Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa
File:                     34352e3137352e32342e302f32332d3233203d3e20323638383739.roa (raw, json)
Hash identifier:          4GY2/GwLodMwxVLDf16v6pvcWourcXhMvpcQKv4lgC8=
Subject key identifier:   99:5B:0D:2E:23:F6:A8:BC:7F:A9:EE:60:26:A4:C3:5F:BA:34:28:6B
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       7AD5FD057952E853BF25D7717838F60D4BFC2744
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa
Signing time:             Thu 06 Mar 2025 07:00:25 +0000
ROA not before:           Thu 06 Mar 2025 06:55:25 +0000
ROA not after:            Thu 05 Mar 2026 07:00:25 +0000
asID:                     268879
IP address blocks:        45.175.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:fd:05:79:52:e8:53:bf:25:d7:71:78:38:f6:0d:4b:fc:27:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar  6 06:55:25 2025 GMT
            Not After : Mar  5 07:00:25 2026 GMT
        Subject: CN=995B0D2E23F6A8BC7FA9EE6026A4C35FBA34286B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:14:e1:cc:5c:3c:86:91:32:07:7c:aa:9a:
                    2a:a3:e9:47:a5:82:f6:1b:c4:e5:73:0f:60:9f:ad:
                    70:d5:a3:32:44:b0:1d:23:7e:b2:03:a3:89:3f:82:
                    2f:ca:0a:5d:7c:59:e7:e5:7c:18:1f:36:bf:c1:18:
                    71:a8:7a:b4:96:83:14:ed:10:83:bc:54:94:ba:2c:
                    2e:47:34:3d:09:45:29:c0:aa:9f:53:fe:a7:d9:bd:
                    60:81:f9:db:43:2c:55:5c:dc:b7:64:74:00:7f:1c:
                    83:76:c1:c8:a6:7f:4f:3a:b8:5a:03:0f:a1:fb:31:
                    1c:08:e8:cc:5c:3a:35:6a:5a:32:50:8d:8a:46:e1:
                    fa:06:81:c9:68:a9:e0:84:91:4c:ca:a6:92:b1:b6:
                    3c:29:d0:3f:43:65:17:f3:da:0c:61:76:89:de:c5:
                    6e:f1:be:03:62:8c:dc:89:7e:00:cc:ff:ab:0a:28:
                    c7:c1:db:a2:be:60:e6:05:10:00:83:4d:ed:f5:cd:
                    55:f8:dc:be:09:3f:59:0d:3a:9f:30:3a:77:29:c2:
                    00:78:a6:b3:87:bc:2c:36:87:93:17:d5:90:cc:22:
                    85:a7:4c:90:4d:2d:7c:dc:01:36:f7:e4:66:db:4d:
                    b0:b3:9b:ae:59:1f:b5:67:78:fa:c4:36:18:b7:e8:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:0D:2E:23:F6:A8:BC:7F:A9:EE:60:26:A4:C3:5F:BA:34:28:6B
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:45:d3:4f:e4:7e:11:26:c0:11:5c:2e:3a:0e:4d:cc:3c:48:
         00:4c:07:5c:ce:a1:49:84:c9:e4:cd:f8:13:66:3b:ed:82:d9:
         03:48:76:2e:8c:57:0c:3c:4b:f0:92:85:fa:03:1f:57:ad:8c:
         e5:e7:78:a4:a8:51:78:88:0f:12:3b:7c:c0:59:6c:03:34:0e:
         a9:a8:6d:54:12:0c:ea:55:34:6a:e4:03:a5:0d:7e:eb:88:21:
         e0:dd:06:a3:e1:cb:83:2f:aa:bb:a1:df:3e:24:bd:a6:24:0d:
         95:19:2d:90:43:12:00:a6:96:dc:08:49:41:02:eb:79:6b:2e:
         57:95:0d:53:b0:97:e2:6d:73:4e:a9:5f:59:19:57:c9:24:9d:
         49:c3:2f:af:ae:94:d2:ac:59:e7:2d:17:59:bb:53:b1:80:41:
         1d:c9:04:4e:c8:a7:37:f4:7a:01:de:ce:17:38:d0:fd:00:e7:
         73:ca:cd:7e:7e:08:be:d3:94:78:89:54:43:1e:a8:1e:45:c8:
         10:18:fe:b7:2e:e0:20:ac:cd:b3:cf:da:b3:d2:f6:ec:e8:1f:
         98:61:3c:7c:81:36:26:84:fe:2e:de:30:2a:50:4c:f2:0c:6c:
         7c:88:b4:30:f9:8a:2d:31:f1:d5:a0:b0:49:fd:04:75:6f:b2:
         fd:f8:76:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUetX9BXlS6FO/JddxeDj2DUv8J0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNTAzMDYwNjU1MjVaFw0yNjAzMDUwNzAwMjVaMDMxMTAvBgNV
BAMTKDk5NUIwRDJFMjNGNkE4QkM3RkE5RUU2MDI2QTRDMzVGQkEzNDI4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUhThzFw8hpEyB3yqmiqj6Uel
gvYbxOVzD2CfrXDVozJEsB0jfrIDo4k/gi/KCl18WeflfBgfNr/BGHGoerSWgxTt
EIO8VJS6LC5HND0JRSnAqp9T/qfZvWCB+dtDLFVc3LdkdAB/HIN2wcimf086uFoD
D6H7MRwI6MxcOjVqWjJQjYpG4foGgcloqeCEkUzKppKxtjwp0D9DZRfz2gxhdone
xW7xvgNijNyJfgDM/6sKKMfB26K+YOYFEACDTe31zVX43L4JP1kNOp8wOncpwgB4
prOHvCw2h5MX1ZDMIoWnTJBNLXzcATb35GbbTbCzm65ZH7VnePrENhi36JUbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmVsNLiP2qLx/qe5gJqTDX7o0KGswHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzQzNTJlMzEzNzM1MmUzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa8YMA0GCSqGSIb3DQEBCwUAA4IBAQCDRdNP5H4R
JsARXC46Dk3MPEgATAdczqFJhMnkzfgTZjvtgtkDSHYujFcMPEvwkoX6Ax9XrYzl
53ikqFF4iA8SO3zAWWwDNA6pqG1UEgzqVTRq5AOlDX7riCHg3Qaj4cuDL6q7od8+
JL2mJA2VGS2QQxIAppbcCElBAut5ay5XlQ1TsJfibXNOqV9ZGVfJJJ1Jwy+vrpTS
rFnnLRdZu1OxgEEdyQROyKc39HoB3s4XOND9AOdzys1+fgi+05R4iVRDHqgeRcgQ
GP63LuAgrM2zz9qz0vbs6B+YYTx8gTYmhP4u3jAqUEzyDGx8iLQw+YotMfHVoLBJ
/QR1b7L9+Har
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:48 2025 by rpki-client