Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35382e302f32332d3233203d3e20323638383833.roa
File:                     34352e3137352e35382e302f32332d3233203d3e20323638383833.roa (raw, json)
Hash identifier:          n+SVZ37ddiQjaWGAN+O2uT8dPAKY3AhbVnXe6lFtccM=
Subject key identifier:   BE:BB:D9:9E:2D:4E:D3:8F:15:4D:93:CF:EA:85:C6:CB:19:DD:EB:D1
Certificate issuer:       /CN=EA48F6970280B064226B470130F7ADE0F415C5C1
Certificate serial:       0989CF77615A73D27F39CD6DAFF1457C6DC97FF3
Authority key identifier: EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35382e302f32332d3233203d3e20323638383833.roa
Signing time:             Tue 04 Feb 2025 03:03:16 +0000
ROA not before:           Tue 04 Feb 2025 02:58:16 +0000
ROA not after:            Tue 03 Feb 2026 03:03:16 +0000
asID:                     268883
IP address blocks:        45.175.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl
                          rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 02:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:89:cf:77:61:5a:73:d2:7f:39:cd:6d:af:f1:45:7c:6d:c9:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA48F6970280B064226B470130F7ADE0F415C5C1
        Validity
            Not Before: Feb  4 02:58:16 2025 GMT
            Not After : Feb  3 03:03:16 2026 GMT
        Subject: CN=BEBBD99E2D4ED38F154D93CFEA85C6CB19DDEBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:12:63:cb:42:5a:aa:43:ec:9c:fd:fb:e6:
                    c5:e7:3f:8a:c3:76:21:7e:92:cc:aa:35:e1:cb:6e:
                    e7:80:da:03:3c:a7:d0:2c:39:90:f5:e2:a9:61:4c:
                    d4:a7:6e:c2:01:87:b0:9d:3f:7b:15:eb:a0:77:54:
                    12:be:e4:51:85:14:20:83:9c:30:cc:49:cf:eb:40:
                    62:b2:f0:20:e1:d5:7f:41:dc:54:39:ab:86:74:b1:
                    46:82:5e:e6:c4:20:86:a8:de:03:d3:f5:90:90:6f:
                    0c:4b:00:30:0c:0f:0e:c0:3b:c2:59:c3:99:d3:12:
                    d9:f1:f4:2f:73:ae:31:5b:83:7d:fb:5a:39:7f:f9:
                    10:d1:9d:65:76:67:e5:e4:c8:19:20:39:47:f4:16:
                    2f:21:8b:83:b0:a7:d7:98:59:c6:bf:6c:0f:af:b2:
                    ac:1f:91:d3:00:ce:10:f2:79:ec:39:69:72:93:83:
                    a6:c7:38:54:05:b8:0e:b3:8c:a9:5a:6f:a0:31:56:
                    75:29:d1:ad:86:5a:2c:e7:1b:dc:1d:1d:d4:50:f4:
                    52:72:e6:ca:f6:41:f5:b9:60:fb:16:ee:35:c1:69:
                    b6:da:88:82:d2:64:d6:a6:ad:c9:ec:c9:01:eb:93:
                    68:5d:0f:12:07:bc:7e:d7:95:f8:7b:8a:f9:92:75:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:D9:9E:2D:4E:D3:8F:15:4D:93:CF:EA:85:C6:CB:19:DD:EB:D1
            X509v3 Authority Key Identifier:
                keyid:EA:48:F6:97:02:80:B0:64:22:6B:47:01:30:F7:AD:E0:F4:15:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/EA48F6970280B064226B470130F7ADE0F415C5C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA48F6970280B064226B470130F7ADE0F415C5C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5h3fpQ9nDXC6aXvcva9yU6dJFSP87iTSm5LZwjikEfp8/0/34352e3137352e35382e302f32332d3233203d3e20323638383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:36:0e:a8:52:0e:0e:fa:26:69:30:a4:1e:fb:fa:33:04:1d:
         b9:5f:10:ef:7a:55:23:ce:06:03:7f:6b:cc:d8:79:48:0b:44:
         38:26:08:08:06:67:47:41:70:7b:3d:86:08:f5:25:06:db:0a:
         1e:b4:0a:22:67:b9:39:0a:27:7e:c3:43:76:2d:36:08:0c:97:
         b1:ed:d9:d6:78:ca:68:32:86:23:30:72:51:b2:c8:7a:20:2d:
         bc:91:66:d3:30:16:22:ad:20:22:59:dd:b1:ed:23:51:8e:6b:
         57:0c:30:68:52:b9:86:41:54:a2:84:41:7f:2b:3d:5b:ef:02:
         d2:ad:04:50:14:22:85:42:78:17:80:75:37:3e:90:d9:1c:54:
         14:e5:66:e4:a6:58:72:bd:06:88:2f:00:02:ac:bd:a6:88:3c:
         0c:0c:cc:d7:9a:66:95:9f:63:80:d4:07:41:af:44:13:a1:03:
         b9:57:3a:a4:07:ed:fe:8f:f2:a6:76:d4:e0:e7:55:e5:fa:b4:
         4b:d8:05:00:d8:8d:d9:9a:56:b8:d0:3d:5e:99:7c:f9:7e:33:
         34:c8:fd:dd:32:6f:a0:79:3c:cd:77:77:60:2f:fd:01:bc:cb:
         d8:e1:28:35:5b:07:d2:62:9d:bc:62:88:85:f3:c3:7d:30:6b:
         bd:57:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:17:19 2025 by rpki-client