Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa
File:                     34352e3138382e33362e302f32332d3233203d3e20323639353038.roa (raw, json)
Hash identifier:          t+YZRhhtCELc5qgWprYNvxduaOTEixYcoSyrCx4TiuM=
Subject key identifier:   82:CB:E5:05:5F:1C:31:C3:B3:4D:08:28:5B:E3:83:E8:23:F7:F5:8A
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       15372D9F0C5E67029713705C8D490A8ECA093112
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:23 +0000
ROA not before:           Fri 14 Mar 2025 21:38:23 +0000
ROA not after:            Fri 13 Mar 2026 21:43:23 +0000
asID:                     269508
IP address blocks:        45.188.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 11:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:2d:9f:0c:5e:67:02:97:13:70:5c:8d:49:0a:8e:ca:09:31:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:23 2025 GMT
            Not After : Mar 13 21:43:23 2026 GMT
        Subject: CN=82CBE5055F1C31C3B34D08285BE383E823F7F58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:15:76:50:72:f5:5a:ca:5a:e7:76:96:e8:
                    26:53:23:45:5b:d6:2d:01:5f:9b:f0:2c:40:34:5e:
                    c7:b9:ff:d7:ec:2d:1d:3c:05:3f:4d:83:8a:bc:73:
                    84:fb:74:be:ad:21:f8:1e:d5:e7:04:4c:9c:f8:df:
                    8c:5a:18:2a:d1:b7:06:43:fb:75:24:41:ae:93:5c:
                    8c:d1:e5:0a:14:12:cd:27:d4:3c:b7:87:50:b8:b5:
                    0b:7c:69:c7:04:94:71:6b:62:35:13:32:0e:96:e8:
                    1d:ff:16:bf:7f:21:98:33:56:10:1a:40:00:59:84:
                    c2:ff:b1:47:77:0f:1e:e7:12:f7:07:52:9f:0f:06:
                    b6:84:08:d1:00:d6:7c:96:10:56:44:47:7c:f5:83:
                    02:24:14:62:ce:d5:55:4f:b9:88:89:c2:49:fe:f9:
                    8b:28:70:29:bc:c5:af:e2:0b:7d:32:ee:29:cf:e3:
                    a6:68:5d:00:33:9f:8b:33:ba:09:a9:2c:a4:df:d3:
                    85:8e:78:e9:20:41:07:b0:9c:76:a1:1d:a5:cc:39:
                    8e:02:c0:cb:60:16:ba:29:48:cc:d3:c1:05:91:cb:
                    40:ea:26:b3:fc:2c:c2:62:f5:50:24:95:4e:4c:7d:
                    d4:0a:b2:16:76:e2:b8:e3:7b:de:64:c3:d0:d7:20:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:E5:05:5F:1C:31:C3:B3:4D:08:28:5B:E3:83:E8:23:F7:F5:8A
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:ef:c3:d7:1a:1a:15:c6:b4:ab:a0:bb:d8:a1:30:bf:67:
         7f:9b:16:3d:91:ff:0c:89:76:a0:e0:0c:2e:1e:4a:26:90:22:
         62:cd:26:20:e2:b6:78:66:1f:16:95:cf:9f:fb:d5:c1:b4:39:
         da:88:40:bc:06:fd:06:0a:8b:35:7a:74:0c:30:ad:9f:73:3f:
         f9:c5:26:d6:39:8c:c5:e7:78:18:e9:81:f3:e7:f6:57:78:13:
         27:ab:7b:b7:76:5c:03:f9:f4:02:69:f0:a7:8b:37:b8:0c:0d:
         94:47:a5:26:40:bc:b6:5a:16:bb:eb:37:ea:37:fc:d0:21:27:
         9d:12:ac:58:22:bb:ce:02:10:48:70:3e:e3:6d:ad:73:68:ee:
         26:89:70:eb:68:23:fc:e3:fb:6e:7e:65:94:4d:3d:00:ad:90:
         7d:34:56:4e:71:e6:af:ff:ea:43:71:2a:8a:df:aa:50:96:02:
         6b:2c:20:f8:68:51:c0:af:c1:d7:13:97:05:56:3a:a7:7b:e0:
         8a:b8:09:11:7e:83:0c:a3:5d:49:2f:67:66:2a:ae:de:04:02:
         48:cf:d6:27:aa:50:7e:6f:77:5b:9c:4e:64:d4:6d:73:3d:84:
         94:d3:74:f5:1b:78:a1:b7:aa:aa:30:cc:79:49:63:9c:75:81:
         63:73:f2:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFTctnwxeZwKXE3BcjUkKjsoJMRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwMjVDM0NFMzc2MzU3OTE4QzA3OEQ4RTYyRDk4OUZG
RDA0MDZFQzAeFw0yNTAzMTQyMTM4MjNaFw0yNjAzMTMyMTQzMjNaMDMxMTAvBgNV
BAMTKDgyQ0JFNTA1NUYxQzMxQzNCMzREMDgyODVCRTM4M0U4MjNGN0Y1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjBV2UHL1Wspa53aW6CZTI0Vb
1i0BX5vwLEA0Xse5/9fsLR08BT9Ng4q8c4T7dL6tIfge1ecETJz434xaGCrRtwZD
+3UkQa6TXIzR5QoUEs0n1Dy3h1C4tQt8accElHFrYjUTMg6W6B3/Fr9/IZgzVhAa
QABZhML/sUd3Dx7nEvcHUp8PBraECNEA1nyWEFZER3z1gwIkFGLO1VVPuYiJwkn+
+YsocCm8xa/iC30y7inP46ZoXQAzn4szugmpLKTf04WOeOkgQQewnHahHaXMOY4C
wMtgFropSMzTwQWRy0DqJrP8LMJi9VAklU5MfdQKshZ24rjje95kw9DXIDWFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgsvlBV8cMcOzTQgoW+OD6CP39YowHwYDVR0j
BBgwFoAUOAJcPON2NXkYwHjY5i2Yn/0EBuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC8zODAyNUMzQ0UzNzYzNTc5MThDMDc4RDhFNjJEOTg5RkZEMDQwNkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4MDI1QzNDRTM3NjM1Nzkx
OEMwNzhEOEU2MkQ5ODlGRkQwNDA2RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzQzNTJlMzEzODM4MmUzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbwkMA0GCSqGSIb3DQEBCwUAA4IBAQBdoO/D1xoa
Fca0q6C72KEwv2d/mxY9kf8MiXag4AwuHkomkCJizSYg4rZ4Zh8Wlc+f+9XBtDna
iEC8Bv0GCos1enQMMK2fcz/5xSbWOYzF53gY6YHz5/ZXeBMnq3u3dlwD+fQCafCn
ize4DA2UR6UmQLy2Wha76zfqN/zQISedEqxYIrvOAhBIcD7jba1zaO4miXDraCP8
4/tufmWUTT0ArZB9NFZOceav/+pDcSqK36pQlgJrLCD4aFHAr8HXE5cFVjqne+CK
uAkRfoMMo11JL2dmKq7eBAJIz9YnqlB+b3dbnE5k1G1zPYSU03T1G3iht6qqMMx5
SWOcdYFjc/K+
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:46:18 2025 by rpki-client