Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa
File:                     34352e3232382e38372e302f32342d3234203d3e20323637303637.roa (raw, json)
Hash identifier:          /kEJK+zTkbGbTivrezGI3dHYb9IXh8rbACw4MSUe8pQ=
Subject key identifier:   4B:FC:77:FB:14:AF:D5:40:F8:0D:4E:68:20:1A:51:CF:06:C1:9E:EA
Certificate issuer:       /CN=A15F127A9B708BCCD34894F30740028808430DF2
Certificate serial:       76BEF56F99303BCFA2ECEFD0ED9C78D2B33EA947
Authority key identifier: A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa
Signing time:             Thu 30 Jan 2025 18:35:01 +0000
ROA not before:           Thu 30 Jan 2025 18:30:01 +0000
ROA not after:            Thu 29 Jan 2026 18:35:01 +0000
asID:                     267067
IP address blocks:        45.228.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 14:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:be:f5:6f:99:30:3b:cf:a2:ec:ef:d0:ed:9c:78:d2:b3:3e:a9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A15F127A9B708BCCD34894F30740028808430DF2
        Validity
            Not Before: Jan 30 18:30:01 2025 GMT
            Not After : Jan 29 18:35:01 2026 GMT
        Subject: CN=4BFC77FB14AFD540F80D4E68201A51CF06C19EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:41:94:6e:9f:64:75:32:65:4d:9f:e3:32:
                    0f:b2:b5:f0:57:9c:fe:5a:a3:bd:2e:f0:ee:34:da:
                    f0:c1:61:19:77:a7:c9:74:d5:fc:d2:0f:0c:ce:6f:
                    3e:6a:6b:71:35:88:69:3b:a5:39:b2:46:1d:79:b9:
                    af:12:cb:f5:7f:f2:37:f5:98:e0:12:ef:70:f2:f7:
                    18:92:49:26:9c:69:96:a5:ef:49:0a:e2:41:ae:a1:
                    57:36:b8:1e:6b:66:7e:16:90:c9:45:fd:52:a5:2b:
                    5b:44:c8:b4:f6:85:27:3d:03:4c:f8:cc:15:9b:6b:
                    3b:e5:30:0c:46:3b:10:29:ba:89:1b:3d:74:0b:2d:
                    a7:b3:e7:a6:ca:16:69:d9:ce:8d:f2:6a:34:f0:d9:
                    23:04:d1:7e:c4:c5:20:05:51:f2:ea:8b:cd:79:6c:
                    b4:95:58:42:b0:62:02:b5:b2:72:6e:b3:bc:14:4f:
                    a6:d4:7a:f7:92:76:66:6e:76:bb:50:10:f7:7b:ad:
                    67:df:45:51:68:93:99:ee:c6:d0:ce:19:65:07:6e:
                    8b:0f:41:2e:f7:67:41:fe:dd:43:19:84:40:9b:b7:
                    29:8a:7f:8d:ca:22:85:f9:ee:54:80:58:05:4b:46:
                    23:7c:54:a6:f8:89:4b:dd:1d:4f:52:d3:da:22:97:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FC:77:FB:14:AF:D5:40:F8:0D:4E:68:20:1A:51:CF:06:C1:9E:EA
            X509v3 Authority Key Identifier:
                keyid:A1:5F:12:7A:9B:70:8B:CC:D3:48:94:F3:07:40:02:88:08:43:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/A15F127A9B708BCCD34894F30740028808430DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A15F127A9B708BCCD34894F30740028808430DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38372e302f32342d3234203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a6:f2:c7:c7:06:34:f1:5d:fb:c5:7b:5c:84:75:2f:01:3c:
         9b:6f:fc:9f:3f:68:59:2e:2b:5f:0f:c2:f5:bd:94:81:0b:a6:
         25:98:80:a2:67:3b:4f:af:08:a2:ad:8b:f0:52:d7:37:0b:b8:
         df:d1:26:d8:d4:fd:5b:74:a8:ca:34:65:7e:46:0a:ac:99:0c:
         fd:a6:a5:cc:00:fc:00:40:cb:5e:d9:6c:f0:ad:19:22:10:30:
         c3:7a:5c:16:a8:2e:fb:a5:17:25:b5:99:98:be:36:0b:ff:d3:
         8e:73:6b:41:b9:b1:8d:06:ef:9d:8e:8c:72:08:93:e4:c7:94:
         7a:7a:a8:27:bd:e1:03:5f:07:f7:b1:2b:9e:7d:0d:b3:ad:c0:
         04:63:84:ba:f6:a5:ee:55:58:6f:51:1a:67:2f:d0:c2:80:68:
         67:d5:28:56:99:36:f3:04:48:68:bf:c6:ba:5d:38:3a:95:ca:
         0d:29:46:85:b6:fc:33:8f:ba:d5:7e:33:ad:1b:b1:dd:cf:a0:
         b8:a2:3b:06:55:15:84:9a:e5:d5:fd:d5:26:01:74:83:1a:6c:
         27:11:1e:6d:08:aa:c9:3f:cd:4e:94:ca:e2:ae:4b:0b:0e:91:
         6b:e8:74:94:fb:61:bc:e3:58:b9:20:fe:61:cc:e6:20:8c:fd:
         78:b5:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:42:31 2025 by rpki-client