Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32322d3232203d3e20323639303135.roa (raw, json)
Hash identifier:          j4ekDAxcPzMxVY71jo3C1lu031tvoBtUmef4Ipzlevk=
Subject key identifier:   3C:B4:D0:3A:52:6C:99:2D:5A:FF:AF:A2:AE:BA:04:4C:0C:44:B7:EB
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       31CE7F1786AB2A964FA362A40FA67AFDFF3DB136
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa
Signing time:             Mon 21 Jul 2025 13:39:44 +0000
ROA not before:           Mon 21 Jul 2025 13:34:44 +0000
ROA not after:            Mon 20 Jul 2026 13:39:44 +0000
asID:                     269015
IP address blocks:        45.178.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ce:7f:17:86:ab:2a:96:4f:a3:62:a4:0f:a6:7a:fd:ff:3d:b1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jul 21 13:34:44 2025 GMT
            Not After : Jul 20 13:39:44 2026 GMT
        Subject: CN=3CB4D03A526C992D5AFFAFA2AEBA044C0C44B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:c5:55:c4:18:16:4d:29:72:8d:6f:87:a8:
                    f9:be:a2:52:6d:e6:ad:4c:c8:ac:0a:06:55:c3:90:
                    0c:1a:a2:ea:eb:b6:50:df:ca:e5:e4:60:9d:e5:05:
                    5f:1d:a7:32:b5:67:f4:81:27:6e:a5:f5:5e:89:0a:
                    07:55:08:13:b7:c5:11:74:5b:5b:22:70:5a:60:86:
                    fa:c8:c5:11:6b:d8:80:c7:b5:23:e3:9a:29:58:ca:
                    ef:91:b5:06:4b:b5:b6:53:7c:dd:aa:91:44:04:89:
                    3a:b8:c8:12:69:14:6d:25:26:9e:00:8b:7b:7d:9b:
                    80:98:94:c8:df:fd:30:91:92:b3:cf:ea:86:7d:98:
                    75:3f:82:6a:e3:3e:f2:98:5c:3e:0b:e1:2f:a7:19:
                    ec:49:86:13:71:8c:31:70:77:43:0e:61:02:24:eb:
                    5e:93:95:10:4e:ae:c7:69:d4:9f:3a:47:82:85:e3:
                    b8:5e:92:2b:f7:f9:ba:b1:89:48:44:51:84:33:dc:
                    68:0a:f4:d4:aa:1f:76:dd:e1:06:80:d1:bb:a8:f7:
                    c4:a7:1d:f5:bf:5e:44:9e:06:99:ac:ad:2e:bf:86:
                    19:a7:fb:f9:11:fe:58:70:49:63:87:02:76:79:ad:
                    78:34:86:b3:62:fa:ae:41:79:40:bf:9a:ea:ce:b2:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:D0:3A:52:6C:99:2D:5A:FF:AF:A2:AE:BA:04:4C:0C:44:B7:EB
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32302e302f32322d3232203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:37:be:84:db:fe:2e:b2:31:94:21:22:48:c9:02:d7:67:
         d2:3d:70:f3:6a:44:36:7f:53:5b:36:14:46:ae:92:91:0e:63:
         28:a0:64:84:14:e2:9b:80:a4:c7:9b:8a:38:b4:ef:d1:5d:01:
         d0:c9:1a:1a:fa:48:06:99:b9:fa:58:51:dd:63:53:9d:11:f8:
         6b:fa:da:d1:0b:b2:9f:ed:af:f6:7a:a3:d5:58:92:52:76:32:
         b0:2f:d5:90:78:16:90:09:c9:d2:b6:24:0a:0c:46:51:23:3a:
         44:7f:22:a1:bd:ad:41:3c:ce:ae:50:1e:3f:e3:36:8f:8d:a6:
         fa:dd:47:57:49:16:ea:5c:bb:9d:6f:d0:3e:0c:46:f5:8b:50:
         b3:a5:da:65:f6:4e:c8:9f:06:a0:56:e2:67:ab:04:50:11:b8:
         cd:9d:f5:b6:01:5c:94:f1:21:b7:21:7b:83:77:90:1c:26:21:
         90:c4:67:05:d7:f7:54:69:07:3c:f4:40:53:e3:2a:2d:63:5f:
         76:ce:72:b3:b0:f6:69:72:02:9b:80:ab:78:92:5a:51:9b:ac:
         c9:0b:04:f4:a1:64:8f:cb:15:bb:9f:47:0b:02:6b:46:58:de:
         c8:03:c2:61:d0:93:1b:49:a3:38:30:8d:a4:74:8d:b1:25:2f:
         a6:a5:aa:e9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMc5/F4arKpZPo2KkD6Z6/f89sTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE
QUUwNDdEODAeFw0yNTA3MjExMzM0NDRaFw0yNjA3MjAxMzM5NDRaMDMxMTAvBgNV
BAMTKDNDQjREMDNBNTI2Qzk5MkQ1QUZGQUZBMkFFQkEwNDRDMEM0NEI3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCsVVxBgWTSlyjW+HqPm+olJt
5q1MyKwKBlXDkAwaourrtlDfyuXkYJ3lBV8dpzK1Z/SBJ26l9V6JCgdVCBO3xRF0
W1sicFpghvrIxRFr2IDHtSPjmilYyu+RtQZLtbZTfN2qkUQEiTq4yBJpFG0lJp4A
i3t9m4CYlMjf/TCRkrPP6oZ9mHU/gmrjPvKYXD4L4S+nGexJhhNxjDFwd0MOYQIk
616TlRBOrsdp1J86R4KF47hekiv3+bqxiUhEUYQz3GgK9NSqH3bd4QaA0buo98Sn
HfW/XkSeBpmsrS6/hhmn+/kR/lhwSWOHAnZ5rXg0hrNi+q5BeUC/murOsoUZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPLTQOlJsmS1a/6+irroETAxEt+swHwYDVR0j
BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky
Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv
MzQzNTJlMzEzNzM4MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbIUMA0GCSqGSIb3DQEBCwUAA4IBAQCnrze+hNv+
LrIxlCEiSMkC12fSPXDzakQ2f1NbNhRGrpKRDmMooGSEFOKbgKTHm4o4tO/RXQHQ
yRoa+kgGmbn6WFHdY1OdEfhr+trRC7Kf7a/2eqPVWJJSdjKwL9WQeBaQCcnStiQK
DEZRIzpEfyKhva1BPM6uUB4/4zaPjab63UdXSRbqXLudb9A+DEb1i1Czpdpl9k7I
nwagVuJnqwRQEbjNnfW2AVyU8SG3IXuDd5AcJiGQxGcF1/dUaQc89EBT4yotY192
znKzsPZpcgKbgKt4klpRm6zJCwT0oWSPyxW7n0cLAmtGWN7IA8Jh0JMbSaM4MI2k
dI2xJS+mparp
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:14 2025 by rpki-client