Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3234203d3e20323732363434.roa
File:                     34352e3137312e3132372e302f32342d3234203d3e20323732363434.roa (raw, json)
Hash identifier:          QqAcE3PelMNniP8tyvjuhBQLFfD8DdTdCgtb7vZl8f8=
Subject key identifier:   40:4A:BC:24:BB:B8:7B:2C:95:75:DB:F4:AC:BE:D5:B8:CA:2D:E6:66
Certificate issuer:       /CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
Certificate serial:       6FC8D62B53981F73A0F529D39234FAC6AB026784
Authority key identifier: C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3234203d3e20323732363434.roa
Signing time:             Wed 30 Apr 2025 19:03:54 +0000
ROA not before:           Wed 30 Apr 2025 18:58:54 +0000
ROA not after:            Wed 29 Apr 2026 19:03:54 +0000
asID:                     272644
IP address blocks:        45.171.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 01:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:d6:2b:53:98:1f:73:a0:f5:29:d3:92:34:fa:c6:ab:02:67:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A6466D9315F022152B2A75EF0E4E3680F9593C
        Validity
            Not Before: Apr 30 18:58:54 2025 GMT
            Not After : Apr 29 19:03:54 2026 GMT
        Subject: CN=404ABC24BBB87B2C9575DBF4ACBED5B8CA2DE666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:e6:3d:3c:9a:24:0e:3f:a4:f1:8b:8d:58:
                    11:81:ee:f3:8e:cc:44:57:41:3c:c0:d2:60:54:42:
                    ac:c3:17:ac:c6:88:e0:56:69:80:87:a2:24:8b:bf:
                    aa:21:7c:5b:49:ac:d5:c7:96:06:0c:8d:08:43:bd:
                    b8:2b:e4:b5:a8:85:46:63:9e:cf:6d:9f:e0:5c:03:
                    dd:e5:20:e6:cc:dc:b9:26:e7:ad:a2:2f:97:d4:ae:
                    03:a0:f4:d3:04:5b:52:12:88:05:eb:ae:4e:83:51:
                    f2:80:1a:74:1c:a2:88:b4:76:1b:f8:49:c3:09:eb:
                    ea:c3:86:5c:55:38:b5:fa:48:3d:8d:9d:09:17:4a:
                    cd:b8:56:63:fd:1b:1b:52:9c:92:27:a9:57:9b:b9:
                    10:6e:87:5e:75:f1:37:d0:19:25:3a:6e:62:79:62:
                    b1:8b:85:eb:a9:2f:a2:61:a8:77:ed:76:8d:93:07:
                    12:07:75:1e:c3:92:7b:e5:6d:a1:ff:4c:0a:2d:c7:
                    25:76:bc:e1:b9:7b:b0:25:e5:ac:83:fa:8f:ad:78:
                    76:09:59:b6:e7:8e:43:14:c5:14:0e:41:a6:de:8e:
                    48:7f:ea:43:a2:92:a0:29:8b:1a:e2:c3:59:d1:2f:
                    0c:ab:1b:b3:d4:fa:26:7d:eb:1b:85:bf:10:dd:cf:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:BC:24:BB:B8:7B:2C:95:75:DB:F4:AC:BE:D5:B8:CA:2D:E6:66
            X509v3 Authority Key Identifier:
                keyid:C4:A6:46:6D:93:15:F0:22:15:2B:2A:75:EF:0E:4E:36:80:F9:59:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C4A6466D9315F022152B2A75EF0E4E3680F9593C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A6466D9315F022152B2A75EF0E4E3680F9593C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132372e302f32342d3234203d3e20323732363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:74:04:ce:69:b9:a1:a0:1e:33:78:2a:a7:07:89:d2:3b:
         25:8f:24:a3:ec:c5:be:7e:0e:ca:ba:8e:6f:13:a9:52:e9:b8:
         1c:e1:aa:7a:22:70:a2:62:9c:d5:9e:5d:fa:8e:04:90:08:9c:
         9b:1a:8e:25:87:3a:fa:fc:39:af:38:f6:18:e7:b2:16:21:3b:
         c6:f3:a2:7e:77:98:00:0e:9b:82:8b:8c:3a:27:d6:14:74:ef:
         31:cd:be:74:c1:c4:2d:ff:a6:f0:86:f6:ef:37:39:2d:a9:83:
         e6:cc:11:31:8a:ef:ac:4d:00:72:6a:2a:92:08:f8:4f:05:8f:
         e5:f1:c5:72:42:c0:ab:71:aa:de:d0:6d:61:50:59:bf:a3:98:
         a2:6a:a9:2c:1b:9f:35:f8:f3:ca:66:53:ab:65:98:cd:ac:2f:
         e6:ba:16:9f:0d:23:06:7e:ba:d6:f8:9f:fe:9a:91:db:8a:bb:
         b8:9e:a7:59:a0:fc:97:50:4e:ef:ee:87:cc:cb:6e:50:93:88:
         d4:bc:a3:97:7a:c0:5f:7a:81:f0:2b:84:f5:3e:c4:aa:11:d9:
         e9:b4:d3:58:a4:37:f3:3e:28:c9:2d:b9:25:f8:3f:9c:49:be:
         42:98:c9:31:3f:90:71:ea:a7:ee:c1:1a:7e:ae:32:57:00:e0:
         59:d3:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:00:17 2025 by rpki-client