Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (raw, json)
Hash identifier:          bdr2e5CqgUuCJy+6y8PJNYOp8G+30TyE+mgsVfRy5Sc=
Subject key identifier:   05:FE:37:CA:1C:02:C6:0D:75:91:68:0D:4B:F6:9F:BA:90:89:49:DA
Certificate issuer:       /CN=2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187
Certificate serial:       355BE5782CD8724F9CB09290111D6A0E32983757
Authority key identifier: 22:52:C5:11:BB:FC:2D:8B:51:E1:AA:AD:4F:5F:F0:84:8A:B8:21:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
Signing time:             Wed 07 May 2025 07:46:09 +0000
ROA not before:           Wed 07 May 2025 07:41:09 +0000
ROA not after:            Wed 06 May 2026 07:46:09 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 20:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5b:e5:78:2c:d8:72:4f:9c:b0:92:90:11:1d:6a:0e:32:98:37:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187
        Validity
            Not Before: May  7 07:41:09 2025 GMT
            Not After : May  6 07:46:09 2026 GMT
        Subject: CN=05FE37CA1C02C60D7591680D4BF69FBA908949DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:b8:93:fc:e2:6d:80:cb:d0:d0:b6:7b:44:
                    44:49:bb:48:e8:f4:d3:27:a3:81:6c:67:50:83:6a:
                    bf:fb:e1:95:07:d5:c2:5d:c6:7b:71:9f:fc:b1:5b:
                    f7:e3:3c:fb:33:87:b2:de:26:09:45:15:75:b3:ae:
                    78:b4:37:b8:dc:92:98:d5:10:99:9c:f9:c0:7a:74:
                    e4:28:ef:98:a0:c3:69:2c:bb:2e:0d:71:ac:91:bb:
                    43:51:b4:d0:0e:a1:03:00:da:51:25:04:25:c2:9f:
                    bd:f8:01:91:19:27:fa:ae:b4:75:5d:9c:b1:32:13:
                    ed:4b:e6:1b:c3:09:39:7a:96:28:2c:16:d1:f5:06:
                    7a:bf:7a:9f:b4:d4:b6:cc:a2:7a:0f:6f:3e:61:59:
                    9a:b2:82:f2:08:fb:48:45:f2:a4:32:52:ee:98:53:
                    7a:ab:ce:c0:09:97:e5:43:70:64:19:6f:af:5f:64:
                    a8:ac:f7:43:00:bc:6c:d1:43:00:27:ff:f1:33:e1:
                    7e:84:71:8c:b9:1f:e8:c2:3e:f8:1b:85:12:50:ef:
                    7b:78:23:1a:56:5a:b0:5a:c7:ca:da:07:86:3f:0b:
                    68:f9:38:ad:d5:0a:39:43:b4:53:1d:a9:a9:ae:7e:
                    8a:81:ea:4f:40:ec:17:a5:30:e6:6f:e6:c6:62:91:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:37:CA:1C:02:C6:0D:75:91:68:0D:4B:F6:9F:BA:90:89:49:DA
            X509v3 Authority Key Identifier:
                keyid:22:52:C5:11:BB:FC:2D:8B:51:E1:AA:AD:4F:5F:F0:84:8A:B8:21:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2252C511BBFC2D8B51E1AAAD4F5FF0848AB82187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:87:ff:0c:ae:0d:f9:45:9d:1c:45:91:28:07:0f:f1:ca:
