Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32322d3232203d3e20323639303338.roa
File:                     34352e3137372e3137322e302f32322d3232203d3e20323639303338.roa (raw, json)
Hash identifier:          TrUEwXY6lblKU4iJzGBbHOn/zdNcFLQwv82H8WaFsqY=
Subject key identifier:   E5:7D:61:83:4A:85:BA:33:46:EA:18:B5:1B:48:3B:6F:66:BF:C3:6A
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       1D88852BA1B33E5A49EA6F61E3C28F0B54D64D60
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32322d3232203d3e20323639303338.roa
Signing time:             Mon 05 May 2025 13:04:22 +0000
ROA not before:           Mon 05 May 2025 12:59:22 +0000
ROA not after:            Mon 04 May 2026 13:04:22 +0000
asID:                     269038
IP address blocks:        45.177.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:88:85:2b:a1:b3:3e:5a:49:ea:6f:61:e3:c2:8f:0b:54:d6:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: May  5 12:59:22 2025 GMT
            Not After : May  4 13:04:22 2026 GMT
        Subject: CN=E57D61834A85BA3346EA18B51B483B6F66BFC36A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:00:0d:1c:db:c7:9d:fa:98:c9:b2:a8:4e:
                    f2:f0:e0:7c:d1:3d:61:a1:5f:96:49:fd:90:de:61:
                    fc:aa:58:40:23:5b:42:3f:c6:70:1c:fa:d1:8c:e4:
                    9f:d7:2c:bd:21:c3:8c:da:96:4b:30:57:7f:fb:36:
                    01:00:d9:ae:b9:d5:86:7a:d9:47:4e:1b:e1:3b:87:
                    db:49:6b:0f:95:56:b2:51:b6:33:dd:f3:cc:d2:bd:
                    b0:39:8a:a8:64:9a:ba:cd:e4:70:ce:2a:20:64:9f:
                    54:a6:02:e7:b6:c2:eb:eb:b4:3b:c0:9f:2d:85:ec:
                    3f:b0:f0:39:8e:29:03:60:b3:e5:31:0d:aa:36:63:
                    1a:8a:2f:a7:60:24:ad:ee:5f:22:b7:01:6c:bc:7b:
                    51:c4:8f:1a:67:cc:68:0f:27:a2:48:20:69:e8:d2:
                    37:6f:84:eb:b2:c8:f6:af:d8:24:9f:fb:f8:c0:df:
                    00:cc:ae:72:63:78:08:97:97:b9:14:9b:db:e8:98:
                    20:46:95:f5:b9:f6:28:01:00:ac:01:f4:61:ec:92:
                    b3:eb:92:5a:c6:93:a9:82:2c:4c:2f:fb:a4:bb:08:
                    f0:44:18:ec:59:9a:43:76:13:db:06:97:97:c1:f7:
                    ea:63:c1:71:d8:5a:94:36:3d:cd:31:30:38:95:ec:
                    da:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7D:61:83:4A:85:BA:33:46:EA:18:B5:1B:48:3B:6F:66:BF:C3:6A
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/34352e3137372e3137322e302f32322d3232203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:f7:4e:0f:f1:78:26:71:e9:d9:6e:0f:ab:a5:5b:e8:3f:
