Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          T4CBsWC+y8M0fmCnu4opAJKfDBXGXllxSxtMQHScAMY=
Subject key identifier:   98:F7:EE:88:C5:91:5A:E1:58:99:A2:8F:9B:60:30:33:9C:24:F6:30
Certificate issuer:       /CN=C37DFCAC064562FA9CAB960E045B7E0BCF2F2872
Certificate serial:       2D8B08DF844169004A0C93A6D48766AA75736981
Authority key identifier: C3:7D:FC:AC:06:45:62:FA:9C:AB:96:0E:04:5B:7E:0B:CF:2F:28:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
Signing time:             Fri 01 Aug 2025 19:12:03 +0000
ROA not before:           Fri 01 Aug 2025 19:07:03 +0000
ROA not after:            Fri 31 Jul 2026 19:12:03 +0000
asID:                     267079
IP address blocks:        45.227.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 07:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8b:08:df:84:41:69:00:4a:0c:93:a6:d4:87:66:aa:75:73:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37DFCAC064562FA9CAB960E045B7E0BCF2F2872
        Validity
            Not Before: Aug  1 19:07:03 2025 GMT
            Not After : Jul 31 19:12:03 2026 GMT
        Subject: CN=98F7EE88C5915AE15899A28F9B6030339C24F630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:20:30:70:01:cb:86:d0:b1:bb:2d:b6:0d:
                    50:14:d3:0b:3c:37:85:1d:cb:4b:51:36:cf:ea:f8:
                    ea:d2:a3:e4:6a:bd:e3:e0:c1:dd:35:b2:73:f4:ab:
                    e2:7d:90:12:23:f8:2b:ef:a7:81:af:1a:b1:4d:86:
                    92:18:cc:e2:17:57:29:2d:1e:37:a6:71:6e:d5:3e:
                    d7:e2:d3:9b:00:d5:fa:d1:63:42:3f:9d:9c:0a:ef:
                    4a:c3:4a:28:67:11:15:b9:c5:45:78:c3:43:f9:a5:
                    b7:28:e9:e9:45:17:8b:ca:fc:3d:79:41:04:12:0a:
                    61:6a:f6:9b:a7:0d:dd:70:09:02:6c:92:d6:06:81:
                    3d:b2:a2:de:fa:f2:c8:92:80:79:8a:5b:ef:3f:30:
                    24:ee:79:d4:dd:cf:c2:2d:78:a1:17:a2:d8:23:72:
                    a5:78:2e:73:7f:16:58:d2:a1:e5:18:7e:16:b1:eb:
                    d5:7a:62:f4:7d:db:13:88:1a:2e:9b:f2:8e:d1:d2:
                    f5:33:76:be:b4:15:0b:df:7b:11:1b:7e:26:6b:64:
                    10:c7:31:40:0a:db:7c:3b:7b:e7:83:37:40:79:00:
                    5c:0f:a8:a7:f2:4c:dc:a2:a9:1d:60:56:08:47:6c:
                    5a:5d:d7:2f:7e:1b:ea:85:49:78:6e:30:ac:2a:a2:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F7:EE:88:C5:91:5A:E1:58:99:A2:8F:9B:60:30:33:9C:24:F6:30
            X509v3 Authority Key Identifier:
                keyid:C3:7D:FC:AC:06:45:62:FA:9C:AB:96:0E:04:5B:7E:0B:CF:2F:28:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37DFCAC064562FA9CAB960E045B7E0BCF2F2872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:92:f7:95:2c:f2:a8:78:8d:d0:3f:46:d0:50:b3:da:0e:a2:
