Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
File:                     34352e3136332e34382e302f32322d3234203d3e20323731363232.roa (raw, json)
Hash identifier:          FAKYNL1ZM+FsGC+F59BrpMhNvWSD0CSiVeEXvLexRMg=
Subject key identifier:   6C:4A:62:28:F2:58:44:F5:2A:A6:2D:0A:07:3D:07:06:3F:32:B8:DA
Certificate issuer:       /CN=E9AECF3699200359BC938C47C511F48ECC7D354F
Certificate serial:       1422145815F7202F917FFC6B0741256C1D1CD555
Authority key identifier: E9:AE:CF:36:99:20:03:59:BC:93:8C:47:C5:11:F4:8E:CC:7D:35:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
Signing time:             Thu 29 May 2025 11:47:44 +0000
ROA not before:           Thu 29 May 2025 11:42:44 +0000
ROA not after:            Thu 28 May 2026 11:47:44 +0000
asID:                     271622
IP address blocks:        45.163.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 22:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:22:14:58:15:f7:20:2f:91:7f:fc:6b:07:41:25:6c:1d:1c:d5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AECF3699200359BC938C47C511F48ECC7D354F
        Validity
            Not Before: May 29 11:42:44 2025 GMT
            Not After : May 28 11:47:44 2026 GMT
        Subject: CN=6C4A6228F25844F52AA62D0A073D07063F32B8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:f5:7a:c2:b5:14:a4:cd:30:d4:7e:ba:49:
                    20:fa:bb:ff:70:17:e0:25:c0:31:56:5e:4f:e4:9d:
                    e3:e2:fc:b3:d4:ff:e9:cc:48:e8:6f:bb:6d:5d:bc:
                    36:12:9a:46:f2:8c:f5:b0:75:f5:90:e2:ff:3a:bf:
                    1f:a7:01:16:dd:da:97:68:08:0d:1f:c1:bf:39:86:
                    a1:bb:5b:6e:74:c9:b8:08:82:ac:d0:de:7e:b2:5a:
                    39:d7:bf:8c:e7:52:ac:6b:71:74:fa:df:c9:30:00:
                    a3:e1:c3:a9:0d:04:c2:98:cf:70:10:64:ba:fe:8d:
                    68:a5:17:3a:57:69:45:eb:3d:b8:e0:91:ab:a0:1a:
                    56:66:c6:da:2e:41:eb:b9:c1:ce:cb:c8:5f:40:d2:
                    00:0d:3e:f9:dd:b3:4b:00:53:d5:28:4d:fc:eb:c9:
                    77:86:6d:de:10:51:82:b8:36:16:65:87:f6:56:3f:
                    4e:23:a3:ba:c5:79:ea:24:e9:cb:26:19:8c:c4:50:
                    1c:b2:ea:46:3a:11:f7:f7:21:25:58:ef:c2:94:23:
                    f5:a0:d3:e8:53:f9:03:c3:8c:30:d2:84:4d:dd:ce:
                    18:5c:e2:02:0a:d9:82:26:6f:07:cf:59:7b:e0:1c:
                    b3:5a:73:b8:b1:a0:26:f0:0a:47:e7:56:bb:16:81:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:62:28:F2:58:44:F5:2A:A6:2D:0A:07:3D:07:06:3F:32:B8:DA
            X509v3 Authority Key Identifier:
                keyid:E9:AE:CF:36:99:20:03:59:BC:93:8C:47:C5:11:F4:8E:CC:7D:35:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:77:86:d1:d3:3b:0d:4f:c6:60:a6:72:57:42:ca:ad:e3:
         fc:6e:ab:c2:f4:95:84:15:4b:52:99:4f:2b:e1:52:6f:7c:a1:
         e9:de:fd:f3:50:1a:82:ee:7f:aa:1b:f6:e8:91:4f:de:97:e1:
         67:7d:b5:76:33:37:8b:54:00:8c:dc:45:55:57:db:87:a8:88:
         27:43:e8:e4:de:5b:ae:05:52:7e:ba:91:14:ef:8d:a7:51:24:
         8f:81:21:4a:08:72:7e:29:11:2a:96:90:9e:6a:20:d8:f3:10:
         10:48:52:5c:26:24:01:f9:d2:91:09:f9:55:ac:b7:dc:0f:7f:
         12:41:55:3b:a2:36:ea:f1:4b:60:78:d7:45:2b:a0:94:25:80:
         3d:e4:41:77:da:6f:ed:f7:4e:27:99:dd:1b:7e:44:3e:79:1e:
         ab:77:73:a2:42:91:a0:a7:59:ac:5b:78:a1:e5:be:53:ed:b6:
         0b:ef:56:18:56:8e:a3:61:56:2e:b3:92:7b:32:d2:77:0f:1f:
         e1:1f:48:6f:49:14:a6:a3:55:9a:dc:7b:46:b7:70:95:40:45:
         3b:90:35:cf:78:5f:41:0f:6b:1a:f7:bf:ce:97:59:65:23:85:
         5c:92:12:c0:d2:58:ad:d4:ed:3c:76:e2:28:ee:c6:0d:f5:f6:
         85:53:2a:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFCIUWBX3IC+Rf/xrB0ElbB0c1VUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUNGMzY5OTIwMDM1OUJDOTM4QzQ3QzUxMUY0OEVD
QzdEMzU0RjAeFw0yNTA1MjkxMTQyNDRaFw0yNjA1MjgxMTQ3NDRaMDMxMTAvBgNV
BAMTKDZDNEE2MjI4RjI1ODQ0RjUyQUE2MkQwQTA3M0QwNzA2M0YzMkI4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSY/V6wrUUpM0w1H66SSD6u/9w
F+AlwDFWXk/knePi/LPU/+nMSOhvu21dvDYSmkbyjPWwdfWQ4v86vx+nARbd2pdo
CA0fwb85hqG7W250ybgIgqzQ3n6yWjnXv4znUqxrcXT638kwAKPhw6kNBMKYz3AQ
ZLr+jWilFzpXaUXrPbjgkaugGlZmxtouQeu5wc7LyF9A0gANPvnds0sAU9UoTfzr
yXeGbd4QUYK4NhZlh/ZWP04jo7rFeeok6csmGYzEUByy6kY6Eff3ISVY78KUI/Wg
0+hT+QPDjDDShE3dzhhc4gIK2YImbwfPWXvgHLNac7ixoCbwCkfnVrsWgUyjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbEpiKPJYRPUqpi0KBz0HBj8yuNowHwYDVR0j
BBgwFoAU6a7PNpkgA1m8k4xHxRH0jsx9NU8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVvdTZqempxOEsySmdHWjUxMWJIb1Y4amh4cmMzTVVySFBUQ1IxVmhB
UGIvMC9FOUFFQ0YzNjk5MjAwMzU5QkM5MzhDNDdDNTExRjQ4RUNDN0QzNTRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVDRjM2OTkyMDAzNTlC
QzkzOEM0N0M1MTFGNDhFQ0M3RDM1NEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlb3U2anpqcThLMkpnR1o1MTFiSG9WOGpoeHJjM01VckhQVENSMVZoQVBiLzAv
MzQzNTJlMzEzNjMzMmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaMwMA0GCSqGSIb3DQEBCwUAA4IBAQAowXeG0dM7
DU/GYKZyV0LKreP8bqvC9JWEFUtSmU8r4VJvfKHp3v3zUBqC7n+qG/bokU/el+Fn
fbV2MzeLVACM3EVVV9uHqIgnQ+jk3luuBVJ+upEU742nUSSPgSFKCHJ+KREqlpCe
aiDY8xAQSFJcJiQB+dKRCflVrLfcD38SQVU7ojbq8UtgeNdFK6CUJYA95EF32m/t
904nmd0bfkQ+eR6rd3OiQpGgp1msW3ih5b5T7bYL71YYVo6jYVYus5J7MtJ3Dx/h
H0hvSRSmo1Wa3HtGt3CVQEU7kDXPeF9BD2sa97/Ol1llI4VckhLA0lit1O08duIo
7sYN9faFUyou
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:49:28 2025 by rpki-client