Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa
File:                     34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          XyZtyiCBj7SGY7kNe6yzEQ1Hy8Dyxhd13E7HT3zG9iA=
Subject key identifier:   DC:09:BA:67:93:4B:5C:D0:5A:9B:33:5E:3C:1A:36:AE:87:12:6F:9E
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       66E57BDBBD5C0EF8F7B618C52769F027B65EC33B
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:16 +0000
ROA not before:           Wed 30 Apr 2025 18:14:16 +0000
ROA not after:            Wed 29 Apr 2026 18:19:16 +0000
asID:                     269024
IP address blocks:        45.178.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 07:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e5:7b:db:bd:5c:0e:f8:f7:b6:18:c5:27:69:f0:27:b6:5e:c3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:16 2025 GMT
            Not After : Apr 29 18:19:16 2026 GMT
        Subject: CN=DC09BA67934B5CD05A9B335E3C1A36AE87126F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:b4:85:1c:f1:22:e9:93:87:95:82:fd:85:
                    3b:21:f0:ee:26:24:e2:6f:72:6a:df:dc:a5:84:bd:
                    5f:c6:5e:3b:f2:7f:e3:12:0e:1f:c9:6a:13:03:02:
                    a1:cb:8c:dd:75:e0:66:aa:37:14:27:d3:f9:5e:dd:
                    53:ce:0a:b9:e6:24:97:ad:67:45:95:5c:01:43:d2:
                    0b:aa:04:0f:41:bc:08:f9:93:ec:5e:77:d7:93:9b:
                    7a:c0:7b:5d:81:45:15:bb:c8:e7:9a:c4:cd:47:58:
                    64:a3:52:7b:c7:7a:a7:cd:fe:87:2f:46:94:d3:02:
                    a1:c5:19:48:0e:15:6b:c5:df:d3:db:8d:63:d4:df:
                    83:2e:fd:e1:86:5a:dd:2c:7e:f8:2d:96:a4:9e:5d:
                    5b:27:36:1a:bd:c7:71:9d:22:29:0c:e3:ee:0e:92:
                    c0:5a:e2:99:1f:8d:95:c2:7c:84:e2:c1:71:26:da:
                    d4:f2:73:01:2e:f3:73:09:58:e6:5b:f7:26:85:6e:
                    26:c0:23:e5:a8:69:b0:2d:5c:bb:d3:3b:4a:25:ab:
                    46:3a:ba:6c:ca:2a:7d:f2:8f:8e:1f:ee:a8:14:59:
                    80:17:69:19:f0:be:5a:62:9e:92:28:79:3d:c4:e4:
                    be:a6:5b:97:06:17:d1:28:fd:a4:f7:80:7d:09:7c:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:BA:67:93:4B:5C:D0:5A:9B:33:5E:3C:1A:36:AE:87:12:6F:9E
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130332e302f32342d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:41:e6:6a:d5:91:bc:b1:5d:b0:01:25:8b:e0:99:9e:8f:
         f8:35:39:50:a2:e8:60:b0:ad:09:7c:72:5c:95:d0:98:21:8c:
         d3:84:d2:18:02:95:16:7a:17:a2:58:2e:7b:3f:5f:5b:9d:57:
         f1:d9:44:b4:94:1c:ce:77:65:88:37:6e:86:15:74:f9:a9:d7:
         52:06:c1:34:e1:99:50:8f:6b:65:8e:00:65:f0:35:ff:da:43:
         c1:09:44:f2:0f:e6:62:25:3e:76:c1:1c:b4:5f:a1:ff:52:14:
         eb:c2:8f:02:f9:29:33:9e:45:ea:d7:11:a1:5c:0e:ef:e6:6d:
         79:9b:53:54:cf:e8:3c:5c:fd:e4:e4:1d:dc:18:62:41:04:0a:
         5e:70:7e:c5:49:72:db:f5:18:5f:81:b7:d1:21:9f:f0:5b:53:
         ad:39:3f:71:bd:eb:c5:87:44:6a:6f:63:ba:3b:f7:c9:77:7f:
         04:40:e5:26:3a:7f:0d:7d:00:63:02:c1:c3:d9:9d:9c:63:bc:
         ba:f2:28:78:cc:a2:a7:1d:6d:b8:9e:2a:c5:eb:42:c7:75:8d:
         9b:c3:4f:d2:3d:66:e2:32:85:4d:4a:be:aa:42:d7:34:64:c4:
         4f:30:96:a7:78:d4:67:50:14:c9:ab:ba:00:94:5c:3f:67:23:
         24:8a:6e:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZuV7271cDvj3thjFJ2nwJ7ZewzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2QkJERkYwM0M1QjdGMkNGRkFBQTU2MjRENkE4QjNB
NjVGMzAzMjAeFw0yNTA0MzAxODE0MTZaFw0yNjA0MjkxODE5MTZaMDMxMTAvBgNV
BAMTKERDMDlCQTY3OTM0QjVDRDA1QTlCMzM1RTNDMUEzNkFFODcxMjZGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLULSFHPEi6ZOHlYL9hTsh8O4m
JOJvcmrf3KWEvV/GXjvyf+MSDh/JahMDAqHLjN114GaqNxQn0/le3VPOCrnmJJet
Z0WVXAFD0guqBA9BvAj5k+xed9eTm3rAe12BRRW7yOeaxM1HWGSjUnvHeqfN/ocv
RpTTAqHFGUgOFWvF39PbjWPU34Mu/eGGWt0sfvgtlqSeXVsnNhq9x3GdIikM4+4O
ksBa4pkfjZXCfITiwXEm2tTycwEu83MJWOZb9yaFbibAI+WoabAtXLvTO0olq0Y6
umzKKn3yj44f7qgUWYAXaRnwvlpinpIoeT3E5L6mW5cGF9Eo/aT3gH0JfDSfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3Am6Z5NLXNBamzNePBo2rocSb54wHwYDVR0j
BBgwFoAUDWu9/wPFt/LP+qpWJNaos6ZfMDIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENjSHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lE
ZFovMC8wRDZCQkRGRjAzQzVCN0YyQ0ZGQUFBNTYyNEQ2QThCM0E2NUYzMDMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkJCREZGMDNDNUI3RjJD
RkZBQUE1NjI0RDZBOEIzQTY1RjMwMzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDY0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAv
MzQzNTJlMzEzNzM4MmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsmcwDQYJKoZIhvcNAQELBQADggEBAJS6QeZq
1ZG8sV2wASWL4Jmej/g1OVCi6GCwrQl8clyV0JghjNOE0hgClRZ6F6JYLns/X1ud
V/HZRLSUHM53ZYg3boYVdPmp11IGwTThmVCPa2WOAGXwNf/aQ8EJRPIP5mIlPnbB
HLRfof9SFOvCjwL5KTOeRerXEaFcDu/mbXmbU1TP6Dxc/eTkHdwYYkEECl5wfsVJ
ctv1GF+Bt9Ehn/BbU605P3G968WHRGpvY7o798l3fwRA5SY6fw19AGMCwcPZnZxj
vLryKHjMoqcdbbieKsXrQsd1jZvDT9I9ZuIyhU1KvqpC1zRkxE8wlqd41GdQFMmr
ugCUXD9nIySKbhA=
-----END CERTIFICATE-----
Generated at Fri May 2 21:39:08 2025 by rpki-client