Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32322d3232203d3e20323638383739.roa
File:                     34352e3137352e32342e302f32322d3232203d3e20323638383739.roa (raw, json)
Hash identifier:          u6Owpd2UH2zf00+HgEOmMpgEn9LYoO9cFpXaTqvfqbQ=
Subject key identifier:   B8:FB:0A:CF:98:1E:96:99:9E:AB:79:53:9B:9D:3E:0D:76:3D:DB:1B
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       3D27FAAC95C42F88DE7BD5CAC10A122287134B82
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32322d3232203d3e20323638383739.roa
Signing time:             Thu 06 Mar 2025 07:00:24 +0000
ROA not before:           Thu 06 Mar 2025 06:55:24 +0000
ROA not after:            Thu 05 Mar 2026 07:00:24 +0000
asID:                     268879
IP address blocks:        45.175.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:fa:ac:95:c4:2f:88:de:7b:d5:ca:c1:0a:12:22:87:13:4b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar  6 06:55:24 2025 GMT
            Not After : Mar  5 07:00:24 2026 GMT
        Subject: CN=B8FB0ACF981E96999EAB79539B9D3E0D763DDB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:f4:83:c4:a4:80:83:25:e9:6f:ee:6d:6d:
                    d9:5f:b2:9b:1c:f0:65:e7:fb:5d:b7:d9:56:8d:e3:
                    4e:bc:0d:15:ab:38:66:cd:08:ad:55:9b:30:b4:58:
                    e3:1c:8f:cf:e1:b9:c3:63:07:77:e2:41:d0:a2:de:
                    80:95:56:b3:cf:31:ac:58:2f:10:43:9b:2e:4a:f0:
                    f0:6a:34:b2:85:04:3d:7b:fa:a5:4f:e8:5c:d5:cb:
                    ae:bf:01:d1:0b:73:8f:a6:d6:eb:7b:fc:36:ec:6e:
                    66:8d:91:f6:89:8c:76:34:13:c8:bb:d9:45:e0:8e:
                    87:84:f4:5e:3c:fb:a4:ac:b9:87:89:75:da:dc:9a:
                    47:1e:5b:f3:18:f1:ca:1f:c8:05:15:fd:28:cc:15:
                    c6:4e:67:e8:30:81:1b:74:13:db:59:b0:21:a6:d2:
                    f4:24:1e:56:4d:85:6e:32:3f:0b:73:2e:9b:9e:a6:
                    f6:a8:03:71:5b:73:0d:af:5e:49:f2:6b:17:0d:e8:
                    78:e9:d6:7f:70:c5:8c:dc:af:ac:64:1b:0b:d5:27:
                    b8:0b:59:ab:70:26:28:95:55:2c:66:2a:63:66:5b:
                    6b:d2:27:d8:15:1f:09:59:f1:7c:03:31:4f:3b:f5:
                    d0:cf:1e:d3:62:5b:cd:45:db:4e:cd:d1:b2:f1:0a:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:0A:CF:98:1E:96:99:9E:AB:79:53:9B:9D:3E:0D:76:3D:DB:1B
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32322d3232203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:11:32:84:fe:b3:f9:2e:85:b8:a8:c8:93:41:bf:4a:98:fe:
         ac:50:63:56:8d:ce:32:03:26:59:97:53:ba:d7:a6:85:96:17:
         33:eb:6a:04:ec:06:33:82:d6:44:34:9a:aa:71:d4:a5:8f:d0:
         b4:fe:c8:a3:df:15:54:53:00:36:c8:65:2c:17:f1:e6:c9:f7:
         97:f6:95:e1:cc:fc:d7:49:ec:ec:22:b1:42:4a:5c:42:37:ca:
         c8:ae:3b:2f:9e:30:b8:82:41:83:a4:bf:01:c7:d6:ff:c1:7e:
         fd:ab:a0:7b:66:7c:87:48:42:ca:f5:35:5a:07:a0:7c:2f:29:
         b6:2c:23:33:de:89:c4:d6:a9:3a:89:94:e5:53:00:9c:dd:c0:
         18:ed:80:f6:5a:c1:5a:c9:2a:c4:75:29:9b:d8:da:06:10:e0:
         66:f4:7f:f5:d3:61:c4:fa:ae:75:c9:a4:35:7c:53:bd:57:61:
         b8:8e:71:be:07:47:b2:bb:9e:4b:97:d2:96:71:b9:cd:d8:cc:
         a1:26:73:2e:bd:ab:46:43:ce:a3:3e:a0:72:22:1d:59:a2:97:
         d9:6c:d9:22:da:9b:42:00:be:b4:0c:a8:45:5e:a2:28:99:54:
         3f:2b:20:c0:f0:bf:aa:44:f8:7a:a1:8f:01:33:66:78:20:ee:
         6f:0a:1a:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPSf6rJXEL4jee9XKwQoSIocTS4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNTAzMDYwNjU1MjRaFw0yNjAzMDUwNzAwMjRaMDMxMTAvBgNV
BAMTKEI4RkIwQUNGOTgxRTk2OTk5RUFCNzk1MzlCOUQzRTBENzYzRERCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCULfSDxKSAgyXpb+5tbdlfspsc
8GXn+1232VaN4068DRWrOGbNCK1VmzC0WOMcj8/hucNjB3fiQdCi3oCVVrPPMaxY
LxBDmy5K8PBqNLKFBD17+qVP6FzVy66/AdELc4+m1ut7/DbsbmaNkfaJjHY0E8i7
2UXgjoeE9F48+6SsuYeJddrcmkceW/MY8cofyAUV/SjMFcZOZ+gwgRt0E9tZsCGm
0vQkHlZNhW4yPwtzLpuepvaoA3Fbcw2vXknyaxcN6Hjp1n9wxYzcr6xkGwvVJ7gL
WatwJiiVVSxmKmNmW2vSJ9gVHwlZ8XwDMU879dDPHtNiW81F207N0bLxClYlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuPsKz5gelpmeq3lTm50+DXY92xswHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzQzNTJlMzEzNzM1MmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa8YMA0GCSqGSIb3DQEBCwUAA4IBAQABETKE/rP5
LoW4qMiTQb9KmP6sUGNWjc4yAyZZl1O616aFlhcz62oE7AYzgtZENJqqcdSlj9C0
/sij3xVUUwA2yGUsF/HmyfeX9pXhzPzXSezsIrFCSlxCN8rIrjsvnjC4gkGDpL8B
x9b/wX79q6B7ZnyHSELK9TVaB6B8Lym2LCMz3onE1qk6iZTlUwCc3cAY7YD2WsFa
ySrEdSmb2NoGEOBm9H/102HE+q51yaQ1fFO9V2G4jnG+B0eyu55Ll9KWcbnN2Myh
JnMuvatGQ86jPqByIh1ZopfZbNki2ptCAL60DKhFXqIomVQ/KyDA8L+qRPh6oY8B
M2Z4IO5vChoh
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:20:20 2025 by rpki-client