Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
File:                     34352e3232372e32382e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier:          LA0+vJ0ysM1SeJ70vJos44GJMJLSIPdxZUeOzuV24a4=
Subject key identifier:   8F:02:CD:31:69:03:79:27:40:0C:37:0A:AA:7A:AE:85:61:6D:A3:1A
Certificate issuer:       /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial:       7EB21223D7850CD7DD01A048C306206304EDBA3D
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
Signing time:             Fri 10 Oct 2025 22:03:00 +0000
ROA not before:           Fri 10 Oct 2025 21:58:00 +0000
ROA not after:            Fri 09 Oct 2026 22:03:00 +0000
asID:                     267047
IP address blocks:        45.227.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b2:12:23:d7:85:0c:d7:dd:01:a0:48:c3:06:20:63:04:ed:ba:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
        Validity
            Not Before: Oct 10 21:58:00 2025 GMT
            Not After : Oct  9 22:03:00 2026 GMT
        Subject: CN=8F02CD3169037927400C370AAA7AAE85616DA31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:9d:57:a8:c6:2b:38:e8:22:95:2a:c9:23:
                    3d:df:9c:82:07:95:60:f0:ac:fa:e5:31:45:6a:6e:
                    c5:a4:ce:33:f6:ea:b1:c4:87:c8:88:58:83:36:78:
                    6f:51:07:67:dd:77:b6:ed:f4:b4:61:10:e3:bb:4e:
                    ee:e7:ad:a1:13:cc:61:df:0d:7d:9a:9e:fe:14:cd:
                    67:f7:27:cf:57:1f:2d:69:5b:4b:dd:19:b1:4f:2b:
                    1f:c3:13:35:07:f7:d7:b3:f2:d7:c1:25:60:f1:14:
                    94:d2:9e:65:61:a5:6f:3c:b9:b7:fa:a6:09:5d:80:
                    00:29:0c:27:28:9e:a8:4f:d8:30:18:98:9d:17:13:
                    78:12:86:d1:3d:c1:36:a9:60:e5:75:cc:ad:df:5d:
                    7e:78:69:f9:f3:42:41:5c:a0:54:d6:ba:9e:20:eb:
                    a5:89:d7:68:b6:99:92:ac:f6:19:68:fc:fc:56:c2:
                    93:c0:58:02:a0:3f:0a:39:60:32:2a:06:51:88:8c:
                    63:5f:74:40:f5:a0:da:7c:31:72:ae:f4:63:44:b0:
                    0e:8e:1b:be:68:a2:3f:e4:b7:a8:ab:9d:cb:b3:2d:
                    82:5d:c6:64:76:f2:5e:8a:7c:3d:1d:d1:3c:52:c9:
                    2c:98:ba:b9:f1:bd:01:b3:0f:b6:bf:7f:a3:bf:be:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:CD:31:69:03:79:27:40:0C:37:0A:AA:7A:AE:85:61:6D:A3:1A
            X509v3 Authority Key Identifier:
                keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:3c:9a:a3:19:91:8d:cb:e8:eb:73:9e:db:8c:7e:6e:df:
         56:27:be:c2:20:f2:31:d8:cd:9a:b0:f4:90:f2:3b:00:69:83:
