Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa
File:                     34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier:          QzqGXafahY3OqiAIFQwXbfrL1PA3xuz+UUC44BgoSEk=
Subject key identifier:   34:EB:57:8C:A9:00:8C:30:9A:51:90:45:12:C3:A4:AE:2B:45:10:46
Certificate issuer:       /CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
Certificate serial:       5568709D72D1831FFFADB290CDE51277B8E14904
Authority key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa
Signing time:             Fri 28 Feb 2025 12:52:10 +0000
ROA not before:           Fri 28 Feb 2025 12:47:10 +0000
ROA not after:            Fri 27 Feb 2026 12:52:10 +0000
asID:                     268786
IP address blocks:        45.172.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:68:70:9d:72:d1:83:1f:ff:ad:b2:90:cd:e5:12:77:b8:e1:49:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D
        Validity
            Not Before: Feb 28 12:47:10 2025 GMT
            Not After : Feb 27 12:52:10 2026 GMT
        Subject: CN=34EB578CA9008C309A51904512C3A4AE2B451046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:3f:fc:f6:5d:16:d8:38:d0:b5:6b:85:a3:
                    55:4b:af:93:f8:97:db:d4:27:1f:a7:f6:44:9c:ab:
                    51:4d:de:0d:33:07:a0:8f:b6:7c:2d:fa:26:af:b4:
                    de:f9:8c:f0:5e:de:db:83:50:96:ec:c6:0a:95:f4:
                    94:9c:54:53:00:db:11:7d:1e:cc:bc:c7:39:49:32:
                    6c:6a:8f:69:ea:da:eb:66:3d:78:e4:e3:7d:f8:26:
                    bd:83:84:14:76:8f:40:ce:c4:90:57:66:ce:cf:38:
                    37:b5:cd:d9:30:5b:68:40:40:16:f6:f7:f8:1d:00:
                    6c:06:3f:11:32:e3:01:f9:0e:2f:b1:1c:bc:b9:39:
                    e5:da:e8:98:e1:51:ed:bb:ee:19:69:8b:51:54:a2:
                    8e:35:a7:30:03:f4:dc:e1:31:07:be:2f:87:76:6e:
                    c9:a1:d0:aa:78:ef:a0:97:12:4d:7e:02:ed:f3:22:
                    a5:2f:97:c9:ce:02:7c:ed:0c:d8:3e:63:50:e6:b4:
                    7f:aa:8c:fb:30:3e:c4:a4:3e:0a:c6:a2:41:47:38:
                    c6:80:9a:a6:be:1c:da:1c:2a:73:8a:cf:f2:ca:89:
                    9d:64:b8:41:59:7b:6a:0f:53:6c:73:ef:09:70:6a:
                    0b:b3:c2:7c:07:f6:7c:00:36:62:93:b6:03:69:54:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:57:8C:A9:00:8C:30:9A:51:90:45:12:C3:A4:AE:2B:45:10:46
            X509v3 Authority Key Identifier:
                keyid:0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:85:3f:53:eb:80:b2:8e:45:a8:2a:ae:e2:27:26:e6:9e:
         01:ae:fe:d3:f4:8d:33:44:a6:23:e6:01:74:71:2b:84:4d:5c:
         db:86:8f:77:a8:35:59:e5:0b:7d:a0:70:c4:c9:66:24:61:72:
         29:a6:c6:31:13:ec:63:39:1a:fa:a8:2f:f9:75:b7:0f:83:dd:
         84:da:81:b2:70:1f:df:2c:e9:c0:09:b6:00:21:2c:15:ab:3a:
         06:d4:63:78:6b:e8:01:21:58:50:36:8a:23:34:0d:3c:36:44:
         83:d9:57:d5:a6:19:a7:e0:57:3c:77:d7:f8:7e:c1:ce:77:de:
         cf:b4:cd:25:b4:f6:bf:4c:a4:5b:28:26:6b:7a:f9:a8:95:e0:
         42:4e:69:de:58:b8:47:b5:81:fa:e2:6e:95:66:e6:c8:51:e6:
         8d:cc:bc:78:f3:1f:cc:ae:c6:d5:e2:14:48:7e:91:7d:72:c7:
         66:38:ea:07:de:38:ef:ae:56:8b:2f:c2:a8:28:29:44:e4:e9:
         e9:d0:82:a5:a0:31:a3:26:0e:4c:b5:96:c8:86:e3:b8:4e:78:
         fc:18:ef:c6:17:98:ff:95:fa:5b:92:41:5e:21:7f:0f:45:fe:
         96:ea:2d:50:2c:82:e5:a7:c3:4c:bb:06:c9:0b:16:d7:a3:da:
         53:ce:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:12:09 2025 by rpki-client