Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/34352e3137372e3232382e302f32342d3234203d3e20323639303732.roa
File:                     34352e3137372e3232382e302f32342d3234203d3e20323639303732.roa (raw, json)
Hash identifier:          3tMMoSw40OQWYH4IZnfCt3HyRcKLF57hzw5SGwQvzYc=
Subject key identifier:   34:3A:25:B6:C8:C4:16:3A:E5:B5:9C:E3:05:7F:C0:E4:6D:E1:2E:72
Certificate issuer:       /CN=E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39
Certificate serial:       791262B8BFCF24A1B7AB5F16FB1BF0F6A56C656A
Authority key identifier: E5:18:3E:CE:1A:CE:EC:A7:D4:FC:DB:3F:D9:0C:D0:FE:4B:6B:EB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/34352e3137372e3232382e302f32342d3234203d3e20323639303732.roa
Signing time:             Mon 05 May 2025 03:42:03 +0000
ROA not before:           Mon 05 May 2025 03:37:03 +0000
ROA not after:            Mon 04 May 2026 03:42:03 +0000
asID:                     269072
IP address blocks:        45.177.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.crl
                          rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:62:b8:bf:cf:24:a1:b7:ab:5f:16:fb:1b:f0:f6:a5:6c:65:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39
        Validity
            Not Before: May  5 03:37:03 2025 GMT
            Not After : May  4 03:42:03 2026 GMT
        Subject: CN=343A25B6C8C4163AE5B59CE3057FC0E46DE12E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:6e:99:32:23:c0:3e:70:f0:f4:17:59:34:
                    8e:93:27:59:94:45:cd:cf:6b:2b:f7:2b:29:b6:a4:
                    63:9c:ff:40:b8:63:df:d4:59:03:98:60:07:e9:08:
                    9d:a8:00:65:1a:c6:1f:94:04:71:d8:fb:1b:03:c3:
                    b9:f4:50:0f:5f:b6:cb:39:dc:63:1c:98:8b:49:bc:
                    32:07:8a:de:e8:2a:7b:79:38:f7:eb:79:ba:8b:31:
                    14:49:ad:7f:5a:95:a1:23:c7:75:e4:30:1c:d3:00:
                    9b:79:63:bf:99:b4:84:74:da:19:ee:c1:53:9e:91:
                    01:64:f5:26:45:74:d9:89:56:a1:2a:8a:9f:66:d6:
                    fb:89:5f:d4:c3:02:ec:5f:35:fb:24:ca:32:18:4a:
                    b0:19:84:e7:bb:ff:c6:14:9f:75:63:c6:ce:cd:3e:
                    e4:66:87:c9:14:a4:1f:2d:73:49:81:69:7d:a7:b0:
                    47:81:ed:2c:9d:31:bc:3c:1b:3a:57:af:27:7f:e6:
                    87:4b:2c:ec:8a:b6:c8:5c:4c:01:19:90:ba:fc:53:
                    73:44:18:2e:02:0f:1f:db:68:94:24:76:bf:70:68:
                    e2:95:12:0d:dc:56:30:8f:73:7f:5d:9c:65:d8:dd:
                    1d:24:9a:b8:27:dc:71:6d:68:85:3e:5d:1f:8e:2c:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:25:B6:C8:C4:16:3A:E5:B5:9C:E3:05:7F:C0:E4:6D:E1:2E:72
            X509v3 Authority Key Identifier:
                keyid:E5:18:3E:CE:1A:CE:EC:A7:D4:FC:DB:3F:D9:0C:D0:FE:4B:6B:EB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5183ECE1ACEECA7D4FCDB3FD90CD0FE4B6BEB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcoSW4kL7xcm77jJAg7AVjQUfX6bWkteNvkV7KHQK5yz/0/34352e3137372e3232382e302f32342d3234203d3e20323639303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:24:3c:5e:33:37:de:e8:93:e6:4f:16:e6:32:c8:6f:ac:
         55:64:af:70:e5:0c:55:8f:0f:68:a2:09:e0:3f:9b:7c:a4:17:
         fd:ed:91:c8:3a:46:73:4f:74:0e:d2:0f:4f:1b:09:ae:84:90:
         b1:cf:f4:73:9c:cf:08:75:ce:82:fc:24:bf:50:b4:e9:88:52:
         99:e5:23:9f:63:4d:a3:8c:81:e7:3b:a1:6b:6f:12:27:ca:c5:
         bf:4c:6e:a8:2e:37:c0:5a:3f:81:fa:bb:96:de:72:6b:b8:d6:
         5a:b1:7a:33:45:bb:2f:99:7f:83:e1:97:8e:b5:51:1c:94:9e:
         ff:3a:14:74:7a:88:50:c9:1c:d4:3c:18:19:ab:47:40:86:38:
         bc:88:73:29:69:86:0b:84:da:ed:4a:80:9b:d0:6c:36:68:ad:
         c2:58:b7:ca:7a:32:28:f5:e6:a4:18:94:98:bf:bc:5a:93:a6:
         24:f0:06:90:23:43:67:b9:6e:75:28:5b:62:9d:7f:27:8f:87:
         d7:03:f6:22:9d:e0:b5:a8:8a:4d:6a:66:82:ee:b8:4d:08:2f:
         56:68:ce:e5:db:15:7e:77:94:98:c7:3e:0a:f6:da:9d:cb:5a:
         ac:6a:21:32:34:00:61:5a:78:1c:d8:37:46:a0:b4:c2:3e:2e:
         78:2d:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:23 2025 by rpki-client