Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          j1kBRJktZjrowcEWacBhVic5eWuZYUi31HUHwGzMpdY=
Subject key identifier:   3F:A1:A1:AC:43:43:5F:0C:ED:FC:2D:96:18:53:BB:0E:48:7C:68:56
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       35F369980C99AC647FCA92E4CCD688A06C9A75D6
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:30 +0000
ROA not before:           Tue 29 Apr 2025 17:40:30 +0000
ROA not after:            Tue 28 Apr 2026 17:45:30 +0000
asID:                     267027
IP address blocks:        45.227.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 21:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f3:69:98:0c:99:ac:64:7f:ca:92:e4:cc:d6:88:a0:6c:9a:75:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:30 2025 GMT
            Not After : Apr 28 17:45:30 2026 GMT
        Subject: CN=3FA1A1AC43435F0CEDFC2D961853BB0E487C6856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:9f:36:ff:43:7d:63:ae:4d:b9:e1:b9:74:
                    bb:9a:78:92:df:65:90:79:8b:25:51:6d:ea:97:05:
                    8c:80:92:f6:51:5e:4d:8b:51:fe:9e:53:73:d3:03:
                    d2:88:31:72:33:cb:72:fa:c5:49:db:37:10:8a:c2:
                    95:87:28:fb:33:be:f2:23:fd:51:c8:c4:e1:1f:95:
                    65:b2:1b:70:a7:3a:bc:a5:8f:00:89:71:2a:04:8b:
                    89:ee:11:6e:cb:d6:5e:e9:32:e4:c6:b4:ff:91:45:
                    e5:30:38:8b:3f:7a:a6:ea:5d:20:e4:22:8e:67:3e:
                    5d:97:36:a5:b9:2b:94:a2:90:5b:b9:01:70:1d:3f:
                    92:1d:6a:3c:9a:95:cf:fd:06:8c:05:94:7c:85:5e:
                    39:b0:b2:e0:a6:49:a2:08:d0:a0:7a:f6:2c:e5:5e:
                    68:9c:46:e6:64:60:de:28:53:9a:19:af:1e:83:ae:
                    35:b0:73:4b:53:c1:2d:bf:ef:15:92:9e:72:20:e5:
                    1a:38:25:7e:ac:db:1a:32:41:ab:30:88:28:ab:6a:
                    59:b9:a6:84:34:da:e1:a9:68:c9:cb:f4:15:64:f8:
                    fc:d2:5d:7f:3e:6a:73:74:8b:ab:83:7b:cc:c8:2e:
                    1b:3b:73:c3:a3:1d:3f:9a:b1:e4:f1:88:9b:77:18:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:A1:AC:43:43:5F:0C:ED:FC:2D:96:18:53:BB:0E:48:7C:68:56
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:9d:26:93:32:a0:87:06:63:a0:1a:a1:be:f4:1c:c2:bb:
         46:58:0b:87:8d:53:97:5c:3b:20:25:4f:f9:4c:84:02:11:9e:
         1b:f1:c7:bc:81:94:ac:b0:04:df:e9:31:99:cb:2e:fd:59:23:
         25:9b:ea:fa:f2:16:6a:bf:30:12:52:42:bd:7c:18:ff:d2:c2:
         80:4d:fc:d6:32:49:c2:7c:a2:0f:08:b4:43:74:58:e4:3d:5d:
         20:cf:97:07:69:ba:1c:c6:b6:bd:45:4d:e2:c8:a9:a6:e8:f5:
         e3:81:9c:d5:1d:77:69:4d:7c:1a:f7:5d:0f:56:32:8e:6d:61:
         a5:42:2c:3c:86:13:86:b8:3d:99:45:51:f4:56:8e:e6:65:3b:
         02:d6:43:a6:35:38:66:72:c1:b7:68:16:33:3c:64:8f:7d:a4:
         11:30:a0:a1:28:44:8b:83:b2:8f:18:40:0a:a4:1f:82:83:95:
         19:d3:2b:8f:37:2a:e3:37:76:44:6e:0c:11:11:04:f0:b9:01:
         3f:74:3b:7d:b2:e4:59:d1:38:ac:58:13:4d:32:c2:45:54:aa:
         c6:db:70:a4:09:07:e2:7c:5c:16:0d:36:27:1b:9a:f6:2a:6d:
         20:20:eb:c4:d1:87:3b:8b:b3:08:5f:f3:9a:8a:e7:6d:8f:17:
         ed:1a:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:54:59 2025 by rpki-client