Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
File:                     34352e372e3135322e302f32322d3332203d3e20323636353933.roa (raw, json)
Hash identifier:          hB/Hdy8vBSDvGUrcvJWxV0aVEPuW51074pia3CwJlgQ=
Subject key identifier:   EC:8C:4A:FE:74:95:F9:45:35:41:CE:B6:21:E3:F5:E5:DF:C7:14:0E
Certificate issuer:       /CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
Certificate serial:       4537CD112FD452D6AC46C3367C6D440D56D28CB3
Authority key identifier: AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa
Signing time:             Mon 30 Jun 2025 18:03:49 +0000
ROA not before:           Mon 30 Jun 2025 17:58:49 +0000
ROA not after:            Mon 29 Jun 2026 18:03:49 +0000
asID:                     266593
IP address blocks:        45.7.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl
                          rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 10:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:37:cd:11:2f:d4:52:d6:ac:46:c3:36:7c:6d:44:0d:56:d2:8c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D
        Validity
            Not Before: Jun 30 17:58:49 2025 GMT
            Not After : Jun 29 18:03:49 2026 GMT
        Subject: CN=EC8C4AFE7495F9453541CEB621E3F5E5DFC7140E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:88:1d:7d:04:e6:28:70:2f:c7:cc:e8:7a:
                    d1:58:67:12:e9:36:e5:e7:0d:a0:7b:a9:a0:60:77:
                    c3:d9:3a:5d:d2:bf:52:8e:03:20:dc:81:51:4b:74:
                    5b:3e:d9:72:ea:1f:66:21:e0:2c:38:80:11:02:ac:
                    3d:a8:2f:7a:e2:81:d1:9f:0d:84:f2:84:b0:e5:a9:
                    3c:50:d8:9f:a2:b1:1f:1b:0b:94:e9:57:d7:4f:c0:
                    9e:88:e5:ac:1c:76:24:86:ff:aa:fb:61:b9:1e:de:
                    a7:b2:49:c5:29:07:a9:cd:fb:39:0a:87:b1:03:80:
                    7f:7a:8b:24:ad:c6:a2:82:b7:f3:1a:fa:0f:38:42:
                    2d:f1:f1:f8:1b:a2:fc:17:c1:67:b9:35:c1:25:57:
                    72:25:6d:79:97:be:b3:c6:4e:73:a9:74:ef:97:5a:
                    3a:8f:a4:31:bf:4f:b9:4e:d3:89:58:c9:a4:80:a2:
                    34:cc:96:ce:a1:08:76:ba:f7:8b:a2:79:5c:57:48:
                    20:14:eb:30:5f:bb:ec:f7:6c:3d:3a:b2:df:ee:b1:
                    3d:8d:b8:52:74:31:63:89:03:68:2c:1a:e7:a6:f3:
                    d2:15:2a:c6:e6:1c:58:d8:7b:f6:df:b9:dd:8d:be:
                    f2:f8:d4:65:2c:9b:b5:64:e7:88:ce:89:aa:23:e9:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8C:4A:FE:74:95:F9:45:35:41:CE:B6:21:E3:F5:E5:DF:C7:14:0E
            X509v3 Authority Key Identifier:
                keyid:AB:95:6F:7A:92:84:BB:A6:0E:AA:6D:BF:CF:12:6F:D5:FB:62:F3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB956F7A9284BBA60EAA6DBFCF126FD5FB62F36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/34352e372e3135322e302f32322d3332203d3e20323636353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:c8:37:d2:da:18:e0:dd:01:c2:6f:ea:63:d9:55:4d:88:53:
