Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          7kcgBbihYmdtICCX/bVj72C7FcswSqESSqexygxF2LM=
Subject key identifier:   7C:E5:41:25:88:E9:E1:8F:D8:ED:E7:4A:FE:42:10:4E:DC:69:2A:29
Certificate issuer:       /CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
Certificate serial:       244D7ADB23EAC8013AE787BBE9BEBAE97669ED4B
Authority key identifier: 83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
Signing time:             Tue 03 Jun 2025 17:27:19 +0000
ROA not before:           Tue 03 Jun 2025 17:22:19 +0000
ROA not after:            Tue 02 Jun 2026 17:27:19 +0000
asID:                     267035
IP address blocks:        45.227.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:7a:db:23:ea:c8:01:3a:e7:87:bb:e9:be:ba:e9:76:69:ed:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
        Validity
            Not Before: Jun  3 17:22:19 2025 GMT
            Not After : Jun  2 17:27:19 2026 GMT
        Subject: CN=7CE5412588E9E18FD8EDE74AFE42104EDC692A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:95:da:11:6b:1b:10:2f:ee:36:02:18:2c:
                    36:65:20:7d:e3:26:59:97:6a:4e:09:f6:84:6e:b7:
                    0b:ab:5d:35:9a:5f:3d:94:6c:d8:2b:44:03:81:b8:
                    4b:39:37:5c:0f:e9:98:1f:3b:00:90:0a:f2:90:b4:
                    4e:60:51:fd:36:b1:6b:2e:d2:5e:0e:b6:01:22:d6:
                    77:03:da:53:c0:cb:c5:3d:40:75:9e:37:ba:f8:d0:
                    ca:d6:91:fa:67:0c:7e:a4:9c:f8:01:69:8f:a2:67:
                    a5:45:97:75:6b:8e:f9:2c:e9:57:d7:01:3f:95:dd:
                    b0:1a:f2:0f:2f:01:b0:b4:aa:3f:a9:58:10:fc:5d:
                    0b:b7:86:e0:97:8b:a5:13:37:de:03:1d:40:0c:a1:
                    c1:ff:67:20:4f:e9:61:49:6d:57:4e:5d:04:74:9b:
                    8f:a0:7d:8a:39:ef:ea:08:3b:3c:8e:b0:4e:c2:d8:
                    53:29:3d:99:9f:6b:40:8d:c6:87:ff:0c:5a:a6:7b:
                    9f:e0:a1:9d:a0:1e:43:ff:6f:94:ce:90:d4:93:e9:
                    83:da:78:87:16:a2:9a:97:3e:ce:68:ea:ae:32:94:
                    11:96:a1:d4:1f:a1:4e:41:ad:27:d2:a8:ab:45:75:
                    e9:d2:c3:82:87:d5:19:cf:81:2b:5e:ef:a1:7f:79:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E5:41:25:88:E9:E1:8F:D8:ED:E7:4A:FE:42:10:4E:DC:69:2A:29
            X509v3 Authority Key Identifier:
                keyid:83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:b3:f2:2a:c0:5e:66:ee:0f:ad:7d:1b:6c:27:6f:c8:8a:
         ba:32:ff:99:55:fd:07:ab:95:cf:bc:7d:bd:47:e0:0a:b3:52:
         cc:40:07:ca:fa:a2:c8:fb:62:d0:55:8f:2e:d0:3f:54:a1:3a:
         ba:84:99:8d:a5:8e:a9:23:89:67:88:80:ef:30:5a:89:3d:e1:
         9c:17:47:df:a1:93:66:7c:89:ac:3b:f3:47:25:23:3f:69:15:
         c7:26:36:65:d3:2c:9f:58:0d:ca:6e:26:73:81:fb:c0:72:ae:
         03:1e:8f:58:ff:2f:69:01:da:6a:25:12:c7:1f:62:5c:5b:4e:
         28:df:04:62:1a:dc:94:88:9e:08:42:af:bd:d7:38:7d:dc:ec:
         e5:b9:81:dd:1f:2d:3a:50:3f:fe:c1:31:7b:67:af:39:59:6f:
         a5:b3:eb:8c:53:a6:b8:21:59:ad:cb:d4:45:92:8d:67:5f:f4:
         b8:c2:d4:aa:5a:8e:82:14:bd:a1:f1:08:f4:da:d2:90:e9:46:
         3c:47:49:27:87:03:c2:47:fa:8a:b3:be:ab:10:bd:a8:c2:8c:
         de:b1:4f:e3:a4:5a:e1:12:16:55:78:be:a0:33:ef:2c:e3:04:
         56:ee:60:34:52:30:39:ae:6e:b6:2a:2e:4b:1d:26:6c:8f:3c:
         5b:f0:61:50
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJE162yPqyAE654e76b666XZp7UswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4NDZFMTgyQjU4NjRGNTU1MENBNEFFODA1MkU2RDZF
MUYzQUM2QzAeFw0yNTA2MDMxNzIyMTlaFw0yNjA2MDIxNzI3MTlaMDMxMTAvBgNV
BAMTKDdDRTU0MTI1ODhFOUUxOEZEOEVERTc0QUZFNDIxMDRFREM2OTJBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY95XaEWsbEC/uNgIYLDZlIH3j
JlmXak4J9oRutwurXTWaXz2UbNgrRAOBuEs5N1wP6ZgfOwCQCvKQtE5gUf02sWsu
0l4OtgEi1ncD2lPAy8U9QHWeN7r40MrWkfpnDH6knPgBaY+iZ6VFl3Vrjvks6VfX
AT+V3bAa8g8vAbC0qj+pWBD8XQu3huCXi6UTN94DHUAMocH/ZyBP6WFJbVdOXQR0
m4+gfYo57+oIOzyOsE7C2FMpPZmfa0CNxof/DFqme5/goZ2gHkP/b5TOkNST6YPa
eIcWopqXPs5o6q4ylBGWodQfoU5BrSfSqKtFdenSw4KH1RnPgSte76F/eXIrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfOVBJYjp4Y/Y7edK/kIQTtxpKikwHwYDVR0j
BBgwFoAUg4RuGCtYZPVVDKSugFLm1uHzrGwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvODM4NDZFMTgyQjU4NjRGNTU1MENBNEFFODA1MkU2RDZFMUYzQUM2Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84Mzg0NkUxODJCNTg2NEY1NTUw
Q0E0QUU4MDUyRTZENkUxRjNBQzZDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzQz
NTJlMzIzMjM3MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt45cwDQYJKoZIhvcNAQELBQADggEBAAyis/IqwF5m
7g+tfRtsJ2/Iiroy/5lV/Qerlc+8fb1H4AqzUsxAB8r6osj7YtBVjy7QP1ShOrqE
mY2ljqkjiWeIgO8wWok94ZwXR9+hk2Z8iaw780clIz9pFccmNmXTLJ9YDcpuJnOB
+8ByrgMej1j/L2kB2molEscfYlxbTijfBGIa3JSInghCr73XOH3c7OW5gd0fLTpQ
P/7BMXtnrzlZb6Wz64xTprghWa3L1EWSjWdf9LjC1KpajoIUvaHxCPTa0pDpRjxH
SSeHA8JH+oqzvqsQvajCjN6xT+OkWuESFlV4vqAz7yzjBFbuYDRSMDmubrYqLksd
JmyPPFvwYVA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:35 2025 by rpki-client