Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
File:                     34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa (raw, json)
Hash identifier:          n+NKrmH0iKMlaup99tiTLUbAku7VQx5f+Ustl0keBdw=
Subject key identifier:   98:44:9E:C7:65:9F:86:B0:D8:50:89:E2:F6:7D:A8:83:CC:40:AA:28
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       31139E06A69C5AF04AFC1012BFF988A46D1DA65D
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa
Signing time:             Thu 06 Mar 2025 05:12:14 +0000
ROA not before:           Thu 06 Mar 2025 05:07:14 +0000
ROA not after:            Thu 05 Mar 2026 05:12:14 +0000
asID:                     268901
IP address blocks:        45.175.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
                          rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:13:9e:06:a6:9c:5a:f0:4a:fc:10:12:bf:f9:88:a4:6d:1d:a6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: Mar  6 05:07:14 2025 GMT
            Not After : Mar  5 05:12:14 2026 GMT
        Subject: CN=98449EC7659F86B0D85089E2F67DA883CC40AA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:91:06:29:e2:19:82:ca:bc:7b:a1:b2:d6:
                    a3:c0:17:fd:38:7c:a6:90:db:88:cf:52:5b:6b:7a:
                    61:ed:30:c7:70:ca:09:a3:09:49:f4:8b:05:d1:d7:
                    2a:43:32:0d:75:4b:eb:0e:a5:35:58:5a:29:ef:18:
                    1b:aa:fa:11:8b:01:d0:c9:f4:e1:98:e9:5f:fd:4d:
                    91:fe:c0:58:68:81:77:88:17:89:76:51:32:ef:7b:
                    f5:68:ed:46:17:6b:25:1e:a5:3f:de:7d:34:77:67:
                    9a:dd:3a:25:06:c9:f7:77:c0:d5:f2:ad:f4:1b:67:
                    40:2c:2e:fd:c4:da:c1:d5:20:f9:05:63:41:22:72:
                    58:d1:38:d0:93:ca:ee:39:47:2a:76:bf:04:9b:64:
                    ed:20:8a:d6:36:32:fd:3a:0a:be:6e:27:12:bd:e4:
                    59:0e:41:f9:ec:ff:88:a8:82:c5:08:46:ef:a2:71:
                    83:06:2a:55:81:ae:69:53:a1:80:4d:7b:b4:60:5f:
                    48:6f:60:51:99:e8:f1:06:59:71:3f:8d:b5:b5:b5:
                    df:37:17:34:40:ed:a6:1d:5a:8d:21:53:a3:67:64:
                    58:e7:12:06:21:a2:71:6d:cb:67:3a:ac:df:cb:6b:
                    5f:46:63:42:5b:80:99:01:12:9d:ae:54:a8:83:bf:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:9E:C7:65:9F:86:B0:D8:50:89:E2:F6:7D:A8:83:CC:40:AA:28
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/34352e3137352e3130382e302f32322d3332203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:83:1d:44:88:5b:c6:fa:cc:de:af:97:d9:fb:64:7a:a4:74:
         70:2b:60:8a:1d:ce:ab:6e:06:40:c9:af:04:4d:33:71:88:1b:
         3a:9d:3e:cf:5d:ec:c8:09:22:8d:85:2c:a8:ae:ad:39:f7:bb:
         f2:a0:9b:3d:58:ed:0e:b4:7a:35:5d:9a:37:a1:12:18:3c:09:
         25:08:f2:a5:6a:b9:db:62:d4:71:0f:6c:0f:92:ba:30:0e:75:
         f7:30:7b:d0:3a:f7:ae:d3:45:eb:4f:aa:0a:89:25:29:0f:bc:
         be:9a:2c:89:4e:ae:ad:60:08:e6:a6:e5:13:05:e7:9c:39:70:
         e8:84:b0:bb:94:f2:56:14:31:6b:11:03:61:bb:eb:20:9c:fa:
         b9:99:b9:32:ff:83:31:ac:13:11:d5:d7:6c:c3:c2:cb:87:0a:
         7d:5e:bf:45:3b:15:2b:59:1b:4f:9c:36:2a:24:83:0d:37:77:
         b8:9c:1d:2b:97:46:9e:5a:da:c2:f8:7c:95:59:fc:0a:74:bb:
         99:32:ab:24:e0:4e:c6:95:1a:ad:11:9e:6d:2c:32:55:f1:fa:
         bc:dc:ce:9a:0c:d2:21:a8:e1:55:b1:7a:72:9f:27:0d:7b:7e:
         f8:c5:23:ad:c9:72:7c:c0:67:e8:c0:11:d7:29:b0:d5:47:cb:
         d4:35:79:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMROeBqacWvBK/BASv/mIpG0dpl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4RDBDQkExQUJBMjI2MkEzQUZENUY4MkM2MEVGOTJC
RDU4N0M1MTAeFw0yNTAzMDYwNTA3MTRaFw0yNjAzMDUwNTEyMTRaMDMxMTAvBgNV
BAMTKDk4NDQ5RUM3NjU5Rjg2QjBEODUwODlFMkY2N0RBODgzQ0M0MEFBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTJJEGKeIZgsq8e6Gy1qPAF/04
fKaQ24jPUltremHtMMdwygmjCUn0iwXR1ypDMg11S+sOpTVYWinvGBuq+hGLAdDJ
9OGY6V/9TZH+wFhogXeIF4l2UTLve/Vo7UYXayUepT/efTR3Z5rdOiUGyfd3wNXy
rfQbZ0AsLv3E2sHVIPkFY0EicljRONCTyu45Ryp2vwSbZO0gitY2Mv06Cr5uJxK9
5FkOQfns/4iogsUIRu+icYMGKlWBrmlToYBNe7RgX0hvYFGZ6PEGWXE/jbW1td83
FzRA7aYdWo0hU6NnZFjnEgYhonFty2c6rN/La19GY0JbgJkBEp2uVKiDv7TVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmESex2WfhrDYUIni9n2og8xAqigwHwYDVR0j
BBgwFoAUNY0Muhq6ImKjr9X4LGDvkr1YfFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pQd1RGZDVydXBlb0w2clI0dUttWTJCYnVkVHloZWhGM2ltNlVrcVZD
R24vMS8zNThEMENCQTFBQkEyMjYyQTNBRkQ1RjgyQzYwRUY5MkJENTg3QzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1OEQwQ0JBMUFCQTIyNjJB
M0FGRDVGODJDNjBFRjkyQkQ1ODdDNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6UHdURmQ1cnVwZW9MNnJSNHVLbVkyQmJ1ZFR5aGVoRjNpbTZVa3FWQ0duLzEv
MzQzNTJlMzEzNzM1MmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr2wwDQYJKoZIhvcNAQELBQADggEBAFKDHUSI
W8b6zN6vl9n7ZHqkdHArYIodzqtuBkDJrwRNM3GIGzqdPs9d7MgJIo2FLKiurTn3
u/Kgmz1Y7Q60ejVdmjehEhg8CSUI8qVqudti1HEPbA+SujAOdfcwe9A6967TRetP
qgqJJSkPvL6aLIlOrq1gCOam5RMF55w5cOiEsLuU8lYUMWsRA2G76yCc+rmZuTL/
gzGsExHV12zDwsuHCn1ev0U7FStZG0+cNiokgw03d7icHSuXRp5a2sL4fJVZ/Ap0
u5kyqyTgTsaVGq0Rnm0sMlXx+rzczpoM0iGo4VWxenKfJw17fvjFI63JcnzAZ+jA
EdcpsNVHy9Q1eYk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:32:21 2025 by rpki-client