Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32332d3233203d3e20323638383630.roa
File:                     34352e3137332e38342e302f32332d3233203d3e20323638383630.roa (raw, json)
Hash identifier:          nrAqFKY8llyVb83OCbPgFQnYyolfbm5/9uTGaI75xy0=
Subject key identifier:   B2:28:94:B6:D1:CE:2A:69:DC:DB:21:96:ED:02:1F:EC:77:8A:E6:89
Certificate issuer:       /CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
Certificate serial:       53BEF489EEE2BDBF98B8A3E92897DB31B4AD8008
Authority key identifier: 58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32332d3233203d3e20323638383630.roa
Signing time:             Fri 02 May 2025 13:19:18 +0000
ROA not before:           Fri 02 May 2025 13:14:18 +0000
ROA not after:            Fri 01 May 2026 13:19:18 +0000
asID:                     268860
IP address blocks:        45.173.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 03:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:f4:89:ee:e2:bd:bf:98:b8:a3:e9:28:97:db:31:b4:ad:80:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
        Validity
            Not Before: May  2 13:14:18 2025 GMT
            Not After : May  1 13:19:18 2026 GMT
        Subject: CN=B22894B6D1CE2A69DCDB2196ED021FEC778AE689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:63:e8:48:2d:54:71:c9:86:99:31:69:4e:
                    6c:a9:4a:43:40:c3:00:51:d1:3d:79:cd:7d:be:ea:
                    60:ea:ad:55:59:65:3a:79:3b:cd:48:fc:c7:6e:b4:
                    e3:1f:e4:7c:34:17:08:8e:6d:20:01:9d:23:c6:f0:
                    c6:6d:e0:64:2a:3f:3c:22:fd:95:bc:af:eb:af:74:
                    74:ce:8b:d9:cf:1d:2b:f4:28:8b:a7:7f:16:23:e3:
                    2c:24:dc:f1:1d:4c:f4:fb:f4:41:85:84:f4:fa:3b:
                    5a:ac:34:64:18:b1:bd:10:90:c5:6b:1c:ea:dd:e0:
                    cd:a5:c5:39:95:e6:72:72:17:61:c3:7d:45:48:68:
                    18:6e:66:4e:57:35:d2:05:06:4c:43:bb:c6:17:24:
                    18:e9:c7:13:ae:98:87:c6:53:12:aa:d2:0c:55:81:
                    ec:94:45:93:85:89:76:2a:38:90:71:a7:10:e8:26:
                    7d:59:7c:11:74:4d:10:57:be:99:67:94:82:bc:f7:
                    b1:0d:b2:d9:21:29:6c:7d:f5:8d:5c:ec:21:91:8a:
                    4d:0a:2a:b9:6c:44:50:9c:ac:75:0c:ca:81:5b:34:
                    29:e0:97:c5:d7:0b:fb:bd:01:2b:03:a4:ca:ac:21:
                    d1:6c:68:d2:6e:18:cf:67:8f:ac:81:84:ea:35:50:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:94:B6:D1:CE:2A:69:DC:DB:21:96:ED:02:1F:EC:77:8A:E6:89
            X509v3 Authority Key Identifier:
                keyid:58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32332d3233203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:30:c3:c9:3e:3b:8e:9e:f4:ab:ca:de:f3:d8:d9:fb:04:38:
         6a:80:85:7d:b8:77:54:7b:68:9f:45:2e:13:4e:db:d0:2b:68:
         55:94:7b:d0:23:5e:ed:c5:e9:12:6b:6c:af:6f:b4:a7:3b:e9:
         fa:83:96:2a:a7:51:4d:e3:a1:ff:23:f8:45:a6:aa:b3:60:6d:
         53:06:ab:11:ef:d7:99:5e:0b:fc:57:f3:2b:0b:a7:23:3f:cf:
         ff:b9:9f:9b:ff:1f:fe:c0:33:9a:3f:76:3a:2c:83:8c:da:81:
         28:e4:fc:7f:a2:b5:97:40:6b:29:d9:84:52:97:4c:e0:f4:cd:
         cc:a8:c0:fa:12:67:39:a3:e7:5e:ab:45:40:88:db:5d:31:a0:
         ed:36:47:16:d1:ab:76:dc:ae:18:33:63:e5:0f:ce:c5:02:af:
         d1:40:2e:5c:89:ee:9f:03:49:bc:cd:f5:a1:b8:c8:09:c4:79:
         c3:d0:b2:1e:10:16:98:4e:75:32:9b:ce:b1:b8:84:c6:ba:df:
         35:d7:00:45:18:bb:d9:ca:17:5f:e0:ad:39:9e:a4:c7:4b:60:
         72:65:4f:49:69:d2:52:71:b8:95:d3:71:68:45:a4:08:05:72:
         82:86:96:30:48:4d:e5:bb:e6:18:35:1c:26:4f:c1:6f:2b:8f:
         c8:0e:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:51:05 2025 by rpki-client