Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          zPIX+4ERinmOflmGK3PiuL9FdSVCeQOoVycaFaBm16A=
Subject key identifier:   A3:73:38:44:64:45:77:06:31:1D:63:35:38:14:C6:51:E1:29:6B:19
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       60C0B9AA0F904F67FBE4BF0AE24EF5DA12A84726
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 07 May 2025 18:00:01 +0000
ROA not before:           Wed 07 May 2025 17:55:01 +0000
ROA not after:            Wed 06 May 2026 18:00:01 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 18:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c0:b9:aa:0f:90:4f:67:fb:e4:bf:0a:e2:4e:f5:da:12:a8:47:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: May  7 17:55:01 2025 GMT
            Not After : May  6 18:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:1d:dd:ee:05:f9:c8:96:ea:e0:c1:0e:ee:
                    4b:b6:0a:94:b7:f7:8a:a1:6e:d3:df:90:48:f5:00:
                    28:84:6a:7f:7e:89:75:32:8d:ad:ca:4c:32:b3:fc:
                    cf:e5:ba:ba:46:d5:2f:4e:66:b6:90:fd:60:12:64:
                    35:5b:14:71:6e:0f:7d:58:5d:7c:0b:fa:e2:93:9f:
                    3d:fc:b4:7d:d3:d9:ba:b8:04:7d:db:48:7b:ae:5e:
                    0d:5c:21:ae:d5:b8:03:79:92:94:70:fd:e2:74:d8:
                    83:27:39:75:85:f8:77:20:fe:ae:2c:e8:00:01:8f:
                    52:83:ea:8c:35:b6:5a:97:bf:2c:40:9b:09:5f:07:
                    fc:84:1d:27:35:ad:88:9a:07:24:fc:ba:ca:6c:34:
                    ad:ea:be:f8:12:56:f9:e2:3e:81:8e:ff:f5:07:c3:
                    5c:cf:45:7b:e4:8d:c3:4e:4d:7a:2d:80:33:ab:e9:
                    9e:7d:3a:89:3a:13:41:3b:68:76:62:9a:fc:c6:84:
                    33:50:f4:cd:52:f2:41:1c:22:81:f5:9b:22:47:96:
                    ce:cd:59:99:c4:2f:2f:3d:99:da:6f:bb:0c:8a:18:
                    fc:6f:99:1c:c8:7e:cd:1e:32:e9:a4:dd:56:1b:f9:
                    cd:d7:10:de:99:44:bd:a8:6e:d2:da:68:b8:87:4d:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:73:38:44:64:45:77:06:31:1D:63:35:38:14:C6:51:E1:29:6B:19
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:91:52:8c:fd:18:18:50:26:54:d0:c7:49:04:2b:35:ac:fe:
         cb:b5:8b:e4:fe:2e:21:e7:cd:39:13:27:d4:8b:db:92:29:97:
         04:c5:cf:84:60:91:25:98:9c:86:12:50:76:6c:8d:9f:e1:3b:
         3c:6c:c4:b6:14:a7:7c:9d:2d:4b:00:51:11:97:87:b9:a9:21:
         d9:68:19:b7:83:df:ec:87:c0:01:8b:cf:af:f7:36:0e:6b:d4:
         e5:ed:b6:d6:f4:9f:f7:c5:b1:88:34:c2:ab:6c:f4:2a:ea:42:
         ef:e0:2b:23:86:1b:54:f1:6a:71:2f:49:f1:81:08:77:7a:6f:
         4d:f4:f3:1f:ab:d3:9f:d1:f3:10:ec:fe:20:87:6a:41:47:87:
         c3:32:a7:94:74:65:e5:47:7b:69:ea:b4:08:3a:df:76:42:b0:
         7c:06:bb:28:7f:dc:9b:a0:be:2f:51:ec:73:08:cf:b1:c1:62:
         ad:df:8c:cb:05:a0:23:0f:e1:e0:6d:99:9d:c7:2c:c0:35:1a:
         d5:dc:39:67:6b:d3:56:5a:e1:17:63:48:13:0c:e4:42:8f:84:
         15:21:f7:5d:c6:f1:50:3b:a5:0e:3f:13:16:78:d4:f8:b2:ae:
         0e:0b:cc:66:6a:d6:4a:e1:3a:8d:3e:48:53:af:cb:bf:f5:f3:
         c9:a0:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:16:53 2025 by rpki-client