07:d7:c1:bf:bb:86:aa:34:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Mar  6 07:20:41 2025 GMT
            Not After : Mar  5 07:25:41 2026 GMT
        Subject: CN=C38469AEA5F1E7BCA642AD1D06AD80D0C3A7A619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:d0:78:d6:69:40:a5:32:fa:43:4d:b5:07:
                    d4:8a:07:ba:c3:a0:da:39:ce:ec:0f:cb:68:74:77:
                    08:cd:fc:b7:36:9d:55:50:ae:15:fe:f6:cd:56:30:
                    9b:ad:18:fa:57:f4:d7:79:1e:29:f2:fa:0b:f8:45:
                    78:86:07:79:82:72:05:95:86:e5:cd:d4:c4:85:40:
                    eb:78:0a:46:75:d7:b1:23:f4:69:46:b0:e3:be:3d:
                    c7:25:99:1b:16:aa:c6:c9:5a:b8:ca:2b:d4:03:24:
                    71:66:a0:da:88:5e:0f:97:2b:e3:9c:7d:29:28:38:
                    46:48:83:d6:e8:77:f0:28:85:95:ab:da:f1:36:eb:
                    9e:92:de:ca:b2:5f:1d:69:1d:71:3f:f6:98:4b:b9:
                    60:7d:0a:26:21:06:6f:45:96:c7:6a:27:7d:f3:aa:
                    b6:36:c3:b2:5d:5f:49:b4:85:4e:9a:e1:16:81:5c:
                    26:7f:14:40:e7:76:c4:87:5e:68:d5:da:8e:69:89:
                    09:b4:ec:89:80:3f:c3:a7:62:40:b0:85:da:da:71:
                    2c:c9:39:5e:7d:c2:8a:12:f3:c5:9c:44:84:0d:3f:
                    2b:b9:5d:54:8f:6c:db:09:bc:ed:7a:3c:28:59:67:
                    05:75:46:db:bc:42:57:71:2d:52:40:2d:6f:e5:a7:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:69:AE:A5:F1:E7:BC:A6:42:AD:1D:06:AD:80:D0:C3:A7:A6:19
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131352e302f32342d3234203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e7:aa:74:b2:c7:af:90:77:f1:c2:62:10:21:69:90:5e:7f:
         9f:bb:5f:f1:57:fd:ae:fd:06:aa:9b:20:57:46:4a:34:53:43:
         e2:6f:ca:56:4c:a8:cb:4a:56:00:de:59:a5:b5:f3:61:23:1c:
         ca:74:56:cb:54:6f:4a:21:b1:17:8a:7b:ad:79:e4:04:bd:d2:
         49:87:35:a9:51:f8:82:f5:e7:7e:13:15:d1:94:26:e7:1e:d9:
         09:e8:cf:25:93:93:c3:39:b7:cb:a1:5f:4c:c6:f0:a4:2e:6e:
         76:b4:ea:64:67:d8:7a:7a:5f:46:0e:cb:31:70:c5:f7:89:05:
         b5:d5:bc:ed:fa:fd:da:c3:90:97:92:23:62:cc:7c:66:59:2d:
         e2:83:d3:85:4d:bd:52:aa:7c:6a:4b:22:db:b2:26:68:4c:65:
         62:db:d7:ef:d5:e3:f1:6e:8c:7f:8f:88:5d:59:14:a1:24:13:
         62:00:88:72:db:24:99:4a:63:fd:4d:d2:8c:bd:d8:c4:ca:f7:
         1f:58:17:cc:cb:39:bb:ae:3b:d6:f2:b4:5d:b6:64:10:3c:3f:
         63:c4:6c:20:ff:c6:6a:ab:06:4f:56:c6:af:2f:4d:fd:dc:f2:
         f6:b6:d5:6e:33:b4:68:a9:62:76:5e:f6:3f:63:ab:3f:06:b1:
         8e:ca:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:18:05 2025 by rpki-client