Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa
File:                     34352e3137392e37362e302f32322d3332203d3e20323639303833.roa (raw, json)
Hash identifier:          0pNR6hmVDRWKgrDaIWdruI7bsH7yi5MzjnfAJbBp1dY=
Subject key identifier:   0A:87:E8:E1:C5:B6:49:AD:D2:2B:03:2F:4A:58:9E:09:8F:9D:17:FF
Certificate issuer:       /CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
Certificate serial:       32E0F8C5BC0AE49F558E82F7878D2B0B70396527
Authority key identifier: 00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa
Signing time:             Thu 06 Mar 2025 12:40:16 +0000
ROA not before:           Thu 06 Mar 2025 12:35:16 +0000
ROA not after:            Thu 05 Mar 2026 12:40:16 +0000
asID:                     269083
IP address blocks:        45.179.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl
                          rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 15:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e0:f8:c5:bc:0a:e4:9f:55:8e:82:f7:87:8d:2b:0b:70:39:65:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008000470935F66EDA9DDD0F074AF51CB753E2E5
        Validity
            Not Before: Mar  6 12:35:16 2025 GMT
            Not After : Mar  5 12:40:16 2026 GMT
        Subject: CN=0A87E8E1C5B649ADD22B032F4A589E098F9D17FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:a2:ea:08:a2:6a:60:18:95:30:e3:51:d1:
                    24:f3:24:f9:52:6c:b7:ca:e4:2a:c8:69:f8:8c:76:
                    2c:65:c0:0b:8f:bc:37:08:ed:a8:80:fc:d5:08:6d:
                    2d:ba:a7:46:11:8c:64:bf:80:5c:10:6d:1e:47:b3:
                    b4:9a:e3:81:d1:18:db:e9:44:49:69:a9:70:a3:9f:
                    fa:ea:ad:96:d2:dc:56:ac:08:09:3d:5d:43:f2:d3:
                    86:f3:d7:73:a2:9d:f8:63:3a:68:6b:86:a7:1c:be:
                    c3:f4:6f:44:be:13:90:43:21:1e:cb:7d:d7:06:ad:
                    da:a6:8c:56:45:be:ef:e8:3e:4b:f9:c7:15:28:fe:
                    75:60:b6:0f:d4:7b:cf:0d:db:b3:e9:e8:83:43:6f:
                    c2:7b:47:c6:45:ba:17:1a:5b:11:66:65:0a:5b:4a:
                    25:01:e1:32:49:26:4b:e3:f8:4f:1a:18:de:44:68:
                    b4:c8:67:7f:a5:95:2e:e5:76:06:ea:eb:c4:07:3f:
                    bb:f0:09:43:c9:01:2d:73:f6:78:7e:6f:59:c8:9e:
                    dc:e6:1c:61:a3:4a:42:69:8b:b4:00:15:49:02:03:
                    8b:05:90:49:96:6f:73:10:92:37:b4:a4:ea:d4:87:
                    97:30:9f:b2:13:14:0c:b0:2b:7b:fd:66:26:d7:fa:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:E8:E1:C5:B6:49:AD:D2:2B:03:2F:4A:58:9E:09:8F:9D:17:FF
            X509v3 Authority Key Identifier:
