Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          cg/8UCi3Ri/yfDHbXlEXKZGFjT4rlUjCAJy2Y5d7+6c=
Subject key identifier:   15:D5:0C:9C:63:C8:21:17:59:80:9A:56:FE:0D:00:AC:50:37:7A:3E
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       0A0A29CCE40EC70F7E4037F298FB1F587FA6D0B6
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:17 +0000
ROA not before:           Wed 30 Apr 2025 18:14:17 +0000
ROA not after:            Wed 29 Apr 2026 18:19:17 +0000
asID:                     269024
IP address blocks:        45.178.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 13:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0a:29:cc:e4:0e:c7:0f:7e:40:37:f2:98:fb:1f:58:7f:a6:d0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:17 2025 GMT
            Not After : Apr 29 18:19:17 2026 GMT
        Subject: CN=15D50C9C63C8211759809A56FE0D00AC50377A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:74:1f:fb:b1:41:8c:86:c5:0a:3b:b0:09:8c:
                    86:e3:e8:68:d5:be:ce:de:5f:10:32:42:60:c9:6b:
                    05:5e:b2:5e:e6:5d:37:d2:55:f6:4c:9d:21:e8:a9:
                    83:1b:52:a8:9d:b1:b7:26:88:4b:96:cd:cf:0c:50:
                    d5:46:f4:e3:67:d9:bd:09:ba:33:fc:ce:93:e6:04:
                    fe:46:a2:6a:08:c6:dc:85:90:7d:c0:19:ba:84:61:
                    59:9a:35:7a:22:9e:dc:5d:b4:0f:91:c4:85:65:6d:
                    b3:ce:36:73:ef:e3:08:5b:27:db:52:c6:64:ad:67:
                    52:37:14:10:b3:ea:b8:6a:1e:fd:d2:bc:83:0c:85:
                    cb:20:bc:52:43:57:98:87:f8:50:e9:c9:ad:8d:61:
                    a6:9f:a4:bb:73:df:43:48:01:7a:b3:24:79:db:00:
                    90:94:62:63:d1:57:16:fd:f8:8d:2b:b2:a0:7e:0d:
                    c9:1e:17:13:58:0d:79:6d:49:76:ee:97:1e:53:0f:
                    ca:c1:0c:9b:9d:16:f6:e0:1b:a0:ea:06:cd:6e:bb:
                    e4:77:c5:17:72:3d:8d:cc:7c:58:86:01:c5:8e:c4:
                    45:c4:f9:40:c0:79:b1:e8:63:12:8c:7c:b3:15:b8:
                    61:e5:ea:49:39:88:ba:29:fa:eb:25:6f:0c:e4:34:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D5:0C:9C:63:C8:21:17:59:80:9A:56:FE:0D:00:AC:50:37:7A:3E
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130322e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:7c:31:01:a7:7e:de:e8:9b:dc:a0:7f:3b:41:e0:3e:ec:
         e5:4d:f0:3e:c4:6c:4b:48:06:d4:ad:a7:f8:51:2c:54:4a:71:
         32:bb:8f:b4:6e:ff:ad:66:eb:35:1e:7b:bd:6f:c8:d1:83:65:
         a9:b7:10:6d:a1:53:dd:0c:20:08:77:95:eb:11:e8:aa:9f:ff:
         2c:3f:30:f0:eb:bf:02:87:7f:52:e2:8a:da:2b:38:0f:21:3b:
         24:db:80:b1:79:b3:8b:42:0b:5d:a0:44:b5:df:07:be:43:76:
         64:08:de:95:c1:65:2f:6f:b1:8b:37:d0:b1:8a:14:f5:84:2c:
         be:3a:cc:09:a3:1c:e3:64:f5:8c:bf:a6:b1:42:0c:d0:66:9b:
         df:8c:e3:3d:65:df:8f:a9:18:fd:e5:55:1a:ff:44:d8:e4:3e:
         38:e7:4d:f5:fe:fa:3d:5e:d3:68:76:a4:15:f2:ff:45:be:19:
         a2:cb:52:ca:d4:c9:d6:d3:44:f1:ba:19:c1:94:ae:1e:f5:ef:
         58:b8:51:77:a4:70:98:43:6d:fd:73:33:72:1d:94:e2:e3:ae:
         f1:db:7d:98:22:bc:b8:3c:e9:e9:18:7d:2a:41:8b:64:16:af:
         bf:14:06:e1:9a:56:e8:c7:c7:fe:cb:b1:68:d0:0e:5f:9a:96:
         bc:7d:a8:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCgopzOQOxw9+QDfymPsfWH+m0LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2QkJERkYwM0M1QjdGMkNGRkFBQTU2MjRENkE4QjNB
NjVGMzAzMjAeFw0yNTA0MzAxODE0MTdaFw0yNjA0MjkxODE5MTdaMDMxMTAvBgNV
BAMTKDE1RDUwQzlDNjNDODIxMTc1OTgwOUE1NkZFMEQwMEFDNTAzNzdBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0dB/7sUGMhsUKO7AJjIbj6GjV
vs7eXxAyQmDJawVesl7mXTfSVfZMnSHoqYMbUqidsbcmiEuWzc8MUNVG9ONn2b0J
ujP8zpPmBP5GomoIxtyFkH3AGbqEYVmaNXointxdtA+RxIVlbbPONnPv4whbJ9tS
xmStZ1I3FBCz6rhqHv3SvIMMhcsgvFJDV5iH+FDpya2NYaafpLtz30NIAXqzJHnb
AJCUYmPRVxb9+I0rsqB+DckeFxNYDXltSXbulx5TD8rBDJudFvbgG6DqBs1uu+R3
xRdyPY3MfFiGAcWOxEXE+UDAebHoYxKMfLMVuGHl6kk5iLop+uslbwzkNMkNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFdUMnGPIIRdZgJpW/g0ArFA3ej4wHwYDVR0j
BBgwFoAUDWu9/wPFt/LP+qpWJNaos6ZfMDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC8wRDZCQkRGRjAzQzVCN0YyQ0ZGQUFBNTYyNEQ2QThCM0E2NUYzMDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkJCREZGMDNDNUI3RjJD
RkZBQUE1NjI0RDZBOEIzQTY1RjMwMzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzQzNTJlMzEzNzM4MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsmYwDQYJKoZIhvcNAQELBQADggEBAJM9fDEB
p37e6JvcoH87QeA+7OVN8D7EbEtIBtStp/hRLFRKcTK7j7Ru/61m6zUee71vyNGD
Zam3EG2hU90MIAh3lesR6Kqf/yw/MPDrvwKHf1LiitorOA8hOyTbgLF5s4tCC12g
RLXfB75DdmQI3pXBZS9vsYs30LGKFPWELL46zAmjHONk9Yy/prFCDNBmm9+M4z1l
34+pGP3lVRr/RNjkPjjnTfX++j1e02h2pBXy/0W+GaLLUsrUydbTRPG6GcGUrh71
71i4UXekcJhDbf1zM3IdlOLjrvHbfZgivLg86ekYfSpBi2QWr78UBuGaVujHx/7L
sWjQDl+alrx9qO0=
-----END CERTIFICATE-----
Generated at Sun May 4 15:36:02 2025 by rpki-client