Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa
File:                     34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa (raw, json)
Hash identifier:          +FrAGbNXAdYP8Pg/39Rwp2kCBHQmS+GNecRIK54X8DY=
Subject key identifier:   23:75:09:9F:21:81:DA:F2:70:67:B9:4D:0E:4F:53:4B:7F:23:A3:50
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       793D3F01E20926E04EF957CE8E3089E4AF593046
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa
Signing time:             Tue 15 Apr 2025 18:06:14 +0000
ROA not before:           Tue 15 Apr 2025 18:01:14 +0000
ROA not after:            Tue 14 Apr 2026 18:06:14 +0000
asID:                     262643
IP address blocks:        45.191.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3d:3f:01:e2:09:26:e0:4e:f9:57:ce:8e:30:89:e4:af:59:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Apr 15 18:01:14 2025 GMT
            Not After : Apr 14 18:06:14 2026 GMT
        Subject: CN=2375099F2181DAF27067B94D0E4F534B7F23A350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:37:74:4a:0d:db:63:99:c8:3b:9a:70:91:
                    12:f1:72:44:d5:d1:86:a7:c9:ef:68:23:99:45:cd:
                    8d:d9:97:af:ec:cc:29:62:23:26:63:db:e8:a3:83:
                    d7:e4:0f:84:3a:55:ba:0b:3d:53:75:a3:6e:19:d4:
                    07:2c:d3:49:5d:ec:4b:b1:e7:3c:a8:62:79:7d:a7:
                    a4:5c:d3:03:3a:71:7d:5d:89:89:8f:2b:3f:ce:f6:
                    72:03:39:95:4f:f3:0d:44:1b:8e:c2:57:35:27:5b:
                    55:85:7e:2c:d5:42:e7:cb:f4:64:d4:dc:60:2f:ec:
                    db:fc:9a:64:dd:be:29:a4:de:1c:fd:c7:34:78:ed:
                    71:c6:9a:52:bf:29:23:69:37:a9:7f:3d:3b:d9:67:
                    4f:09:d6:26:5e:64:ad:2d:22:52:fe:7c:fc:9c:14:
                    cb:ca:d3:a4:13:f9:86:59:f3:a8:b8:08:a5:c4:6e:
                    c5:01:c3:cc:e6:2a:88:9e:da:67:d0:51:a3:85:b2:
                    9e:6a:28:9d:44:ef:50:54:da:60:2b:2e:ac:2f:1c:
                    ce:1a:c9:58:0a:fe:85:ed:e7:93:9c:53:c0:56:3a:
                    dc:2c:10:6d:b5:eb:4f:7c:d5:f7:cd:7e:26:bb:61:
                    a8:0b:a6:9c:9e:12:92:ad:ef:70:f4:59:db:2f:81:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:75:09:9F:21:81:DA:F2:70:67:B9:4D:0E:4F:53:4B:7F:23:A3:50
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:fb:f9:7f:32:9b:d5:37:c0:bb:76:77:33:03:ee:fc:3a:
         ed:53:7c:28:45:2b:c6:c4:77:49:9a:bb:85:75:3d:4b:d2:a5:
         cf:1e:43:61:7a:ec:ed:1e:b3:fb:39:c3:f4:26:48:60:63:af:
         ee:51:d0:f4:47:8d:0d:7d:a7:9b:51:71:1a:8e:84:bc:e9:67:
         42:fd:72:5b:5f:19:27:7c:65:fe:8f:90:78:f7:8a:fb:3f:93:
         16:dc:f9:96:51:cc:72:08:39:60:73:70:fc:bd:50:fa:b1:e4:
         3f:70:dc:b1:74:bb:ce:07:ea:03:a5:50:21:78:8f:5f:93:0e:
         f2:9d:85:4c:92:41:0e:82:a8:dc:d4:a8:0c:18:31:9f:ac:75:
         a4:dd:fe:49:67:18:a3:68:e9:d5:e2:b4:b1:0f:66:cb:ea:a5:
         22:d9:0e:92:d7:d7:22:92:af:41:b9:cc:04:f4:d8:58:24:39:
         54:46:24:e4:b9:c5:6a:0b:61:c6:71:de:a9:bb:3a:1f:27:c1:
         f8:25:26:e7:bc:9c:87:47:f7:d8:dd:50:55:7a:51:54:0a:8f:
         50:d0:bc:7d:c1:18:b2:98:ae:2a:90:92:ec:6d:53:fa:d9:15:
         22:44:a8:11:e5:c1:d2:32:72:1b:0b:31:b6:c5:d3:65:b0:34:
         5d:03:72:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeT0/AeIJJuBO+VfOjjCJ5K9ZMEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1RTA2RjlFNzAzNEYyN0JCMTdCMTdGODU5QkQ1MjNG
MTI0REVEOTAeFw0yNTA0MTUxODAxMTRaFw0yNjA0MTQxODA2MTRaMDMxMTAvBgNV
BAMTKDIzNzUwOTlGMjE4MURBRjI3MDY3Qjk0RDBFNEY1MzRCN0YyM0EzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaADd0Sg3bY5nIO5pwkRLxckTV
0Yanye9oI5lFzY3Zl6/szCliIyZj2+ijg9fkD4Q6VboLPVN1o24Z1Acs00ld7Eux
5zyoYnl9p6Rc0wM6cX1diYmPKz/O9nIDOZVP8w1EG47CVzUnW1WFfizVQufL9GTU
3GAv7Nv8mmTdvimk3hz9xzR47XHGmlK/KSNpN6l/PTvZZ08J1iZeZK0tIlL+fPyc
FMvK06QT+YZZ86i4CKXEbsUBw8zmKoie2mfQUaOFsp5qKJ1E71BU2mArLqwvHM4a
yVgK/oXt55OcU8BWOtwsEG2160981ffNfia7YagLppyeEpKt73D0Wdsvga8VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI3UJnyGB2vJwZ7lNDk9TS38jo1AwHwYDVR0j
BBgwFoAUh14G+ecDTye7F7F/hZvVI/Ek3tkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFZOUdpeWlDUU04WmV3RzdMQVR5eUZSdE43VExoZWlnWVdpdUprSEc0
WWgvMC84NzVFMDZGOUU3MDM0RjI3QkIxN0IxN0Y4NTlCRDUyM0YxMjRERUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NUUwNkY5RTcwMzRGMjdC
QjE3QjE3Rjg1OUJENTIzRjEyNERFRDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhxWTlHaXlpQ1FNOFpld0c3TEFUeXlGUnRON1RMaGVpZ1lXaXVKa0hHNFloLzAv
MzQzNTJlMzEzOTMxMmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItv9wwDQYJKoZIhvcNAQELBQADggEBAAvN+/l/
MpvVN8C7dnczA+78Ou1TfChFK8bEd0mau4V1PUvSpc8eQ2F67O0es/s5w/QmSGBj
r+5R0PRHjQ19p5tRcRqOhLzpZ0L9cltfGSd8Zf6PkHj3ivs/kxbc+ZZRzHIIOWBz
cPy9UPqx5D9w3LF0u84H6gOlUCF4j1+TDvKdhUySQQ6CqNzUqAwYMZ+sdaTd/kln
GKNo6dXitLEPZsvqpSLZDpLX1yKSr0G5zAT02FgkOVRGJOS5xWoLYcZx3qm7Oh8n
wfglJue8nIdH99jdUFV6UVQKj1DQvH3BGLKYriqQkuxtU/rZFSJEqBHlwdIychsL
MbbF02WwNF0Dck8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:08 2025 by rpki-client on console.sobornost.net