         b1:0a:a3:c7:e5:33:44:ab:cb:f8:e2:6e:23:74:18:73:32:3b:
         b1:2f:17:4a:02:4b:5a:57:e1:63:be:cf:64:6a:e4:a0:3e:c5:
         81:36:ff:52:0b:2f:86:a2:f8:cb:8c:e6:ff:e7:ea:71:9c:55:
         5f:62:23:93:e3:d0:5d:e6:34:6b:86:60:3b:5a:bd:ee:37:b1:
         d5:33:8d:f4:48:04:0d:03:1a:05:4f:a6:c3:b2:52:5c:7a:27:
         5e:3d:57:db:2a:38:62:8d:f4:97:d7:ee:34:72:a7:93:c8:be:
         4c:4a:51:ad:dd:73:54:4b:d7:dc:eb:b5:df:4b:c7:1f:cc:a8:
         54:9e:34:94:61:95:3b:12:da:5a:ef:ff:97:bc:72:27:8c:3f:
         dc:16:5f:d6:c7:e7:95:d2:71:a5:68:9b:55:70:7f:5d:86:c2:
         3b:a7:19:0e:d9:5d:f0:48:83:4c:77:9d:20:a6:87:ac:32:d4:
         9c:f6:cf:f7:12:96:7a:4d:53:d3:23:e2:87:4c:bf:ee:70:be:
         6c:f3:03:d2:e1:e4:52:a5:3e:18:01:9c:c2:48:4c:4a:80:eb:
         ba:5f:c5:4c:48:8d:69:db:77:a2:38:ae:1c:a2:a7:0a:ca:09:
         37:1a:21:36
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHYiFK6GzPlpJ6m9h48KPC1TWTWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNjQwRDQwQTk4QkVERUIzRkFDOTU1MTEzODc2QzBC
MDRGRUU2MjAeFw0yNTA1MDUxMjU5MjJaFw0yNjA1MDQxMzA0MjJaMDMxMTAvBgNV
BAMTKEU1N0Q2MTgzNEE4NUJBMzM0NkVBMThCNTFCNDgzQjZGNjZCRkMzNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hgANHNvHnfqYybKoTvLw4HzR
PWGhX5ZJ/ZDeYfyqWEAjW0I/xnAc+tGM5J/XLL0hw4zalkswV3/7NgEA2a651YZ6
2UdOG+E7h9tJaw+VVrJRtjPd88zSvbA5iqhkmrrN5HDOKiBkn1SmAue2wuvrtDvA
ny2F7D+w8DmOKQNgs+UxDao2YxqKL6dgJK3uXyK3AWy8e1HEjxpnzGgPJ6JIIGno
0jdvhOuyyPav2CSf+/jA3wDMrnJjeAiXl7kUm9vomCBGlfW59igBAKwB9GHskrPr
klrGk6mCLEwv+6S7CPBEGOxZmkN2E9sGl5fB9+pjwXHYWpQ2Pc0xMDiV7NpXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5X1hg0qFujNG6hi1G0g7b2a/w2owHwYDVR0j
BBgwFoAUfPZA1AqYvt6z+slVETh2wLBP7mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVKVDdqdW9VNldGN2s1TW9wTGFqNkczTHZSeUNWZDlGQ3R4RkE0TGFl
Q1YvMC83Q0Y2NDBENDBBOThCRURFQjNGQUM5NTUxMTM4NzZDMEIwNEZFRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjY0MEQ0MEE5OEJFREVC
M0ZBQzk1NTExMzg3NkMwQjA0RkVFNjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVSlQ3anVvVTZXRjdrNU1vcExhajZHM0x2UnlDVmQ5RkN0eEZBNExhZUNWLzAv
MzQzNTJlMzEzNzM3MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsawwDQYJKoZIhvcNAQELBQADggEBAE4L904P
8XgmcenZbg+rpVvoP7EKo8flM0Sry/jibiN0GHMyO7EvF0oCS1pX4WO+z2Rq5KA+
xYE2/1ILL4ai+MuM5v/n6nGcVV9iI5Pj0F3mNGuGYDtave43sdUzjfRIBA0DGgVP
psOyUlx6J149V9sqOGKN9JfX7jRyp5PIvkxKUa3dc1RL19zrtd9Lxx/MqFSeNJRh
lTsS2lrv/5e8cieMP9wWX9bH55XScaVom1Vwf12GwjunGQ7ZXfBIg0x3nSCmh6wy
1Jz2z/cSlnpNU9Mj4odMv+5wvmzzA9Lh5FKlPhgBnMJITEqA67pfxUxIjWnbd6I4
rhyipwrKCTcaITY=
-----END CERTIFICATE-----
Generated at Mon May 12 20:49:03 2025 by rpki-client