Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
File:                     34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (raw, json)
Hash identifier:          m+Z29GI0VRuw/Goy5whR7KiM/8XUS5j+mwLNi+ee9WY=
Subject key identifier:   86:6C:F0:89:A4:4E:E7:D8:98:9D:60:9D:E1:23:82:4F:BB:7B:88:52
Certificate issuer:       /CN=DD870ACEB4B078CC8E6BFF934460C0266465BF88
Certificate serial:       2F61ADD706977A94EC57F0C6145336089FD2ABE3
Authority key identifier: DD:87:0A:CE:B4:B0:78:CC:8E:6B:FF:93:44:60:C0:26:64:65:BF:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD870ACEB4B078CC8E6BFF934460C0266465BF88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
Signing time:             Tue 15 Apr 2025 18:14:52 +0000
ROA not before:           Tue 15 Apr 2025 18:09:52 +0000
ROA not after:            Tue 14 Apr 2026 18:14:52 +0000
asID:                     267048
IP address blocks:        45.228.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DD870ACEB4B078CC8E6BFF934460C0266465BF88.crl
                          rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DD870ACEB4B078CC8E6BFF934460C0266465BF88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD870ACEB4B078CC8E6BFF934460C0266465BF88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 01:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:61:ad:d7:06:97:7a:94:ec:57:f0:c6:14:53:36:08:9f:d2:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD870ACEB4B078CC8E6BFF934460C0266465BF88
        Validity
            Not Before: Apr 15 18:09:52 2025 GMT
            Not After : Apr 14 18:14:52 2026 GMT
        Subject: CN=866CF089A44EE7D8989D609DE123824FBB7B8852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:bb:36:4e:2a:51:f5:69:7f:94:25:ad:5e:
                    f0:82:eb:31:8b:27:d0:f6:cc:45:5e:d2:9b:6e:ca:
                    1f:b0:5b:13:75:66:e7:13:06:b7:97:ea:7f:61:ac:
                    d7:3d:ae:39:9d:82:c8:1a:c4:89:11:41:41:c3:30:
                    86:e1:68:58:97:8d:cc:aa:81:8f:44:03:be:0e:e2:
                    89:60:18:ad:a9:59:9a:59:f7:6d:61:45:b4:c5:26:
                    13:88:49:c2:65:fc:bd:f8:74:43:c5:9b:05:7f:73:
                    05:3a:ce:b4:39:c8:2d:b3:02:e6:75:3f:c7:da:62:
                    2d:6f:74:e5:d9:d9:fb:4f:f9:83:c8:7e:9d:c8:75:
                    ea:29:f3:87:18:b7:7a:21:a7:f7:f1:73:90:fe:02:
                    c5:c0:47:97:6b:38:03:0d:5a:f8:2f:8e:b4:fd:b8:
                    7f:fb:e5:fc:bd:96:dd:27:f2:ba:a3:bb:e8:69:3b:
                    2e:85:46:aa:0a:9f:a9:67:88:35:8b:bf:fa:24:1e:
                    b6:2f:b0:44:44:9f:c2:5f:08:29:ef:85:d2:e4:0f:
                    5c:7d:b9:ea:a0:1e:86:e8:1b:87:2a:d2:a9:1f:9f:
                    fb:41:63:70:73:1a:11:e7:bc:10:ab:7a:c8:bb:6c:
                    31:10:ec:9e:64:34:28:a5:86:1e:4b:24:a5:88:ce:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:F0:89:A4:4E:E7:D8:98:9D:60:9D:E1:23:82:4F:BB:7B:88:52
            X509v3 Authority Key Identifier:
                keyid:DD:87:0A:CE:B4:B0:78:CC:8E:6B:FF:93:44:60:C0:26:64:65:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DD870ACEB4B078CC8E6BFF934460C0266465BF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD870ACEB4B078CC8E6BFF934460C0266465BF88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:a6:3c:7c:ca:32:3d:f4:94:40:7b:a2:e3:fd:49:aa:65:
         73:bd:81:3c:0e:46:56:c4:86:37:5d:9f:c8:87:e9:30:56:37:
         f1:17:55:d7:21:eb:89:a7:94:79:5d:d1:3e:ac:2e:0f:cd:b2:
         32:db:b4:8b:9a:75:7c:a4:d2:86:86:c2:7e:c7:68:37:00:9c:
         36:62:27:cb:c7:3a:b0:b8:99:04:f4:51:61:38:a0:6b:d1:31:
         86:69:b3:62:77:d1:e3:c8:2e:9f:60:2f:db:92:03:28:27:29:
         1b:3f:d3:51:73:e7:a7:c4:7a:28:ca:b3:8e:be:18:25:ae:47:
         5b:ca:30:c0:3c:6e:2a:ab:09:7a:06:55:e6:70:12:54:b4:d3:
         ce:cf:a4:81:51:c2:ca:de:db:cb:b8:32:83:69:a1:1f:38:de:
         74:06:e9:d8:77:04:a4:57:96:23:cf:e3:d7:ce:c6:ec:1c:ce:
         6c:dd:64:e7:ba:2a:16:74:b5:96:cd:78:cf:75:fe:7b:5b:bb:
         d7:36:52:71:31:4d:b1:00:7a:ed:12:c0:4a:a5:6e:55:66:32:
         8d:fb:a7:19:d0:fd:e2:52:c4:2b:8c:f0:a5:25:ed:52:6c:3e:
         4f:3e:e4:06:7f:ff:c4:39:55:d9:9b:e9:55:b5:27:6b:cc:88:
         32:cd:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:09:19 2025 by rpki-client