Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa
File:                     34352e3137362e38332e302f32342d3234203d3e20323639303131.roa (raw, json)
Hash identifier:          fyd8CMf7ZdcnZBSrhXYNY7Vb1t/0L8jZBwoRiNFCaVs=
Subject key identifier:   CB:32:E4:91:49:49:F6:FA:3C:1D:7C:3B:C1:CF:F0:09:09:14:6B:57
Certificate issuer:       /CN=7161E84D34482AB3498808B14DA6C9DAB7635308
Certificate serial:       32E10A1D494085BC954129BC42601EA6EFE09296
Authority key identifier: 71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa
Signing time:             Mon 07 Jul 2025 20:36:37 +0000
ROA not before:           Mon 07 Jul 2025 20:31:37 +0000
ROA not after:            Mon 06 Jul 2026 20:36:37 +0000
asID:                     269011
IP address blocks:        45.176.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl
                          rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:0a:1d:49:40:85:bc:95:41:29:bc:42:60:1e:a6:ef:e0:92:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7161E84D34482AB3498808B14DA6C9DAB7635308
        Validity
            Not Before: Jul  7 20:31:37 2025 GMT
            Not After : Jul  6 20:36:37 2026 GMT
        Subject: CN=CB32E4914949F6FA3C1D7C3BC1CFF00909146B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:57:40:2c:61:b9:d1:c8:03:34:cb:1c:eb:
                    63:46:28:d5:22:aa:71:93:b1:89:00:0e:14:6e:ff:
                    ce:9e:b8:ce:b8:ea:31:71:38:96:d8:60:27:a1:5c:
                    f6:dd:d0:12:72:8f:84:b9:1f:88:b8:f6:74:9c:21:
                    3a:39:93:09:a7:a6:0b:c5:b1:c0:d4:6a:2f:ef:25:
                    bd:cc:31:05:f6:61:72:83:07:ca:16:5e:0f:34:fd:
                    b1:44:0c:da:00:bf:01:e4:44:b2:b0:3c:17:ed:a7:
                    30:fb:6a:e3:e3:4e:c2:0f:61:62:8a:bd:5c:db:61:
                    d9:fb:02:6a:30:b0:69:11:a7:59:1b:f8:df:a7:de:
                    1f:40:3b:be:5a:ab:27:29:18:2b:73:48:26:8a:4a:
                    19:d1:90:64:eb:1a:8d:da:e9:19:a2:17:64:9b:e6:
                    ba:39:cd:cc:b7:a1:90:b8:a3:f6:b6:7f:b5:0a:f7:
                    98:cf:b9:5c:ee:f0:ac:d1:91:d4:95:0d:a8:69:f3:
                    da:49:31:6e:d4:49:bc:1f:47:c7:71:9e:ff:8b:10:
                    c2:d0:3f:e0:43:a5:95:54:54:31:91:38:82:61:ce:
                    ff:0b:b9:f4:74:da:b0:67:82:a3:42:35:44:f2:27:
                    d9:07:77:41:c1:1f:06:e0:69:3d:cf:59:ac:0b:d8:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:E4:91:49:49:F6:FA:3C:1D:7C:3B:C1:CF:F0:09:09:14:6B:57
            X509v3 Authority Key Identifier:
                keyid:71:61:E8:4D:34:48:2A:B3:49:88:08:B1:4D:A6:C9:DA:B7:63:53:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/7161E84D34482AB3498808B14DA6C9DAB7635308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7161E84D34482AB3498808B14DA6C9DAB7635308.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4dg6LHipG4m96jHkH5CUa3aWVMqjbnZEAhwYMojnoPs/0/34352e3137362e38332e302f32342d3234203d3e20323639303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:71:ea:a2:4e:63:56:4b:41:79:9b:93:3a:10:9d:48:56:
         d9:07:2b:97:5d:37:b6:6d:8a:54:f9:61:cd:b0:05:42:7b:4a:
         a0:41:46:18:c2:57:f9:d0:93:34:01:53:c7:b8:12:23:d0:b4:
         ec:ee:96:bc:f1:8e:0f:65:33:ce:13:bb:d3:22:cb:f7:30:7a:
         9c:b5:8e:97:ff:17:8c:53:d0:aa:49:48:cc:0a:16:6c:05:fc:
         0c:4f:af:c5:7b:2e:06:ab:1c:3f:87:7e:d3:8a:7c:12:7c:96:
         67:4f:50:7f:73:95:22:b2:93:78:82:08:70:3a:fe:6f:6d:bd:
         3a:97:c6:63:09:5b:87:38:4a:b3:46:e4:32:6b:cc:5e:20:77:
         47:f8:d4:6b:e7:ee:8e:00:7b:37:54:66:b2:0c:66:27:21:00:
         05:d8:aa:a4:28:12:a1:3d:6c:91:21:87:e3:f6:da:d8:28:a0:
         e9:cc:dc:ed:db:ef:24:24:88:b6:a8:4a:c4:7b:f4:8e:51:57:
         49:07:4c:c5:57:48:5b:ff:7e:ed:8f:5a:34:1d:64:6e:4b:59:
         49:58:b3:d0:79:a8:80:5c:69:30:61:05:48:2f:06:6c:91:86:
         a1:6c:7c:76:c4:8b:df:15:f5:89:de:e0:9c:60:72:56:a3:2e:
         8f:0a:04:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMuEKHUlAhbyVQSm8QmAepu/gkpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2MUU4NEQzNDQ4MkFCMzQ5ODgwOEIxNERBNkM5REFC
NzYzNTMwODAeFw0yNTA3MDcyMDMxMzdaFw0yNjA3MDYyMDM2MzdaMDMxMTAvBgNV
BAMTKENCMzJFNDkxNDk0OUY2RkEzQzFEN0MzQkMxQ0ZGMDA5MDkxNDZCNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU61dALGG50cgDNMsc62NGKNUi
qnGTsYkADhRu/86euM646jFxOJbYYCehXPbd0BJyj4S5H4i49nScITo5kwmnpgvF
scDUai/vJb3MMQX2YXKDB8oWXg80/bFEDNoAvwHkRLKwPBftpzD7auPjTsIPYWKK
vVzbYdn7AmowsGkRp1kb+N+n3h9AO75aqycpGCtzSCaKShnRkGTrGo3a6RmiF2Sb
5ro5zcy3oZC4o/a2f7UK95jPuVzu8KzRkdSVDahp89pJMW7USbwfR8dxnv+LEMLQ
P+BDpZVUVDGROIJhzv8LufR02rBngqNCNUTyJ9kHd0HBHwbgaT3PWawL2IWnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyzLkkUlJ9vo8HXw7wc/wCQkUa1cwHwYDVR0j
BBgwFoAUcWHoTTRIKrNJiAixTabJ2rdjUwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRkZzZMSGlwRzRtOTZqSGtINUNVYTNhV1ZNcWpiblpFQWh3WU1vam5v
UHMvMC83MTYxRTg0RDM0NDgyQUIzNDk4ODA4QjE0REE2QzlEQUI3NjM1MzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjFFODREMzQ0ODJBQjM0
OTg4MDhCMTREQTZDOURBQjc2MzUzMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0ZGc2TEhpcEc0bTk2akhrSDVDVWEzYVdWTXFqYm5aRUFod1lNb2pub1BzLzAv
MzQzNTJlMzEzNzM2MmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbBTMA0GCSqGSIb3DQEBCwUAA4IBAQCcP3Hqok5j
VktBeZuTOhCdSFbZByuXXTe2bYpU+WHNsAVCe0qgQUYYwlf50JM0AVPHuBIj0LTs
7pa88Y4PZTPOE7vTIsv3MHqctY6X/xeMU9CqSUjMChZsBfwMT6/Fey4Gqxw/h37T
inwSfJZnT1B/c5UispN4gghwOv5vbb06l8ZjCVuHOEqzRuQya8xeIHdH+NRr5+6O
AHs3VGayDGYnIQAF2KqkKBKhPWyRIYfj9trYKKDpzNzt2+8kJIi2qErEe/SOUVdJ
B0zFV0hb/37tj1o0HWRuS1lJWLPQeaiAXGkwYQVILwZskYahbHx2xIvfFfWJ3uCc
YHJWoy6PCgQY
-----END CERTIFICATE-----
Generated at Sat Jul 26 10:18:45 2025 by rpki-client