Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          hUrT7eMejcUb/ZBIv3BSHcLtJ0wBuTelNh0Ow+Htgtg=
Subject key identifier:   55:77:0D:C2:9B:9C:45:CA:87:62:A4:76:E4:45:FD:8F:2B:90:BD:52
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       66279A2B7439BFE7C327205B201D858480AE4080
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:27 +0000
ROA not before:           Tue 29 Apr 2025 17:40:27 +0000
ROA not after:            Tue 28 Apr 2026 17:45:27 +0000
asID:                     267027
IP address blocks:        45.227.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 03:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:9a:2b:74:39:bf:e7:c3:27:20:5b:20:1d:85:84:80:ae:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:27 2025 GMT
            Not After : Apr 28 17:45:27 2026 GMT
        Subject: CN=55770DC29B9C45CA8762A476E445FD8F2B90BD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:da:d8:08:e3:54:01:f5:5d:e4:b5:40:10:
                    31:3a:23:d4:9f:ec:be:d2:31:49:65:ca:82:78:2f:
                    98:ba:2d:91:ff:dd:b7:0a:03:57:f3:fa:f2:e5:59:
                    ab:79:00:28:13:f0:5a:cb:f0:e1:59:23:e9:43:86:
                    d0:38:9b:5a:be:4a:0a:27:e1:69:92:1b:a2:5c:81:
                    78:c5:e6:eb:86:fe:33:f6:c9:ff:25:c3:f8:c8:b1:
                    25:78:30:d5:88:84:86:cf:13:f1:9e:ca:9b:b1:20:
                    9a:c4:a2:c7:9b:40:8f:dc:c7:38:7f:ea:9c:26:6d:
                    ff:2b:76:d2:cd:79:de:e6:6f:24:33:0e:13:32:ac:
                    f8:ea:d8:c0:17:50:7a:86:aa:a8:cf:55:45:f9:cf:
                    a6:dc:ce:2c:07:37:36:3d:56:f4:61:34:0d:e2:df:
                    43:cc:c1:6a:02:eb:5e:f2:ea:cd:26:cc:fe:b8:98:
                    9d:3d:1d:19:91:5f:3a:3a:b2:ca:bd:d6:c9:92:69:
                    63:17:9c:0f:7f:2a:59:f7:16:cb:fb:24:c9:24:85:
                    54:6b:05:c5:d1:f7:3f:31:3b:57:d1:4e:2d:17:80:
                    90:a5:ae:81:0c:e3:65:97:c9:ad:5c:39:35:71:c6:
                    4e:74:0c:94:6f:a5:f4:f9:f2:1e:3f:26:75:d9:59:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:0D:C2:9B:9C:45:CA:87:62:A4:76:E4:45:FD:8F:2B:90:BD:52
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:9c:1c:b5:2e:9a:f2:9a:60:ee:62:86:24:b5:1e:32:f8:
         7e:32:0f:a2:d4:47:00:19:b5:6a:5c:45:ae:67:a7:4f:e8:93:
         d4:ed:7b:c7:38:69:c3:19:a8:ec:19:2d:81:6d:19:0c:23:0f:
         bd:82:78:58:f2:21:c4:11:0f:b3:3f:9a:62:ba:7d:60:c4:f0:
         52:2e:29:5b:7c:13:d9:bf:61:41:c3:fc:b2:0c:93:f9:ee:bf:
         37:92:14:83:3f:14:8f:69:39:39:75:a9:11:b3:23:76:f8:7d:
         82:e2:bc:e6:03:66:d8:32:78:46:09:29:44:58:c7:8d:70:5a:
         85:c7:33:7c:17:b4:16:70:f4:51:9c:8b:9d:eb:f6:68:70:08:
         0d:b4:30:d4:a9:82:b8:62:87:2c:85:d1:62:da:33:1a:44:b6:
         04:37:87:64:39:1c:4c:0c:32:6c:3e:f2:7a:75:50:cf:e8:ca:
         b7:9d:89:92:a2:79:38:79:dc:99:75:61:96:c9:ae:a0:41:bf:
         74:c9:37:4c:2b:8e:ec:99:08:a4:b7:b2:e3:58:75:b4:28:af:
         7b:f7:a3:46:8f:4f:b9:01:f6:53:90:f1:c0:ca:78:2e:69:cf:
         6d:cf:af:ea:07:8e:6d:a1:22:0f:40:6f:dd:25:64:d6:40:cb:
         86:aa:7c:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZieaK3Q5v+fDJyBbIB2FhICuQIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBOUQzNjM1RjNERUNEM0RCMjc3QUM2N0RDNkE2QUJE
MkU4M0RFQjAeFw0yNTA0MjkxNzQwMjdaFw0yNjA0MjgxNzQ1MjdaMDMxMTAvBgNV
BAMTKDU1NzcwREMyOUI5QzQ1Q0E4NzYyQTQ3NkU0NDVGRDhGMkI5MEJENTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDNrYCONUAfVd5LVAEDE6I9Sf
7L7SMUllyoJ4L5i6LZH/3bcKA1fz+vLlWat5ACgT8FrL8OFZI+lDhtA4m1q+Sgon
4WmSG6JcgXjF5uuG/jP2yf8lw/jIsSV4MNWIhIbPE/GeypuxIJrEosebQI/cxzh/
6pwmbf8rdtLNed7mbyQzDhMyrPjq2MAXUHqGqqjPVUX5z6bcziwHNzY9VvRhNA3i
30PMwWoC617y6s0mzP64mJ09HRmRXzo6ssq91smSaWMXnA9/Kln3Fsv7JMkkhVRr
BcXR9z8xO1fRTi0XgJClroEM42WXya1cOTVxxk50DJRvpfT58h4/JnXZWVIXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVXcNwpucRcqHYqR25EX9jyuQvVIwHwYDVR0j
BBgwFoAU1anTY1897NPbJ3rGfcamq9LoPeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC9ENUE5RDM2MzVGM0RFQ0QzREIyNzdBQzY3REM2QTZBQkQyRTgzREVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTlEMzYzNUYzREVDRDNE
QjI3N0FDNjdEQzZBNkFCRDJFODNERUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzQzNTJlMzIzMjM3MmUzMTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt46gwDQYJKoZIhvcNAQELBQADggEBAE8znBy1
LprymmDuYoYktR4y+H4yD6LURwAZtWpcRa5np0/ok9Tte8c4acMZqOwZLYFtGQwj
D72CeFjyIcQRD7M/mmK6fWDE8FIuKVt8E9m/YUHD/LIMk/nuvzeSFIM/FI9pOTl1
qRGzI3b4fYLivOYDZtgyeEYJKURYx41wWoXHM3wXtBZw9FGci53r9mhwCA20MNSp
grhihyyF0WLaMxpEtgQ3h2Q5HEwMMmw+8np1UM/oyrediZKieTh53Jl1YZbJrqBB
v3TJN0wrjuyZCKS3suNYdbQor3v3o0aPT7kB9lOQ8cDKeC5pz23Pr+oHjm2hIg9A
b90lZNZAy4aqfJA=
-----END CERTIFICATE-----
Generated at Mon May 5 07:00:30 2025 by rpki-client