Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
File:                     34352e3137322e34342e302f32322d3332203d3e20323638373432.roa (raw, json)
Hash identifier:          zWuECYADm9G+eAkg1X/96UEhSnc92ChJ0/G7e1EbA04=
Subject key identifier:   BE:F1:6D:BB:C9:DE:D8:FF:FA:16:78:5F:03:15:E7:C1:7E:3E:03:8E
Certificate issuer:       /CN=F753F4559D7D422450AFB88DE56CC42BC873A465
Certificate serial:       5FA157B57DBFE453C037742531919F2D57E998DE
Authority key identifier: F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
Signing time:             Thu 06 Mar 2025 10:22:11 +0000
ROA not before:           Thu 06 Mar 2025 10:17:11 +0000
ROA not after:            Thu 05 Mar 2026 10:22:11 +0000
asID:                     268742
IP address blocks:        45.172.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl
                          rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a1:57:b5:7d:bf:e4:53:c0:37:74:25:31:91:9f:2d:57:e9:98:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F753F4559D7D422450AFB88DE56CC42BC873A465
        Validity
            Not Before: Mar  6 10:17:11 2025 GMT
            Not After : Mar  5 10:22:11 2026 GMT
        Subject: CN=BEF16DBBC9DED8FFFA16785F0315E7C17E3E038E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:20:73:30:2f:b9:fa:bd:55:33:f9:25:6f:
                    f9:c4:8e:d8:6b:55:1f:da:84:fc:b8:9c:35:7e:12:
                    ee:19:39:cb:1e:89:7f:d4:5a:89:ee:ab:88:e5:83:
                    ee:fd:ce:77:e7:47:f3:52:60:3e:28:97:e5:7e:f5:
                    c3:9a:d4:4a:57:9d:41:79:37:3c:c9:41:0a:69:47:
                    5b:db:08:f8:c7:47:53:a9:54:16:1e:3d:a9:d4:0a:
                    5f:36:01:e9:f5:5c:96:ee:46:0a:65:56:cb:b2:6f:
                    5d:89:2c:60:95:d8:63:37:04:ac:00:e7:8a:b6:5c:
                    fa:0b:47:11:af:d4:7d:b2:be:87:63:48:ae:e7:54:
                    08:1d:35:d9:4b:75:d0:91:94:79:d0:65:4d:2b:a3:
                    99:9d:63:30:17:85:45:70:b6:d3:4c:eb:76:02:c0:
                    6a:db:fd:12:03:ad:af:3d:53:e1:be:c9:8e:b0:2c:
                    89:19:49:e7:ca:94:05:92:c9:1d:b3:da:80:3c:5e:
                    28:6d:98:c2:b7:4f:94:e4:f7:ab:a0:cf:0f:72:de:
                    8b:67:0c:ca:07:eb:93:e1:76:b2:ee:9e:3c:41:51:
                    b9:5b:c7:c3:f6:2c:bf:b0:62:c8:db:98:42:63:b3:
                    61:d6:49:4d:c3:67:86:26:c0:2a:25:f8:0b:d2:4f:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:6D:BB:C9:DE:D8:FF:FA:16:78:5F:03:15:E7:C1:7E:3E:03:8E
            X509v3 Authority Key Identifier:
                keyid:F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:58:36:9f:33:2b:0c:83:6f:fa:75:39:d8:aa:28:b0:a8:
