Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e362e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          NozSOucOKzpOFNzK5KTnAMRrSwAhFg+GErk19JcXFcw=
Subject key identifier:   E8:01:B7:D4:D5:F9:15:7D:72:AC:57:76:C1:B6:0F:D8:8A:28:DF:D5
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       03BC6082DE1DD44CFD69629695D9112713333C2B
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa
Signing time:             Fri 07 Mar 2025 01:12:28 +0000
ROA not before:           Fri 07 Mar 2025 01:07:28 +0000
ROA not after:            Fri 06 Mar 2026 01:12:28 +0000
asID:                     269355
IP address blocks:        45.185.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 11:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bc:60:82:de:1d:d4:4c:fd:69:62:96:95:d9:11:27:13:33:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Mar  7 01:07:28 2025 GMT
            Not After : Mar  6 01:12:28 2026 GMT
        Subject: CN=E801B7D4D5F9157D72AC5776C1B60FD88A28DFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:75:5b:3d:2d:b0:af:e0:55:a3:c4:aa:26:
                    c0:90:4f:66:47:8f:8b:88:dd:67:85:62:c9:34:89:
                    82:22:3b:ce:ef:12:37:a1:af:21:32:0d:1e:3e:1c:
                    de:5e:42:40:d4:4e:ae:54:8d:b8:29:8c:00:6a:58:
                    00:c3:44:cd:f6:ad:f2:26:67:a5:d7:71:16:ab:f7:
                    e1:09:3a:3d:f3:33:f1:a5:4f:2a:ee:cb:7b:4c:da:
                    bc:ad:0b:67:f2:70:49:b1:f5:a3:38:9e:44:3e:a8:
                    ea:bf:d3:5c:a6:33:9b:25:db:58:8f:19:d1:7c:78:
                    fd:4e:ee:7a:e5:e1:8a:9d:63:ae:df:c5:8f:9a:9c:
                    cd:35:b2:43:cb:99:76:a5:a5:94:79:6a:a4:95:d7:
                    9d:1b:81:6c:fc:4e:44:a3:cf:d2:8a:e9:c8:7b:9e:
                    e0:73:d9:7e:0b:85:f0:48:b0:07:c1:59:37:73:b9:
                    6e:30:3c:27:f6:00:10:81:ba:f9:58:fe:2d:5e:ae:
                    8f:06:a2:11:80:ac:9d:8f:51:76:f6:40:01:32:e5:
                    30:95:38:3f:de:ce:67:8e:bc:97:06:05:b3:0c:b5:
                    a5:d4:cd:bf:ac:d3:6d:74:86:9a:03:c5:25:0b:e6:
                    d4:57:d2:45:f0:16:cb:52:c8:2d:67:f7:5b:25:d4:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:B7:D4:D5:F9:15:7D:72:AC:57:76:C1:B6:0F:D8:8A:28:DF:D5
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/34352e3138352e362e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:cb:d0:3b:66:b9:91:66:6b:f8:ec:79:90:28:c6:bc:0d:
         8b:66:93:ef:c0:3f:35:20:43:29:c6:64:2c:9a:bc:0c:56:7d:
         72:27:41:9b:ea:25:1d:80:a3:aa:9a:8e:a5:d8:bd:ff:dc:e9:
         db:8f:8e:84:89:b2:72:bd:f5:0d:55:9d:62:32:76:4d:6e:69:
         95:8a:61:31:9e:b9:5d:ca:14:ca:d9:c1:91:52:8f:4d:60:cc:
         66:0f:82:96:9b:4d:97:fc:15:f4:db:f4:cd:32:e7:d8:d4:03:
         d1:24:d0:6f:28:00:a9:2e:9f:b1:bd:cb:c1:05:2e:cf:5c:a4:
         12:3b:38:ae:7d:93:e7:ab:73:54:13:d7:a7:2e:37:57:ff:6c:
         45:52:66:d3:29:24:4b:5d:0b:99:0d:1c:61:54:a9:fe:70:13:
         c4:77:72:e1:d4:4a:19:6c:8a:25:8b:8e:df:4c:6f:5b:b9:b2:
         9e:f6:46:b2:3f:58:52:4a:e1:8a:79:3c:6b:58:d8:9f:b6:72:
         4e:78:ef:bc:ec:ef:c1:4a:45:9f:7f:4c:4a:2f:d4:fc:66:b1:
         b7:33:66:e0:71:d7:63:f2:a1:db:32:f9:7f:78:2d:61:12:ac:
         99:3f:4a:e2:4c:29:54:90:34:d7:d9:1f:ea:b9:dd:d4:d0:90:
         8c:b3:15:bd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUA7xggt4d1Ez9aWKWldkRJxMzPCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ2RDRGMzkwQUI4MzRDQjM5NTIzMkEwNjgwRDE0Mzk0
QkU3NUZDQzAeFw0yNTAzMDcwMTA3MjhaFw0yNjAzMDYwMTEyMjhaMDMxMTAvBgNV
BAMTKEU4MDFCN0Q0RDVGOTE1N0Q3MkFDNTc3NkMxQjYwRkQ4OEEyOERGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0nVbPS2wr+BVo8SqJsCQT2ZH
j4uI3WeFYsk0iYIiO87vEjehryEyDR4+HN5eQkDUTq5UjbgpjABqWADDRM32rfIm
Z6XXcRar9+EJOj3zM/GlTyruy3tM2rytC2fycEmx9aM4nkQ+qOq/01ymM5sl21iP
GdF8eP1O7nrl4YqdY67fxY+anM01skPLmXalpZR5aqSV150bgWz8TkSjz9KK6ch7
nuBz2X4LhfBIsAfBWTdzuW4wPCf2ABCBuvlY/i1ero8GohGArJ2PUXb2QAEy5TCV
OD/ezmeOvJcGBbMMtaXUzb+s0210hpoDxSUL5tRX0kXwFstSyC1n91sl1FQjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6AG31NX5FX1yrFd2wbYP2Ioo39UwHwYDVR0j
BBgwFoAURG1POQq4NMs5UjKgaA0UOUvnX8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMS80NDZENEYzOTBBQjgzNENCMzk1MjMyQTA2ODBEMTQzOTRCRTc1RkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NkQ0RjM5MEFCODM0Q0Iz
OTUyMzJBMDY4MEQxNDM5NEJFNzVGQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzEv
MzQzNTJlMzEzODM1MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTMz
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC25BjANBgkqhkiG9w0BAQsFAAOCAQEAbPjL0DtmuZFm
a/jseZAoxrwNi2aT78A/NSBDKcZkLJq8DFZ9cidBm+olHYCjqpqOpdi9/9zp24+O
hImycr31DVWdYjJ2TW5plYphMZ65XcoUytnBkVKPTWDMZg+ClptNl/wV9Nv0zTLn
2NQD0STQbygAqS6fsb3LwQUuz1ykEjs4rn2T56tzVBPXpy43V/9sRVJm0ykkS10L
mQ0cYVSp/nATxHdy4dRKGWyKJYuO30xvW7mynvZGsj9YUkrhink8a1jYn7ZyTnjv
vOzvwUpFn39MSi/U/GaxtzNm4HHXY/Kh2zL5f3gtYRKsmT9K4kwpVJA019kf6rnd
1NCQjLMVvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:39:12 2025 by rpki-client