Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa
File:                     34352e3137332e33322e302f32322d3332203d3e20323638383038.roa (raw, json)
Hash identifier:          DDclDRapaXh/SaYE70lgeSZNPwp0IzwDMYqC/ekAKI0=
Subject key identifier:   3C:81:D9:F4:11:51:F0:5E:84:88:D0:C2:81:F1:65:EC:A6:4A:CB:8F
Certificate issuer:       /CN=FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1
Certificate serial:       2043D548801D38CF55AC7B61A0821EDBEC48339A
Authority key identifier: FC:F7:F1:DA:98:FF:83:01:C1:F3:55:88:4B:F7:F8:97:AC:C8:6B:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa
Signing time:             Fri 16 May 2025 19:14:18 +0000
ROA not before:           Fri 16 May 2025 19:09:18 +0000
ROA not after:            Fri 15 May 2026 19:14:18 +0000
asID:                     268808
IP address blocks:        45.173.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.crl
                          rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:d5:48:80:1d:38:cf:55:ac:7b:61:a0:82:1e:db:ec:48:33:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1
        Validity
            Not Before: May 16 19:09:18 2025 GMT
            Not After : May 15 19:14:18 2026 GMT
        Subject: CN=3C81D9F41151F05E8488D0C281F165ECA64ACB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:bc:2f:fe:bb:87:45:a2:49:12:bd:fe:d0:
                    74:6e:52:f4:e6:8e:c5:83:c8:db:76:a3:e2:5f:0e:
                    7c:c0:e3:70:10:90:1f:63:9d:4c:00:27:4e:84:9d:
                    92:76:0e:ef:59:b9:37:3a:af:e1:5a:11:5d:12:e5:
                    a0:be:1e:7c:d0:4b:cb:47:e9:4c:55:e9:e5:a3:bd:
                    61:5f:e0:0e:cf:80:27:4a:3b:fa:f6:be:57:0e:1d:
                    b8:7f:ae:1c:f5:34:1d:ca:ce:3c:fe:8d:0d:07:09:
                    34:ec:58:3e:4e:1d:c2:bc:7c:6e:a9:04:53:7e:02:
                    b5:56:f8:5c:48:bd:7b:1c:cb:24:03:86:ee:fa:3e:
                    96:91:14:95:54:ce:47:be:0f:a7:9c:6c:c2:c2:a6:
                    4b:80:b3:8e:83:16:8b:70:c9:7e:a3:83:07:ab:7e:
                    44:f9:f2:c4:f0:c7:53:a1:47:44:c9:a3:9d:d0:a5:
                    d7:40:e9:02:6d:4c:dd:24:74:fa:e0:8d:fa:d3:6f:
                    a2:75:70:92:de:86:a8:3d:bc:af:10:e2:4a:fd:bb:
                    c0:8e:77:00:34:02:4c:a4:cc:4c:7c:74:63:72:8b:
                    b9:c7:f5:29:e0:0f:80:9f:06:3a:0d:26:e3:aa:3f:
                    c0:ba:c3:88:1e:ab:9d:a9:96:e5:c0:49:78:88:d7:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:D9:F4:11:51:F0:5E:84:88:D0:C2:81:F1:65:EC:A6:4A:CB:8F
            X509v3 Authority Key Identifier:
                keyid:FC:F7:F1:DA:98:FF:83:01:C1:F3:55:88:4B:F7:F8:97:AC:C8:6B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCF7F1DA98FF8301C1F355884BF7F897ACC86BD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3332203d3e20323638383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:b3:f4:15:5a:79:aa:22:31:f7:5d:38:f6:71:33:89:c3:
         b1:69:c3:e8:9e:63:f5:d5:f3:7c:de:62:bc:97:9e:81:33:79:
         a0:fd:e8:4c:10:4f:ff:0a:4b:fe:4c:46:df:b2:66:64:f7:32:
         ed:99:73:1a:21:a3:4e:9d:bc:ac:c5:a7:52:d5:86:88:e3:a4:
         d3:a8:83:2a:ba:58:00:01:18:f0:66:5d:37:9a:f2:71:71:01:
         7e:51:31:f1:f5:7d:40:5e:39:ca:4f:09:b4:05:db:66:69:a5:
         5f:01:1f:4f:bb:4a:ae:53:d6:65:6e:d4:66:05:ba:ff:55:05:
         9c:59:48:61:6b:41:f5:01:49:a9:2f:fa:09:85:29:fc:00:3b:
         cf:56:b5:02:e4:a4:e5:58:e3:1c:07:b5:40:55:0e:c9:d6:5c:
         f3:f0:0f:0d:53:c7:d4:a6:2d:c8:e7:7a:76:a4:be:35:d0:44:
         2f:dd:e5:e0:d6:94:21:88:d5:ee:77:fe:b5:ea:05:ac:f7:7d:
         1d:d8:9d:9e:30:fd:5e:33:20:d5:64:4d:f3:fa:c8:2b:7d:d5:
         34:e5:9c:51:a5:f7:68:73:91:a6:93:1f:1e:5e:bc:54:d2:cb:
         99:c7:f8:27:ac:50:66:d4:4b:5e:d8:ef:9d:de:22:e7:da:72:
         ab:59:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:48 2025 by rpki-client