Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32322d3332203d3e20323638343238.roa
File:                     34352e3136302e3232382e302f32322d3332203d3e20323638343238.roa (raw, json)
Hash identifier:          j2lUWbQxbCtGp7/LCVl22uUcDvuupJMNrmZzga3WGf4=
Subject key identifier:   CF:61:A3:C0:83:5A:72:28:91:94:7E:2E:53:17:0F:42:C8:BE:6F:BB
Certificate issuer:       /CN=6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C
Certificate serial:       08715423A5B4BC5A36865F3058A52BB91C6BEBF2
Authority key identifier: 6B:C1:EA:C0:93:F3:FC:54:8B:4D:C0:17:E3:37:4F:58:F2:D8:EF:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32322d3332203d3e20323638343238.roa
Signing time:             Fri 11 Jul 2025 14:11:49 +0000
ROA not before:           Fri 11 Jul 2025 14:06:49 +0000
ROA not after:            Fri 10 Jul 2026 14:11:49 +0000
asID:                     268428
IP address blocks:        45.160.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.crl
                          rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:71:54:23:a5:b4:bc:5a:36:86:5f:30:58:a5:2b:b9:1c:6b:eb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C
        Validity
            Not Before: Jul 11 14:06:49 2025 GMT
            Not After : Jul 10 14:11:49 2026 GMT
        Subject: CN=CF61A3C0835A722891947E2E53170F42C8BE6FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d2:9c:eb:5e:48:03:f1:43:5a:9d:78:e4:ed:
                    a1:2e:8f:9e:a5:25:45:90:44:c0:88:f8:50:b7:70:
                    07:3e:2e:c6:ef:ea:7e:d3:ce:00:1a:76:e1:34:1a:
                    01:95:2c:41:b2:71:30:e1:10:ea:83:48:f0:f5:6e:
                    73:c8:e4:d7:bf:e8:ec:d9:8f:47:39:56:35:54:35:
                    47:6f:15:50:04:e7:49:ea:cb:f1:f6:c9:21:68:70:
                    7c:3a:fe:53:ae:74:8f:64:94:be:ad:78:e6:fc:c8:
                    9a:bd:b7:93:6f:2f:94:21:6f:77:07:7c:0b:d3:61:
                    35:07:f9:03:32:9b:cf:ed:e6:d5:b3:0d:18:3d:55:
                    54:89:50:8a:41:e4:cd:2f:fa:04:ee:dc:cc:41:0f:
                    12:19:75:f8:52:61:c6:2f:dc:39:20:e8:bc:19:ec:
                    dd:af:85:b3:66:99:4d:cf:89:dd:21:23:9d:c2:90:
                    17:42:ab:16:7a:85:f7:88:45:cb:7f:67:13:7c:d6:
                    d9:e8:6d:2d:1b:66:f4:e3:51:9a:d6:bc:ed:92:40:
                    7c:59:ec:20:a5:85:c2:fb:97:3a:42:e1:23:dd:66:
                    dd:d1:24:fe:9e:4c:5b:0b:91:db:0e:58:a0:8e:25:
                    a9:72:5d:3d:6f:87:c8:7e:e0:18:c4:e8:e6:0a:61:
                    7c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:A3:C0:83:5A:72:28:91:94:7E:2E:53:17:0F:42:C8:BE:6F:BB
            X509v3 Authority Key Identifier:
