Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          yae2/tc4IuB01p1sLb6dlTpo5oUqB/NV+eluOWDDdX4=
Subject key identifier:   ED:CF:F2:1F:59:BD:DE:59:BA:8D:53:43:2D:57:86:59:20:0F:55:9F
Certificate issuer:       /CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
Certificate serial:       5A69AD98EA7E223107A66718B69B0A0D597F7994
Authority key identifier: 79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 07 May 2025 18:00:01 +0000
ROA not before:           Wed 07 May 2025 17:55:01 +0000
ROA not after:            Wed 06 May 2026 18:00:01 +0000
asID:                     269595
IP address blocks:        45.188.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 18:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:69:ad:98:ea:7e:22:31:07:a6:67:18:b6:9b:0a:0d:59:7f:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799A15543A61D6E19DC85BFE993F4E073C4E519C
        Validity
            Not Before: May  7 17:55:01 2025 GMT
            Not After : May  6 18:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:48:f5:33:ab:0f:47:fd:1b:83:c3:98:f7:
                    27:da:35:36:92:b4:97:a3:eb:d4:4f:b6:54:fb:d5:
                    5d:c1:8e:5c:bf:41:e2:82:c9:a1:5e:8e:60:10:e4:
                    7a:88:36:82:56:70:96:0a:2b:52:ce:c1:41:dd:71:
                    71:a6:c6:3d:0e:29:1e:1f:b7:dc:27:e3:92:23:fc:
                    78:94:ed:2d:06:80:48:4f:e6:95:3f:7a:fd:eb:c5:
                    30:01:ba:35:05:c4:06:fe:e4:e2:99:9d:8a:58:ae:
                    bd:0c:10:67:d1:18:2c:96:f7:f7:6a:d9:eb:44:0a:
                    98:c9:f7:0f:f5:ea:a7:c5:55:e1:35:b0:e1:69:86:
                    35:b2:3e:5b:81:e7:0b:91:f7:de:2e:fb:30:85:ab:
                    e8:79:90:90:a3:ef:02:45:df:e5:02:22:1a:e0:a5:
                    b0:19:57:2c:f5:5b:9b:b1:38:b3:cc:b7:44:1d:05:
                    3f:6a:60:16:a9:b0:dc:89:0d:ca:8e:0e:23:0a:50:
                    e9:b9:3c:3c:c4:08:02:12:97:6a:b1:56:34:96:a6:
                    f3:f1:b6:5f:f0:b8:61:13:89:36:53:1b:4f:6d:6f:
                    bf:7a:2b:5c:b5:55:40:95:65:d7:42:f7:18:97:69:
                    65:87:9c:67:37:f9:54:25:7c:fe:8f:5d:46:1e:11:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CF:F2:1F:59:BD:DE:59:BA:8D:53:43:2D:57:86:59:20:0F:55:9F
            X509v3 Authority Key Identifier:
                keyid:79:9A:15:54:3A:61:D6:E1:9D:C8:5B:FE:99:3F:4E:07:3C:4E:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/799A15543A61D6E19DC85BFE993F4E073C4E519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/1/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:8d:fe:19:89:ff:a9:0b:d9:ec:ef:d4:cb:49:28:57:c8:1a:
         9f:f3:91:56:cd:8c:4f:d2:fb:0a:ec:15:74:cd:ee:a4:88:8d:
         b8:6a:1a:63:a7:9a:be:c6:ce:d1:2d:4c:ea:8c:d9:7e:f3:47:
         7d:4f:1b:60:19:63:a4:8c:f8:e4:51:86:1f:90:b8:7c:20:bb:
         35:1a:d1:e8:8b:5e:ee:07:8d:ec:22:b5:e8:6b:a7:fb:bc:6a:
         ce:af:dc:44:d7:21:8d:f3:de:fe:79:35:79:c9:d4:dc:fd:2f:
         cc:5c:45:4e:61:3b:7e:fb:c3:ca:2a:76:c5:e9:af:3d:9e:21:
