Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138352e302f32342d3234203d3e20323638393034.roa
File:                     34352e3137352e3138352e302f32342d3234203d3e20323638393034.roa (raw, json)
Hash identifier:          I15/ikh4wdSIbB4gRDzq5RIMsor4BxrcM+eBW8RGtA8=
Subject key identifier:   10:4A:4A:94:28:A2:FD:22:1B:8F:E5:25:32:F7:B8:58:52:58:3C:C6
Certificate issuer:       /CN=51C7BA1E3942705B2F09644F9699345322A65D7B
Certificate serial:       1BDBDED8B9E2AD43CF6B7FAD26A372E72D31C6B4
Authority key identifier: 51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138352e302f32342d3234203d3e20323638393034.roa
Signing time:             Sat 12 Jul 2025 13:07:11 +0000
ROA not before:           Sat 12 Jul 2025 13:02:11 +0000
ROA not after:            Sat 11 Jul 2026 13:07:11 +0000
asID:                     268904
IP address blocks:        45.175.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl
                          rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:db:de:d8:b9:e2:ad:43:cf:6b:7f:ad:26:a3:72:e7:2d:31:c6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C7BA1E3942705B2F09644F9699345322A65D7B
        Validity
            Not Before: Jul 12 13:02:11 2025 GMT
            Not After : Jul 11 13:07:11 2026 GMT
        Subject: CN=104A4A9428A2FD221B8FE52532F7B85852583CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:1a:67:1a:67:d1:e8:1c:0f:36:0b:7b:a8:
                    a4:a7:95:d4:ee:5d:5b:ef:35:c7:a5:0d:d3:7d:ad:
                    6d:01:01:f7:0e:41:76:22:3c:31:f9:9f:df:30:8c:
                    90:b1:0c:20:a1:80:72:df:33:6c:90:c5:f2:58:3a:
                    a9:46:2e:2c:66:5e:bb:6a:dc:21:b7:f8:9e:62:cc:
                    1f:b7:d4:18:cd:f5:4d:4e:1c:e7:2e:a4:f6:11:48:
                    48:e7:f0:c9:d4:66:2d:55:94:cc:0d:87:1d:92:62:
                    ee:64:19:bd:e5:89:05:9c:7d:ec:ba:00:6a:df:36:
                    c7:22:ef:37:0b:93:5c:96:2d:c0:f4:74:9f:41:e4:
                    b7:ae:41:35:3f:39:ce:38:7e:e6:c1:a9:d0:78:c1:
                    97:49:e9:b6:a9:10:da:15:51:87:aa:02:c8:b2:aa:
                    58:35:43:39:0e:43:2b:36:51:83:8a:04:4e:e0:51:
                    d2:ec:31:ac:2d:7c:60:63:a9:32:00:9a:47:29:12:
                    c1:81:ca:4a:d1:10:95:9d:d5:eb:01:9c:10:a7:e3:
                    ec:c6:79:12:fb:86:f9:d5:7c:02:b1:64:b5:eb:02:
                    94:3a:38:c7:eb:ff:95:b8:d9:6b:17:e3:82:2f:1f:
                    3b:a5:dd:5c:d3:a2:54:2b:aa:49:5c:6b:aa:40:a0:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:4A:94:28:A2:FD:22:1B:8F:E5:25:32:F7:B8:58:52:58:3C:C6
            X509v3 Authority Key Identifier:
                keyid:51:C7:BA:1E:39:42:70:5B:2F:09:64:4F:96:99:34:53:22:A6:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/51C7BA1E3942705B2F09644F9699345322A65D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C7BA1E3942705B2F09644F9699345322A65D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bk1A8mkEcjfxosBHuo5DGx8nutsvfqahJikHN8pYWY1G/0/34352e3137352e3138352e302f32342d3234203d3e20323638393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:43:72:a2:9b:a2:fd:d8:c3:95:9e:ac:4d:6e:95:9f:a2:
