Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
File:                     34352e3233342e342e302f32322d3332203d3e20323637333531.roa (raw, json)
Hash identifier:          5XulgK5HwBwycfe+acVTltapi0P+EG4N3BQ9zlOHjg0=
Subject key identifier:   17:38:0D:B1:CF:97:C2:A0:83:9E:C8:20:CA:83:AF:93:52:EA:6A:93
Certificate issuer:       /CN=9F5B32BE9F7543646FE3B721B8829DA6113552B5
Certificate serial:       6A1C1983C73E79C60C1AE9C62DCC2E842EBF481E
Authority key identifier: 9F:5B:32:BE:9F:75:43:64:6F:E3:B7:21:B8:82:9D:A6:11:35:52:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F5B32BE9F7543646FE3B721B8829DA6113552B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
Signing time:             Thu 15 May 2025 09:58:51 +0000
ROA not before:           Thu 15 May 2025 09:53:51 +0000
ROA not after:            Thu 14 May 2026 09:58:51 +0000
asID:                     267351
IP address blocks:        45.234.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9F5B32BE9F7543646FE3B721B8829DA6113552B5.crl
                          rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9F5B32BE9F7543646FE3B721B8829DA6113552B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F5B32BE9F7543646FE3B721B8829DA6113552B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1c:19:83:c7:3e:79:c6:0c:1a:e9:c6:2d:cc:2e:84:2e:bf:48:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5B32BE9F7543646FE3B721B8829DA6113552B5
        Validity
            Not Before: May 15 09:53:51 2025 GMT
            Not After : May 14 09:58:51 2026 GMT
        Subject: CN=17380DB1CF97C2A0839EC820CA83AF9352EA6A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:0e:a1:46:cb:34:ed:89:ac:92:82:56:2e:
                    c9:95:98:ab:ad:f7:0a:aa:3b:50:e8:84:54:4e:00:
                    d2:5f:63:e8:e3:fb:11:e6:c9:d3:ba:df:69:ec:04:
                    8b:ac:74:52:1d:81:6e:06:d5:5c:71:7b:cb:64:11:
                    a4:6c:c4:37:e1:9d:4a:8a:c0:98:81:21:7e:47:7f:
                    8d:24:4f:3a:ac:22:71:e1:91:48:f8:fa:ee:32:32:
                    17:67:e9:c1:3d:9b:54:89:e3:10:ee:83:38:27:7d:
                    e6:3b:9f:38:7d:40:a3:c9:e7:ef:9c:35:f8:e3:fb:
                    a7:38:61:ad:ac:6b:40:12:5d:6a:38:e0:d3:2a:31:
                    61:43:5c:f5:d7:65:86:29:ee:97:3b:5e:43:51:25:
                    5a:5a:c4:ef:23:e4:f8:dc:8e:6e:3a:af:6b:09:2f:
                    c6:5d:ef:82:10:27:98:8b:aa:64:8a:19:d5:95:46:
                    fb:f9:3f:b3:c5:39:f2:81:72:07:38:d8:3f:39:7e:
                    ce:e3:d9:f6:97:16:b7:ca:6b:ea:1c:5e:85:a1:9f:
                    ac:0d:36:f2:a6:40:73:e6:22:e4:3d:dc:6b:30:10:
                    e7:63:8e:20:a2:dc:57:ca:c3:96:31:ac:ec:fe:3f:
                    7c:12:3a:6a:20:47:61:44:c4:e8:0a:19:20:15:db:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:38:0D:B1:CF:97:C2:A0:83:9E:C8:20:CA:83:AF:93:52:EA:6A:93
            X509v3 Authority Key Identifier:
                keyid:9F:5B:32:BE:9F:75:43:64:6F:E3:B7:21:B8:82:9D:A6:11:35:52:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/9F5B32BE9F7543646FE3B721B8829DA6113552B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F5B32BE9F7543646FE3B721B8829DA6113552B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:64:2f:6e:5e:b7:c7:79:73:fd:83:0f:bb:f0:de:17:e9:e6:
         f0:ad:84:f2:ec:2d:9c:db:ff:4f:95:23:53:5e:15:36:a7:e0:
         0f:1d:32:5c:2f:3c:42:b2:e2:f8:a9:53:80:0a:6e:ac:2f:e1:
         86:eb:87:fb:a9:5f:c5:0b:29:c7:f9:c7:cc:97:04:36:15:e9:
         e5:1c:05:6b:53:e0:9a:9d:84:e3:98:ab:4a:d3:71:59:b7:ce:
         22:d0:ba:8e:0d:9e:49:b5:91:cd:cc:37:23:29:31:89:14:07:
         37:ca:ba:b5:d2:f3:c7:ae:aa:61:e2:d6:aa:0b:55:46:85:21:
         59:d8:47:80:36:ab:b4:7d:20:d8:a9:a4:bb:68:72:75:88:d0:
         00:5b:43:62:c5:51:64:7c:21:37:7b:7e:cb:2b:a5:11:ff:88:
         be:f9:18:22:44:ad:bf:bc:d2:2e:50:29:39:9d:2d:43:ba:a8:
         a7:3c:cf:91:ac:a7:cf:59:55:01:51:09:f9:0f:7f:a8:c1:1e:
         9c:ee:29:9a:96:17:d9:b2:e1:f8:d8:65:74:62:bf:0b:3c:23:
         4c:4b:90:e9:df:bb:da:c8:7a:83:de:7f:19:bd:9e:d2:da:e6:
         9c:61:20:6f:47:ea:82:5b:6c:b7:43:c5:2c:1d:ae:16:38:41:
         6f:23:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:25 2025 by rpki-client