Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          o3kISJ0/aoAoMDJPo4R48K2sjVd8rE2zX6rpSUX9nVQ=
Subject key identifier:   0A:59:00:0C:8C:07:3D:F6:5D:76:B8:DD:96:05:EC:21:C8:78:60:7A
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       023377D2C1781DBCB423675B06F1EF7EB7AD3FFF
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa
Signing time:             Mon 09 Jun 2025 18:25:48 +0000
ROA not before:           Mon 09 Jun 2025 18:20:48 +0000
ROA not after:            Mon 08 Jun 2026 18:25:48 +0000
asID:                     269015
IP address blocks:        45.178.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 02:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:33:77:d2:c1:78:1d:bc:b4:23:67:5b:06:f1:ef:7e:b7:ad:3f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jun  9 18:20:48 2025 GMT
            Not After : Jun  8 18:25:48 2026 GMT
        Subject: CN=0A59000C8C073DF65D76B8DD9605EC21C878607A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:07:9a:9b:bb:ad:5b:00:cc:47:0d:39:e2:
                    ab:b2:2d:14:98:87:35:09:0c:32:c9:99:ef:17:28:
                    5d:20:16:06:b5:92:2d:d5:29:bf:ec:b5:c7:34:26:
                    f4:16:75:84:2c:55:eb:84:27:36:7c:b5:44:de:ee:
                    63:a0:f1:ac:15:97:b6:c5:13:c7:11:ac:ef:55:6a:
                    18:35:8a:56:69:b2:70:4a:1c:e3:38:45:d9:86:17:
                    34:b2:ef:62:64:2d:33:3c:60:1f:e9:62:39:4a:dd:
                    9e:45:6a:d2:c1:59:83:f0:b7:ae:e5:34:c3:37:ac:
                    ba:03:ee:82:8a:0c:39:87:91:be:61:3c:33:9c:67:
                    5e:7b:f9:0f:57:ec:eb:67:8d:4f:51:ff:25:8f:6e:
                    ae:05:32:9d:cf:b9:11:88:01:7b:1e:b6:0c:10:aa:
                    17:21:77:92:fd:3b:c1:7c:b3:0b:4b:6d:40:50:90:
                    a4:b0:94:b9:47:de:16:8a:9e:74:d0:27:ba:ef:f4:
                    d3:e2:88:6d:bf:55:79:a2:b7:13:79:26:cf:f3:fb:
                    54:53:9b:38:4c:20:25:ac:79:fd:7f:7b:3e:16:0d:
                    15:e7:81:23:55:79:d2:ff:0e:f8:e1:65:77:be:fc:
                    18:1d:f7:84:53:66:b6:18:2c:8a:23:fe:da:0c:ec:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:00:0C:8C:07:3D:F6:5D:76:B8:DD:96:05:EC:21:C8:78:60:7A
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c9:b8:fa:5a:91:ed:1a:0c:f9:4c:e6:33:62:fa:0a:38:ab:
         54:db:49:47:8d:16:d7:0b:43:9f:fa:ce:3f:77:28:38:ac:32:
         6b:18:9f:82:bf:0d:24:50:c0:50:3b:8b:18:9d:dc:6a:93:c9:
         7b:b3:08:a8:99:d8:a2:7d:c4:b8:fd:78:53:b5:a9:07:77:02:
         04:08:80:62:f9:31:82:0a:a6:db:d9:3e:81:ff:bb:dd:da:e8:
         cd:a1:8a:97:72:32:e0:52:22:fc:5a:2e:9e:cd:22:0d:fb:34:
         88:94:32:b1:05:de:6b:01:ae:a4:89:c9:55:88:f8:ff:d5:69:
         74:f1:8a:ec:5a:f2:46:5d:d3:5a:d6:3d:39:ec:c9:5a:1e:57:
         b0:a6:6f:cb:c3:be:5d:e1:c6:a4:83:7b:ab:e9:fa:cd:78:dd:
         4d:fb:b8:f5:38:e3:54:be:a9:f5:92:a1:1f:2d:3e:79:41:f8:
         f8:15:3f:58:b3:80:4a:6a:f6:d8:de:97:41:9e:46:66:53:f0:
         bc:94:dc:e9:62:f3:f4:45:93:c2:93:96:ee:46:ff:da:df:91:
         dd:44:f4:17:7d:fa:f4:25:89:39:0e:e3:63:fe:82:02:6f:34:
         3b:82:c4:8a:53:07:ce:3f:dd:ce:8a:2a:ec:90:a0:4d:73:aa:
         28:ee:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:53:21 2025 by rpki-client