Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa
File:                     34352e3137392e34302e302f32322d3234203d3e20323639303832.roa (raw, json)
Hash identifier:          Yh8F18hPtG9+jdTil0TLbxfDkk5exv47YlPs6aVXomU=
Subject key identifier:   0C:5B:09:99:7D:EC:2A:29:02:B3:6A:D2:FD:DA:CD:12:4C:A7:D2:C9
Certificate issuer:       /CN=E205EB197526993ADD700764E53493B3E4B2EEB8
Certificate serial:       3607294367C4B315C0D80EBBF40195B949F9C7BE
Authority key identifier: E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa
Signing time:             Thu 06 Mar 2025 07:42:20 +0000
ROA not before:           Thu 06 Mar 2025 07:37:20 +0000
ROA not after:            Thu 05 Mar 2026 07:42:20 +0000
asID:                     269082
IP address blocks:        45.179.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl
                          rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 17:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:07:29:43:67:c4:b3:15:c0:d8:0e:bb:f4:01:95:b9:49:f9:c7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E205EB197526993ADD700764E53493B3E4B2EEB8
        Validity
            Not Before: Mar  6 07:37:20 2025 GMT
            Not After : Mar  5 07:42:20 2026 GMT
        Subject: CN=0C5B09997DEC2A2902B36AD2FDDACD124CA7D2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:7d:00:78:2f:0d:a3:2e:43:63:0c:20:90:
                    b5:06:54:06:cb:9d:e8:04:9a:cb:19:4f:91:49:cc:
                    4d:54:5a:bb:6e:1f:9e:29:50:92:a0:65:59:08:aa:
                    ad:09:e8:65:24:f0:f1:99:91:6f:05:c5:1f:36:f0:
                    a7:94:36:a9:aa:c1:81:85:4d:fb:67:ea:19:e6:92:
                    5c:07:34:b6:73:e0:eb:37:9a:aa:df:f6:b1:bd:a8:
                    57:db:1b:c2:a1:3e:45:bf:3d:c2:bb:73:b2:a5:91:
                    64:34:28:eb:b0:67:04:e9:85:77:54:83:2e:df:a5:
                    43:46:c3:24:80:b2:8f:99:da:78:b6:90:03:47:a4:
                    9a:c1:d6:61:e3:3e:de:9f:19:b8:9e:2c:e7:c9:eb:
                    60:2c:59:5c:e7:b0:08:cf:15:41:00:98:27:87:44:
                    35:9d:06:15:04:b4:6b:3e:3c:96:35:35:d3:d6:46:
                    e6:2d:3b:5a:e1:a6:9f:07:5c:de:75:b9:bf:63:02:
                    66:2d:1c:68:b4:51:cf:80:86:74:f3:7b:aa:d0:34:
                    53:a9:73:15:65:48:5a:8b:78:62:37:2e:1a:f0:d2:
                    e8:91:b1:34:b9:3d:c3:d2:b6:0d:83:21:e2:6f:d0:
                    db:07:ca:1b:ff:78:0a:ba:95:26:b6:f3:01:e5:7e:
                    2f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5B:09:99:7D:EC:2A:29:02:B3:6A:D2:FD:DA:CD:12:4C:A7:D2:C9
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:19:75:26:99:3A:DD:70:07:64:E5:34:93:B3:E4:B2:EE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/E205EB197526993ADD700764E53493B3E4B2EEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E205EB197526993ADD700764E53493B3E4B2EEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/1/34352e3137392e34302e302f32322d3234203d3e20323639303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:4b:d5:3e:96:ce:19:12:82:dc:99:8c:d6:ce:dc:45:37:
         14:b8:2d:91:1c:f8:97:16:54:fc:6f:72:62:10:b3:f8:be:5b:
         e8:91:bd:21:b4:76:c9:c1:b9:8f:f3:2c:60:5f:c5:5b:90:9a:
         f2:d2:c7:9b:62:17:7c:af:68:21:a5:56:66:b8:4d:1d:c6:93:
         05:eb:44:e6:7d:9a:6e:b7:80:ef:29:b1:6f:60:f1:70:7b:a8:
         a3:25:26:3c:66:58:19:d1:ed:fb:a8:e5:c0:d5:bf:d0:7d:97:
         16:f7:45:12:f6:66:7c:91:d7:1c:04:a7:c9:9f:d0:73:1d:8e:
         fa:a8:a4:31:00:b8:67:e7:cf:84:2f:d3:da:75:ca:4e:49:aa:
         d6:d8:3e:21:24:24:fe:a4:a6:cd:84:57:6a:8a:ea:e0:ce:8f:
         68:d1:62:30:1f:3d:85:d8:2c:35:69:d4:1f:97:b6:e4:24:69:
         eb:09:57:0c:68:5f:13:5d:73:e9:41:b3:f1:58:3c:9b:e7:61:
         72:ed:19:ea:71:1f:62:9b:86:1b:da:2a:e9:87:b8:45:fd:6f:
         8c:d0:29:75:17:83:93:f4:46:ec:0d:46:51:6c:c6:62:4b:9e:
         97:24:64:3c:b1:02:da:31:03:54:5a:f6:d2:a2:d3:4e:31:db:
         dd:99:60:de
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNgcpQ2fEsxXA2A679AGVuUn5x74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIwNUVCMTk3NTI2OTkzQURENzAwNzY0RTUzNDkzQjNF
NEIyRUVCODAeFw0yNTAzMDYwNzM3MjBaFw0yNjAzMDUwNzQyMjBaMDMxMTAvBgNV
BAMTKDBDNUIwOTk5N0RFQzJBMjkwMkIzNkFEMkZEREFDRDEyNENBN0QyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYX0AeC8Noy5DYwwgkLUGVAbL
negEmssZT5FJzE1UWrtuH54pUJKgZVkIqq0J6GUk8PGZkW8FxR828KeUNqmqwYGF
Tftn6hnmklwHNLZz4Os3mqrf9rG9qFfbG8KhPkW/PcK7c7KlkWQ0KOuwZwTphXdU
gy7fpUNGwySAso+Z2ni2kANHpJrB1mHjPt6fGbieLOfJ62AsWVznsAjPFUEAmCeH
RDWdBhUEtGs+PJY1NdPWRuYtO1rhpp8HXN51ub9jAmYtHGi0Uc+AhnTze6rQNFOp
cxVlSFqLeGI3Lhrw0uiRsTS5PcPStg2DIeJv0NsHyhv/eAq6lSa28wHlfi8FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDFsJmX3sKikCs2rS/drNEkyn0skwHwYDVR0j
BBgwFoAU4gXrGXUmmTrdcAdk5TSTs+Sy7rgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVBNcXhHWGkxWkU0UUprYkpUNHQ1Y1czWmIzU1JXc0NOc0dZeUJaZGtH
WHgvMS9FMjA1RUIxOTc1MjY5OTNBREQ3MDA3NjRFNTM0OTNCM0U0QjJFRUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyMDVFQjE5NzUyNjk5M0FE
RDcwMDc2NEU1MzQ5M0IzRTRCMkVFQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQTXF4R1hpMVpFNFFKa2JKVDR0NWNXM1piM1NSV3NDTnNHWXlCWmRrR1h4LzEv
MzQzNTJlMzEzNzM5MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbMoMA0GCSqGSIb3DQEBCwUAA4IBAQCEwkvVPpbO
GRKC3JmM1s7cRTcUuC2RHPiXFlT8b3JiELP4vlvokb0htHbJwbmP8yxgX8VbkJry
0sebYhd8r2ghpVZmuE0dxpMF60TmfZput4DvKbFvYPFwe6ijJSY8ZlgZ0e37qOXA
1b/QfZcW90US9mZ8kdccBKfJn9BzHY76qKQxALhn58+EL9PadcpOSarW2D4hJCT+
pKbNhFdqiurgzo9o0WIwHz2F2Cw1adQfl7bkJGnrCVcMaF8TXXPpQbPxWDyb52Fy
7RnqcR9im4Yb2irph7hF/W+M0Cl1F4OT9EbsDUZRbMZiS56XJGQ8sQLaMQNUWvbS
otNOMdvdmWDe
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:29:21 2025 by rpki-client