         6d:8b:a0:8a:51:95:ad:cd:52:89:70:37:2f:d4:90:9c:ee:8e:
         cf:85:a7:20:e6:58:25:50:f7:94:09:c7:ba:bf:d5:c9:d0:40:
         0b:3d:d2:da:c7:54:75:e3:c4:90:80:5c:56:05:bb:50:ff:b8:
         08:61:46:50:13:b1:c5:f8:da:3c:1f:c8:2e:14:90:bc:5f:17:
         5f:79:cd:db:08:00:bf:ed:1e:63:d1:f6:3f:48:ca:aa:9d:9e:
         4a:41:cd:a6:8c:fe:60:c7:4d:9d:b9:d5:a2:e4:6b:75:dc:23:
         d7:f7:9e:28:0a:d3:11:76:69:67:0b:46:72:e4:3b:69:dc:64:
         b5:1e:b6:9e:1e:88:9a:ac:3f:22:3f:51:2a:72:84:c7:58:df:
         70:ea:43:bb:62:e6:2e:68:aa:45:10:9d:87:89:bb:30:72:ef:
         b4:bb:1f:f6:04:54:0f:21:be:01:34:c8:70:ea:1d:c8:cc:99:
         e6:f6:49:8f:b5:9b:28:1d:d5:95:ce:ce:2f:2b:c2:e1:f5:84:
         4d:f4:4a:a9:5d:5b:8e:e7:f4:2f:6f:1f:59:66:00:2d:11:e1:
         98:78:6d:b3:b8:4d:40:24:ff:f5:4d:10:7d:e0:41:66:95:e5:
         65:9a:e7:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX6FXtX2/5FPAN3QlMZGfLVfpmN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc1M0Y0NTU5RDdENDIyNDUwQUZCODhERTU2Q0M0MkJD
ODczQTQ2NTAeFw0yNTAzMDYxMDE3MTFaFw0yNjAzMDUxMDIyMTFaMDMxMTAvBgNV
BAMTKEJFRjE2REJCQzlERUQ4RkZGQTE2Nzg1RjAzMTVFN0MxN0UzRTAzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHCBzMC+5+r1VM/klb/nEjthr
VR/ahPy4nDV+Eu4ZOcseiX/UWonuq4jlg+79znfnR/NSYD4ol+V+9cOa1EpXnUF5
NzzJQQppR1vbCPjHR1OpVBYePanUCl82Aen1XJbuRgplVsuyb12JLGCV2GM3BKwA
54q2XPoLRxGv1H2yvodjSK7nVAgdNdlLddCRlHnQZU0ro5mdYzAXhUVwttNM63YC
wGrb/RIDra89U+G+yY6wLIkZSefKlAWSyR2z2oA8XihtmMK3T5Tk96ugzw9y3otn
DMoH65PhdrLunjxBUblbx8P2LL+wYsjbmEJjs2HWSU3DZ4YmwCol+AvSTxWTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvvFtu8ne2P/6FnhfAxXnwX4+A44wHwYDVR0j
BBgwFoAU91P0VZ19QiRQr7iN5WzEK8hzpGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdQNU5CWDVmY0hwSHJ1QUxHSDE1cDN6UEt2dk5DU3lUeERGSmRHZDNE
bW8vMS9GNzUzRjQ1NTlEN0Q0MjI0NTBBRkI4OERFNTZDQzQyQkM4NzNBNDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3NTNGNDU1OUQ3RDQyMjQ1
MEFGQjg4REU1NkNDNDJCQzg3M0E0NjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3UDVOQlg1ZmNIcEhydUFMR0gxNXAzelBLdnZOQ1N5VHhERkpkR2QzRG1vLzEv
MzQzNTJlMzEzNzMyMmUzNDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzczNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLawsMA0GCSqGSIb3DQEBCwUAA4IBAQCQOlg2nzMr
DINv+nU52KoosKhti6CKUZWtzVKJcDcv1JCc7o7Phacg5lglUPeUCce6v9XJ0EAL
PdLax1R148SQgFxWBbtQ/7gIYUZQE7HF+No8H8guFJC8Xxdfec3bCAC/7R5j0fY/
SMqqnZ5KQc2mjP5gx02dudWi5Gt13CPX954oCtMRdmlnC0Zy5Dtp3GS1HraeHoia
rD8iP1EqcoTHWN9w6kO7YuYuaKpFEJ2Hibswcu+0ux/2BFQPIb4BNMhw6h3IzJnm
9kmPtZsoHdWVzs4vK8Lh9YRN9EqpXVuO5/Qvbx9ZZgAtEeGYeG2zuE1AJP/1TRB9
4EFmleVlmucC
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:23 2025 by rpki-client