Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3234203d3e20323638303536.roa
File:                     34352e3136382e39302e302f32332d3234203d3e20323638303536.roa (raw, json)
Hash identifier:          lwNOoVfAEnOCR5mGAjNdfdUogstMGsdd4lQkM6s0BO8=
Subject key identifier:   C2:AE:B6:1D:24:2E:03:69:ED:E0:21:E4:7D:72:2D:9E:6B:2A:8F:55
Certificate issuer:       /CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
Certificate serial:       453A65ED22C44887C562968BB7BD4058C7B5AE3A
Authority key identifier: DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3234203d3e20323638303536.roa
Signing time:             Fri 02 May 2025 02:57:43 +0000
ROA not before:           Fri 02 May 2025 02:52:43 +0000
ROA not after:            Fri 01 May 2026 02:57:43 +0000
asID:                     268056
IP address blocks:        45.168.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl
                          rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:65:ed:22:c4:48:87:c5:62:96:8b:b7:bd:40:58:c7:b5:ae:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87340EA623C9B39964EFC8DDA9AE6B524BF50C
        Validity
            Not Before: May  2 02:52:43 2025 GMT
            Not After : May  1 02:57:43 2026 GMT
        Subject: CN=C2AEB61D242E0369EDE021E47D722D9E6B2A8F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:c5:f4:48:95:06:fd:38:53:aa:f3:5e:4c:
                    a8:4a:05:38:f0:19:58:28:da:0f:df:b3:d0:a6:e6:
                    1e:dc:38:da:45:08:e8:d0:ad:28:92:a8:05:8e:c5:
                    d4:fd:37:d9:15:3d:f1:8e:b6:c0:a9:37:a9:bc:cc:
                    73:bc:d6:0f:56:a7:7e:b9:20:27:71:4d:5f:18:f2:
                    81:61:1e:db:17:8d:b8:18:29:2a:96:49:68:1c:53:
                    72:02:e7:fe:eb:98:f2:1a:dc:8c:79:27:0f:5a:83:
                    20:9e:ce:fe:e2:58:ca:1e:32:73:00:ba:0b:94:16:
                    e6:c7:68:5a:2f:89:9f:c7:40:24:0f:a3:ea:53:17:
                    c6:39:d4:a1:c6:10:b9:25:59:67:7b:de:e5:44:54:
                    5b:88:c6:76:4a:45:a5:24:fa:95:65:3b:65:ab:03:
                    fe:03:8a:20:f0:99:0c:5a:b9:f7:ce:22:02:8a:f1:
                    14:12:8d:8f:b2:94:0a:b0:bf:5d:e3:65:21:7f:0a:
                    b2:e0:63:fe:58:c2:b9:80:32:93:0e:a8:43:49:24:
                    45:07:53:87:d0:5e:6e:3e:ad:12:49:ba:cb:83:5a:
                    58:c6:38:b5:22:4c:29:c5:46:3e:7e:43:d5:de:e7:
                    22:b2:91:0b:6b:75:83:0a:7a:26:58:a1:1b:9f:c7:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AE:B6:1D:24:2E:03:69:ED:E0:21:E4:7D:72:2D:9E:6B:2A:8F:55
            X509v3 Authority Key Identifier:
                keyid:DB:87:34:0E:A6:23:C9:B3:99:64:EF:C8:DD:A9:AE:6B:52:4B:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87340EA623C9B39964EFC8DDA9AE6B524BF50C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/0/34352e3136382e39302e302f32332d3234203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:b9:5a:92:3d:31:76:be:99:67:cb:15:6d:8e:4c:92:76:c5:
         80:aa:77:66:80:ae:9b:f0:19:7a:00:95:ad:04:f0:0f:0d:c5:
         16:56:63:57:41:ec:4a:71:2f:33:67:e2:fa:05:20:c7:84:64:
         18:3c:7b:14:85:2b:6a:03:ee:d6:c8:e0:fc:f9:31:f2:91:da:
         e3:3e:9e:32:73:c5:ff:52:e6:5b:4e:1f:a6:3f:13:9e:bf:21:
         3f:31:bd:5c:41:a2:0e:d7:6b:95:a2:ce:38:25:3e:fe:0a:f3:
         10:46:c4:fa:f7:09:17:48:cb:3d:68:cb:9c:3c:6b:a4:df:71:
         7f:04:30:44:9d:4a:ca:67:3c:ca:ff:01:4c:c8:a6:3b:3b:6a:
         c6:c5:17:1f:c4:df:6e:e2:53:3d:18:e2:cb:09:f3:69:e8:33:
         4f:a5:b8:8b:07:e8:d9:82:ed:c2:cc:64:5a:a3:89:7b:2c:7a:
         4e:e6:e1:10:ab:c8:ad:03:26:e5:7b:50:d6:3d:1f:cc:dd:df:
         70:bf:7e:ac:7c:15:ac:96:af:ba:3f:08:ca:8c:8f:9f:8c:67:
         af:ec:f2:b6:9d:87:e7:5c:26:1a:04:38:c0:6c:a9:a1:55:ed:
         f9:a6:1a:5b:8d:7d:41:be:49:5e:d5:05:1c:f6:a4:9a:97:28:
         1e:0c:10:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURTpl7SLESIfFYpaLt71AWMe1rjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4NzM0MEVBNjIzQzlCMzk5NjRFRkM4RERBOUFFNkI1
MjRCRjUwQzAeFw0yNTA1MDIwMjUyNDNaFw0yNjA1MDEwMjU3NDNaMDMxMTAvBgNV
BAMTKEMyQUVCNjFEMjQyRTAzNjlFREUwMjFFNDdENzIyRDlFNkIyQThGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI8X0SJUG/ThTqvNeTKhKBTjw
GVgo2g/fs9Cm5h7cONpFCOjQrSiSqAWOxdT9N9kVPfGOtsCpN6m8zHO81g9Wp365
ICdxTV8Y8oFhHtsXjbgYKSqWSWgcU3IC5/7rmPIa3Ix5Jw9agyCezv7iWMoeMnMA
uguUFubHaFoviZ/HQCQPo+pTF8Y51KHGELklWWd73uVEVFuIxnZKRaUk+pVlO2Wr
A/4DiiDwmQxauffOIgKK8RQSjY+ylAqwv13jZSF/CrLgY/5YwrmAMpMOqENJJEUH
U4fQXm4+rRJJusuDWljGOLUiTCnFRj5+Q9Xe5yKykQtrdYMKeiZYoRufx7apAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwq62HSQuA2nt4CHkfXItnmsqj1UwHwYDVR0j
BBgwFoAU24c0DqYjybOZZO/I3amua1JL9QwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pxRm9DS3ZYd0VpQzZOZWVuY3o2RHdRekp6S25GdVFjMlFKaTQ3V3Vn
RmEvMC9EQjg3MzQwRUE2MjNDOUIzOTk2NEVGQzhEREE5QUU2QjUyNEJGNTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODczNDBFQTYyM0M5QjM5
OTY0RUZDOEREQTlBRTZCNTI0QkY1MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dacUZvQ0t2WHdFaUM2TmVlbmN6NkR3UXpKektuRnVRYzJRSmk0N1d1Z0ZhLzAv
MzQzNTJlMzEzNjM4MmUzOTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLahaMA0GCSqGSIb3DQEBCwUAA4IBAQBTuVqSPTF2
vplnyxVtjkySdsWAqndmgK6b8Bl6AJWtBPAPDcUWVmNXQexKcS8zZ+L6BSDHhGQY
PHsUhStqA+7WyOD8+THykdrjPp4yc8X/UuZbTh+mPxOevyE/Mb1cQaIO12uVos44
JT7+CvMQRsT69wkXSMs9aMucPGuk33F/BDBEnUrKZzzK/wFMyKY7O2rGxRcfxN9u
4lM9GOLLCfNp6DNPpbiLB+jZgu3CzGRao4l7LHpO5uEQq8itAyble1DWPR/M3d9w
v36sfBWslq+6PwjKjI+fjGev7PK2nYfnXCYaBDjAbKmhVe35phpbjX1Bvkle1QUc
9qSalygeDBA4
-----END CERTIFICATE-----
Generated at Wed Jun 11 01:54:10 2025 by rpki-client