Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa
File:                     34352e3137332e33322e302f32322d3232203d3e20323638383038.roa (raw, json)
Hash identifier:          MEPxMVpBO3VLYov6iVhYFlWFh6O9nVi5+waxilgLnSQ=
Subject key identifier:   40:A4:D0:41:BB:60:8D:19:B3:1C:FD:5C:97:28:F9:30:D8:D2:72:F2
Certificate issuer:       /CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
Certificate serial:       47F5FEFC3C2B59E12FAFB5048011FA303E34852F
Authority key identifier: F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa
Signing time:             Thu 17 Apr 2025 17:42:38 +0000
ROA not before:           Thu 17 Apr 2025 17:37:38 +0000
ROA not after:            Thu 16 Apr 2026 17:42:38 +0000
asID:                     268808
IP address blocks:        45.173.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl
                          rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f5:fe:fc:3c:2b:59:e1:2f:af:b5:04:80:11:fa:30:3e:34:85:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
        Validity
            Not Before: Apr 17 17:37:38 2025 GMT
            Not After : Apr 16 17:42:38 2026 GMT
        Subject: CN=40A4D041BB608D19B31CFD5C9728F930D8D272F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:36:2e:c7:27:32:d6:4c:d6:42:a1:56:57:
                    cf:18:23:bf:b7:29:3f:3f:00:a1:b2:62:55:7f:c2:
                    dc:f8:a8:64:2f:06:2b:07:06:8d:d1:e1:28:cd:55:
                    b3:9c:28:b7:ed:11:40:de:05:2a:f2:66:df:6e:52:
                    bb:5e:c2:80:f1:34:5d:b8:cf:90:af:11:3c:6f:8e:
                    6e:73:e2:75:31:e7:11:12:98:06:e5:22:4c:e9:e3:
                    05:52:93:a1:cb:5c:8a:6a:6a:56:b3:c4:6c:43:6a:
                    d6:14:a3:a5:f5:75:cc:cb:06:b8:e7:f5:b3:98:73:
                    67:05:f2:6c:12:e4:0f:3b:68:f7:95:7f:71:55:54:
                    fb:53:36:f4:0b:7c:6e:73:28:58:69:6d:cd:a3:ec:
                    a2:93:b1:3f:17:8a:71:aa:92:21:41:dc:c5:2d:5e:
                    0f:87:ce:52:33:ad:ee:f5:4e:4e:49:2c:e5:fb:14:
                    52:4b:f0:99:f0:11:d2:f6:cc:f7:3a:1a:0b:38:80:
                    c7:1d:c2:ba:10:ea:17:b3:d6:bc:01:48:3e:9b:a1:
                    8c:86:c0:a5:2d:84:6b:83:c3:bb:f2:63:9c:2f:43:
                    9f:00:7c:7c:b7:23:0c:06:54:70:8c:f4:8f:1d:a5:
                    73:7d:8c:35:4d:8a:fe:6e:fb:23:f1:05:47:96:56:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:D0:41:BB:60:8D:19:B3:1C:FD:5C:97:28:F9:30:D8:D2:72:F2
            X509v3 Authority Key Identifier:
                keyid:F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:f0:a5:61:43:58:1c:12:ea:f4:a2:dd:53:f5:c3:d0:5c:8d:
