Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e352e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          /EIjVVxjuJj2ubkWQA7Limphkcx3vZs3a4JPna5BhQg=
Subject key identifier:   5B:B5:13:AA:F4:E2:A3:CB:90:24:10:14:BB:18:12:99:BC:B8:CF:CE
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       3D7D7A9534A38BA5A5BBF099D6B9AE9118CA1882
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:49 +0000
ROA not before:           Mon 07 Apr 2025 20:46:49 +0000
ROA not after:            Mon 06 Apr 2026 20:51:49 +0000
asID:                     268308
IP address blocks:        45.238.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7d:7a:95:34:a3:8b:a5:a5:bb:f0:99:d6:b9:ae:91:18:ca:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:49 2025 GMT
            Not After : Apr  6 20:51:49 2026 GMT
        Subject: CN=5BB513AAF4E2A3CB90241014BB181299BCB8CFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:f9:3a:c3:2d:aa:98:0f:72:8e:e2:b1:6d:
                    e7:c1:e6:79:22:00:0e:d2:9d:a2:45:8b:fe:ad:53:
                    fb:42:d7:1b:44:e5:db:36:bc:dd:d9:c8:d1:37:c1:
                    a0:2a:f3:25:64:85:c6:90:ce:9d:f6:7a:81:93:48:
                    95:e5:ef:f3:2d:aa:8f:05:4e:50:41:92:05:83:08:
                    61:c2:03:60:71:53:e1:23:92:b0:0b:ac:f5:80:4e:
                    9e:5b:16:98:8d:a7:16:d6:f1:92:5a:9b:84:18:d8:
                    b1:9a:31:a3:a4:5c:53:82:20:7b:06:16:1d:8a:c2:
                    c0:a9:a7:48:da:3f:85:d5:14:0b:c0:56:13:9d:0b:
                    c2:07:1f:69:2e:80:90:3e:d8:74:05:02:72:28:5b:
                    b0:e3:c8:13:0c:25:c4:5a:d2:f8:11:ef:47:e1:91:
                    ab:8a:b9:93:a3:06:03:79:36:4d:28:14:cc:5a:ca:
                    09:ba:78:19:9f:58:d5:9d:87:34:8b:2b:fd:18:1c:
                    c1:d0:4a:e9:e9:17:6d:ca:b3:a7:f8:d6:cc:8c:2d:
                    a7:9f:bf:be:9c:8e:69:66:c3:0c:d0:48:eb:98:3d:
                    ef:2f:a4:f4:f7:71:63:46:f6:3f:0a:cd:8d:df:c2:
                    5c:fc:ab:c9:f9:6e:a4:64:2a:83:eb:97:e5:d2:d2:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:13:AA:F4:E2:A3:CB:90:24:10:14:BB:18:12:99:BC:B8:CF:CE
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:86:86:b6:0b:52:e4:a0:f7:d4:db:73:05:42:29:95:be:
         ac:cc:2c:13:78:84:84:93:97:12:a3:58:c4:f3:f2:89:d7:87:
         f0:2f:5b:e0:93:97:eb:fa:6d:f3:80:28:f5:43:10:d4:f7:31:
         52:1c:3c:f6:39:c1:3a:b6:65:58:e0:f0:d1:0e:16:89:b8:73:
         8b:e6:80:66:b8:04:fd:99:d1:99:d1:a5:7e:4e:23:36:7a:ac:
         b9:d3:62:32:2f:0b:af:bc:11:96:98:99:4e:e3:c5:2c:6e:86:
         ae:35:9f:ee:59:0d:09:e8:95:e3:f8:62:82:d5:e1:15:15:a4:
         9c:22:60:a7:21:d1:85:d4:e4:67:cd:8f:d3:e4:94:db:ff:f4:
         fd:6b:4f:25:c6:02:91:8d:65:ba:f9:97:4a:4f:34:b8:04:88:
         3e:b0:90:93:c4:ab:b6:f2:b7:b1:2c:b2:ea:55:e4:d5:90:04:
         e3:4a:18:d7:34:99:62:1f:1e:b8:85:63:3a:e0:1d:5d:83:31:
         b3:1b:d5:b4:fd:8b:89:5f:5b:03:06:19:45:e9:b4:8b:10:da:
         3d:47:01:99:01:fd:f2:a4:e8:46:81:6f:da:55:3a:fc:9e:50:
         d9:41:a3:24:2b:d3:59:44:12:c9:a0:7f:44:6a:b5:61:a7:f2:
         af:be:f8:71
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPX16lTSji6Wlu/CZ1rmukRjKGIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc5RDA1N0I4MkRBQjdEM0IyN0RGOEMwRTMxMEZGQUQ1
MzVCMThBODAeFw0yNTA0MDcyMDQ2NDlaFw0yNjA0MDYyMDUxNDlaMDMxMTAvBgNV
BAMTKDVCQjUxM0FBRjRFMkEzQ0I5MDI0MTAxNEJCMTgxMjk5QkNCOENGQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAPk6wy2qmA9yjuKxbefB5nki
AA7SnaJFi/6tU/tC1xtE5ds2vN3ZyNE3waAq8yVkhcaQzp32eoGTSJXl7/Mtqo8F
TlBBkgWDCGHCA2BxU+EjkrALrPWATp5bFpiNpxbW8ZJam4QY2LGaMaOkXFOCIHsG
Fh2KwsCpp0jaP4XVFAvAVhOdC8IHH2kugJA+2HQFAnIoW7DjyBMMJcRa0vgR70fh
kauKuZOjBgN5Nk0oFMxaygm6eBmfWNWdhzSLK/0YHMHQSunpF23Ks6f41syMLaef
v76cjmlmwwzQSOuYPe8vpPT3cWNG9j8KzY3fwlz8q8n5bqRkKoPrl+XS0ukhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUW7UTqvTio8uQJBAUuxgSmby4z84wHwYDVR0j
BBgwFoAUh50Fe4Lat9OyffjA4xD/rVNbGKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84NzlEMDU3QjgyREFCN0QzQjI3REY4QzBFMzEwRkZBRDUzNUIxOEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3OUQwNTdCODJEQUI3RDNC
MjdERjhDMEUzMTBGRkFENTM1QjE4QTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC3uBTANBgkqhkiG9w0BAQsFAAOCAQEANGqGhrYLUuSg
99TbcwVCKZW+rMwsE3iEhJOXEqNYxPPyideH8C9b4JOX6/pt84Ao9UMQ1PcxUhw8
9jnBOrZlWODw0Q4Wibhzi+aAZrgE/ZnRmdGlfk4jNnqsudNiMi8Lr7wRlpiZTuPF
LG6GrjWf7lkNCeiV4/higtXhFRWknCJgpyHRhdTkZ82P0+SU2//0/WtPJcYCkY1l
uvmXSk80uASIPrCQk8SrtvK3sSyy6lXk1ZAE40oY1zSZYh8euIVjOuAdXYMxsxvV
tP2LiV9bAwYZRem0ixDaPUcBmQH98qToRoFv2lU6/J5Q2UGjJCvTWUQSyaB/RGq1
Yafyr774cQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:07:06 2025 by rpki-client