Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
File:                     34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa (raw, json)
Hash identifier:          ccCrOPO+fniR7wGL9nAJb4TbiYc08AJ9vqTsfD1PrJw=
Subject key identifier:   65:DF:8B:D5:79:B1:65:C0:D8:31:17:CB:DA:91:38:5D:F3:61:CC:13
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       6430740EDED18F0C96870C12A6187032870C8E67
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:02 +0000
ROA not before:           Mon 14 Jul 2025 17:55:02 +0000
ROA not after:            Mon 13 Jul 2026 18:00:02 +0000
asID:                     267121
IP address blocks:        45.229.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:30:74:0e:de:d1:8f:0c:96:87:0c:12:a6:18:70:32:87:0c:8e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:02 2025 GMT
            Not After : Jul 13 18:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:f9:62:57:a1:f1:a5:f4:3c:53:f6:f1:49:
                    78:45:c9:50:9f:e3:2c:6d:22:d0:83:d0:3c:80:f5:
                    5f:07:96:2d:8b:9d:eb:e1:e7:96:45:56:34:05:90:
                    a8:76:9c:c1:73:25:a1:56:3c:ff:7a:b8:46:fb:7f:
                    4c:9a:7d:c2:bd:6a:a9:f9:d5:79:a2:57:45:39:6d:
                    fd:50:b6:38:b0:d2:c6:26:88:da:a5:cb:01:4a:bf:
                    94:54:dc:33:be:db:c9:43:6c:52:8b:0c:72:54:80:
                    e8:64:10:de:42:14:cc:85:d0:1a:bb:e2:14:3c:88:
                    ba:a3:83:a2:42:07:ee:97:17:01:64:8b:a4:c0:b1:
                    3e:e0:5a:a5:0e:d2:c3:0d:c9:6c:18:f7:23:35:d8:
                    83:f5:80:c4:fc:53:95:fe:5c:15:fe:23:e2:85:01:
                    b6:eb:b9:68:87:29:c8:27:d5:6c:ae:87:17:91:13:
                    68:0a:6b:47:9b:de:ee:c8:fb:ef:fd:22:7a:19:da:
                    c6:02:7d:19:31:28:92:52:53:57:c8:91:97:d2:5c:
                    3f:b6:75:58:bc:52:89:d8:89:ac:cc:d3:d0:a2:6d:
                    20:a3:01:f0:92:98:e3:e0:b0:81:34:a7:e3:39:b2:
                    b7:22:73:ec:e8:13:17:34:22:b2:a1:26:19:63:b3:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:8B:D5:79:B1:65:C0:D8:31:17:CB:DA:91:38:5D:F3:61:CC:13
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/34352e3232392e3130342e302f32322d3234203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:ff:db:0c:48:14:b9:5f:e1:55:3c:46:59:91:63:ef:d2:
         00:b9:8f:b3:4f:42:0e:aa:a8:53:55:4a:74:ef:db:fb:ea:90:
         0a:93:e4:18:1f:22:6f:b8:76:e8:44:c7:f7:d6:18:ca:8c:c5:
         83:f3:6f:5e:c5:d4:f4:76:5b:62:1c:33:9a:d7:ea:92:03:7e:
         91:31:aa:08:24:0b:ed:79:a2:be:3f:ff:ee:c9:7b:2b:1a:a4:
         da:a0:02:04:cf:87:8b:28:d4:f7:37:58:12:35:93:f7:39:3e:
         65:38:3f:07:9b:61:65:f0:cc:38:1b:fc:ff:fb:47:18:0f:5c:
         28:8e:01:42:2c:30:be:e5:6f:a8:fb:9f:0e:b2:f0:85:dc:f3:
