Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
File:                     34352e3138382e3132302e302f32322d3234203d3e203533303035.roa (raw, json)
Hash identifier:          +k/kvSxFTC5Q+qFSrCSeso0blRY1J7MDqswoUFAgBvk=
Subject key identifier:   FF:54:9C:8C:93:C8:6F:BE:D7:25:71:51:09:23:66:02:EF:15:05:1C
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       1D7A1345497E94F2CFE5628DB706D3C94457F9C8
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa
Signing time:             Thu 06 Mar 2025 05:20:40 +0000
ROA not before:           Thu 06 Mar 2025 05:15:40 +0000
ROA not after:            Thu 05 Mar 2026 05:20:40 +0000
asID:                     53005
IP address blocks:        45.188.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7a:13:45:49:7e:94:f2:cf:e5:62:8d:b7:06:d3:c9:44:57:f9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Mar  6 05:15:40 2025 GMT
            Not After : Mar  5 05:20:40 2026 GMT
        Subject: CN=FF549C8C93C86FBED725715109236602EF15051C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:02:56:02:41:26:5a:4c:df:86:24:a9:f3:
                    d9:03:1e:13:0b:94:30:27:25:53:e5:89:7c:1b:47:
                    f5:02:05:c2:c4:46:0d:47:4a:6b:fe:59:a0:ee:6f:
                    87:fe:8a:88:e5:81:21:30:27:d5:a1:d2:2a:fa:b1:
                    73:f8:37:79:c7:3f:7d:c3:e8:f8:cc:ce:af:32:3b:
                    2a:0c:56:9f:e8:59:72:58:d2:69:e3:15:71:0d:d6:
                    5b:55:7f:dc:c4:1b:b8:59:36:ae:f8:4e:0c:04:5a:
                    74:90:e6:73:8f:a5:7c:c0:30:a2:35:3f:05:71:a6:
                    cc:1c:1f:d6:31:1d:de:15:89:58:32:6f:19:1e:a6:
                    1a:1f:a9:54:dd:c0:6c:95:4b:a2:20:70:26:f8:ad:
                    1a:b0:14:9e:76:70:4e:31:d0:80:8b:a9:81:e8:5f:
                    fe:83:a8:1b:c4:e5:b5:b4:ae:90:4a:cd:9f:2c:e4:
                    17:69:12:b7:c3:6a:09:7c:9a:e2:f1:5b:a4:70:31:
                    8e:4c:3e:81:2d:68:cc:e8:e9:86:aa:dc:04:45:fa:
                    9e:19:e3:e4:5a:ec:f1:d5:a2:61:5e:65:01:10:e3:
                    05:d6:78:b8:48:0a:26:01:c0:3b:01:15:dd:e1:13:
                    8a:85:d4:53:43:10:77:5a:a4:a4:7e:7a:9f:d1:ab:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:54:9C:8C:93:C8:6F:BE:D7:25:71:51:09:23:66:02:EF:15:05:1C
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/34352e3138382e3132302e302f32322d3234203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:e7:7e:73:23:49:89:e5:01:ac:11:e6:84:63:fd:45:88:
         55:94:8a:c2:97:6a:34:85:fd:80:05:5e:9c:98:58:f7:8e:fb:
         ac:59:61:97:eb:71:5c:0a:84:7e:84:f1:1d:e5:48:f8:85:03:
         12:bb:55:b3:74:ca:9e:71:37:fa:65:5e:1e:2d:b3:f0:e4:72:
         40:db:d1:47:e0:60:bf:60:30:ec:e2:22:d4:fe:08:1d:5d:2e:
         cf:9f:df:e6:b7:78:55:bc:f3:16:05:33:f0:00:99:ee:b8:7d:
         c0:29:7e:93:20:9c:26:43:c8:33:bb:85:fc:e3:ce:0c:3a:93:
         d0:89:e6:ea:11:16:c0:53:e5:52:04:e1:23:32:54:3f:dd:26:
         d7:d6:cc:21:2e:61:81:22:34:05:4c:52:5b:9e:d0:46:c7:42:
         ad:1c:d0:19:a1:b2:9c:d5:50:d9:7d:bf:49:80:75:67:9c:3f:
         5f:dd:1c:6c:74:56:7d:29:57:3e:eb:2f:a0:0d:c0:9d:94:e0:
         64:60:08:45:d3:c9:6e:2b:e8:50:77:ba:02:96:55:2a:28:85:
         4f:02:29:27:c3:80:9a:50:f3:d5:65:61:17:95:68:9a:c5:0c:
         f1:56:ec:e0:3a:79:fa:0d:22:a8:94:7b:25:04:47:13:b2:68:
         f4:a6:b7:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHXoTRUl+lPLP5WKNtwbTyURX+cgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc3RkZFMDM3Q0VGNzZBMjAyMTM2MUMxMjBDNUUzREQy
NzgzODI0QzAeFw0yNTAzMDYwNTE1NDBaFw0yNjAzMDUwNTIwNDBaMDMxMTAvBgNV
BAMTKEZGNTQ5QzhDOTNDODZGQkVENzI1NzE1MTA5MjM2NjAyRUYxNTA1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8QJWAkEmWkzfhiSp89kDHhML
lDAnJVPliXwbR/UCBcLERg1HSmv+WaDub4f+iojlgSEwJ9Wh0ir6sXP4N3nHP33D
6PjMzq8yOyoMVp/oWXJY0mnjFXEN1ltVf9zEG7hZNq74TgwEWnSQ5nOPpXzAMKI1
PwVxpswcH9YxHd4ViVgybxkephofqVTdwGyVS6IgcCb4rRqwFJ52cE4x0ICLqYHo
X/6DqBvE5bW0rpBKzZ8s5BdpErfDagl8muLxW6RwMY5MPoEtaMzo6Yaq3ARF+p4Z
4+Ra7PHVomFeZQEQ4wXWeLhICiYBwDsBFd3hE4qF1FNDEHdapKR+ep/Rq3QdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/1ScjJPIb77XJXFRCSNmAu8VBRwwHwYDVR0j
BBgwFoAU53/+A3zvdqICE2HBIMXj3SeDgkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9VSlJWeXZlTjk5VjF0QUVqaWFnWG4xaGsxV1ZGU0tuM1pXNjFvU3hZ
N0MvMi9FNzdGRkUwMzdDRUY3NkEyMDIxMzYxQzEyMEM1RTNERDI3ODM4MjRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3N0ZGRTAzN0NFRjc2QTIw
MjEzNjFDMTIwQzVFM0REMjc4MzgyNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvVUpSVnl2ZU45OVYxdEFFamlhZ1huMWhrMVdWRlNLbjNaVzYxb1N4WTdDLzIv
MzQzNTJlMzEzODM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbx4MA0GCSqGSIb3DQEBCwUAA4IBAQC4Oud+cyNJ
ieUBrBHmhGP9RYhVlIrCl2o0hf2ABV6cmFj3jvusWWGX63FcCoR+hPEd5Uj4hQMS
u1WzdMqecTf6ZV4eLbPw5HJA29FH4GC/YDDs4iLU/ggdXS7Pn9/mt3hVvPMWBTPw
AJnuuH3AKX6TIJwmQ8gzu4X8484MOpPQiebqERbAU+VSBOEjMlQ/3SbX1swhLmGB
IjQFTFJbntBGx0KtHNAZobKc1VDZfb9JgHVnnD9f3RxsdFZ9KVc+6y+gDcCdlOBk
YAhF08luK+hQd7oCllUqKIVPAiknw4CaUPPVZWEXlWiaxQzxVuzgOnn6DSKolHsl
BEcTsmj0prej
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:42 2025 by rpki-client