         a9:8e:15:ff:7c:bf:e1:ce:74:b1:13:c7:4e:74:1a:0f:69:24:
         60:18:c0:8f:fb:0d:df:44:ab:2b:c7:11:71:ee:9a:67:96:0b:
         ee:1e:4b:06:ac:9a:6d:86:28:c7:d8:ee:b5:c8:b9:f9:91:07:
         bf:18:48:04:b6:0d:fb:40:37:25:ca:3d:49:50:8c:5d:49:66:
         32:75:f9:b8:a1:bc:30:d6:76:5d:e3:25:e2:a3:94:a1:ce:ee:
         8d:2d:58:35:d9:39:6e:36:53:3c:25:bf:d1:d8:43:7a:e1:ec:
         37:56:67:02:9d:0f:05:bc:ea:ee:a3:96:cf:88:fb:85:56:85:
         a1:20:fa:3b:97:e0:53:51:90:11:45:2f:9f:ab:4f:13:c7:8d:
         b9:4b:6c:70:8f:2d:22:1e:79:b1:24:23:02:e9:da:db:f7:de:
         21:d0:e4:92:8c:a0:e3:cb:51:70:56:3c:65:e4:d0:78:4a:45:
         ff:f9:80:e8:23:93:90:1c:87:d9:50:5a:6e:20:41:5f:f8:cc:
         70:fc:0a:ef:d2:01:59:f9:18:bc:61:49:9b:a2:06:2d:02:f5:
         f0:0f:a2:d7:f6:14:0f:73:32:05:eb:90:d8:d4:a1:26:24:80:
         0c:3f:4e:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULYsI34RBaQBKDJOm1IdmqnVzaYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3REZDQUMwNjQ1NjJGQTlDQUI5NjBFMDQ1QjdFMEJD
RjJGMjg3MjAeFw0yNTA4MDExOTA3MDNaFw0yNjA3MzExOTEyMDNaMDMxMTAvBgNV
BAMTKDk4RjdFRTg4QzU5MTVBRTE1ODk5QTI4RjlCNjAzMDMzOUMyNEY2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xyAwcAHLhtCxuy22DVAU0ws8
N4Udy0tRNs/q+OrSo+RqvePgwd01snP0q+J9kBIj+Cvvp4GvGrFNhpIYzOIXVykt
HjemcW7VPtfi05sA1frRY0I/nZwK70rDSihnERW5xUV4w0P5pbco6elFF4vK/D15
QQQSCmFq9punDd1wCQJsktYGgT2yot768siSgHmKW+8/MCTuedTdz8IteKEXotgj
cqV4LnN/FljSoeUYfhax69V6YvR92xOIGi6b8o7R0vUzdr60FQvfexEbfiZrZBDH
MUAK23w7e+eDN0B5AFwPqKfyTNyiqR1gVghHbFpd1y9+G+qFSXhuMKwqokSlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmPfuiMWRWuFYmaKPm2AwM5wk9jAwHwYDVR0j
BBgwFoAUw338rAZFYvqcq5YOBFt+C88vKHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy
QXUvMC9DMzdERkNBQzA2NDU2MkZBOUNBQjk2MEUwNDVCN0UwQkNGMkYyODcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzN0RGQ0FDMDY0NTYyRkE5
Q0FCOTYwRTA0NUI3RTBCQ0YyRjI4NzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ3Y1VaNnljR01aNFhDbzlmM1F5ZHRKaVVHRmpwc3JveGNpdWZXWmZkckF1LzAv
MzQzNTJlMzIzMjM3MmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeMvMA0GCSqGSIb3DQEBCwUAA4IBAQBSkveVLPKo
eI3QP0bQULPaDqKpjhX/fL/hznSxE8dOdBoPaSRgGMCP+w3fRKsrxxFx7ppnlgvu
HksGrJpthijH2O61yLn5kQe/GEgEtg37QDclyj1JUIxdSWYydfm4obww1nZd4yXi
o5Shzu6NLVg12TluNlM8Jb/R2EN64ew3VmcCnQ8FvOruo5bPiPuFVoWhIPo7l+BT
UZARRS+fq08Tx425S2xwjy0iHnmxJCMC6drb994h0OSSjKDjy1FwVjxl5NB4SkX/
+YDoI5OQHIfZUFpuIEFf+Mxw/Arv0gFZ+Ri8YUmbogYtAvXwD6LX9hQPczIF65DY
1KEmJIAMP07h
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:44 2025 by rpki-client