         93:95:41:df:bc:09:83:5d:42:b0:40:84:bc:c9:7f:f9:1c:22:
         51:d0:75:8f:5b:cc:06:7d:a3:f5:6a:f0:37:9c:b0:ea:bf:0b:
         51:32:32:0b:dc:a9:9f:80:20:27:7d:99:7c:3e:5a:d4:c3:bf:
         a9:d1:a0:ee:bf:a6:0c:20:3f:a6:5b:4d:0b:3f:be:41:15:2e:
         74:8a:f3:30:e1:79:00:3b:e6:3a:ad:6a:ab:01:ab:d3:29:ac:
         b3:49:ca:50:7c:3b:f7:ee:46:e4:2d:7e:9c:72:3e:23:7e:d7:
         b1:3c:38:e6:2c:30:86:2c:98:3c:55:ba:e6:91:4a:ab:63:82:
         af:47:83:ed:94:a3:57:a8:ea:25:1c:8a:5e:a4:4e:2a:58:51:
         87:ea:60:6b:f7:91:f3:2e:cb:31:e8:89:24:b3:ab:82:a1:85:
         ad:7d:ec:aa:ff:55:5f:c9:2a:fc:b5:cf:cf:51:fd:f3:b9:cb:
         a4:89:6f:34:d5:1c:d4:ea:17:b4:ea:1f:fe:d5:f9:83:b5:11:
         7b:14:96:7f:cb:77:4a:f4:3e:23:0b:25:cc:44:73:1b:85:2b:
         0f:77:9a:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfrISI9eFDNfdAaBIwwYgYwTtuj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCN0NDMTgyMjg2NTA2QTYwQzM1ODJGODgwNjU3QTc4
MEFFMUI3NzAeFw0yNTEwMTAyMTU4MDBaFw0yNjEwMDkyMjAzMDBaMDMxMTAvBgNV
BAMTKDhGMDJDRDMxNjkwMzc5Mjc0MDBDMzcwQUFBN0FBRTg1NjE2REEzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnVZ1XqMYrOOgilSrJIz3fnIIH
lWDwrPrlMUVqbsWkzjP26rHEh8iIWIM2eG9RB2fdd7bt9LRhEOO7Tu7nraETzGHf
DX2anv4UzWf3J89XHy1pW0vdGbFPKx/DEzUH99ez8tfBJWDxFJTSnmVhpW88ubf6
pgldgAApDCconqhP2DAYmJ0XE3gShtE9wTapYOV1zK3fXX54afnzQkFcoFTWup4g
66WJ12i2mZKs9hlo/PxWwpPAWAKgPwo5YDIqBlGIjGNfdED1oNp8MXKu9GNEsA6O
G75ooj/kt6irncuzLYJdxmR28l6KfD0d0TxSySyYurnxvQGzD7a/f6O/viedAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjwLNMWkDeSdADDcKqnquhWFtoxowHwYDVR0j
BBgwFoAUsLfMGCKGUGpgw1gviAZXp4CuG3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhmUngyOGYyVnpkM0dZQkVpMUd5dUVoWTZrU1A5OEdKWmJockhlWnVU
Q2EvMC9CMEI3Q0MxODIyODY1MDZBNjBDMzU4MkY4ODA2NTdBNzgwQUUxQjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQjdDQzE4MjI4NjUwNkE2
MEMzNTgyRjg4MDY1N0E3ODBBRTFCNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYZlJ4MjhmMlZ6ZDNHWUJFaTFHeXVFaFk2a1NQOThHSlpiaHJIZVp1VENhLzAv
MzQzNTJlMzIzMjM3MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeMcMA0GCSqGSIb3DQEBCwUAA4IBAQBqCTyaoxmR
jcvo63Oe24x+bt9WJ77CIPIx2M2asPSQ8jsAaYOTlUHfvAmDXUKwQIS8yX/5HCJR
0HWPW8wGfaP1avA3nLDqvwtRMjIL3KmfgCAnfZl8PlrUw7+p0aDuv6YMID+mW00L
P75BFS50ivMw4XkAO+Y6rWqrAavTKayzScpQfDv37kbkLX6ccj4jftexPDjmLDCG
LJg8VbrmkUqrY4KvR4PtlKNXqOolHIpepE4qWFGH6mBr95HzLssx6Ikks6uCoYWt
feyq/1VfySr8tc/PUf3zucukiW801RzU6he06h/+1fmDtRF7FJZ/y3dK9D4jCyXM
RHMbhSsPd5rx
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:26 2025 by rpki-client