Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa
File:                     34352e352e31362e302f32322d3234203d3e20323636303833.roa (raw, json)
Hash identifier:          kzVyvkj1RcPUuQaI7IJevW5r4l9WAz4rep4rf6P5uzg=
Subject key identifier:   C3:C8:26:A8:A1:4F:4E:C1:6E:0A:A1:C9:06:CC:F8:09:5B:D7:6B:1D
Certificate issuer:       /CN=87A87992D41AF8237F09E4D559791775A6B6EA10
Certificate serial:       503FD59F887CC92E93B0753D2351AF7E0EF10107
Authority key identifier: 87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa
Signing time:             Thu 06 Mar 2025 22:52:23 +0000
ROA not before:           Thu 06 Mar 2025 22:47:23 +0000
ROA not after:            Thu 05 Mar 2026 22:52:23 +0000
asID:                     266083
IP address blocks:        45.5.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl
                          rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:d5:9f:88:7c:c9:2e:93:b0:75:3d:23:51:af:7e:0e:f1:01:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A87992D41AF8237F09E4D559791775A6B6EA10
        Validity
            Not Before: Mar  6 22:47:23 2025 GMT
            Not After : Mar  5 22:52:23 2026 GMT
        Subject: CN=C3C826A8A14F4EC16E0AA1C906CCF8095BD76B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e3:91:73:6f:80:b4:35:c9:cd:43:d2:14:92:
                    29:32:1e:b1:cc:5a:73:59:c5:61:4f:41:e7:99:ae:
                    93:ed:76:c4:69:74:c4:d1:c8:68:7b:b1:94:fe:c8:
                    7a:9d:9f:b7:26:3e:b8:0f:77:a8:44:5d:b7:e1:53:
                    26:90:1c:2e:18:97:da:2b:4a:13:4c:c7:1d:02:ef:
                    ca:f7:46:38:c1:47:1f:86:81:db:d3:27:a2:e0:66:
                    3f:05:41:4a:07:d1:c8:6e:3d:96:7f:85:54:05:29:
                    aa:59:4a:9b:83:4d:1a:0d:c6:fa:eb:34:1f:97:3e:
                    62:e7:90:91:bc:78:70:de:f7:de:58:fb:82:a0:35:
                    de:3e:05:ce:15:23:6a:b2:7c:5e:29:cd:26:79:00:
                    09:a2:63:53:6a:38:d6:ec:4a:ae:04:ee:09:cf:f0:
                    ed:86:52:ae:13:ca:a5:ad:e4:15:45:11:0f:1f:a5:
                    72:0c:7e:c8:c9:b6:a1:f9:2b:d3:b0:57:0c:bb:02:
                    55:89:86:b8:4e:a7:66:d5:6c:d4:89:03:6c:dc:1f:
                    8d:e7:a0:94:dc:5e:ae:3b:b2:c9:4f:b1:55:e2:9b:
                    31:3e:32:8e:2a:55:cb:70:29:e7:93:86:ca:18:47:
                    63:fd:b4:21:be:75:ae:d2:8e:e5:48:07:49:ce:05:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:26:A8:A1:4F:4E:C1:6E:0A:A1:C9:06:CC:F8:09:5B:D7:6B:1D
            X509v3 Authority Key Identifier:
                keyid:87:A8:79:92:D4:1A:F8:23:7F:09:E4:D5:59:79:17:75:A6:B6:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/87A87992D41AF8237F09E4D559791775A6B6EA10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A87992D41AF8237F09E4D559791775A6B6EA10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/752kCJkQ66LxfheZ7mwidMGKfSgWuRmJLJGhHK9Ae5JL/1/34352e352e31362e302f32322d3234203d3e20323636303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:d1:6c:cf:51:b1:e5:cb:e0:2f:6a:8f:5d:d7:68:73:d8:
         52:1a:e9:6b:e9:57:ab:76:fb:a9:7c:f6:22:46:b2:56:c6:0f:
         36:d8:dd:62:ac:c4:9d:b7:a2:e9:a3:ab:a8:6a:d6:60:bb:47:
         dc:d0:3a:52:50:9b:a3:2c:28:f6:98:e8:55:11:3b:9f:8b:48:
         ce:c7:16:77:f5:9c:62:85:78:9d:e7:d4:52:85:6a:f9:5b:75:
         a3:07:9b:51:9e:51:ce:e4:d4:b9:92:44:92:bb:93:6b:16:37:
         73:64:91:c6:a1:37:2a:c0:29:90:46:9c:c8:0e:f7:5b:30:9a:
         56:29:1d:f5:57:12:17:02:98:e3:c6:e2:4c:7c:18:5e:3a:05:
         0e:c1:10:62:61:6e:22:e2:07:3f:2d:4f:76:23:ff:d5:df:26:
         c7:50:de:be:d0:f9:9c:8b:af:dd:33:87:c7:e3:b6:2e:f3:32:
         6a:f1:40:7e:08:b1:aa:5c:2d:4e:d9:07:76:df:8c:fa:bd:34:
         78:44:29:07:28:1d:00:80:b7:6b:0d:da:3e:0b:65:4e:0d:69:
         fd:f1:76:11:1c:1e:67:de:18:3f:b7:90:a5:44:ed:d6:29:e6:
         d1:19:2e:6e:2b:03:0a:76:7d:bf:96:67:ac:d9:23:46:9a:d7:
         ab:ce:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:24 2025 by rpki-client on console.sobornost.net