         36:66:98:0d:e7:c5:b5:fb:9a:3a:29:40:81:24:56:35:1d:f4:
         ce:8d:64:1b:c4:05:14:82:53:11:0b:eb:b2:88:66:b6:8f:4f:
         64:f5:e7:97:ae:c7:9e:c0:c7:93:23:98:a4:54:89:dc:aa:fa:
         6b:e8:58:11:23:a3:05:54:dd:10:75:a2:4d:d4:0c:7a:63:cc:
         5e:75:c9:e1:89:9f:f3:b3:31:ae:88:87:52:41:4e:b0:6f:2a:
         7d:4c:00:0d:60:b5:8b:3d:b7:c7:e8:85:dc:56:20:7d:8b:49:
         6f:0c:87:7a:ab:c4:7d:99:74:ea:7a:7e:11:ac:33:71:a0:ad:
         2f:5c:99:e2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUWmmtmOp+IjEHpmcYtpsKDVl/eZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5QTE1NTQzQTYxRDZFMTlEQzg1QkZFOTkzRjRFMDcz
QzRFNTE5QzAeFw0yNTA1MDcxNzU1MDFaFw0yNjA1MDYxODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkREODQ4RjUzM0FCMEY0N0ZE
MUI4M0MzOThGNzI3REEzNTM2OTJCNDk3QTNFQkQ0NEZCNjU0RkJENTVEQzE4RTVD
QkY0MUUyODJDOUExNUU4RTYwMTBFNDdBODgzNjgyNTY3MDk2MEEyQjUyQ0VDMTQx
REQ3MTcxQTZDNjNEMEUyOTFFMUZCN0RDMjdFMzkyMjNGQzc4OTRFRDJEMDY4MDQ4
NEZFNjk1M0Y3QUZERUJDNTMwMDFCQTM1MDVDNDA2RkVFNEUyOTk5RDhBNThBRUJE
MEMxMDY3RDExODJDOTZGN0Y3NkFEOUVCNDQwQTk4QzlGNzBGRjVFQUE3QzU1NUUx
MzVCMEUxNjk4NjM1QjIzRTVCODFFNzBCOTFGN0RFMkVGQjMwODVBQkU4Nzk5MDkw
QTNFRjAyNDVERkU1MDIyMjFBRTBBNUIwMTk1NzJDRjU1QjlCQjEzOEIzQ0NCNzQ0
MUQwNTNGNkE2MDE2QTlCMERDODkwRENBOEUwRTIzMEE1MEU5QjkzQzNDQzQwODAy
MTI5NzZBQjE1NjM0OTZBNkYzRjFCNjVGRjBCODYxMTM4OTM2NTMxQjRGNkQ2RkJG
N0EyQjVDQjU1NTQwOTU2NUQ3NDJGNzE4OTc2OTY1ODc5QzY3MzdGOTU0MjU3Q0ZF
OEY1RDQ2MUUxMTk2NUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvdhI9TOrD0f9G4PDmPcn2jU2krSXo+vUT7ZU+9VdwY5cv0Higsmh
Xo5gEOR6iDaCVnCWCitSzsFB3XFxpsY9DikeH7fcJ+OSI/x4lO0tBoBIT+aVP3r9
68UwAbo1BcQG/uTimZ2KWK69DBBn0Rgslvf3atnrRAqYyfcP9eqnxVXhNbDhaYY1
sj5bgecLkffeLvswhavoeZCQo+8CRd/lAiIa4KWwGVcs9VubsTizzLdEHQU/amAW
qbDciQ3Kjg4jClDpuTw8xAgCEpdqsVY0lqbz8bZf8LhhE4k2UxtPbW+/eitctVVA
lWXXQvcYl2llh5xnN/lUJXz+j11GHhGWXQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FO3P8h9Zvd5Zuo1TQy1XhlkgD1WfMB8GA1UdIwQYMBaAFHmaFVQ6Ydbhnchb/pk/
Tgc8TlGcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVHRENpcmdoUXZCYUpY
OXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzEvNzk5QTE1NTQzQTYxRDZF
MTlEQzg1QkZFOTkzRjRFMDczQzRFNTE5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83OTlBMTU1NDNBNjFENkUxOURDODVCRkU5OTNGNEUwNzNDNEU1
MTlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81R0RDaXJnaFF2QmFKWDlyV2tL
MXdSUGc1QTZRcjk3bzVCZEpiUVRtWWRQNi8xLzM0MzUyZTMxMzgzODJlMzIzMzM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzUzOTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbzvMA0GCSqGSIb3DQEBCwUAA4IBAQC/jf4Zif+pC9ns79TLSShXyBqf85FWzYxP
0vsK7BV0ze6kiI24ahpjp5q+xs7RLUzqjNl+80d9TxtgGWOkjPjkUYYfkLh8ILs1
GtHoi17uB43sIrXoa6f7vGrOr9xE1yGN897+eTV5ydTc/S/MXEVOYTt++8PKKnbF
6a89niE2ZpgN58W1+5o6KUCBJFY1HfTOjWQbxAUUglMRC+uyiGa2j09k9eeXrsee
wMeTI5ikVIncqvpr6FgRI6MFVN0QdaJN1Ax6Y8xedcnhiZ/zszGuiIdSQU6wbyp9
TAANYLWLPbfH6IXcViB9i0lvDId6q8R9mXTqen4RrDNxoK0vXJni
-----END CERTIFICATE-----
Generated at Sat May 17 23:23:26 2025 by rpki-client