Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130302e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          dz4wYoWvivWGmr42fWYg3srRSRiHhSP/aqGS9fqotnE=
Subject key identifier:   2D:26:03:04:28:F9:C4:B4:3E:9C:4B:48:6B:12:0B:8E:8A:DC:C8:A5
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       63A3A196780A099F5FC50F4D6884EFE0962C334B
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32342d3234203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:17 +0000
ROA not before:           Wed 30 Apr 2025 18:14:17 +0000
ROA not after:            Wed 29 Apr 2026 18:19:17 +0000
asID:                     269024
IP address blocks:        45.178.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 07:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:a1:96:78:0a:09:9f:5f:c5:0f:4d:68:84:ef:e0:96:2c:33:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:17 2025 GMT
            Not After : Apr 29 18:19:17 2026 GMT
        Subject: CN=2D26030428F9C4B43E9C4B486B120B8E8ADCC8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:f1:35:2e:a1:21:a8:69:70:9f:ed:33:39:
                    fe:91:d0:54:e4:9e:9c:a9:60:a1:04:2c:d4:a0:5f:
                    71:bc:3d:3f:3c:f8:77:84:43:b8:54:75:e9:e9:d6:
                    f2:93:8a:a7:61:f9:4c:6a:42:02:72:cd:af:6f:44:
                    98:c4:ec:32:bb:29:dc:b3:e8:73:64:d5:e8:9b:95:
                    96:fe:ec:b2:a5:89:5b:d1:fe:86:57:6d:77:cb:0f:
                    66:89:d8:50:28:ab:af:e9:4d:60:73:e3:18:6c:dc:
                    10:55:a6:c6:fe:56:5e:aa:7f:b3:b4:a6:dd:17:2f:
                    d7:df:0f:bc:3a:a9:11:85:58:9e:07:be:4f:83:7a:
                    f4:4e:4c:09:52:d6:a4:3e:45:ed:f7:78:91:46:b3:
                    9b:f2:a8:d8:0b:05:72:3a:b3:22:d4:a1:d5:9a:7a:
                    a6:d7:68:37:99:27:15:f9:19:1c:5d:89:39:23:36:
                    49:15:73:41:d4:4e:4b:94:0d:d1:da:31:f1:d3:78:
                    ed:fa:70:1f:27:aa:2f:7b:10:18:af:b6:60:3d:d8:
                    29:35:bd:af:e9:2d:9f:85:98:53:29:a8:41:c9:ef:
                    ff:56:fc:a3:a8:8a:8b:44:e2:f8:c9:8b:3c:1f:63:
                    2f:c4:20:cc:6b:b8:f8:cf:52:88:8d:64:ad:82:9d:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:03:04:28:F9:C4:B4:3E:9C:4B:48:6B:12:0B:8E:8A:DC:C8:A5
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:45:ab:ad:7b:75:23:78:82:f4:4b:0c:4c:8b:0c:cc:93:45:
         7e:6b:c0:6a:b8:de:ab:da:bb:00:77:f4:12:f6:d3:c5:64:c1:
         d6:a4:38:51:17:a6:22:0e:13:57:9e:e3:90:04:88:93:a0:f8:
         a8:01:89:25:a3:ab:a3:b0:e3:b4:03:65:29:b1:05:ad:02:76:
         f3:5d:a9:40:43:ee:34:0c:34:05:47:67:29:60:a5:95:29:65:
         e6:76:47:8a:61:a7:33:28:ba:a1:8b:28:77:d1:0c:01:61:0e:
         ea:f5:3a:33:3f:ce:ef:06:84:82:88:34:ca:ac:11:cd:0c:fe:
         59:62:17:f9:f7:84:ff:98:99:2b:15:fa:a2:ae:9e:2d:b2:1c:
         6a:6f:34:7b:82:16:b9:af:90:ca:47:0d:ab:d6:93:35:bc:8a:
         71:12:93:a9:6c:57:9d:82:51:52:53:28:96:5b:3e:3d:c2:2f:
         05:43:16:d8:a0:68:69:e3:80:1f:a4:b5:c7:1e:2e:5d:d8:43:
         95:4e:66:85:ed:95:3b:1e:fe:73:18:29:53:a2:3e:04:cb:82:
         37:a6:ba:76:50:22:0a:6d:76:6d:82:f6:5d:32:b4:67:a4:62:
         ff:cd:c9:c6:82:09:57:f5:70:42:e1:ee:dc:8e:a0:39:18:d1:
         cc:21:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:34 2025 by rpki-client