Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33392e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          LbKlUIYcNxtv5sYMZNyUAU2PljLlb0OdN553PBDCEyM=
Subject key identifier:   E1:8F:B5:AE:E1:B1:EF:E2:AB:E5:E3:97:E4:E0:EC:21:DB:E5:D8:08
Certificate issuer:       /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial:       2145A8F8B6FA15CA0A70C45C63FF2CB73DF90B97
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa
Signing time:             Fri 14 Mar 2025 21:43:19 +0000
ROA not before:           Fri 14 Mar 2025 21:38:19 +0000
ROA not after:            Fri 13 Mar 2026 21:43:19 +0000
asID:                     269508
IP address blocks:        45.188.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
                          rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:a8:f8:b6:fa:15:ca:0a:70:c4:5c:63:ff:2c:b7:3d:f9:0b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
        Validity
            Not Before: Mar 14 21:38:19 2025 GMT
            Not After : Mar 13 21:43:19 2026 GMT
        Subject: CN=E18FB5AEE1B1EFE2ABE5E397E4E0EC21DBE5D808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:f8:80:0f:24:7a:4a:36:e9:97:ab:bf:7b:
                    76:5a:c2:6d:1c:8d:1d:71:80:ad:a0:df:89:05:b4:
                    7f:e4:38:03:63:04:c7:72:9c:1d:65:ec:0f:f8:f9:
                    1d:c4:8a:e6:d8:0f:ac:d9:38:c1:15:b6:83:de:cf:
                    9e:49:29:8b:40:ad:62:3f:ce:90:c4:3e:4d:6c:07:
                    42:08:04:33:8e:e0:35:61:9e:dc:ba:b4:d1:7d:93:
                    59:d9:6b:a4:42:d5:08:51:c3:60:44:8e:d0:dc:94:
                    0f:9a:20:d1:04:6c:57:19:e9:fd:93:3a:d0:05:31:
                    0b:77:9d:d5:c5:6e:91:9c:24:ad:cb:5e:18:9c:60:
                    dd:7b:51:a2:f4:47:60:19:64:ae:48:1f:24:ab:a0:
                    dc:19:22:d0:56:a9:44:a2:8c:90:3f:0a:31:c2:38:
                    3c:78:f4:b0:89:34:db:fb:f3:94:20:fd:2d:5a:22:
                    c7:ff:96:d6:6a:a3:fa:d8:9e:c3:21:4b:e7:bb:00:
                    d7:6d:81:2e:b0:6a:6f:0c:4f:17:a7:5b:08:94:57:
                    5c:a6:a3:a0:3c:c3:81:b2:e4:90:e7:b6:2e:4e:09:
                    8c:b2:45:69:7a:83:9a:d6:0b:ef:04:e9:d8:ef:09:
                    82:a5:7f:27:d5:b6:66:cb:2d:01:76:45:ea:01:66:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:B5:AE:E1:B1:EF:E2:AB:E5:E3:97:E4:E0:EC:21:DB:E5:D8:08
            X509v3 Authority Key Identifier:
                keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33392e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2e:34:4d:fa:2b:40:80:2f:7f:58:a3:b1:4c:7d:3a:54:0c:
         7b:99:49:3c:ce:e5:c7:09:33:ef:f1:52:d1:b7:37:95:8c:9a:
         5b:fc:65:33:fa:6c:d5:19:a3:d5:8b:f6:b6:44:df:8d:3e:66:
         a6:f7:ca:f4:a9:c9:95:b7:86:bb:c6:41:72:80:8a:69:75:f7:
         86:e9:9e:17:6d:23:81:91:2d:13:3d:88:b6:dd:d5:37:42:5d:
         b3:00:8a:18:35:4a:22:7b:26:75:70:4d:a3:4d:f8:68:d7:d7:
         2d:77:e9:91:f0:49:3a:81:2a:fd:29:2d:62:a9:3c:68:00:cb:
         1d:df:fc:a1:db:ba:3b:30:be:db:de:64:10:07:63:bf:9e:5c:
         93:63:37:ee:eb:f6:db:a9:70:c8:ff:22:36:36:71:e0:82:9a:
         f4:d2:10:7f:7a:6d:f1:4c:07:69:8d:5b:e3:21:d4:4e:ea:76:
         13:58:1e:28:07:c4:39:9a:d4:e0:c0:d1:23:0f:8c:b3:6e:c3:
         d1:83:52:60:27:6b:a0:06:2d:4c:fb:22:22:60:36:85:fd:8a:
         e7:5e:67:3f:7b:e4:f8:6c:a5:14:11:ac:b8:cc:b3:90:41:63:
         77:33:06:e8:5d:f4:a6:f9:40:7d:7c:3f:6d:28:47:d2:43:ec:
         8f:80:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:56:16 2025 by rpki-client