Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
File:                     34352e3233382e342e302f32332d3233203d3e20323638333038.roa (raw, json)
Hash identifier:          WhD/FOgvwyBr08Do32uME9EieGVUYw4IkTzfwG5Zljs=
Subject key identifier:   1E:2C:FC:FD:18:97:F2:CC:6C:7E:E8:47:2E:4F:64:77:0A:CC:46:FA
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       0D5C45F474BD972EE546AD60EFA6CFF8F118D56B
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:48 +0000
ROA not before:           Mon 07 Apr 2025 20:46:48 +0000
ROA not after:            Mon 06 Apr 2026 20:51:48 +0000
asID:                     268308
IP address blocks:        45.238.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:45:f4:74:bd:97:2e:e5:46:ad:60:ef:a6:cf:f8:f1:18:d5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:48 2025 GMT
            Not After : Apr  6 20:51:48 2026 GMT
        Subject: CN=1E2CFCFD1897F2CC6C7EE8472E4F64770ACC46FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:bb:1c:73:6d:19:b6:b5:db:ca:f0:83:cb:
                    f8:06:1b:9e:c3:4a:2c:34:6d:ac:dc:34:e5:77:23:
                    4f:f8:9c:b9:24:7d:95:c8:22:4e:51:90:30:a0:7b:
                    02:cb:67:93:d0:64:90:97:a5:c0:77:eb:aa:d6:ef:
                    00:d5:72:a0:ac:c4:67:b0:dc:2d:01:5c:77:fd:23:
                    7b:5d:d5:ca:92:11:06:7b:53:55:4c:30:8a:a0:e4:
                    22:df:f7:d0:e3:be:8a:4e:ed:d3:14:01:74:7f:e0:
                    87:bb:84:30:2e:ee:3d:e7:28:24:f1:4a:03:24:65:
                    03:85:b7:ac:db:54:cc:ea:7a:21:6a:a0:2a:e9:8f:
                    8a:60:b2:e3:a8:88:f5:06:3a:03:49:25:1a:aa:d5:
                    9d:de:42:92:5b:8c:28:9c:b4:58:3d:ac:96:de:7d:
                    fe:a0:f0:47:46:12:a6:9b:6d:d4:15:c7:29:d0:57:
                    fd:f1:a9:b0:05:ad:c9:d7:df:61:be:5b:d2:21:27:
                    b7:ae:44:aa:0f:a9:bb:8a:32:34:3e:75:77:60:a2:
                    30:01:d7:10:ca:68:c0:5a:e9:63:86:91:c6:14:fb:
                    5a:cc:c5:4d:80:47:64:8a:3c:40:39:c9:6b:c8:2f:
                    4b:1a:41:0d:b6:6c:81:12:9a:c0:35:53:0a:d5:77:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:FC:FD:18:97:F2:CC:6C:7E:E8:47:2E:4F:64:77:0A:CC:46:FA
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e342e302f32332d3233203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:02:89:8e:73:25:2b:1d:75:a6:a8:33:74:db:b8:1d:a0:
         29:6d:12:73:d8:f2:9b:4e:28:38:b4:74:49:60:bb:12:db:eb:
         86:67:a4:43:4d:c6:1e:16:29:7a:10:75:81:1f:2d:23:30:d2:
         d3:c2:78:e3:82:5c:71:51:95:77:2b:cb:82:6c:28:5a:f0:64:
         06:42:59:a1:5e:fc:ae:7e:90:cd:88:2a:2d:87:83:fb:b9:d8:
         7b:8c:b6:db:c8:91:75:37:80:ae:78:18:91:75:61:9e:55:e4:
         17:23:c9:4f:5a:34:35:dc:f7:ab:ce:c4:72:0d:e5:26:ad:28:
         bc:58:1a:3d:ae:06:84:94:e0:71:91:32:c4:a5:ef:8e:8f:6e:
         0b:0b:56:64:ac:6e:e1:21:11:da:c1:a6:e7:36:cf:21:f8:c0:
         df:13:c3:bc:fe:a6:a1:e0:65:45:02:be:a5:8e:b6:8e:9e:02:
         70:92:14:6a:48:2b:70:03:f2:93:47:b1:fb:40:c4:c2:4e:8b:
         67:12:47:ae:5e:3f:ac:33:5f:76:7e:e9:85:38:d4:25:5b:41:
         c2:c4:8b:7a:f9:a5:4d:1f:25:d4:32:fc:ca:e8:c8:42:ff:f5:
         ac:cd:4d:b7:a5:81:05:1d:52:8c:63:a4:94:6f:0b:92:bf:cb:
         c8:2d:9a:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDVxF9HS9ly7lRq1g76bP+PEY1WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc5RDA1N0I4MkRBQjdEM0IyN0RGOEMwRTMxMEZGQUQ1
MzVCMThBODAeFw0yNTA0MDcyMDQ2NDhaFw0yNjA0MDYyMDUxNDhaMDMxMTAvBgNV
BAMTKDFFMkNGQ0ZEMTg5N0YyQ0M2QzdFRTg0NzJFNEY2NDc3MEFDQzQ2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8A7scc20ZtrXbyvCDy/gGG57D
Siw0bazcNOV3I0/4nLkkfZXIIk5RkDCgewLLZ5PQZJCXpcB366rW7wDVcqCsxGew
3C0BXHf9I3td1cqSEQZ7U1VMMIqg5CLf99DjvopO7dMUAXR/4Ie7hDAu7j3nKCTx
SgMkZQOFt6zbVMzqeiFqoCrpj4pgsuOoiPUGOgNJJRqq1Z3eQpJbjCictFg9rJbe
ff6g8EdGEqabbdQVxynQV/3xqbAFrcnX32G+W9IhJ7euRKoPqbuKMjQ+dXdgojAB
1xDKaMBa6WOGkcYU+1rMxU2AR2SKPEA5yWvIL0saQQ22bIESmsA1UwrVd8whAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHiz8/RiX8sxsfuhHLk9kdwrMRvowHwYDVR0j
BBgwFoAUh50Fe4Lat9OyffjA4xD/rVNbGKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84NzlEMDU3QjgyREFCN0QzQjI3REY4QzBFMzEwRkZBRDUzNUIxOEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3OUQwNTdCODJEQUI3RDNC
MjdERjhDMEUzMTBGRkFENTM1QjE4QTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS3uBDANBgkqhkiG9w0BAQsFAAOCAQEAEA0CiY5zJSsd
daaoM3TbuB2gKW0Sc9jym04oOLR0SWC7EtvrhmekQ03GHhYpehB1gR8tIzDS08J4
44JccVGVdyvLgmwoWvBkBkJZoV78rn6QzYgqLYeD+7nYe4y228iRdTeArngYkXVh
nlXkFyPJT1o0Ndz3q87Ecg3lJq0ovFgaPa4GhJTgcZEyxKXvjo9uCwtWZKxu4SER
2sGm5zbPIfjA3xPDvP6moeBlRQK+pY62jp4CcJIUakgrcAPyk0ex+0DEwk6LZxJH
rl4/rDNfdn7phTjUJVtBwsSLevmlTR8l1DL8yujIQv/1rM1Nt6WBBR1SjGOklG8L
kr/LyC2aEA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:39:01 2025 by rpki-client