         5c:a0:4b:b2:0f:cc:87:1a:f8:44:a5:ff:45:1f:c4:ad:52:7a:
         cc:8e:68:10:2c:b2:c6:75:38:75:b5:4f:cf:aa:da:42:a7:a1:
         1e:6f:66:db:ed:82:ef:6d:a3:98:c3:10:b2:63:ec:df:f6:be:
         64:a5:7d:1a:ce:ba:ce:46:80:c7:b5:60:94:07:28:7c:bc:7e:
         ce:ef:27:8f:06:fc:79:4d:27:f3:8e:60:09:d2:86:7f:15:7c:
         74:c0:18:fb:ba:1f:e3:46:9c:24:30:4e:17:84:ca:19:d8:6e:
         49:17:ba:8f:3d:32:6d:a5:1c:6b:fc:c1:49:b6:d6:62:6b:c4:
         c7:89:df:95:f9:45:e6:2f:cc:b6:fb:c0:71:b0:96:65:79:67:
         dc:d1:c5:7b:8e:3b:63:36:24:b0:ab:a2:94:9f:91:fb:cb:5c:
         56:81:56:8f:5f:01:e7:7f:59:63:f5:69:12:5b:dc:69:8b:03:
         f6:b0:94:5e:db:1c:e0:85:3b:11:2e:07:ad:20:95:67:cd:69:
         a9:b4:d7:25:61:06:8a:9a:6f:09:74:a2:f9:39:84:e3:ad:5c:
         e0:c0:09:de:c0:3b:74:f0:17:93:77:fe:54:48:6f:8d:b8:3b:
         b3:d4:06:b7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURTfNES/UUtasRsM2fG1EDVbSjLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5NTZGN0E5Mjg0QkJBNjBFQUE2REJGQ0YxMjZGRDVG
QjYyRjM2RDAeFw0yNTA2MzAxNzU4NDlaFw0yNjA2MjkxODAzNDlaMDMxMTAvBgNV
BAMTKEVDOEM0QUZFNzQ5NUY5NDUzNTQxQ0VCNjIxRTNGNUU1REZDNzE0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbEogdfQTmKHAvx8zoetFYZxLp
NuXnDaB7qaBgd8PZOl3Sv1KOAyDcgVFLdFs+2XLqH2Yh4Cw4gBECrD2oL3rigdGf
DYTyhLDlqTxQ2J+isR8bC5TpV9dPwJ6I5awcdiSG/6r7Ybke3qeyScUpB6nN+zkK
h7EDgH96iyStxqKCt/Ma+g84Qi3x8fgbovwXwWe5NcElV3IlbXmXvrPGTnOpdO+X
WjqPpDG/T7lO04lYyaSAojTMls6hCHa694uieVxXSCAU6zBfu+z3bD06st/usT2N
uFJ0MWOJA2gsGuem89IVKsbmHFjYe/bfud2NvvL41GUsm7Vk54jOiaoj6eexAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7IxK/nSV+UU1Qc62IeP15d/HFA4wHwYDVR0j
BBgwFoAUq5VvepKEu6YOqm2/zxJv1fti820wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1ZlV3dybnhrM3dxckdWdGRGdm1yb3lpZ1BtaVE2QlZvUFNLOGlWSzVM
Y1UvMC9BQjk1NkY3QTkyODRCQkE2MEVBQTZEQkZDRjEyNkZENUZCNjJGMzZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOTU2RjdBOTI4NEJCQTYw
RUFBNkRCRkNGMTI2RkQ1RkI2MkYzNkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWZVd3cm54azN3cXJHVnRkRnZtcm95aWdQbWlRNkJWb1BTSzhpVks1TGNVLzAv
MzQzNTJlMzcyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjM1
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0HmDANBgkqhkiG9w0BAQsFAAOCAQEAx8g30toY4N0B
wm/qY9lVTYhTXKBLsg/Mhxr4RKX/RR/ErVJ6zI5oECyyxnU4dbVPz6raQqehHm9m
2+2C722jmMMQsmPs3/a+ZKV9Gs66zkaAx7VglAcofLx+zu8njwb8eU0n845gCdKG
fxV8dMAY+7of40acJDBOF4TKGdhuSRe6jz0ybaUca/zBSbbWYmvEx4nflflF5i/M
tvvAcbCWZXln3NHFe447YzYksKuilJ+R+8tcVoFWj18B539ZY/VpElvcaYsD9rCU
Xtsc4IU7ES4HrSCVZ81pqbTXJWEGippvCXSi+TmE461c4MAJ3sA7dPAXk3f+VEhv
jbg7s9QGtw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:46 2025 by rpki-client