Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          Oa7B+oOOkq0p2n9equBSwbsDob1k/t+56D4fFqxf+aM=
Subject key identifier:   F5:1F:9E:56:1F:47:13:E0:DC:88:71:E1:FA:5D:A6:EB:C2:7A:D2:9F
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       3EF9866C2944A219B315DE4D43ADE4A9EDA43FEF
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
Signing time:             Mon 21 Jul 2025 13:39:57 +0000
ROA not before:           Mon 21 Jul 2025 13:34:57 +0000
ROA not after:            Mon 20 Jul 2026 13:39:57 +0000
asID:                     269015
IP address blocks:        45.178.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:86:6c:29:44:a2:19:b3:15:de:4d:43:ad:e4:a9:ed:a4:3f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jul 21 13:34:57 2025 GMT
            Not After : Jul 20 13:39:57 2026 GMT
        Subject: CN=F51F9E561F4713E0DC8871E1FA5DA6EBC27AD29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:70:c7:2d:56:d1:ff:ef:5c:e0:9f:e6:63:
                    aa:90:a3:68:ac:6d:2c:4c:cb:22:49:c0:a4:a2:34:
                    1f:a8:ee:12:f1:f8:40:c6:c8:67:39:6f:f5:7b:12:
                    d4:e9:cb:30:6a:6c:f2:83:40:22:65:f0:45:d7:0c:
                    db:d6:f1:46:fb:ed:39:16:0e:40:09:da:52:3a:e6:
                    ed:7b:10:6a:88:b7:0d:99:a1:02:a6:c7:c3:97:bf:
                    7d:8d:8e:6a:02:42:b2:6f:4e:2d:19:a0:dc:96:2e:
                    9c:f7:ef:23:93:f4:ab:96:c3:b2:97:42:d1:d6:e4:
                    d5:ae:63:d1:48:2d:bb:8d:de:84:ea:e3:5d:20:83:
                    84:12:58:f5:83:84:4b:1f:f2:55:03:c1:db:c2:d2:
                    df:af:99:14:8e:c1:6a:25:bc:5f:18:64:c1:a7:91:
                    5f:6c:3e:71:b6:47:72:e5:6a:0e:2f:ee:22:f2:7d:
                    c6:9b:86:c0:42:13:bf:2d:06:f9:61:43:c9:6d:fb:
                    49:88:7b:0e:3c:3a:82:0b:af:e9:79:7b:69:8d:c9:
                    22:9e:29:0e:19:ca:2e:55:95:29:ec:0e:c5:1d:f6:
                    ac:68:2b:06:69:cb:f8:5f:82:1b:9a:0f:6a:c6:83:
                    cd:66:5b:53:d4:0d:8b:61:40:ed:ac:fe:e4:5a:f9:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1F:9E:56:1F:47:13:E0:DC:88:71:E1:FA:5D:A6:EB:C2:7A:D2:9F
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:53:6a:c4:6e:80:4e:97:ac:0a:5a:01:53:c7:f5:a7:1a:77:
         58:ea:88:05:36:55:08:87:76:c8:fa:90:66:98:ab:4f:34:cc:
         72:3c:48:0e:a7:22:5b:32:6b:ff:e2:64:8b:9d:3b:40:8b:0a:
         2f:4a:28:b1:76:e6:ef:ca:d3:30:a5:e0:b7:10:4c:dd:31:05:
         c3:0f:fe:90:65:65:d4:ef:55:e3:25:5a:d7:b6:23:5a:58:7c:
         ae:97:6c:18:5d:ef:7f:0f:94:68:fd:bb:ca:9f:6b:b8:df:0b:
         d8:e3:c0:c5:ba:ee:c7:9b:71:1f:25:30:33:31:ef:49:f3:28:
         b4:f4:61:37:05:50:c7:e8:be:22:d4:0c:5d:d6:99:d8:b6:b0:
         e3:8f:cd:98:f4:fd:89:5a:8e:98:94:ad:27:66:84:85:b0:01:
         0d:0a:84:fc:f9:f2:2a:98:33:0c:de:ea:97:ae:da:b0:53:9f:
         14:19:9f:d5:08:58:b0:57:00:f3:b1:4f:bc:18:44:36:8a:1d:
         1f:af:1a:5c:fc:2a:6e:81:5f:4c:9b:8d:46:76:6b:9b:b4:61:
         27:9d:80:04:8d:09:1e:df:65:03:17:0f:87:53:97:b0:84:47:
         9b:84:32:ea:ef:39:2c:95:cb:c9:c2:f7:48:b6:ad:47:ca:ad:
         1d:ba:5c:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPvmGbClEohmzFd5NQ63kqe2kP+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE
QUUwNDdEODAeFw0yNTA3MjExMzM0NTdaFw0yNjA3MjAxMzM5NTdaMDMxMTAvBgNV
BAMTKEY1MUY5RTU2MUY0NzEzRTBEQzg4NzFFMUZBNURBNkVCQzI3QUQyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOHDHLVbR/+9c4J/mY6qQo2is
bSxMyyJJwKSiNB+o7hLx+EDGyGc5b/V7EtTpyzBqbPKDQCJl8EXXDNvW8Ub77TkW
DkAJ2lI65u17EGqItw2ZoQKmx8OXv32NjmoCQrJvTi0ZoNyWLpz37yOT9KuWw7KX
QtHW5NWuY9FILbuN3oTq410gg4QSWPWDhEsf8lUDwdvC0t+vmRSOwWolvF8YZMGn
kV9sPnG2R3Llag4v7iLyfcabhsBCE78tBvlhQ8lt+0mIew48OoILr+l5e2mNySKe
KQ4Zyi5VlSnsDsUd9qxoKwZpy/hfghuaD2rGg81mW1PUDYthQO2s/uRa+XBdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9R+eVh9HE+DciHHh+l2m68J60p8wHwYDVR0j
BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky
Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv
MzQzNTJlMzEzNzM4MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbIXMA0GCSqGSIb3DQEBCwUAA4IBAQBQU2rEboBO
l6wKWgFTx/WnGndY6ogFNlUIh3bI+pBmmKtPNMxyPEgOpyJbMmv/4mSLnTtAiwov
SiixdubvytMwpeC3EEzdMQXDD/6QZWXU71XjJVrXtiNaWHyul2wYXe9/D5Ro/bvK
n2u43wvY48DFuu7Hm3EfJTAzMe9J8yi09GE3BVDH6L4i1Axd1pnYtrDjj82Y9P2J
Wo6YlK0nZoSFsAENCoT8+fIqmDMM3uqXrtqwU58UGZ/VCFiwVwDzsU+8GEQ2ih0f
rxpc/CpugV9Mm41GdmubtGEnnYAEjQke32UDFw+HU5ewhEebhDLq7zkslcvJwvdI
tq1Hyq0dulwC
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:33 2025 by rpki-client