Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa
File:                     34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa (raw, json)
Hash identifier:          lUeHEbs2mIXRbXmaxlo7PqgUUqoay6J+DzPhYkknwig=
Subject key identifier:   F8:99:9D:0F:4B:89:DD:1E:91:14:B7:93:12:B2:65:BC:08:E5:F8:2A
Certificate issuer:       /CN=DCBAF7B5DE371064161C98640210C7E6F5D9AEBD
Certificate serial:       2E19FFDB513D1521E693CB6D45A9209A4F23BDE0
Authority key identifier: DC:BA:F7:B5:DE:37:10:64:16:1C:98:64:02:10:C7:E6:F5:D9:AE:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa
Signing time:             Wed 16 Jul 2025 14:00:23 +0000
ROA not before:           Wed 16 Jul 2025 13:55:23 +0000
ROA not after:            Wed 15 Jul 2026 14:00:23 +0000
asID:                     269401
IP address blocks:        45.184.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.crl
                          rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:19:ff:db:51:3d:15:21:e6:93:cb:6d:45:a9:20:9a:4f:23:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBAF7B5DE371064161C98640210C7E6F5D9AEBD
        Validity
            Not Before: Jul 16 13:55:23 2025 GMT
            Not After : Jul 15 14:00:23 2026 GMT
        Subject: CN=F8999D0F4B89DD1E9114B79312B265BC08E5F82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:be:1f:e2:39:c7:6d:58:e0:dc:c6:ed:bf:
                    6c:ed:2e:55:15:9d:7a:7f:0e:22:27:a5:22:63:c8:
                    67:83:d3:0c:cb:0d:0f:53:1f:24:e5:ba:fa:06:4c:
                    cb:49:4d:7f:ab:c9:8f:8c:0c:5f:71:ef:43:e2:3f:
                    59:99:ce:b0:6b:28:fb:49:77:71:79:28:77:5a:fe:
                    76:ee:6c:e4:7e:ac:fa:6e:6f:e6:e7:a5:b2:73:8d:
                    5e:73:4e:54:23:0a:b2:fd:8e:d2:80:94:e2:4c:95:
                    03:06:84:18:da:59:a6:10:e3:f1:0a:bc:74:a5:11:
                    78:2a:11:e2:a0:4f:81:71:4f:5b:0a:9b:c1:d3:84:
                    33:1e:57:a5:bb:42:a4:ed:76:58:17:a2:ab:4c:ce:
                    da:89:7d:a5:19:1a:2c:58:6d:d6:8e:3f:6c:8e:70:
                    99:2d:5e:01:cc:65:22:b2:10:0a:59:32:12:97:b6:
                    49:a6:b4:29:f7:b7:dd:b9:fc:c3:ff:01:5e:59:83:
                    57:91:4b:88:fb:65:0e:28:79:36:52:97:07:df:0f:
                    fc:eb:4c:76:c1:f5:21:ef:c7:ba:d5:28:19:37:29:
                    45:03:41:b8:b1:50:1f:f2:95:bd:a3:e0:e2:cc:bb:
                    34:c9:16:4c:fd:b0:ba:6b:6a:16:ec:d7:fa:99:ec:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:9D:0F:4B:89:DD:1E:91:14:B7:93:12:B2:65:BC:08:E5:F8:2A
            X509v3 Authority Key Identifier:
                keyid:DC:BA:F7:B5:DE:37:10:64:16:1C:98:64:02:10:C7:E6:F5:D9:AE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:31:27:5c:88:e3:36:d0:d6:3d:89:28:46:a3:60:2d:91:4f:
