Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
File:                     3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (raw, json)
Hash identifier:          4Jqjhfm8UELWTGuiuZ4hZgYSLa1cKWN0n4f8z7pkohI=
Subject key identifier:   E2:9E:25:56:13:E1:27:69:D1:5E:BF:DF:AB:FC:28:D0:14:25:C7:4D
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       340B36E7EDD67C7497B75AECAD2C7DCCF961785D
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
Signing time:             Wed 05 Mar 2025 21:05:02 +0000
ROA not before:           Wed 05 Mar 2025 21:00:02 +0000
ROA not after:            Wed 04 Mar 2026 21:05:02 +0000
asID:                     271709
IP address blocks:        181.192.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
                          rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0b:36:e7:ed:d6:7c:74:97:b7:5a:ec:ad:2c:7d:cc:f9:61:78:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Mar  5 21:00:02 2025 GMT
            Not After : Mar  4 21:05:02 2026 GMT
        Subject: CN=E29E255613E12769D15EBFDFABFC28D01425C74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:a2:36:51:c6:7e:fe:01:06:27:45:9e:0d:
                    e4:e5:46:4e:d4:3c:ae:13:64:87:b3:d3:ce:ff:49:
                    5a:12:af:95:64:ee:06:95:fd:5a:95:8f:d4:d8:09:
                    c8:49:fc:ca:1e:92:41:3b:1d:b7:0a:12:a0:4a:f8:
                    fd:4e:2b:81:ea:56:b1:67:d2:22:63:90:0e:c2:5e:
                    51:a0:4e:88:73:bd:da:9c:0d:fb:17:1f:91:81:48:
                    c5:b8:40:59:16:c2:5d:22:57:44:af:2a:c3:12:61:
                    5f:c0:fb:f7:6f:94:62:7b:5e:34:ba:ed:eb:0c:8a:
                    1e:d7:ac:3d:28:8d:05:5e:0f:fd:82:a2:b4:09:9d:
                    81:4e:93:8b:38:2c:98:4a:d1:5c:b5:7e:42:62:65:
                    10:e0:58:07:69:fb:6c:3a:68:73:f0:1f:3e:9d:c4:
                    79:82:7d:f3:f3:ad:a0:13:f9:5c:17:69:14:cb:94:
                    48:be:3a:55:90:20:cd:bf:bf:04:2a:6c:90:7b:3c:
                    0a:f1:68:0d:75:61:78:1b:64:df:bd:94:bc:60:f6:
                    1b:f2:54:6f:0a:e6:53:6f:3f:7b:a5:7a:fc:a5:21:
                    6e:12:f2:a7:2f:e5:05:8a:5f:e0:be:89:91:0d:91:
                    df:a3:74:bc:59:fe:da:5f:46:cb:c4:4f:57:93:b1:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:25:56:13:E1:27:69:D1:5E:BF:DF:AB:FC:28:D0:14:25:C7:4D
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:84:68:e8:55:93:8e:aa:76:d7:eb:9f:2b:9c:c8:a1:7d:a8:
         d6:f8:74:30:02:d3:84:76:1b:66:f4:a5:3b:f0:8d:a3:4b:47:
         27:cd:f1:ce:e8:40:14:f1:c8:c6:9a:54:e0:11:07:fd:6c:5c:
         ae:9f:8f:8e:eb:5b:93:9e:b5:26:69:9d:fb:07:a4:4d:cb:c8:
         96:8e:70:0c:71:51:3c:90:4f:c9:92:60:b4:30:b4:33:ca:d8:
         25:5f:12:f4:a5:54:4a:ce:58:2d:91:1f:3b:81:ff:c9:90:a4:
         ca:87:3c:c5:95:83:a8:12:76:fe:fd:bf:d9:34:d9:27:e7:6a:
         e0:6b:1d:11:8b:20:42:f6:c2:a4:1b:f0:50:9b:53:fe:0e:d3:
         f3:01:85:8c:df:9d:0b:68:a4:38:13:5f:b7:ee:40:c4:71:af:
         28:bc:84:d0:65:78:42:dc:62:94:b4:f3:7a:ff:ca:85:14:74:
         10:ec:1a:72:85:c4:f7:63:9b:f5:df:2b:e2:fe:36:38:6c:2a:
         b3:75:47:4b:50:28:36:89:ee:c2:b5:27:53:1c:8a:4d:b8:70:
         41:06:b9:92:e1:07:aa:7c:35:7f:24:4c:0a:df:3a:8e:d0:09:
         70:a4:dc:44:d3:b0:65:08:19:2f:78:9c:8e:2b:92:de:c0:97:
         ae:2d:6f:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNAs25+3WfHSXt1rsrSx9zPlheF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4N0I3ODQ3NUQzMDY3Njg3MTM3QkU4MDY5RkZCOENC
QzYxM0NBRjAeFw0yNTAzMDUyMTAwMDJaFw0yNjAzMDQyMTA1MDJaMDMxMTAvBgNV
BAMTKEUyOUUyNTU2MTNFMTI3NjlEMTVFQkZERkFCRkMyOEQwMTQyNUM3NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3qI2UcZ+/gEGJ0WeDeTlRk7U
PK4TZIez087/SVoSr5Vk7gaV/VqVj9TYCchJ/MoekkE7HbcKEqBK+P1OK4HqVrFn
0iJjkA7CXlGgTohzvdqcDfsXH5GBSMW4QFkWwl0iV0SvKsMSYV/A+/dvlGJ7XjS6
7esMih7XrD0ojQVeD/2CorQJnYFOk4s4LJhK0Vy1fkJiZRDgWAdp+2w6aHPwHz6d
xHmCffPzraAT+VwXaRTLlEi+OlWQIM2/vwQqbJB7PArxaA11YXgbZN+9lLxg9hvy
VG8K5lNvP3ulevylIW4S8qcv5QWKX+C+iZENkd+jdLxZ/tpfRsvET1eTsS7dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4p4lVhPhJ2nRXr/fq/wo0BQlx00wHwYDVR0j
BBgwFoAU24e3hHXTBnaHE3voBp/7jLxhPK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3
YVUvMS9EQjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODdCNzg0NzVEMzA2NzY4
NzEzN0JFODA2OUZGQjhDQkM2MTNDQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0TmtSQXM0UTdnOVppeEt6a1lBS0F4cXRRZXBud3hFUVBEZHJKdkVVN2FVLzEv
MzEzODMxMmUzMTM5MzIyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzNzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1wGAwDQYJKoZIhvcNAQELBQADggEBAM6EaOhV
k46qdtfrnyucyKF9qNb4dDAC04R2G2b0pTvwjaNLRyfN8c7oQBTxyMaaVOARB/1s
XK6fj47rW5OetSZpnfsHpE3LyJaOcAxxUTyQT8mSYLQwtDPK2CVfEvSlVErOWC2R
HzuB/8mQpMqHPMWVg6gSdv79v9k02SfnauBrHRGLIEL2wqQb8FCbU/4O0/MBhYzf
nQtopDgTX7fuQMRxryi8hNBleELcYpS083r/yoUUdBDsGnKFxPdjm/XfK+L+Njhs
KrN1R0tQKDaJ7sK1J1Mcik24cEEGuZLhB6p8NX8kTArfOo7QCXCk3ETTsGUIGS94
nI4rkt7Al64tb14=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:51:17 2025 by rpki-client