Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e352e302f32342d3332203d3e20323639363136.roa
File:                     34352e3139302e352e302f32342d3332203d3e20323639363136.roa (raw, json)
Hash identifier:          K9iyFVyBrHPJIeBqRc/TO52kgDTLXKGIRSuqiBl44+k=
Subject key identifier:   AA:92:EF:AD:53:EC:21:D8:85:35:BF:A0:A9:52:9B:48:B3:CE:C6:5A
Certificate issuer:       /CN=E7D355D61F0E519D364119968134CBF512AC1B57
Certificate serial:       463D084E9DA59134F9A98F309DF06200434D77FF
Authority key identifier: E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e352e302f32342d3332203d3e20323639363136.roa
Signing time:             Fri 04 Jul 2025 11:57:54 +0000
ROA not before:           Fri 04 Jul 2025 11:52:54 +0000
ROA not after:            Fri 03 Jul 2026 11:57:54 +0000
asID:                     269616
IP address blocks:        45.190.5.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl
                          rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 01:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3d:08:4e:9d:a5:91:34:f9:a9:8f:30:9d:f0:62:00:43:4d:77:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D355D61F0E519D364119968134CBF512AC1B57
        Validity
            Not Before: Jul  4 11:52:54 2025 GMT
            Not After : Jul  3 11:57:54 2026 GMT
        Subject: CN=AA92EFAD53EC21D88535BFA0A9529B48B3CEC65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:fb:7e:b7:ea:00:88:81:36:9a:13:57:37:
                    85:00:23:07:e4:29:bc:a4:61:99:b5:d0:ff:fa:67:
                    8d:f2:06:d4:0a:14:25:a0:34:7a:56:e9:06:e1:a6:
                    1d:2b:78:ce:9a:c9:a9:e0:c2:d6:3d:74:20:2c:a6:
                    93:cd:3b:b6:44:da:f8:d0:34:2a:86:46:cd:18:a0:
                    e3:c9:a9:ee:ee:a4:73:60:5b:7e:a7:85:5f:14:37:
                    8c:2c:41:59:88:aa:07:03:72:dc:0e:e2:5a:b1:80:
                    f0:71:7a:e9:63:b3:b3:40:ab:6a:67:b1:cc:db:ae:
                    0f:2d:d2:77:50:82:78:1b:de:7c:3b:53:96:9d:ea:
                    97:4f:6c:aa:93:f6:4d:24:6c:71:df:a2:5b:3e:3a:
                    0c:05:05:59:63:df:aa:79:30:6f:f9:94:72:5a:40:
                    fa:f0:d5:82:f0:b9:bc:ff:ec:02:bd:83:de:da:6b:
                    05:29:56:16:df:4b:93:6e:db:1d:59:46:9a:23:d3:
                    b8:ff:0c:52:da:e7:b3:d0:6d:26:95:88:e9:22:6e:
                    7b:61:a8:07:d7:51:da:24:ca:9a:05:e2:88:0e:14:
                    cd:c6:a6:c3:35:ca:b9:95:37:b3:40:89:5d:f8:12:
                    b5:81:13:77:5c:78:8f:89:cf:b5:ab:5e:e1:50:25:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:92:EF:AD:53:EC:21:D8:85:35:BF:A0:A9:52:9B:48:B3:CE:C6:5A
            X509v3 Authority Key Identifier:
                keyid:E7:D3:55:D6:1F:0E:51:9D:36:41:19:96:81:34:CB:F5:12:AC:1B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/E7D355D61F0E519D364119968134CBF512AC1B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D355D61F0E519D364119968134CBF512AC1B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6eCUx46GtW4ZAbeM4t5tW4mwbmPockGAE2nwzsce7wAm/0/34352e3139302e352e302f32342d3332203d3e20323639363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:10:a6:03:4f:da:b8:7b:43:36:76:1a:89:98:4d:93:40:
         5d:df:f0:4f:7c:ab:a8:3c:5d:4b:f5:d8:a4:83:9a:bc:d7:6e:
         e3:1b:e3:1b:57:5b:7b:d9:df:87:1a:85:d2:a6:c2:76:2a:6e:
         ab:39:23:17:f7:14:30:16:bf:e4:a3:1a:5c:76:8f:0f:ac:d1:
         70:38:7b:74:50:8d:3b:9f:24:8f:9d:25:a3:77:71:6e:1b:ff:
         f1:eb:94:36:f8:db:46:2c:9c:64:9f:73:e6:e7:97:70:75:45:
         b3:6e:ef:e3:1a:33:a2:7f:b2:f8:62:3e:f4:31:ee:48:98:ad:
         ec:63:c8:72:fa:de:8d:4e:17:5a:fe:11:57:b8:96:2b:d2:66:
         c8:2e:30:c8:d3:a2:19:2b:a5:25:76:39:f9:74:c0:f3:6d:6c:
         e6:19:28:56:a7:57:2e:e7:f2:2b:7b:ca:42:11:01:0b:60:cb:
         48:1a:55:74:ae:c3:71:ca:b7:ef:bd:c0:9e:3b:28:0e:f1:22:
         72:7f:0d:57:b5:e6:8d:91:5e:40:58:d1:1f:b6:be:48:59:92:
         2d:63:aa:1a:4f:3c:cf:58:1c:14:9f:fb:43:b9:21:9f:2d:ec:
         72:64:b9:88:46:10:07:d0:ee:05:4f:4b:fd:b0:b0:ed:66:d5:
         6a:8c:7a:eb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURj0ITp2lkTT5qY8wnfBiAENNd/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdEMzU1RDYxRjBFNTE5RDM2NDExOTk2ODEzNENCRjUx
MkFDMUI1NzAeFw0yNTA3MDQxMTUyNTRaFw0yNjA3MDMxMTU3NTRaMDMxMTAvBgNV
BAMTKEFBOTJFRkFENTNFQzIxRDg4NTM1QkZBMEE5NTI5QjQ4QjNDRUM2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Qft+t+oAiIE2mhNXN4UAIwfk
KbykYZm10P/6Z43yBtQKFCWgNHpW6Qbhph0reM6ayangwtY9dCAsppPNO7ZE2vjQ
NCqGRs0YoOPJqe7upHNgW36nhV8UN4wsQVmIqgcDctwO4lqxgPBxeuljs7NAq2pn
sczbrg8t0ndQgngb3nw7U5ad6pdPbKqT9k0kbHHfols+OgwFBVlj36p5MG/5lHJa
QPrw1YLwubz/7AK9g97aawUpVhbfS5Nu2x1ZRpoj07j/DFLa57PQbSaViOkibnth
qAfXUdokypoF4ogOFM3GpsM1yrmVN7NAiV34ErWBE3dceI+Jz7WrXuFQJSEHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqpLvrVPsIdiFNb+gqVKbSLPOxlowHwYDVR0j
BBgwFoAU59NV1h8OUZ02QRmWgTTL9RKsG1cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmVDVXg0Nkd0VzRaQWJlTTR0NXRXNG13Ym1Qb2NrR0FFMm53enNjZTd3
QW0vMC9FN0QzNTVENjFGMEU1MTlEMzY0MTE5OTY4MTM0Q0JGNTEyQUMxQjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RDM1NUQ2MUYwRTUxOUQz
NjQxMTk5NjgxMzRDQkY1MTJBQzFCNTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZlQ1V4NDZHdFc0WkFiZU00dDV0VzRtd2JtUG9ja0dBRTJud3pzY2U3d0FtLzAv
MzQzNTJlMzEzOTMwMmUzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMyMzYzOTM2
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2+BTANBgkqhkiG9w0BAQsFAAOCAQEApZsQpgNP2rh7
QzZ2GomYTZNAXd/wT3yrqDxdS/XYpIOavNdu4xvjG1dbe9nfhxqF0qbCdipuqzkj
F/cUMBa/5KMaXHaPD6zRcDh7dFCNO58kj50lo3dxbhv/8euUNvjbRiycZJ9z5ueX
cHVFs27v4xozon+y+GI+9DHuSJit7GPIcvrejU4XWv4RV7iWK9JmyC4wyNOiGSul
JXY5+XTA821s5hkoVqdXLufyK3vKQhEBC2DLSBpVdK7Dccq3773AnjsoDvEicn8N
V7XmjZFeQFjRH7a+SFmSLWOqGk88z1gcFJ/7Q7khny3scmS5iEYQB9DuBU9L/bCw
7WbVaox66w==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:10 2025 by rpki-client