         5a:f8:0f:b7:ee:93:72:8c:94:a2:f7:57:c4:b9:a6:e7:27:15:
         fd:5a:b0:d0:fa:41:79:3a:77:10:10:e4:3d:16:8a:54:e9:83:
         d7:a0:58:e9:44:25:35:bf:2b:82:80:d4:11:6e:45:2b:31:8f:
         f5:ed:53:d2:be:59:22:7a:44:51:55:28:91:59:d1:d7:7a:73:
         c6:ce:6e:20:d4:38:7d:cd:a4:ca:dd:fc:00:71:e8:50:6f:0c:
         5c:06:e6:db:89:e1:0d:c0:97:45:44:7c:d9:71:61:2a:12:8a:
         2a:32:7a:b0:d5:7f:78:53:ef:00:ff:d6:43:2f:52:6a:89:23:
         41:a0:9b:16:34:22:ab:ab:06:3e:f2:14:cf:bc:cd:33:1d:86:
         7e:5d:4e:58:58:d3:e4:93:94:35:8b:97:9b:77:79:b8:90:55:
         38:68:71:2e:30:21:78:0b:aa:cb:4b:a8:83:a7:cb:7b:d8:22:
         56:e8:df:67:4c:a8:23:e4:c7:28:fb:2d:d4:e0:7b:cf:0b:2e:
         11:61:ee:37:23:4c:bd:a5:75:fa:f6:51:17:09:d5:05:49:b1:
         c0:80:b5:15:96:a7:81:13:48:d8:67:20:fb:8c:66:1c:7b:5b:
         b9:66:c5:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR/X+/DwrWeEvr7UEgBH6MD40hS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNDE0QTI5RjQ5QzgwN0IwRTUwMkNBMjQ5RkI3RTIz
RDlGMkVENzAeFw0yNTA0MTcxNzM3MzhaFw0yNjA0MTYxNzQyMzhaMDMxMTAvBgNV
BAMTKDQwQTREMDQxQkI2MDhEMTlCMzFDRkQ1Qzk3MjhGOTMwRDhEMjcyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aTYuxycy1kzWQqFWV88YI7+3
KT8/AKGyYlV/wtz4qGQvBisHBo3R4SjNVbOcKLftEUDeBSryZt9uUrtewoDxNF24
z5CvETxvjm5z4nUx5xESmAblIkzp4wVSk6HLXIpqalazxGxDatYUo6X1dczLBrjn
9bOYc2cF8mwS5A87aPeVf3FVVPtTNvQLfG5zKFhpbc2j7KKTsT8XinGqkiFB3MUt
Xg+HzlIzre71Tk5JLOX7FFJL8JnwEdL2zPc6Ggs4gMcdwroQ6hez1rwBSD6boYyG
wKUthGuDw7vyY5wvQ58AfHy3IwwGVHCM9I8dpXN9jDVNiv5u+yPxBUeWVitNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQKTQQbtgjRmzHP1clyj5MNjScvIwHwYDVR0j
BBgwFoAU9MQUop9JyAew5QLKJJ+34j2fLtcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVIUll4aFVZeExYRXkycmRpMjQ4MnNvNkI1VWlORnpudlRXc3Q3OUZ1
anIvMC9GNEM0MTRBMjlGNDlDODA3QjBFNTAyQ0EyNDlGQjdFMjNEOUYyRUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0QzQxNEEyOUY0OUM4MDdC
MEU1MDJDQTI0OUZCN0UyM0Q5RjJFRDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1SFJZeGhVWXhMWEV5MnJkaTI0ODJzbzZCNVVpTkZ6bnZUV3N0NzlGdWpyLzAv
MzQzNTJlMzEzNzMzMmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa0gMA0GCSqGSIb3DQEBCwUAA4IBAQCc8KVhQ1gc
Eur0ot1T9cPQXI1a+A+37pNyjJSi91fEuabnJxX9WrDQ+kF5OncQEOQ9FopU6YPX
oFjpRCU1vyuCgNQRbkUrMY/17VPSvlkiekRRVSiRWdHXenPGzm4g1Dh9zaTK3fwA
cehQbwxcBubbieENwJdFRHzZcWEqEooqMnqw1X94U+8A/9ZDL1JqiSNBoJsWNCKr
qwY+8hTPvM0zHYZ+XU5YWNPkk5Q1i5ebd3m4kFU4aHEuMCF4C6rLS6iDp8t72CJW
6N9nTKgj5Mco+y3U4HvPCy4RYe43I0y9pXX69lEXCdUFSbHAgLUVlqeBE0jYZyD7
jGYce1u5ZsXs
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:28 2025 by rpki-client on console.sobornost.net