         99:85:8d:d3:e9:8c:a3:2d:4c:ba:3d:cf:6b:af:cf:fc:60:9f:
         d7:46:55:ac:de:45:52:64:7c:30:91:9c:c2:99:2c:0f:6b:43:
         cd:7e:36:05:18:13:90:10:37:31:15:f0:49:67:00:67:32:ad:
         56:1e:bb:d0:88:7b:cb:3f:03:16:ce:44:a8:ec:6b:c5:db:f7:
         a1:33:09:08:46:50:36:6d:c4:0b:d0:04:7f:23:f5:e1:35:50:
         9a:12:6e:4c:e3:ab:d3:25:04:67:02:f0:78:f9:70:c2:fb:3e:
         65:be:32:6a
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUZDB0Dt7RjwyWhwwSphhwMocMjmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3
NEU0RjNDMDAeFw0yNTA3MTQxNzU1MDJaFw0yNjA3MTMxODAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U3QUY5NjI1N0ExRjFBNUY0
M0M1M0Y2RjE0OTc4NDVDOTUwOUZFMzJDNkQyMkQwODNEMDNDODBGNTVGMDc5NjJE
OEI5REVCRTFFNzk2NDU1NjM0MDU5MEE4NzY5Q0MxNzMyNUExNTYzQ0ZGN0FCODQ2
RkI3RjRDOUE3REMyQkQ2QUE5RjlENTc5QTI1NzQ1Mzk2REZENTBCNjM4QjBEMkM2
MjY4OERBQTVDQjAxNEFCRjk0NTREQzMzQkVEQkM5NDM2QzUyOEIwQzcyNTQ4MEU4
NjQxMERFNDIxNENDODVEMDFBQkJFMjE0M0M4OEJBQTM4M0EyNDIwN0VFOTcxNzAx
NjQ4QkE0QzBCMTNFRTA1QUE1MEVEMkMzMERDOTZDMThGNzIzMzVEODgzRjU4MEM0
RkM1Mzk1RkU1QzE1RkUyM0UyODUwMUI2RUJCOTY4ODcyOUM4MjdENTZDQUU4NzE3
OTExMzY4MEE2QjQ3OUJERUVFQzhGQkVGRkQyMjdBMTlEQUM2MDI3RDE5MzEyODky
NTI1MzU3Qzg5MTk3RDI1QzNGQjY3NTU4QkM1Mjg5RDg4OUFDQ0NEM0QwQTI2RDIw
QTMwMUYwOTI5OEUzRTBCMDgxMzRBN0UzMzlCMkI3MjI3M0VDRTgxMzE3MzQyMkIy
QTEyNjE5NjNCM0FGRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAznr5Yleh8aX0PFP28Ul4RclQn+MsbSLQg9A8gPVfB5Yti53r4eeW
RVY0BZCodpzBcyWhVjz/erhG+39Mmn3CvWqp+dV5oldFOW39ULY4sNLGJojapcsB
Sr+UVNwzvtvJQ2xSiwxyVIDoZBDeQhTMhdAau+IUPIi6o4OiQgfulxcBZIukwLE+
4FqlDtLDDclsGPcjNdiD9YDE/FOV/lwV/iPihQG267lohynIJ9VsrocXkRNoCmtH
m97uyPvv/SJ6GdrGAn0ZMSiSUlNXyJGX0lw/tnVYvFKJ2ImszNPQom0gowHwkpjj
4LCBNKfjObK3InPs6BMXNCKyoSYZY7Ov8QIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FGXfi9V5sWXA2DEXy9qROF3zYcwTMB8GA1UdIwQYMBaAFFkobAldAQSUu6vqIsmu
yUh05PPAMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzU5Mjg2QzA5NUQwMTA0OTRC
QkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3NEU0RjND
MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FXMkFLMmtr
b1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzM0MzUyZTMyMzIzOTJlMzEzMDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzEzMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeVo
MA0GCSqGSIb3DQEBCwUAA4IBAQBX8v/bDEgUuV/hVTxGWZFj79IAuY+zT0IOqqhT
VUp079v76pAKk+QYHyJvuHboRMf31hjKjMWD829exdT0dltiHDOa1+qSA36RMaoI
JAvteaK+P//uyXsrGqTaoAIEz4eLKNT3N1gSNZP3OT5lOD8Hm2Fl8Mw4G/z/+0cY
D1wojgFCLDC+5W+o+58OsvCF3POZhY3T6YyjLUy6Pc9rr8/8YJ/XRlWs3kVSZHww
kZzCmSwPa0PNfjYFGBOQEDcxFfBJZwBnMq1WHrvQiHvLPwMWzkSo7GvF2/ehMwkI
RlA2bcQL0AR/I/XhNVCaEm5M46vTJQRnAvB4+XDC+z5lvjJq
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:37:09 2025 by rpki-client