Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa
File:                     34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (raw, json)
Hash identifier:          6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=
Subject key identifier:   6D:ED:8B:C3:18:8D:94:1E:7A:E7:3F:BD:5D:4E:14:DA:D5:BA:59:CB
Certificate issuer:       /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
Certificate serial:       0163AF45127A93140509B124117E7FCE5933EF13
Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     268928
IP address blocks:        45.176.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl
                          rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:af:45:12:7a:93:14:05:09:b1:24:11:7e:7f:ce:59:33:ef:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=6DED8BC3188D941E7AE73FBD5D4E14DAD5BA59CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:0b:7d:8e:1a:5a:ad:55:51:fd:a0:cc:ed:
                    a1:c1:d2:50:55:b5:fe:75:ec:94:70:44:5e:6b:98:
                    8b:66:0e:6d:19:dc:5a:87:ce:2d:67:56:6c:d8:7a:
                    d1:61:44:f9:a5:59:85:44:46:24:0e:7e:e1:f3:a2:
                    fa:7a:f1:0e:1b:aa:e1:c5:6a:88:0d:8e:08:98:df:
                    ba:43:00:7a:ac:cb:af:94:63:af:4b:5b:bd:68:e6:
                    1a:fc:5d:72:fd:f6:c1:10:c0:18:8c:3d:4d:da:a8:
                    d1:c0:9d:e4:d9:41:e1:d3:1f:ea:84:5d:3d:63:07:
                    68:75:92:f3:fd:e5:fb:a9:63:13:22:a7:80:28:4f:
                    36:54:87:99:36:1a:51:e9:96:f0:9a:d1:68:c5:c4:
                    67:55:c9:17:0f:0e:f9:fc:22:f4:3d:9e:91:69:c2:
                    21:96:b1:05:16:54:35:42:fd:4e:e1:a2:97:2c:b8:
                    fc:93:51:3f:cc:23:c0:90:05:fc:f7:bd:41:9b:be:
                    a2:6b:7e:5b:b2:af:a5:13:8d:f3:eb:47:ee:c4:43:
                    67:1a:97:a0:f2:b8:46:da:e0:15:95:97:df:81:e0:
                    35:c0:2d:5c:12:53:cb:de:a2:d0:de:4d:71:46:98:
                    a2:da:1d:e4:04:ee:4f:a7:20:b7:9d:59:38:77:0d:
                    77:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:ED:8B:C3:18:8D:94:1E:7A:E7:3F:BD:5D:4E:14:DA:D5:BA:59:CB
            X509v3 Authority Key Identifier:
                keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/34352e3137362e31322e302f32322d3234203d3e20323638393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:8b:7d:57:ff:ae:cd:bb:64:74:19:94:21:e6:16:e7:59:34:
         32:53:b5:e0:b3:f2:60:96:56:49:51:2a:4a:dd:97:31:82:47:
         a9:d2:a7:1a:ac:e4:8d:c7:a2:d8:31:5d:c2:c5:fd:f8:d4:5a:
         f1:c8:3b:0c:64:3c:be:0e:15:fa:d3:ae:23:12:fd:e3:a3:e6:
         63:eb:18:b6:7d:cf:a7:a2:09:63:fe:54:e0:46:69:b3:8d:8c:
         f2:57:58:75:e0:0f:19:28:1f:e5:a3:70:96:19:68:1a:86:32:
         7f:e3:08:6e:50:6b:71:ea:35:c5:04:3b:c4:0b:3b:e8:aa:79:
         5f:ba:6a:b8:a7:5d:cd:b3:4d:76:72:36:bd:f3:aa:7f:9a:f2:
         20:3f:60:93:91:cd:83:b9:ca:7f:f8:ae:bb:fb:b1:6b:ee:e9:
         27:9e:e3:80:aa:e8:1b:d7:c7:da:c7:82:d9:93:36:c6:27:f0:
         fc:0d:89:04:9a:f2:f9:b2:98:b2:f2:bb:56:bd:da:18:fd:6f:
         00:d8:23:cb:a9:58:5c:87:f5:b3:26:c1:dd:2d:f4:22:43:62:
         36:ad:0d:ca:d3:47:93:c3:03:02:27:dc:2c:31:1c:e2:ad:27:
         f7:ea:e5:f8:db:dc:99:18:a4:ea:3b:d5:74:86:a5:7d:68:7d:
         d1:86:8e:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAWOvRRJ6kxQFCbEkEX5/zlkz7xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx
MzUwREUwODAeFw0yNTAzMDYwMzU2MDVaFw0yNjAzMDUwNDAxMDVaMDMxMTAvBgNV
BAMTKDZERUQ4QkMzMTg4RDk0MUU3QUU3M0ZCRDVENEUxNERBRDVCQTU5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJgt9jhparVVR/aDM7aHB0lBV
tf517JRwRF5rmItmDm0Z3FqHzi1nVmzYetFhRPmlWYVERiQOfuHzovp68Q4bquHF
aogNjgiY37pDAHqsy6+UY69LW71o5hr8XXL99sEQwBiMPU3aqNHAneTZQeHTH+qE
XT1jB2h1kvP95fupYxMip4AoTzZUh5k2GlHplvCa0WjFxGdVyRcPDvn8IvQ9npFp
wiGWsQUWVDVC/U7hopcsuPyTUT/MI8CQBfz3vUGbvqJrfluyr6UTjfPrR+7EQ2ca
l6DyuEba4BWVl9+B4DXALVwSU8veotDeTXFGmKLaHeQE7k+nILedWTh3DXfZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbe2LwxiNlB565z+9XU4U2tW6WcswHwYDVR0j
BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6
UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE
MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RLclRLalNBTHg4djdGcG9GM3ZXYTVYSGdrd003YlVGSnplcXJRanJyelJrLzEv
MzQzNTJlMzEzNzM2MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzkzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbAMMA0GCSqGSIb3DQEBCwUAA4IBAQCji31X/67N
u2R0GZQh5hbnWTQyU7Xgs/JgllZJUSpK3Zcxgkep0qcarOSNx6LYMV3Cxf341Frx
yDsMZDy+DhX6064jEv3jo+Zj6xi2fc+noglj/lTgRmmzjYzyV1h14A8ZKB/lo3CW
GWgahjJ/4whuUGtx6jXFBDvECzvoqnlfumq4p13Ns012cja986p/mvIgP2CTkc2D
ucp/+K67+7Fr7uknnuOAqugb18fax4LZkzbGJ/D8DYkEmvL5spiy8rtWvdoY/W8A
2CPLqVhch/WzJsHdLfQiQ2I2rQ3K00eTwwMCJ9wsMRzirSf36uX429yZGKTqO9V0
hqV9aH3Rho5f
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:13 2025 by rpki-client