Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
File:                     34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (raw, json)
Hash identifier:          OjXuAtBkVcOvvx4OoAgrp0COCxFiOXAhBYC2rEcQJao=
Subject key identifier:   A5:5C:BD:93:C5:A4:C2:35:AA:F7:E0:A7:DC:58:AB:76:2D:67:9A:79
Certificate issuer:       /CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
Certificate serial:       6EF7C2B2435ECA8705F2D5A88A087C4874340944
Authority key identifier: 08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
Signing time:             Thu 20 Mar 2025 14:02:09 +0000
ROA not before:           Thu 20 Mar 2025 13:57:09 +0000
ROA not after:            Thu 19 Mar 2026 14:02:09 +0000
asID:                     267128
IP address blocks:        45.229.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:c2:b2:43:5e:ca:87:05:f2:d5:a8:8a:08:7c:48:74:34:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
        Validity
            Not Before: Mar 20 13:57:09 2025 GMT
            Not After : Mar 19 14:02:09 2026 GMT
        Subject: CN=A55CBD93C5A4C235AAF7E0A7DC58AB762D679A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:0d:2f:67:e8:41:d8:8d:3f:1d:b9:d2:24:
                    c2:27:df:15:58:d5:91:9d:9e:17:c9:4a:5f:ca:b8:
                    48:2e:69:c3:ba:a7:9f:59:8a:23:f8:e0:cf:eb:fa:
                    f6:6e:57:73:f3:dc:fc:3d:38:7e:e2:5f:9f:06:6b:
                    87:74:e2:09:5f:86:f2:86:a4:d9:97:a9:42:7c:cc:
                    17:1c:1b:14:b8:f7:a4:e6:bc:d8:21:07:93:ef:cb:
                    4e:3a:e3:40:bf:e7:c7:0a:2b:30:a9:ad:06:8a:87:
                    23:b4:58:8e:6e:7f:e5:86:e1:28:d5:5f:f0:93:a4:
                    99:67:4d:bc:fb:34:b9:76:92:8d:ef:a2:3b:b5:2a:
                    b2:d0:b1:31:1f:31:ce:7e:ae:00:84:da:ae:d2:df:
                    d2:4c:c5:b4:e5:b9:f0:ba:9f:bf:23:7c:83:f8:75:
                    00:82:a9:dc:ac:e7:75:b2:0d:75:bf:7e:85:65:87:
                    f3:0e:d1:dd:1d:f5:6d:8f:54:bc:76:46:91:8b:87:
                    80:77:bc:91:30:fd:1d:05:b1:8f:e1:ae:27:94:b6:
                    b9:30:ad:a9:a8:01:b2:22:ba:a3:21:10:6f:e2:45:
                    da:99:8c:ef:b2:c6:72:1d:6a:b7:10:b3:e4:8b:fe:
                    2b:c4:e7:f4:0f:f1:41:20:62:50:05:d4:ae:72:39:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5C:BD:93:C5:A4:C2:35:AA:F7:E0:A7:DC:58:AB:76:2D:67:9A:79
            X509v3 Authority Key Identifier:
                keyid:08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:10:ee:13:b2:5f:9c:78:90:90:f0:d3:fe:9c:ef:24:81:
         72:d7:d1:21:ef:61:29:a2:15:53:2f:4c:3f:b5:2c:12:9f:17:
         d6:50:bb:f7:f3:d1:88:59:3d:67:b2:5c:fd:7a:f0:b8:4e:3f:
         e9:0c:69:62:dd:a2:d7:f5:b9:81:96:6c:dd:f6:2f:30:f7:d6:
         05:e4:4a:0b:0b:35:56:69:44:df:45:bf:df:c8:d9:e4:4a:bd:
         f5:8b:2e:0d:6b:d0:41:7f:a9:27:df:83:a7:19:56:9d:ff:20:
         41:f2:3d:7d:d7:2c:e3:8a:18:68:75:77:fd:69:93:5f:be:cf:
         38:8e:15:fe:52:41:4a:d6:08:3a:70:7c:23:a7:d4:88:6b:52:
         51:65:85:fc:6e:8f:a2:d9:06:e5:cd:5c:d4:cb:d3:ae:44:c4:
         a0:81:3e:66:d5:62:94:c6:96:b1:7a:b0:02:ae:af:79:04:c3:
         6a:9c:58:ea:54:e6:02:8e:2b:cb:c9:de:5b:68:99:68:88:85:
         83:e9:b7:d7:ff:a2:42:0a:46:dc:ac:12:3a:74:35:ce:fc:7a:
         ab:f2:be:3f:55:2d:f8:a5:9f:45:b7:2b:10:b0:b4:55:ce:38:
         11:14:8a:5c:f9:3a:66:e9:75:1a:b7:b1:00:e1:fd:a9:4b:01:
         cd:b7:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:35:35 2025 by rpki-client