Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          aFHimaCSpd2y92WuD6SdkqRJBok/SVOZTZdbqmPt1Oc=
Subject key identifier:   70:56:84:B5:74:6F:01:8A:83:F5:86:8D:9E:26:DE:FC:D2:88:8E:94
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       12FAAD8DFA96E89E1D9CFC8C2C836A408F10AE37
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 07 May 2025 18:00:00 +0000
ROA not before:           Wed 07 May 2025 17:55:00 +0000
ROA not after:            Wed 06 May 2026 18:00:00 +0000
asID:                     269595
IP address blocks:        45.188.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fa:ad:8d:fa:96:e8:9e:1d:9c:fc:8c:2c:83:6a:40:8f:10:ae:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: May  7 17:55:00 2025 GMT
            Not After : May  6 18:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:bd:14:40:84:fa:b5:76:f5:4d:43:6e:07:
                    7d:b0:68:e9:7f:7c:c9:c3:91:04:f9:3a:65:32:55:
                    81:b5:0f:00:c1:2d:9c:76:7c:2e:ff:db:bb:a0:3d:
                    53:6f:14:ec:12:24:70:99:b7:23:27:ef:b4:65:c4:
                    ec:ab:84:cb:5f:9a:ec:f4:e7:a9:b7:47:67:7d:7d:
                    f6:f7:23:94:b8:f5:d0:60:df:a3:d2:73:72:f6:6b:
                    d9:ee:fc:94:28:dd:a0:71:07:c1:a4:9e:ac:fc:fc:
                    17:34:65:4f:67:73:17:6d:57:3b:bf:cb:84:26:12:
                    42:54:6c:2d:92:6c:f7:76:a8:7f:d9:5b:33:3d:29:
                    3e:7d:91:b7:56:27:a8:02:11:04:3e:a0:e6:02:32:
                    5c:24:fe:9b:b0:2c:e3:84:f0:15:1a:1a:51:37:07:
                    6b:88:1d:0d:86:b0:db:65:6e:d3:3f:80:7e:65:cc:
                    9b:e4:82:17:67:0f:af:0c:67:e3:a3:67:76:b5:b9:
                    f4:7d:6c:8e:8c:69:06:02:8c:41:ea:1c:ea:29:9b:
                    75:23:48:ac:ec:2d:5d:4a:2e:e2:24:6f:09:e3:bb:
                    65:d8:08:cc:3c:3d:9c:dc:c6:33:74:cd:90:34:1f:
                    75:64:fa:92:e1:7f:7f:58:bb:47:88:02:8b:56:0a:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:56:84:B5:74:6F:01:8A:83:F5:86:8D:9E:26:DE:FC:D2:88:8E:94
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233362e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:2e:9b:ca:86:4e:11:e0:e5:35:c7:6e:be:28:51:83:06:a5:
         de:24:11:89:45:d7:2a:71:43:71:90:1e:b6:a7:ca:60:5c:d8:
         40:9f:b5:24:57:e5:33:04:e5:85:f8:b8:0d:34:ed:e6:06:78:
         1a:5c:23:3e:4c:d1:e0:29:02:26:1a:b9:8c:4d:25:17:9b:36:
         e9:f3:36:e4:c5:35:13:fd:89:27:00:6a:c1:80:b6:bf:fa:78:
         ff:bf:1f:cd:a5:0b:c3:5a:dd:1d:ea:02:63:23:e0:4e:3a:24:
         39:f0:60:51:5c:94:2b:11:c1:6a:43:67:e7:6e:79:53:f3:b4:
         67:8b:d0:c7:ac:9f:e0:a5:86:66:14:69:c6:65:01:54:28:12:
         4a:56:99:fb:72:3b:4d:f9:66:0a:af:27:55:07:8f:4f:73:13:
         1d:5e:ea:2c:f1:cd:00:d6:78:53:72:37:6d:aa:f6:8d:04:c9:
         43:b6:88:af:9c:61:fe:80:e6:c0:9b:d1:d8:9f:9f:32:bb:f1:
         6c:80:0d:ec:2c:14:99:0d:e1:ee:c4:ab:45:d9:50:e3:c1:e6:
         ba:f4:05:76:49:dd:55:f9:ae:a7:a3:a8:5f:83:f1:ae:01:d6:
         7b:d2:27:41:4d:f3:fa:97:55:49:66:7b:0b:93:6b:b5:04:46:
         a2:84:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 17:28:41 2025 by rpki-client