Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3332203d3e20323636393331.roa
File:                     34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (raw, json)
Hash identifier:          ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=
Subject key identifier:   43:87:3F:27:58:F4:72:C7:F3:C5:FC:72:AF:43:B1:5A:53:88:18:34
Certificate issuer:       /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE
Certificate serial:       4B182077F76BCC4F6F5F27DDC8F11248200E52BB
Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3332203d3e20323636393331.roa
Signing time:             Sun 02 Mar 2025 14:05:30 +0000
ROA not before:           Sun 02 Mar 2025 14:00:30 +0000
ROA not after:            Sun 01 Mar 2026 14:05:30 +0000
asID:                     266931
IP address blocks:        45.225.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl
                          rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:20:77:f7:6b:cc:4f:6f:5f:27:dd:c8:f1:12:48:20:0e:52:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE
        Validity
            Not Before: Mar  2 14:00:30 2025 GMT
            Not After : Mar  1 14:05:30 2026 GMT
        Subject: CN=43873F2758F472C7F3C5FC72AF43B15A53881834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:6d:a1:8a:46:90:80:f8:fe:bd:61:54:6d:
                    3a:27:3f:77:d6:8f:eb:04:6c:b2:b2:c6:cc:40:c3:
                    49:14:d5:37:46:d8:af:ec:b6:84:d5:36:55:0c:1c:
                    6e:85:a4:db:34:6a:ec:01:ef:0f:ff:ad:e8:a6:da:
                    56:28:2b:e3:73:20:be:02:56:fe:dd:f9:a8:6d:3d:
                    83:b8:af:d8:46:29:2d:98:90:5a:98:be:5e:5b:ab:
                    63:24:ab:46:d1:e4:a9:66:6d:1e:88:0b:9b:ea:15:
                    06:2f:81:da:7c:d8:39:3a:f9:2b:9b:97:66:da:dc:
                    50:3d:88:b9:ca:53:bf:11:d5:04:9c:bf:9e:a3:64:
                    c5:46:12:12:e4:ec:02:59:ab:25:1e:2b:07:02:f9:
                    b9:58:7e:f4:c9:e5:c5:dc:ec:ec:10:52:d3:63:0b:
                    1c:23:5c:06:5c:53:ed:24:8c:c4:55:70:25:d1:20:
                    1a:0c:1e:c8:92:49:70:da:7b:9d:7e:20:75:82:98:
                    79:00:21:fa:e1:08:06:f4:99:34:70:6e:b0:8c:66:
                    ee:7a:2e:8b:8a:e5:c7:35:bf:77:0a:f2:be:9b:6e:
                    ac:38:f5:cb:fa:c9:a1:86:5e:d6:61:7e:81:fc:08:
                    af:43:b3:47:46:a9:0c:88:e7:61:d9:33:99:42:c9:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:3F:27:58:F4:72:C7:F3:C5:FC:72:AF:43:B1:5A:53:88:18:34
            X509v3 Authority Key Identifier:
                keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/34352e3232352e38342e302f32322d3332203d3e20323636393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:a2:90:16:42:ef:ab:ab:0b:f6:39:fc:5b:c8:36:a8:58:98:
         98:12:4a:d6:4b:a1:e4:eb:67:a6:01:05:d9:d3:41:d9:7e:3b:
         05:da:eb:7f:eb:65:c7:d1:2f:6c:ef:f8:15:fb:fd:f9:21:7e:
         2c:9a:ea:2c:a1:b2:e2:e5:f6:07:b9:0c:fd:d9:da:da:87:4a:
         92:6b:a9:df:08:0c:b3:9d:4b:c7:cd:55:2f:00:62:54:77:5a:
         c1:f3:f4:fc:cd:ab:47:c9:01:1b:b4:0a:cb:a7:73:93:16:39:
         71:33:50:fb:9a:2d:81:02:8e:f9:b2:a9:18:1f:3c:ce:24:cf:
         ad:85:63:b8:dc:24:0f:f0:be:d5:51:55:e4:18:4c:ea:6b:33:
         19:8f:c5:16:f7:76:84:56:0f:41:3a:bb:d6:05:46:97:2c:a4:
         1a:e4:f2:f2:fc:29:c4:33:54:9b:b9:fa:63:ec:91:06:41:63:
         6c:eb:7b:b1:3f:f5:0b:76:3d:c8:75:22:b5:2b:a5:01:05:68:
         92:84:fa:fc:67:b4:27:93:9d:f3:10:ea:da:83:4e:74:a2:d9:
         26:1c:66:f1:2e:c0:9f:af:dd:cc:ac:06:50:bb:03:8a:20:21:
         ad:44:b9:8f:94:7a:6e:5e:49:b0:e3:a1:e0:30:82:6e:c3:cc:
         f2:2f:b3:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSxggd/drzE9vXyfdyPESSCAOUrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF
QjU1OENDRTAeFw0yNTAzMDIxNDAwMzBaFw0yNjAzMDExNDA1MzBaMDMxMTAvBgNV
BAMTKDQzODczRjI3NThGNDcyQzdGM0M1RkM3MkFGNDNCMTVBNTM4ODE4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKe22hikaQgPj+vWFUbTonP3fW
j+sEbLKyxsxAw0kU1TdG2K/stoTVNlUMHG6FpNs0auwB7w//reim2lYoK+NzIL4C
Vv7d+ahtPYO4r9hGKS2YkFqYvl5bq2Mkq0bR5KlmbR6IC5vqFQYvgdp82Dk6+Sub
l2ba3FA9iLnKU78R1QScv56jZMVGEhLk7AJZqyUeKwcC+blYfvTJ5cXc7OwQUtNj
CxwjXAZcU+0kjMRVcCXRIBoMHsiSSXDae51+IHWCmHkAIfrhCAb0mTRwbrCMZu56
LouK5cc1v3cK8r6bbqw49cv6yaGGXtZhfoH8CK9Ds0dGqQyI52HZM5lCyVDdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ4c/J1j0csfzxfxyr0OxWlOIGDQwHwYDVR0j
BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt
SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx
MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBdExlR0VqTUczaUFRYVBDWHJTNlRtdW9Ed0RFazVNQTEzR2M5bnVzbUs1LzAv
MzQzNTJlMzIzMjM1MmUzODM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzkzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeFUMA0GCSqGSIb3DQEBCwUAA4IBAQDCopAWQu+r
qwv2OfxbyDaoWJiYEkrWS6Hk62emAQXZ00HZfjsF2ut/62XH0S9s7/gV+/35IX4s
muosobLi5fYHuQz92drah0qSa6nfCAyznUvHzVUvAGJUd1rB8/T8zatHyQEbtArL
p3OTFjlxM1D7mi2BAo75sqkYHzzOJM+thWO43CQP8L7VUVXkGEzqazMZj8UW93aE
Vg9BOrvWBUaXLKQa5PLy/CnEM1Sbufpj7JEGQWNs63uxP/ULdj3IdSK1K6UBBWiS
hPr8Z7Qnk53zEOrag050otkmHGbxLsCfr93MrAZQuwOKICGtRLmPlHpuXkmw46Hg
MIJuw8zyL7Mj
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:52:38 2025 by rpki-client