Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
File:                     34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          2lcSwgY6plo6lzCSLskE1qyNDmDYzzc+dJyZYNREMVs=
Subject key identifier:   D1:E6:58:2B:E9:91:43:E5:C1:65:E3:6B:99:58:AA:9C:CE:2D:7C:D1
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       0B9541C5BEC32BABF7E31DF032D617258332D878
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa
Signing time:             Thu 06 Mar 2025 08:32:29 +0000
ROA not before:           Thu 06 Mar 2025 08:27:29 +0000
ROA not after:            Thu 05 Mar 2026 08:32:29 +0000
asID:                     269647
IP address blocks:        45.190.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:95:41:c5:be:c3:2b:ab:f7:e3:1d:f0:32:d6:17:25:83:32:d8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Mar  6 08:27:29 2025 GMT
            Not After : Mar  5 08:32:29 2026 GMT
        Subject: CN=D1E6582BE99143E5C165E36B9958AA9CCE2D7CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:3c:04:66:44:e7:3a:55:6a:a6:32:66:7f:
                    6b:f7:46:22:67:2c:1f:95:6d:d3:20:2a:d2:56:ac:
                    eb:e7:72:47:62:b4:bc:8c:8c:ab:bb:b2:43:de:81:
                    28:b7:c3:a5:fa:dd:8c:3e:e1:8a:25:45:b9:4b:3a:
                    9f:8c:13:fb:f4:46:0e:f6:f1:10:50:44:87:23:1b:
                    e8:5b:61:6e:b0:3a:35:39:7f:30:9f:9d:cf:68:de:
                    8b:54:18:34:75:52:bc:df:d0:c9:1f:ef:18:2d:98:
                    5e:99:6e:39:b9:69:ca:f5:79:2b:d8:f8:73:76:55:
                    5d:f4:a1:01:6f:e3:dd:db:d4:46:b0:ce:fb:df:80:
                    59:ff:01:9a:89:b0:98:63:9f:fb:18:53:b1:e8:94:
                    21:37:90:47:b7:d0:6e:ea:cd:9d:bc:7d:0b:20:c0:
                    ec:f9:e1:3b:1b:2e:8a:ca:86:91:9c:22:94:73:d8:
                    d8:dd:56:9a:46:46:ae:d1:1f:67:28:14:1b:c2:af:
                    d6:6a:e2:15:03:4d:7a:1a:1e:3a:85:f7:ed:46:6a:
                    a9:60:9e:b6:ad:7d:c9:df:fb:f4:f5:41:a3:ef:c8:
                    6a:d8:7e:4a:65:87:95:85:8e:0c:09:7c:50:e3:88:
                    6f:5f:e8:0e:35:28:95:b6:d2:75:6b:74:1e:90:35:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E6:58:2B:E9:91:43:E5:C1:65:E3:6B:99:58:AA:9C:CE:2D:7C:D1
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:b1:00:1f:16:8a:04:a8:96:f2:9a:e7:4d:7f:61:01:92:
         b1:1b:ca:2d:ea:8d:50:b7:04:36:e1:c5:f4:f3:59:f8:9f:85:
         20:bc:4d:ab:5a:a3:5d:53:9c:7f:42:06:cb:85:6f:15:43:70:
         c6:d4:31:53:70:a7:b6:2e:25:0d:f1:3a:6d:7d:d6:4a:d5:35:
         92:ee:8f:5d:4d:fe:05:52:94:41:4c:50:be:5d:19:0e:dd:0f:
         84:93:03:96:29:ec:c0:3a:3e:6f:05:ca:37:61:9e:cd:6d:e6:
         75:13:ca:62:e6:46:73:4c:17:14:6d:b1:6c:7c:d0:52:30:81:
         a1:bd:c2:b9:00:83:8e:99:bc:9a:b0:7d:ff:72:8c:ae:aa:cc:
         42:bb:f4:00:64:47:2d:6a:05:70:4b:0c:a2:c8:1c:5c:8c:2b:
         e8:62:18:9f:22:c9:78:cf:9f:1a:9c:b3:ab:2d:0a:06:7c:22:
         03:39:86:b2:87:d8:d7:2c:d2:b4:2f:8c:b2:f1:5a:82:5a:c3:
         db:68:da:e4:c3:04:65:2e:93:05:12:50:62:ed:84:35:8b:f2:
         98:fb:72:27:7a:e6:74:21:c2:16:a5:5a:cc:20:ba:93:73:f5:
         9b:a3:dd:66:c4:b7:97:e8:be:f7:66:44:58:9f:c4:4a:23:19:
         4c:a5:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:27:55 2025 by rpki-client