         27:09:97:db:37:0b:fd:ff:ce:68:d7:e9:64:5f:10:f4:50:65:
         42:00:ef:f3:d7:ff:cb:86:a9:34:6e:1a:57:4e:10:db:09:90:
         5e:ba:0c:bd:52:48:b9:f7:05:5f:07:c4:b0:e9:2b:eb:dc:a0:
         7e:55:15:c4:74:f7:8d:e7:e9:51:d4:49:46:6f:51:50:f6:fe:
         a0:5c:cb:2f:62:5c:28:b1:4f:78:e6:13:a7:03:59:42:48:b2:
         f5:1e:44:75:0e:4e:f8:c0:39:19:db:30:a2:2f:79:cb:e7:81:
         b6:56:c2:7c:d2:f9:6e:b6:c0:de:69:3e:d4:9d:07:2d:41:3d:
         11:bc:79:33:eb:40:c6:65:44:4b:19:ae:7d:9c:e7:e4:b4:2f:
         da:f1:38:58:e2:91:5c:5a:5f:f7:2e:b4:0c:14:ff:71:49:f3:
         e2:80:3a:bb:14:f6:0f:37:cb:58:a9:69:a4:4e:ba:6b:0a:9a:
         d7:ff:cb:8c:53:3e:16:06:94:4f:5c:d7:7b:13:0f:4c:70:6e:
         03:96:a3:c5:39:4c:87:07:6f:fc:27:aa:78:ca:71:82:b9:47:
         4a:c5:0b:12:a8:ba:db:76:4a:e1:34:60:b0:4b:93:07:05:61:
         bc:01:13:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG9ve2LnirUPPa3+tJqNy5y0xxrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFDN0JBMUUzOTQyNzA1QjJGMDk2NDRGOTY5OTM0NTMy
MkE2NUQ3QjAeFw0yNTA3MTIxMzAyMTFaFw0yNjA3MTExMzA3MTFaMDMxMTAvBgNV
BAMTKDEwNEE0QTk0MjhBMkZEMjIxQjhGRTUyNTMyRjdCODU4NTI1ODNDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6BpnGmfR6BwPNgt7qKSnldTu
XVvvNcelDdN9rW0BAfcOQXYiPDH5n98wjJCxDCChgHLfM2yQxfJYOqlGLixmXrtq
3CG3+J5izB+31BjN9U1OHOcupPYRSEjn8MnUZi1VlMwNhx2SYu5kGb3liQWcfey6
AGrfNsci7zcLk1yWLcD0dJ9B5LeuQTU/Oc44fubBqdB4wZdJ6bapENoVUYeqAsiy
qlg1QzkOQys2UYOKBE7gUdLsMawtfGBjqTIAmkcpEsGBykrREJWd1esBnBCn4+zG
eRL7hvnVfAKxZLXrApQ6OMfr/5W42WsX44IvHzul3VzTolQrqklca6pAoJ3/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEEpKlCii/SIbj+UlMve4WFJYPMYwHwYDVR0j
BBgwFoAUUce6HjlCcFsvCWRPlpk0UyKmXXswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmsxQThta0VjamZ4b3NCSHVvNURHeDhudXRzdmZxYWhKaWtITjhwWVdZ
MUcvMC81MUM3QkExRTM5NDI3MDVCMkYwOTY0NEY5Njk5MzQ1MzIyQTY1RDdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxQzdCQTFFMzk0MjcwNUIy
RjA5NjQ0Rjk2OTkzNDUzMjJBNjVEN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JrMUE4bWtFY2pmeG9zQkh1bzVER3g4bnV0c3ZmcWFoSmlrSE44cFlXWTFHLzAv
MzQzNTJlMzEzNzM1MmUzMTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzOTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtr7kwDQYJKoZIhvcNAQELBQADggEBABzAQ3Ki
m6L92MOVnqxNbpWfoicJl9s3C/3/zmjX6WRfEPRQZUIA7/PX/8uGqTRuGldOENsJ
kF66DL1SSLn3BV8HxLDpK+vcoH5VFcR0943n6VHUSUZvUVD2/qBcyy9iXCixT3jm
E6cDWUJIsvUeRHUOTvjAORnbMKIvecvngbZWwnzS+W62wN5pPtSdBy1BPRG8eTPr
QMZlREsZrn2c5+S0L9rxOFjikVxaX/cutAwU/3FJ8+KAOrsU9g83y1ipaaROumsK
mtf/y4xTPhYGlE9c13sTD0xwbgOWo8U5TIcHb/wnqnjKcYK5R0rFCxKoutt2SuE0
YLBLkwcFYbwBE30=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:25:58 2025 by rpki-client