         92:b3:a9:44:d8:94:14:c7:c6:f0:f7:6e:f6:71:ce:33:23:5d:
         8c:b2:0b:0e:e0:98:5c:8b:fb:5a:21:5e:ef:14:37:26:5e:4e:
         48:bd:88:dd:62:3f:01:93:12:3a:40:0f:74:4c:5d:1e:f4:2b:
         64:97:79:10:4d:09:77:1a:ac:2e:ec:d5:38:e7:0a:e0:45:0e:
         22:7b:fc:4d:0e:2a:ea:16:24:8e:ca:fc:42:8c:e8:dc:ae:22:
         db:77:c2:63:3e:80:1d:3d:aa:7c:ea:47:c8:32:09:2c:59:85:
         b0:2c:36:60:61:d7:ac:4d:bc:33:43:8c:91:16:4a:f2:a2:ec:
         23:0f:b0:c1:3d:93:26:23:a9:d1:56:bc:f5:fc:88:8a:f2:20:
         b0:65:75:a0:3a:ee:41:d4:e5:7e:86:81:bf:26:15:66:4b:bb:
         0a:31:dd:33:a8:4e:4a:ad:57:55:e7:39:6e:14:fc:80:cd:e3:
         1e:ed:1c:22:f6:1b:b2:ef:d6:3f:19:0a:01:ef:da:c8:ea:5a:
         f9:81:72:51:65:72:53:0e:d6:2d:e1:dd:fb:1f:37:52:b5:e6:
         91:a7:58:7e:34:52:58:b4:38:85:31:0f:88:9d:a9:49:fe:45:
         b6:bf:45:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULhn/21E9FSHmk8ttRakgmk8jveAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENCQUY3QjVERTM3MTA2NDE2MUM5ODY0MDIxMEM3RTZG
NUQ5QUVCRDAeFw0yNTA3MTYxMzU1MjNaFw0yNjA3MTUxNDAwMjNaMDMxMTAvBgNV
BAMTKEY4OTk5RDBGNEI4OUREMUU5MTE0Qjc5MzEyQjI2NUJDMDhFNUY4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3L4f4jnHbVjg3Mbtv2ztLlUV
nXp/DiInpSJjyGeD0wzLDQ9THyTluvoGTMtJTX+ryY+MDF9x70PiP1mZzrBrKPtJ
d3F5KHda/nbubOR+rPpub+bnpbJzjV5zTlQjCrL9jtKAlOJMlQMGhBjaWaYQ4/EK
vHSlEXgqEeKgT4FxT1sKm8HThDMeV6W7QqTtdlgXoqtMztqJfaUZGixYbdaOP2yO
cJktXgHMZSKyEApZMhKXtkmmtCn3t925/MP/AV5Zg1eRS4j7ZQ4oeTZSlwffD/zr
THbB9SHvx7rVKBk3KUUDQbixUB/ylb2j4OLMuzTJFkz9sLprahbs1/qZ7G4rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+JmdD0uJ3R6RFLeTErJlvAjl+CowHwYDVR0j
BBgwFoAU3Lr3td43EGQWHJhkAhDH5vXZrr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNml0NjlRQXJZeERySDZpM21ZdjhBWmhEdkRqdTRhV3puVmVxa2tGVXpV
c1UvMC9EQ0JBRjdCNURFMzcxMDY0MTYxQzk4NjQwMjEwQzdFNkY1RDlBRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDQkFGN0I1REUzNzEwNjQx
NjFDOTg2NDAyMTBDN0U2RjVEOUFFQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpdDY5UUFyWXhEckg2aTNtWXY4QVpoRHZEanU0YVd6blZlcWtrRlV6VXNVLzAv
MzQzNTJlMzEzODM0MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuKQwDQYJKoZIhvcNAQELBQADggEBACQxJ1yI
4zbQ1j2JKEajYC2RT5KzqUTYlBTHxvD3bvZxzjMjXYyyCw7gmFyL+1ohXu8UNyZe
Tki9iN1iPwGTEjpAD3RMXR70K2SXeRBNCXcarC7s1TjnCuBFDiJ7/E0OKuoWJI7K
/EKM6NyuItt3wmM+gB09qnzqR8gyCSxZhbAsNmBh16xNvDNDjJEWSvKi7CMPsME9
kyYjqdFWvPX8iIryILBldaA67kHU5X6Ggb8mFWZLuwox3TOoTkqtV1XnOW4U/IDN
4x7tHCL2G7Lv1j8ZCgHv2sjqWvmBclFlclMO1i3h3fsfN1K15pGnWH40Uli0OIUx
D4idqUn+Rba/Raw=
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:44:37 2025 by rpki-client