Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa (raw, json)
Hash identifier:          v2wQBYAaWBNckRj4yreBlFUCEGUI/yqpzw2T+yFGspE=
Subject key identifier:   B8:AA:35:1D:55:9F:89:3F:80:30:E0:6C:79:F3:8B:73:2A:66:B1:9D
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       6A23736962844383B65BBDFB3CE0EF6EECC35BDF
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa
Signing time:             Wed 07 May 2025 18:00:00 +0000
ROA not before:           Wed 07 May 2025 17:55:00 +0000
ROA not after:            Wed 06 May 2026 18:00:00 +0000
asID:                     269595
IP address blocks:        45.188.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:23:73:69:62:84:43:83:b6:5b:bd:fb:3c:e0:ef:6e:ec:c3:5b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: May  7 17:55:00 2025 GMT
            Not After : May  6 18:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:46:cf:a5:c4:c6:16:c9:53:d8:c4:13:2d:
                    02:c8:44:ac:7b:8e:a8:57:de:17:fa:72:35:52:7d:
                    43:c7:53:d1:70:a1:6b:a7:ed:4e:d5:b0:1d:96:9e:
                    33:74:58:7a:48:a0:90:97:d8:12:7c:c3:98:f1:b1:
                    59:bf:dd:e8:a3:86:28:8b:1a:93:3b:a9:3c:40:ab:
                    9f:0e:8e:be:12:21:9f:5f:14:34:42:ff:c9:0a:b8:
                    60:7a:f1:57:ce:7e:ea:78:72:e6:d9:dc:38:b9:cc:
                    a9:71:71:2b:67:c9:b2:db:3a:56:f9:1b:ad:cf:de:
                    ce:e9:06:76:6e:13:4d:ac:00:af:35:df:23:3f:52:
                    8e:61:75:a6:38:f2:43:aa:9f:01:16:f5:fe:5e:6a:
                    30:63:2e:3f:b0:0c:ed:83:27:96:4c:4c:57:8f:80:
                    a9:cc:a8:d8:31:4a:ac:48:39:2c:96:bf:84:f9:a3:
                    76:d1:6e:f6:86:ea:48:a5:61:90:6e:2d:0f:dd:fd:
                    14:fd:2c:a4:13:55:a7:09:9f:34:de:62:af:50:38:
                    eb:2a:87:5d:92:88:3a:d1:ae:43:b3:7d:08:ce:df:
                    35:3d:e5:49:2b:04:36:b0:f3:be:65:16:de:ac:ad:
                    96:8e:ea:42:34:aa:6f:87:08:c7:57:57:db:ce:5a:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:35:1D:55:9F:89:3F:80:30:E0:6C:79:F3:8B:73:2A:66:B1:9D
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32332d3233203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:8b:d7:77:4c:20:b0:9c:3c:57:f5:ce:1c:07:9f:e4:af:
         93:80:a7:c7:f6:b1:36:a5:7d:bb:79:30:90:43:d6:69:f1:5a:
         f9:eb:63:73:54:de:ee:41:19:b4:cb:79:4b:4d:f1:7e:56:6f:
         e7:b6:3b:cb:2a:ce:1a:1e:d8:87:72:b0:73:c5:9a:08:73:0f:
         4c:a9:5f:89:29:b2:41:25:9a:31:3c:04:61:5a:0b:5f:30:e0:
         60:d1:c0:89:05:d9:79:51:b4:0c:8e:be:9f:89:6a:6d:48:f8:
         40:05:1b:96:2e:2d:d4:c6:d8:26:b3:a1:0e:26:4e:53:69:67:
         ed:44:ff:c9:77:37:f6:84:42:ba:30:80:88:ff:c4:18:ad:86:
         1c:3c:f1:ec:90:ee:c3:c6:2d:f4:a5:c1:50:e8:b2:6a:d3:13:
         58:6e:27:04:ff:59:91:a8:9d:df:9e:bf:b3:30:9d:78:11:8c:
         47:ae:3e:d2:fd:ba:e9:03:e1:6d:67:00:98:07:11:55:92:b1:
         eb:59:12:cb:eb:4f:18:c5:52:18:5e:0d:2f:99:4f:89:04:89:
         28:0b:d5:b7:fe:54:c4:76:85:8d:e2:18:af:f6:e7:ff:18:f0:
         57:aa:f5:e8:ab:31:95:49:40:05:f8:c1:c5:4a:4c:e1:b8:3d:
         5a:0b:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:58:22 2025 by rpki-client