Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35312e302f32342d3234203d3e20323637333533.roa
File:                     34352e3233342e35312e302f32342d3234203d3e20323637333533.roa (raw, json)
Hash identifier:          vUJF9gs5xQMqDUw81LvKpvr9X6AUaWZsW9NYWQWl1Go=
Subject key identifier:   7C:2D:32:BC:2D:D6:3D:88:D6:50:3D:77:66:F6:8F:AA:D7:70:17:86
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       739F1D8260684217321B35DEFAA7E9D99B9B5720
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35312e302f32342d3234203d3e20323637333533.roa
Signing time:             Sat 06 Sep 2025 13:07:44 +0000
ROA not before:           Sat 06 Sep 2025 13:02:44 +0000
ROA not after:            Sat 05 Sep 2026 13:07:44 +0000
asID:                     267353
IP address blocks:        45.234.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9f:1d:82:60:68:42:17:32:1b:35:de:fa:a7:e9:d9:9b:9b:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Sep  6 13:02:44 2025 GMT
            Not After : Sep  5 13:07:44 2026 GMT
        Subject: CN=7C2D32BC2DD63D88D6503D7766F68FAAD7701786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:f0:27:cf:24:ce:36:ed:00:b6:3c:a3:8c:
                    86:38:3e:43:b1:4f:df:fd:0c:54:38:aa:bf:8f:65:
                    5f:97:58:15:3b:8d:70:a9:8c:48:51:87:cb:5f:7f:
                    22:55:82:49:6c:b0:18:c2:98:d6:64:ee:c1:7b:71:
                    89:f0:7b:2d:31:89:85:26:42:f1:55:36:e3:29:34:
                    cf:18:89:8d:5f:3d:c1:72:fd:1d:ba:88:1e:32:d0:
                    fc:01:2a:1b:74:69:7f:39:1b:1a:85:94:61:d3:60:
                    d1:d0:16:db:db:39:f7:6f:9d:b2:a2:a3:bc:8c:0d:
                    dc:da:3c:98:4b:77:af:63:b0:17:5d:ec:f0:a8:43:
                    8e:ad:b6:46:72:2f:4d:e9:0e:06:c0:31:d5:4b:83:
                    6f:5d:83:a4:10:42:f6:cd:e8:27:70:23:76:31:17:
                    f0:2f:1c:f5:3c:18:17:6a:9b:f7:14:66:ac:48:f6:
                    8a:0f:09:a0:b1:eb:5e:0c:c1:d4:d3:57:5e:57:3e:
                    5a:90:88:bf:c8:8a:13:a8:2f:dd:b0:57:10:43:86:
                    2b:23:0d:23:64:3f:4a:74:5d:dd:5c:96:c1:12:3b:
                    52:c8:a5:d7:2d:2d:dc:3c:c2:05:08:d5:4d:c7:dd:
                    d7:10:3c:9d:02:47:76:5f:0b:87:e8:22:af:6c:9d:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2D:32:BC:2D:D6:3D:88:D6:50:3D:77:66:F6:8F:AA:D7:70:17:86
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35312e302f32342d3234203d3e20323637333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:bb:ba:7c:52:be:d1:39:79:b5:79:00:74:31:fb:10:6d:1d:
         2e:b7:c8:06:0e:41:59:80:79:51:38:26:9b:30:62:60:f9:12:
         c1:61:7f:fc:08:d5:c2:dc:09:a6:b2:81:4d:1a:d1:03:98:12:
         83:a9:c1:83:f3:f4:95:86:a2:50:a8:b0:7d:37:67:32:52:46:
         a6:f6:ab:c6:8a:25:86:09:0a:cd:3b:63:49:11:e3:37:96:dd:
         56:e8:02:d9:86:35:bc:89:e5:c9:3a:51:39:8a:86:71:db:89:
         62:81:38:83:39:3f:fe:52:a5:b5:7f:a9:98:a5:3f:c7:18:1d:
         f4:1c:66:de:53:a3:4b:2d:ad:e3:e8:d4:22:18:3b:5b:bf:94:
         bd:4f:37:04:bb:04:f4:b8:0a:ce:80:07:f6:a9:88:35:39:ca:
         4a:8c:70:27:7a:a5:1f:0f:ad:b6:31:f5:fd:db:e4:71:2b:54:
         24:cc:27:8e:0f:95:28:aa:5f:d8:97:4a:11:13:db:4e:b5:ac:
         2b:ef:fb:16:e9:9e:40:d9:63:39:bf:69:03:7c:bd:1e:75:64:
         05:24:87:80:24:a7:58:3d:42:48:1e:b7:88:01:b8:b0:6b:6d:
         84:a9:ca:12:ad:b4:da:d1:0e:0c:00:09:f1:51:7a:1f:83:ec:
         c3:1b:b2:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc58dgmBoQhcyGzXe+qfp2ZubVyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0NzIwN0VBNDNFOUNFRkRCQTc0QUQyQ0Q2NkY4OUNF
NkFGOTgxNzAeFw0yNTA5MDYxMzAyNDRaFw0yNjA5MDUxMzA3NDRaMDMxMTAvBgNV
BAMTKDdDMkQzMkJDMkRENjNEODhENjUwM0Q3NzY2RjY4RkFBRDc3MDE3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwvAnzyTONu0AtjyjjIY4PkOx
T9/9DFQ4qr+PZV+XWBU7jXCpjEhRh8tffyJVgklssBjCmNZk7sF7cYnwey0xiYUm
QvFVNuMpNM8YiY1fPcFy/R26iB4y0PwBKht0aX85GxqFlGHTYNHQFtvbOfdvnbKi
o7yMDdzaPJhLd69jsBdd7PCoQ46ttkZyL03pDgbAMdVLg29dg6QQQvbN6CdwI3Yx
F/AvHPU8GBdqm/cUZqxI9ooPCaCx614MwdTTV15XPlqQiL/IihOoL92wVxBDhisj
DSNkP0p0Xd1clsESO1LIpdctLdw8wgUI1U3H3dcQPJ0CR3ZfC4foIq9snTGHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfC0yvC3WPYjWUD13ZvaPqtdwF4YwHwYDVR0j
BBgwFoAUdEcgfqQ+nO/bp0rSzWb4nOavmBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj
OUUvMC83NDQ3MjA3RUE0M0U5Q0VGREJBNzRBRDJDRDY2Rjg5Q0U2QUY5ODE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NDcyMDdFQTQzRTlDRUZE
QkE3NEFEMkNENjZGODlDRTZBRjk4MTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQem03TFI5YWFRYnpGNVlYdEhhd3ZhU25iRGZYdWhhdzlRRUx1dHN2YzlFLzAv
MzQzNTJlMzIzMzM0MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeozMA0GCSqGSIb3DQEBCwUAA4IBAQCTu7p8Ur7R
OXm1eQB0MfsQbR0ut8gGDkFZgHlROCabMGJg+RLBYX/8CNXC3AmmsoFNGtEDmBKD
qcGD8/SVhqJQqLB9N2cyUkam9qvGiiWGCQrNO2NJEeM3lt1W6ALZhjW8ieXJOlE5
ioZx24ligTiDOT/+UqW1f6mYpT/HGB30HGbeU6NLLa3j6NQiGDtbv5S9TzcEuwT0
uArOgAf2qYg1OcpKjHAneqUfD622MfX92+RxK1QkzCeOD5Uoql/Yl0oRE9tOtawr
7/sW6Z5A2WM5v2kDfL0edWQFJIeAJKdYPUJIHreIAbiwa22EqcoSrbTa0Q4MAAnx
UXofg+zDG7IC
-----END CERTIFICATE-----
Generated at Thu Sep 18 15:30:38 2025 by rpki-client