         59:7b:cf:f4:71:4b:d6:48:18:59:6f:3d:39:76:f5:23:d3:3f:
         c8:4e:79:ab:d0:fc:dd:7b:12:9d:58:46:53:c0:ea:a3:6a:da:
         b0:19:ae:3d:e4:c2:72:8d:55:a9:51:a4:ed:86:d0:e6:1f:41:
         c8:07:16:d1:a1:b1:e4:71:73:40:78:44:be:41:46:07:fb:38:
         a5:86:54:97:6f:fc:15:8d:c2:b4:dd:9f:62:3f:f7:ef:07:28:
         46:8c:e1:15:20:fa:26:57:4e:3c:6d:0d:62:19:02:68:bd:53:
         6a:f0:61:da:54:65:da:b9:84:11:d7:47:0c:6e:20:f5:1d:8e:
         f4:4d:15:41:47:7b:be:6f:a3:08:0e:60:e2:0b:e3:66:1c:8e:
         ce:22:ec:d3:79:81:d3:93:3b:e8:0a:8e:66:73:33:83:c1:6b:
         0d:c1:a0:00:b1:39:18:13:5f:39:3f:1c:ec:c9:b8:23:73:67:
         35:cf:9f:e5:b4:cc:1c:9a:77:65:bc:92:39:5e:0e:fd:4c:b4:
         6b:38:24:8d:0a:a0:da:d1:e5:01:b7:6a:44:81:a5:3d:c7:d0:
         93:de:b5:9e:c1:93:4a:c4:40:ed:96:58:10:0d:80:09:85:0e:
         69:a7:a2:27
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNVvleCzYck+csJKQER1qDjKYN1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI1MkM1MTFCQkZDMkQ4QjUxRTFBQUFENEY1RkYwODQ4
QUI4MjE4NzAeFw0yNTA1MDcwNzQxMDlaFw0yNjA1MDYwNzQ2MDlaMDMxMTAvBgNV
BAMTKDA1RkUzN0NBMUMwMkM2MEQ3NTkxNjgwRDRCRjY5RkJBOTA4OTQ5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJriT/OJtgMvQ0LZ7RERJu0jo
9NMno4FsZ1CDar/74ZUH1cJdxntxn/yxW/fjPPszh7LeJglFFXWzrni0N7jckpjV
EJmc+cB6dOQo75igw2ksuy4NcayRu0NRtNAOoQMA2lElBCXCn734AZEZJ/qutHVd
nLEyE+1L5hvDCTl6ligsFtH1Bnq/ep+01LbMonoPbz5hWZqygvII+0hF8qQyUu6Y
U3qrzsAJl+VDcGQZb69fZKis90MAvGzRQwAn//Ez4X6EcYy5H+jCPvgbhRJQ73t4
IxpWWrBax8raB4Y/C2j5OK3VCjlDtFMdqamufoqB6k9A7BelMOZv5sZikQzrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUBf43yhwCxg11kWgNS/afupCJSdowHwYDVR0j
BBgwFoAUIlLFEbv8LYtR4aqtT1/whIq4IYcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94RzNtVFUzV1pyTTU4akJ1VEtiSnJ4azhpcWNldXpCWFo2M0VWTU05WnJL
LzAvMjI1MkM1MTFCQkZDMkQ4QjUxRTFBQUFENEY1RkYwODQ4QUI4MjE4Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMjUyQzUxMUJCRkMyRDhCNTFF
MUFBQUQ0RjVGRjA4NDhBQjgyMTg3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
RzNtVFUzV1pyTTU4akJ1VEtiSnJ4azhpcWNldXpCWFo2M0VWTU05WnJLLzAvMzQz
NTJlMzEzODM3MmUzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5MzUz
MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLbsgMA0GCSqGSIb3DQEBCwUAA4IBAQAW8If/DK4N+UWd
HEWRKAcP8cpZe8/0cUvWSBhZbz05dvUj0z/ITnmr0PzdexKdWEZTwOqjatqwGa49
5MJyjVWpUaTthtDmH0HIBxbRobHkcXNAeES+QUYH+zilhlSXb/wVjcK03Z9iP/fv
ByhGjOEVIPomV048bQ1iGQJovVNq8GHaVGXauYQR10cMbiD1HY70TRVBR3u+b6MI
DmDiC+NmHI7OIuzTeYHTkzvoCo5mczODwWsNwaAAsTkYE185Pxzsybgjc2c1z5/l
tMwcmndlvJI5Xg79TLRrOCSNCqDa0eUBt2pEgaU9x9CT3rWewZNKxEDtllgQDYAJ
hQ5pp6In
-----END CERTIFICATE-----
Generated at Thu May 15 00:02:09 2025 by rpki-client