Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
File:                     34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (raw, json)
Hash identifier:          do7V4bbb/JL5H2BaoYXDAF9yLaj6Lf747cG8jND8PnI=
Subject key identifier:   41:B8:B5:76:0C:F2:A3:1A:9D:16:03:4B:CC:6D:C8:AD:A3:FF:54:F1
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       59C57F88437FD8547BDE17E5131ED538160C8276
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
Signing time:             Tue 11 Mar 2025 19:57:23 +0000
ROA not before:           Tue 11 Mar 2025 19:52:23 +0000
ROA not after:            Tue 10 Mar 2026 19:57:23 +0000
asID:                     268890
IP address blocks:        45.175.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:7f:88:43:7f:d8:54:7b:de:17:e5:13:1e:d5:38:16:0c:82:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Mar 11 19:52:23 2025 GMT
            Not After : Mar 10 19:57:23 2026 GMT
        Subject: CN=41B8B5760CF2A31A9D16034BCC6DC8ADA3FF54F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:5a:7c:de:fd:3d:05:b9:a3:11:6b:08:9b:
                    6a:c8:3f:0a:62:a9:a6:cf:09:ae:d4:3c:74:7f:43:
                    fa:5a:6f:ac:cf:27:9b:c3:17:ac:a9:4b:bf:0d:01:
                    ef:3f:df:8d:f7:4c:df:77:98:45:83:1e:b8:b5:4d:
                    5f:c8:ba:a7:a9:2c:ab:07:31:6c:db:43:4a:37:1a:
                    52:40:43:ab:49:56:70:26:5f:6a:b9:5c:ae:b0:12:
                    69:b4:bf:00:78:96:a6:28:79:55:6f:48:2d:bb:24:
                    30:b4:0f:47:6d:ef:c8:8d:99:61:0d:6a:5b:3b:09:
                    bd:a6:b7:f5:b7:05:9d:be:8e:f1:d7:bf:fd:1a:94:
                    94:f8:71:3a:4a:ce:7e:2d:75:29:14:a6:d2:d8:13:
                    75:71:7e:13:96:a4:9a:a2:df:a7:e4:14:b3:5a:27:
                    d9:95:c3:34:1a:4a:28:81:50:06:3a:3f:df:58:c7:
                    dc:ab:9d:da:45:ea:25:c4:02:9d:c6:f0:33:be:88:
                    e0:15:39:26:fb:56:af:cf:e4:19:20:e9:5b:37:11:
                    74:59:ef:e6:b8:f0:24:70:78:ce:67:e4:07:57:d6:
                    0e:e0:7e:fc:23:b0:88:e5:9d:54:24:b7:9b:58:9a:
                    cc:7e:13:f0:d8:5c:11:92:99:02:e1:a7:41:7c:64:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:B5:76:0C:F2:A3:1A:9D:16:03:4B:CC:6D:C8:AD:A3:FF:54:F1
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:48:6c:8c:17:1e:c7:c4:ed:99:f2:39:8c:6b:96:5d:9b:0c:
         1e:46:b0:86:9e:68:0a:14:2d:b7:48:6b:26:fb:b9:6a:2a:c8:
         eb:c3:f6:b7:5f:7d:4d:2d:bd:3a:4d:b7:d4:98:f1:6f:81:54:
         91:5d:fd:a9:03:48:0a:bd:14:5c:c4:d0:8f:80:fd:3b:bd:3f:
         c3:70:eb:d0:a6:3c:64:e5:6d:fd:f4:02:de:66:e1:42:f0:3e:
         8a:b0:10:c5:a0:5e:82:ce:39:40:14:21:ae:7f:6c:cb:79:eb:
         d8:d9:42:95:f9:3a:3c:a6:3b:82:c0:ba:e4:45:38:d6:3c:eb:
         c9:f0:b2:45:22:50:f2:7d:fb:e9:af:e2:08:dc:b6:fc:4e:8d:
         ad:3a:25:09:ea:d3:c6:d4:62:d2:58:b2:85:0b:c1:a1:30:c6:
         e5:d3:5b:e9:dd:ab:5e:49:0e:dc:34:85:67:17:96:9e:f7:4a:
         73:a7:44:bf:d3:38:e7:51:fa:e3:8f:75:04:e9:71:ae:60:2a:
         65:08:cf:e0:c4:51:94:b9:82:bd:a6:5d:2e:3b:d5:53:57:ab:
         76:c9:bf:67:40:6c:21:a4:12:74:f3:81:a6:50:a6:33:b3:95:
         3a:65:fa:32:25:42:0e:87:9f:8b:86:aa:1f:54:2f:76:7e:ad:
         0a:9b:67:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWcV/iEN/2FR73hflEx7VOBYMgnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2NkU2NDA2QzVCNzJEQzc2RkI0RkFENzNCOUYxMDNG
OTlEMzdFRTAeFw0yNTAzMTExOTUyMjNaFw0yNjAzMTAxOTU3MjNaMDMxMTAvBgNV
BAMTKDQxQjhCNTc2MENGMkEzMUE5RDE2MDM0QkNDNkRDOEFEQTNGRjU0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1L1p83v09BbmjEWsIm2rIPwpi
qabPCa7UPHR/Q/pab6zPJ5vDF6ypS78NAe8/3433TN93mEWDHri1TV/IuqepLKsH
MWzbQ0o3GlJAQ6tJVnAmX2q5XK6wEmm0vwB4lqYoeVVvSC27JDC0D0dt78iNmWEN
als7Cb2mt/W3BZ2+jvHXv/0alJT4cTpKzn4tdSkUptLYE3VxfhOWpJqi36fkFLNa
J9mVwzQaSiiBUAY6P99Yx9yrndpF6iXEAp3G8DO+iOAVOSb7Vq/P5Bkg6Vs3EXRZ
7+a48CRweM5n5AdX1g7gfvwjsIjlnVQkt5tYmsx+E/DYXBGSmQLhp0F8ZBQbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQbi1dgzyoxqdFgNLzG3IraP/VPEwHwYDVR0j
BBgwFoAUpWbmQGxbctx2+0+tc7nxA/mdN+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMC9BNTY2RTY0MDZDNUI3MkRDNzZGQjRGQUQ3M0I5RjEwM0Y5OUQzN0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NjZFNjQwNkM1QjcyREM3
NkZCNEZBRDczQjlGMTAzRjk5RDM3RUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzAv
MzQzNTJlMzEzNzM1MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa9MMA0GCSqGSIb3DQEBCwUAA4IBAQBESGyMFx7H
xO2Z8jmMa5ZdmwweRrCGnmgKFC23SGsm+7lqKsjrw/a3X31NLb06TbfUmPFvgVSR
Xf2pA0gKvRRcxNCPgP07vT/DcOvQpjxk5W399ALeZuFC8D6KsBDFoF6CzjlAFCGu
f2zLeevY2UKV+To8pjuCwLrkRTjWPOvJ8LJFIlDyffvpr+II3Lb8To2tOiUJ6tPG
1GLSWLKFC8GhMMbl01vp3ateSQ7cNIVnF5ae90pzp0S/0zjnUfrjj3UE6XGuYCpl
CM/gxFGUuYK9pl0uO9VTV6t2yb9nQGwhpBJ084GmUKYzs5U6ZfoyJUIOh5+Lhqof
VC92fq0Km2dT
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:33 2025 by rpki-client