Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa
File:                     34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa (raw, json)
Hash identifier:          kVEUM0+/jn+r6zanlFczfAds1h+k32VTQiq8B3t1sbo=
Subject key identifier:   7E:8D:E6:57:3C:D5:B8:0A:73:87:F8:98:8C:E2:90:CD:2A:02:24:D9
Certificate issuer:       /CN=848EB2427D617D2F83AC459253A873E550C79E2D
Certificate serial:       6CC3DA0C8BCE66F55C10D8B19AD9B2D8A9F6311C
Authority key identifier: 84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa
Signing time:             Wed 04 Jun 2025 19:18:40 +0000
ROA not before:           Wed 04 Jun 2025 19:13:40 +0000
ROA not after:            Wed 03 Jun 2026 19:18:40 +0000
asID:                     267347
IP address blocks:        45.233.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl
                          rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:da:0c:8b:ce:66:f5:5c:10:d8:b1:9a:d9:b2:d8:a9:f6:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=848EB2427D617D2F83AC459253A873E550C79E2D
        Validity
            Not Before: Jun  4 19:13:40 2025 GMT
            Not After : Jun  3 19:18:40 2026 GMT
        Subject: CN=7E8DE6573CD5B80A7387F8988CE290CD2A0224D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:04:8b:72:2d:a1:70:56:43:d7:2b:06:89:
                    3e:4b:c5:5f:36:58:1d:e9:c9:20:4e:66:7a:7f:27:
                    24:5f:83:d2:f4:81:ec:5a:f9:07:a8:26:bc:16:eb:
                    a1:fe:6d:d4:ff:c7:61:e5:b8:3f:c0:1a:65:90:a6:
                    80:28:44:3c:54:50:de:6c:9c:4c:71:f8:3a:6a:32:
                    9a:0b:cc:6d:34:c6:38:13:36:bf:11:73:75:5f:1d:
                    e5:db:78:2f:0c:d7:97:18:4d:32:59:7b:07:13:9e:
                    21:06:29:58:c2:0b:b8:b3:38:dc:55:00:5d:9a:a7:
                    e2:b7:2b:60:dd:a5:7b:85:02:a7:a5:55:5f:0e:ee:
                    29:23:e0:da:b8:32:48:22:2b:fd:42:61:08:30:2b:
                    3f:7c:3e:fc:e8:24:28:9f:8b:16:9a:68:f3:88:2e:
                    a7:cf:57:c4:dd:09:43:fc:a4:8b:3b:ac:7c:6f:74:
                    43:b2:58:21:e8:26:b1:d2:bb:0e:1c:e1:61:a3:bb:
                    22:30:55:d9:7e:f5:e0:60:93:01:4f:18:1d:52:c3:
                    0c:ab:c8:f9:e5:06:98:72:48:60:18:ab:c1:d3:66:
                    81:3d:96:21:d5:52:17:50:06:3d:ef:f1:3a:78:5b:
                    9b:6d:db:07:dc:29:7a:60:33:3f:61:0b:e0:ab:f3:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:E6:57:3C:D5:B8:0A:73:87:F8:98:8C:E2:90:CD:2A:02:24:D9
            X509v3 Authority Key Identifier:
                keyid:84:8E:B2:42:7D:61:7D:2F:83:AC:45:92:53:A8:73:E5:50:C7:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/848EB2427D617D2F83AC459253A873E550C79E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/848EB2427D617D2F83AC459253A873E550C79E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32322d3234203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:80:f4:17:49:f9:da:77:71:d1:31:ec:49:36:89:51:85:
         2c:a4:48:ba:dc:59:c3:cd:8d:8f:d2:f9:fe:7c:72:63:4c:f9:
         ef:05:20:d7:2a:50:e4:1f:dd:98:82:8b:19:bf:e3:c8:2c:6a:
         2c:7c:59:07:6d:ee:8a:04:7b:c5:2d:8b:53:fe:83:6b:7d:d1:
         3c:96:e1:b2:a4:44:63:73:7d:2e:cc:db:a5:55:fa:06:60:9e:
         c3:6f:cb:ff:5e:42:7c:00:c2:c2:8c:cd:f6:ba:63:7e:42:ee:
         44:bb:b3:b3:82:80:d6:97:43:18:14:52:56:57:e6:82:30:8c:
         60:38:17:4e:88:8d:af:c1:46:21:c3:be:a6:83:10:9c:ee:32:
         cb:00:f9:eb:1f:80:ae:15:99:60:05:9e:1b:82:9a:d3:85:28:
         9b:8e:c4:95:ee:00:66:c3:8b:82:50:7e:8c:be:80:3e:f3:69:
         89:61:4a:22:08:f1:89:a5:3e:86:23:f4:18:ef:ee:4d:a9:8d:
         f5:f6:5e:f2:0c:9b:1e:2c:bf:1d:57:c8:c1:5d:24:47:e8:c1:
         90:69:23:d1:4d:06:36:b9:b7:a3:5c:2d:9b:e4:99:0d:de:c7:
         34:01:ca:a3:ef:ac:e3:62:d1:d5:ff:74:29:77:55:43:f0:4c:
         38:05:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:04:13 2025 by rpki-client