                keyid:00:80:00:47:09:35:F6:6E:DA:9D:DD:0F:07:4A:F5:1C:B7:53:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/008000470935F66EDA9DDD0F074AF51CB753E2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/008000470935F66EDA9DDD0F074AF51CB753E2E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/34352e3137392e37362e302f32322d3332203d3e20323639303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:d3:b2:6f:97:07:64:11:a4:27:78:a8:e4:c1:62:ab:fd:
         ed:d0:f7:5b:18:38:25:ee:f8:7f:e8:26:3d:a3:01:f3:f9:05:
         8e:57:05:d2:03:eb:76:b0:99:79:7f:8f:2c:68:f7:db:d0:5d:
         75:f1:34:79:4e:c8:67:fa:00:0a:e7:7a:de:7f:6e:27:35:4e:
         03:cc:96:3b:52:8c:8c:0b:2c:45:a9:9c:cb:de:d0:61:dc:22:
         8f:3d:61:1f:33:ad:62:57:7b:51:8b:78:d8:f1:e4:c0:42:60:
         0e:d3:38:37:6b:b8:4d:be:1a:2d:b9:60:c6:09:18:e1:6a:e1:
         4a:7a:46:b8:1c:43:3f:72:90:09:6c:4c:ce:81:fc:2e:95:cd:
         ef:8e:e4:5f:98:76:e6:13:b6:07:34:d3:9a:dc:ad:8b:2b:82:
         00:07:e2:5a:6b:a9:af:18:00:41:54:6d:5b:13:91:9b:39:a9:
         4b:ff:24:c0:42:3d:38:f2:b5:8a:60:8d:9c:ec:c5:0a:e1:68:
         87:30:b1:d1:7c:5d:6e:0f:9e:90:0a:fa:24:a0:40:7a:49:96:
         c4:0c:7c:79:0b:10:7d:7a:87:8e:10:50:65:0f:ca:a5:c1:08:
         0f:27:3b:f4:a3:8b:75:23:e1:07:ba:08:c9:a3:4e:2a:d0:1e:
         93:cd:c1:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMuD4xbwK5J9VjoL3h40rC3A5ZScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA4MDAwNDcwOTM1RjY2RURBOURERDBGMDc0QUY1MUNC
NzUzRTJFNTAeFw0yNTAzMDYxMjM1MTZaFw0yNjAzMDUxMjQwMTZaMDMxMTAvBgNV
BAMTKDBBODdFOEUxQzVCNjQ5QUREMjJCMDMyRjRBNTg5RTA5OEY5RDE3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRHqLqCKJqYBiVMONR0STzJPlS
bLfK5CrIafiMdixlwAuPvDcI7aiA/NUIbS26p0YRjGS/gFwQbR5Hs7Sa44HRGNvp
RElpqXCjn/rqrZbS3FasCAk9XUPy04bz13OinfhjOmhrhqccvsP0b0S+E5BDIR7L
fdcGrdqmjFZFvu/oPkv5xxUo/nVgtg/Ue88N27Pp6INDb8J7R8ZFuhcaWxFmZQpb
SiUB4TJJJkvj+E8aGN5EaLTIZ3+llS7ldgbq68QHP7vwCUPJAS1z9nh+b1nIntzm
HGGjSkJpi7QAFUkCA4sFkEmWb3MQkje0pOrUh5cwn7ITFAywK3v9ZibX+ojDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCofo4cW2Sa3SKwMvSlieCY+dF/8wHwYDVR0j
BBgwFoAUAIAARwk19m7and0PB0r1HLdT4uUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZmRGFndGFSdXhnNVY2cEVxZGREZjZ0bldwc1E4ams5MVVOTWRoQUg4
NGUvMC8wMDgwMDA0NzA5MzVGNjZFREE5REREMEYwNzRBRjUxQ0I3NTNFMkU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwODAwMDQ3MDkzNUY2NkVE
QTlEREQwRjA3NEFGNTFDQjc1M0UyRTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGZkRhZ3RhUnV4ZzVWNnBFcWRkRGY2dG5XcHNROGprOTFVTk1kaEFIODRlLzAv
MzQzNTJlMzEzNzM5MmUzNzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbNMMA0GCSqGSIb3DQEBCwUAA4IBAQAtxdOyb5cH
ZBGkJ3io5MFiq/3t0PdbGDgl7vh/6CY9owHz+QWOVwXSA+t2sJl5f48saPfb0F11
8TR5Tshn+gAK53ref24nNU4DzJY7UoyMCyxFqZzL3tBh3CKPPWEfM61iV3tRi3jY
8eTAQmAO0zg3a7hNvhotuWDGCRjhauFKeka4HEM/cpAJbEzOgfwulc3vjuRfmHbm
E7YHNNOa3K2LK4IAB+Jaa6mvGABBVG1bE5GbOalL/yTAQj048rWKYI2c7MUK4WiH
MLHRfF1uD56QCvokoEB6SZbEDHx5CxB9eoeOEFBlD8qlwQgPJzv0o4t1I+EHugjJ
o04q0B6TzcGy
-----END CERTIFICATE-----
Generated at Thu Apr 17 16:02:23 2025 by rpki-client