Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa
File:                     34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          ksxTxwC1nvXtfamTEK9SCZeLP3p53LrAwncEcspwQ3A=
Subject key identifier:   0A:29:D0:1A:A0:76:1D:A7:26:34:30:0B:63:8A:96:65:AF:54:1A:F5
Certificate issuer:       /CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
Certificate serial:       531DE6C3DBAB0455E0A0B7B3A1F4294B6E1AF713
Authority key identifier: 2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa
Signing time:             Wed 19 Mar 2025 00:07:10 +0000
ROA not before:           Wed 19 Mar 2025 00:02:10 +0000
ROA not after:            Wed 18 Mar 2026 00:07:10 +0000
asID:                     269047
IP address blocks:        45.178.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl
                          rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 13:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1d:e6:c3:db:ab:04:55:e0:a0:b7:b3:a1:f4:29:4b:6e:1a:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
        Validity
            Not Before: Mar 19 00:02:10 2025 GMT
            Not After : Mar 18 00:07:10 2026 GMT
        Subject: CN=0A29D01AA0761DA72634300B638A9665AF541AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:72:a2:8e:fc:00:31:58:35:d2:68:8c:a0:
                    a6:06:a2:f0:00:0d:6f:6a:31:54:a1:c3:1e:5d:36:
                    a2:eb:e2:87:d0:53:ab:5b:af:fe:b9:21:bd:35:8f:
                    3c:8c:c4:a5:73:79:07:90:fb:b8:e1:43:b4:87:38:
                    c3:70:32:83:0c:95:e3:2e:22:29:d3:83:2d:ab:d1:
                    da:a3:10:ae:eb:ba:6f:7f:30:66:3c:e3:d7:b6:f6:
                    1d:27:9b:37:c4:cd:31:2f:c2:04:07:a2:33:85:33:
                    67:fc:f4:94:3f:bd:26:21:7e:97:ae:ba:1c:ec:39:
                    8f:7d:55:18:f8:ff:d5:a6:d5:d4:16:52:f6:a2:b9:
                    8a:56:37:4c:44:31:33:a4:a6:3f:cb:47:da:61:92:
                    cb:7d:c6:86:1c:aa:c2:72:83:93:15:5d:e7:6f:32:
                    82:e5:69:65:d3:87:93:6a:29:89:a8:25:da:45:64:
                    dd:1d:5f:70:78:a8:4a:53:a5:5f:52:02:2b:dd:00:
                    17:27:dd:2a:4e:7c:3e:4e:5a:5f:13:75:fc:e0:ac:
                    52:22:f7:02:cf:58:72:83:29:c6:62:00:99:fb:bb:
                    9c:05:06:31:30:2b:40:79:ba:08:07:7d:8d:b0:ff:
                    8e:73:c0:f5:ff:83:93:be:a8:0b:8e:bf:6e:5f:ce:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:29:D0:1A:A0:76:1D:A7:26:34:30:0B:63:8A:96:65:AF:54:1A:F5
            X509v3 Authority Key Identifier:
                keyid:2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3230382e302f32322d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:08:11:95:2f:39:07:f4:12:03:ad:66:10:c7:1f:4a:0e:
         92:95:ce:83:7c:c0:4d:ee:f2:90:31:35:d0:55:1c:b2:de:eb:
         0f:b4:b0:bf:01:bb:96:20:26:c6:07:36:77:d1:96:eb:e5:85:
         16:eb:41:27:e0:37:52:69:c8:eb:bd:ab:94:d8:b7:80:e0:95:
         89:d0:81:71:5a:00:2d:47:3c:97:2c:40:8c:8a:af:78:d4:f7:
         74:92:9b:0e:95:14:23:96:c8:cb:02:8b:8b:aa:c7:80:d7:a0:
         c0:88:a2:a8:ce:0e:99:03:c8:19:8e:3f:7b:32:44:9b:99:b6:
         d1:be:a8:dd:a7:3c:5e:95:6f:09:e3:19:73:d7:73:3a:24:44:
         79:c7:1a:6e:04:7b:3e:74:d4:95:fc:45:95:e2:38:82:c2:33:
         3d:ba:dc:26:62:20:4e:80:24:94:c6:c8:af:ba:f4:8f:a9:da:
         4e:65:cd:63:a8:bf:50:26:b7:fa:e4:e2:c5:8c:33:fc:8d:28:
         4a:8c:34:fd:bf:11:33:bf:c4:db:df:28:7c:2a:cc:fb:a7:fc:
         a5:ce:4d:3c:b8:cc:d1:d9:f2:78:22:f7:94:1e:e3:e9:b4:f1:
         b2:d3:2a:fb:dc:15:2d:72:0f:62:bb:fd:8c:81:42:25:cc:c1:
         f6:79:1b:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUx3mw9urBFXgoLezofQpS24a9xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMTI0NUZGNkM0RjVCODBGNUYyMDZEQzdBQThGQTc2
NTYzM0FDNzAeFw0yNTAzMTkwMDAyMTBaFw0yNjAzMTgwMDA3MTBaMDMxMTAvBgNV
BAMTKDBBMjlEMDFBQTA3NjFEQTcyNjM0MzAwQjYzOEE5NjY1QUY1NDFBRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LnKijvwAMVg10miMoKYGovAA
DW9qMVShwx5dNqLr4ofQU6tbr/65Ib01jzyMxKVzeQeQ+7jhQ7SHOMNwMoMMleMu
IinTgy2r0dqjEK7rum9/MGY849e29h0nmzfEzTEvwgQHojOFM2f89JQ/vSYhfpeu
uhzsOY99VRj4/9Wm1dQWUvaiuYpWN0xEMTOkpj/LR9phkst9xoYcqsJyg5MVXedv
MoLlaWXTh5NqKYmoJdpFZN0dX3B4qEpTpV9SAivdABcn3SpOfD5OWl8TdfzgrFIi
9wLPWHKDKcZiAJn7u5wFBjEwK0B5uggHfY2w/45zwPX/g5O+qAuOv25fzifDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCinQGqB2HacmNDALY4qWZa9UGvUwHwYDVR0j
BBgwFoAULtEkX/bE9bgPXyBtx6qPp2VjOscwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm40NFZKU2F5RzJDZmcxdGNxMVdEZWNKYjliVlZ6aXZ3QnBFNUdQa042
ZWovMC8yRUQxMjQ1RkY2QzRGNUI4MEY1RjIwNkRDN0FBOEZBNzY1NjMzQUM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDEyNDVGRjZDNEY1Qjgw
RjVGMjA2REM3QUE4RkE3NjU2MzNBQzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuNDRWSlNheUcyQ2ZnMXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItstAwDQYJKoZIhvcNAQELBQADggEBAJ+KCBGV
LzkH9BIDrWYQxx9KDpKVzoN8wE3u8pAxNdBVHLLe6w+0sL8Bu5YgJsYHNnfRluvl
hRbrQSfgN1JpyOu9q5TYt4DglYnQgXFaAC1HPJcsQIyKr3jU93SSmw6VFCOWyMsC
i4uqx4DXoMCIoqjODpkDyBmOP3syRJuZttG+qN2nPF6VbwnjGXPXczokRHnHGm4E
ez501JX8RZXiOILCMz263CZiIE6AJJTGyK+69I+p2k5lzWOov1Amt/rk4sWMM/yN
KEqMNP2/ETO/xNvfKHwqzPun/KXOTTy4zNHZ8ngi95Qe4+m08bLTKvvcFS1yD2K7
/YyBQiXMwfZ5G9A=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:51 2025 by rpki-client