                keyid:6B:C1:EA:C0:93:F3:FC:54:8B:4D:C0:17:E3:37:4F:58:F2:D8:EF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BC1EAC093F3FC548B4DC017E3374F58F2D8EF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAhNfXy8o8DdbRYksXv1QhvbhP71eRQdeNtU6V7WY9J/0/34352e3136302e3232382e302f32322d3332203d3e20323638343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:be:86:60:16:82:32:d3:4a:51:1e:63:55:e5:3f:b0:d8:
         4e:43:55:62:c9:87:d0:0c:44:3f:51:48:ec:0d:43:31:7b:05:
         31:89:e0:00:14:90:e2:15:7f:b1:ee:2e:66:e9:ef:bd:f7:43:
         32:fb:c5:05:bd:d4:ea:6b:0d:ff:a0:42:82:72:85:66:f9:52:
         94:dc:43:42:26:66:c8:37:0c:5a:2f:eb:ac:49:6f:49:fd:ec:
         24:03:b4:10:23:c2:b3:16:08:c0:f0:b9:cf:aa:78:a6:61:d5:
         55:d0:23:04:f9:cb:35:87:43:d1:da:82:b8:71:ad:7e:08:88:
         df:92:d9:bf:1b:ed:04:de:0b:b7:fa:cc:1a:07:03:86:d8:95:
         13:c6:f4:ca:34:66:97:a9:72:14:ef:45:18:c9:aa:55:d3:2e:
         cb:21:4b:83:3a:88:58:26:ac:fc:2b:c8:e7:6a:52:68:3c:78:
         7a:fd:3c:7d:7c:12:d6:94:53:7b:6a:74:79:fb:14:d2:bc:3f:
         44:47:d4:e3:41:cc:4d:17:b3:16:d5:21:27:d5:03:31:37:c9:
         5c:d6:b6:8e:86:88:c1:fa:55:93:ca:b8:cf:f2:a8:4e:8c:b6:
         3e:86:7d:ee:91:8e:e7:fa:0c:db:ec:b2:1d:d3:10:71:0b:bc:
         2e:d4:1b:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCHFUI6W0vFo2hl8wWKUruRxr6/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJDMUVBQzA5M0YzRkM1NDhCNERDMDE3RTMzNzRGNThG
MkQ4RUY3QzAeFw0yNTA3MTExNDA2NDlaFw0yNjA3MTAxNDExNDlaMDMxMTAvBgNV
BAMTKENGNjFBM0MwODM1QTcyMjg5MTk0N0UyRTUzMTcwRjQyQzhCRTZGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp0pzrXkgD8UNanXjk7aEuj56l
JUWQRMCI+FC3cAc+Lsbv6n7TzgAaduE0GgGVLEGycTDhEOqDSPD1bnPI5Ne/6OzZ
j0c5VjVUNUdvFVAE50nqy/H2ySFocHw6/lOudI9klL6teOb8yJq9t5NvL5Qhb3cH
fAvTYTUH+QMym8/t5tWzDRg9VVSJUIpB5M0v+gTu3MxBDxIZdfhSYcYv3Dkg6LwZ
7N2vhbNmmU3Pid0hI53CkBdCqxZ6hfeIRct/ZxN81tnobS0bZvTjUZrWvO2SQHxZ
7CClhcL7lzpC4SPdZt3RJP6eTFsLkdsOWKCOJalyXT1vh8h+4BjE6OYKYXylAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUz2GjwINaciiRlH4uUxcPQsi+b7swHwYDVR0j
BBgwFoAUa8HqwJPz/FSLTcAX4zdPWPLY73wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNBaE5mWHk4bzhEZGJSWWtzWHYxUWh2YmhQNzFlUlFkZU50VTZWN1dZ
OUovMC82QkMxRUFDMDkzRjNGQzU0OEI0REMwMTdFMzM3NEY1OEYyRDhFRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQzFFQUMwOTNGM0ZDNTQ4
QjREQzAxN0UzMzc0RjU4RjJEOEVGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTQWhOZlh5OG84RGRiUllrc1h2MVFodmJoUDcxZVJRZGVOdFU2VjdXWTlKLzAv
MzQzNTJlMzEzNjMwMmUzMjMyMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNDMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoOQwDQYJKoZIhvcNAQELBQADggEBAGxGvoZg
FoIy00pRHmNV5T+w2E5DVWLJh9AMRD9RSOwNQzF7BTGJ4AAUkOIVf7HuLmbp7733
QzL7xQW91OprDf+gQoJyhWb5UpTcQ0ImZsg3DFov66xJb0n97CQDtBAjwrMWCMDw
uc+qeKZh1VXQIwT5yzWHQ9HagrhxrX4IiN+S2b8b7QTeC7f6zBoHA4bYlRPG9Mo0
ZpepchTvRRjJqlXTLsshS4M6iFgmrPwryOdqUmg8eHr9PH18EtaUU3tqdHn7FNK8
P0RH1ONBzE0XsxbVISfVAzE3yVzWto6GiMH6VZPKuM/yqE6Mtj6Gfe6Rjuf6DNvs
sh3TEHELvC7UG9M=
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:47 2025 by rpki-client