Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
File:                     34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          QPMfUBmRz5L3sePMOpkMuosZH07qoxzwjbWQgnQ0158=
Subject key identifier:   98:8C:94:47:B2:C0:67:83:A5:5E:65:1E:B8:3E:B9:BE:2B:35:75:BB
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       23F4D52713C48DC22582D4FEDF70AC98CFC21D75
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 24 Mar 2025 15:02:32 +0000
ROA not before:           Mon 24 Mar 2025 14:57:32 +0000
ROA not after:            Mon 23 Mar 2026 15:02:32 +0000
asID:                     61942
IP address blocks:        45.239.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f4:d5:27:13:c4:8d:c2:25:82:d4:fe:df:70:ac:98:cf:c2:1d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar 24 14:57:32 2025 GMT
            Not After : Mar 23 15:02:32 2026 GMT
        Subject: CN=988C9447B2C06783A55E651EB83EB9BE2B3575BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:55:62:c3:17:3b:8b:ae:5a:db:6d:ca:32:6c:
                    04:a3:1f:f6:fe:a5:b2:af:f2:d3:33:df:e7:73:0a:
                    0f:b0:b1:6d:c5:7c:aa:4f:17:de:86:9a:7e:9c:24:
                    26:28:21:77:ba:7e:28:af:03:50:13:0d:46:d5:a0:
                    db:e5:69:71:b9:70:8e:36:99:12:42:03:d5:de:2d:
                    7b:1f:51:f0:9b:ae:11:74:f1:ba:13:dc:2b:e0:2b:
                    71:d6:75:42:e6:bc:0f:80:a5:3c:8b:6c:e7:21:ca:
                    fd:59:c6:f4:1e:35:5b:47:95:2a:a3:94:2b:86:70:
                    34:2c:40:df:83:f9:c9:fc:9a:33:1b:c3:cc:78:69:
                    a9:39:b3:e8:3e:9f:62:f8:97:1b:28:0f:3e:73:06:
                    57:18:7c:a4:cc:4c:87:6f:0e:b3:e0:72:67:c1:93:
                    66:66:1a:b4:24:c8:18:9f:b8:c4:cc:14:df:c9:b7:
                    8d:63:9f:4f:0b:11:79:e6:3d:22:f5:be:e2:88:c6:
                    95:5a:17:27:41:8e:e2:40:e4:0c:57:ac:50:a1:1d:
                    81:f5:03:19:0e:c3:93:99:4a:10:e7:21:96:5d:69:
                    bd:ab:61:63:8e:2f:a0:29:7a:c4:cb:b4:91:13:db:
                    49:c2:84:74:c7:aa:54:ac:0e:3c:9d:8a:30:9e:8c:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:94:47:B2:C0:67:83:A5:5E:65:1E:B8:3E:B9:BE:2B:35:75:BB
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:f6:81:1c:75:9e:9f:62:5e:f2:bb:31:1b:76:8e:96:12:
         fd:ad:73:51:fa:5c:14:dd:e0:86:f3:07:f1:2f:33:20:48:4b:
         b6:43:4c:17:21:30:23:19:20:73:83:c3:a5:e5:dd:f5:0a:86:
         21:12:4c:62:b4:36:58:81:1f:99:2b:5f:50:85:0e:3f:3c:9e:
         50:23:c6:4e:19:f1:72:14:95:7a:b5:29:b1:bc:2f:3e:dd:fe:
         7d:43:41:0f:24:b5:ea:e5:54:89:6a:9a:ba:c7:1c:9c:0f:1f:
         fb:8c:bb:df:09:0a:af:42:6c:21:1d:2c:e3:cf:8e:a6:21:17:
         b3:d7:f3:7d:ac:48:59:99:33:8e:90:bf:12:39:8f:06:ae:73:
         12:67:b8:24:87:a5:d2:6d:a2:74:4b:4b:8a:71:79:91:a9:75:
         63:e8:4b:ae:71:09:48:b9:cd:96:ee:a4:4d:5f:da:75:a6:d9:
         a8:d7:9e:22:3e:35:b3:1a:d9:65:1d:90:29:d3:db:c4:86:14:
         d2:3c:97:72:58:c2:70:5f:5d:b0:d8:3d:cb:65:4e:f3:3f:b5:
         fd:ef:96:91:94:68:17:86:7c:31:58:90:ef:a0:53:f9:91:ed:
         a5:c8:96:12:88:f1:4f:15:ba:6a:2a:5d:b5:42:50:af:d6:14:
         14:1f:71:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI/TVJxPEjcIlgtT+33CsmM/CHXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDOEVBQzdGMUY1QTIxNjgyNEIzNzExODY5Nzc0ODgy
NUYzMTREOTAeFw0yNTAzMjQxNDU3MzJaFw0yNjAzMjMxNTAyMzJaMDMxMTAvBgNV
BAMTKDk4OEM5NDQ3QjJDMDY3ODNBNTVFNjUxRUI4M0VCOUJFMkIzNTc1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVWLDFzuLrlrbbcoybASjH/b+
pbKv8tMz3+dzCg+wsW3FfKpPF96Gmn6cJCYoIXe6fiivA1ATDUbVoNvlaXG5cI42
mRJCA9XeLXsfUfCbrhF08boT3CvgK3HWdULmvA+ApTyLbOchyv1ZxvQeNVtHlSqj
lCuGcDQsQN+D+cn8mjMbw8x4aak5s+g+n2L4lxsoDz5zBlcYfKTMTIdvDrPgcmfB
k2ZmGrQkyBifuMTMFN/Jt41jn08LEXnmPSL1vuKIxpVaFydBjuJA5AxXrFChHYH1
AxkOw5OZShDnIZZdab2rYWOOL6ApesTLtJET20nChHTHqlSsDjydijCejInRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmIyUR7LAZ4OlXmUeuD65vis1dbswHwYDVR0j
BBgwFoAUDsjqx/H1ohaCSzcRhpd0iCXzFNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC8wRUM4RUFDN0YxRjVBMjE2ODI0QjM3MTE4Njk3NzQ4ODI1RjMxNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzhFQUM3RjFGNUEyMTY4
MjRCMzcxMTg2OTc3NDg4MjVGMzE0RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzQzNTJlMzIzMzM5MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe9kMA0GCSqGSIb3DQEBCwUAA4IBAQAIo/aBHHWe
n2Je8rsxG3aOlhL9rXNR+lwU3eCG8wfxLzMgSEu2Q0wXITAjGSBzg8Ol5d31CoYh
EkxitDZYgR+ZK19QhQ4/PJ5QI8ZOGfFyFJV6tSmxvC8+3f59Q0EPJLXq5VSJapq6
xxycDx/7jLvfCQqvQmwhHSzjz46mIRez1/N9rEhZmTOOkL8SOY8GrnMSZ7gkh6XS
baJ0S0uKcXmRqXVj6EuucQlIuc2W7qRNX9p1ptmo154iPjWzGtllHZAp09vEhhTS
PJdyWMJwX12w2D3LZU7zP7X975aRlGgXhnwxWJDvoFP5ke2lyJYSiPFPFbpqKl21
QlCv1hQUH3EX
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:22:40 2025 by rpki-client