Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32322d3232203d3e20323636313239.roa
File:                     34352e362e39322e302f32322d3232203d3e20323636313239.roa (raw, json)
Hash identifier:          SMuBlFURgPg1SCCYsvBN7QkBQAH1TUlYJ5yE5r3cx/Y=
Subject key identifier:   6C:9F:49:05:E4:D8:6F:08:8E:FC:0C:1B:36:9C:87:9E:A3:CA:EC:D4
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       747F347B03C8DFF4DC2A12B32BC94C4F85EE84ED
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32322d3232203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     266129
IP address blocks:        45.6.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 12:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7f:34:7b:03:c8:df:f4:dc:2a:12:b3:2b:c9:4c:4f:85:ee:84:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject: CN=6C9F4905E4D86F088EFC0C1B369C879EA3CAECD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:ea:f0:9d:b7:6e:10:2c:c1:b5:54:91:5d:
                    30:7e:b7:93:a0:aa:8c:07:e7:80:b7:2a:bc:fd:09:
                    9b:07:8c:75:48:ee:b1:5c:c2:b3:30:fe:96:51:ba:
                    df:d9:75:08:56:04:32:1d:8f:3d:55:f7:74:b3:91:
                    3e:11:23:ff:9a:e1:7c:2c:b7:0e:19:6e:7c:46:25:
                    77:5f:7d:e2:e9:89:12:08:3e:b5:7b:28:eb:9c:e9:
                    75:48:8f:19:86:60:20:1f:ed:57:01:88:2b:88:e3:
                    4c:f5:9b:42:21:dd:b2:d3:61:e9:b2:e8:44:c5:09:
                    54:83:be:66:d0:10:35:5c:53:7d:76:cd:6f:d0:ee:
                    aa:f3:fb:ee:04:f6:a0:9a:7a:98:ad:f6:e3:97:3a:
                    5c:ec:3b:98:16:de:f6:8e:d6:06:01:da:ad:6f:1e:
                    d1:b8:f2:59:26:3a:37:01:bc:b6:57:4a:5b:75:df:
                    10:7d:48:ed:ee:65:e4:3c:55:8f:51:8f:2f:2a:3b:
                    0d:67:07:f9:3a:4a:24:f1:80:2e:16:f7:1e:ad:34:
                    98:6e:83:7c:92:8c:3a:70:6d:07:e0:f4:f2:8e:81:
                    9c:0a:5a:26:b1:c2:3d:b5:34:72:ec:9f:f0:30:d8:
                    6a:c8:ad:fd:ce:8b:c6:43:cc:22:85:c5:58:06:ef:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:49:05:E4:D8:6F:08:8E:FC:0C:1B:36:9C:87:9E:A3:CA:EC:D4
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32322d3232203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:cc:91:8e:fc:c2:16:3b:a2:30:0a:2a:01:17:5d:3c:c0:
         2a:b0:d4:36:8f:23:05:56:ce:1f:69:9f:fe:32:d1:dc:68:54:
         8d:26:a6:f7:45:fb:8b:15:54:e4:f5:e6:86:95:75:83:cd:5d:
         77:5b:60:46:3d:ad:39:c1:a4:6a:3c:33:ad:7a:51:f2:18:8d:
         c3:b8:28:cb:44:04:50:fc:47:88:5d:9b:9b:b1:74:c4:26:d2:
         38:6b:be:09:4f:01:5b:50:a6:f3:9c:bc:ef:80:34:ec:07:5a:
         cd:08:4f:bc:01:89:8e:1b:b5:17:24:16:94:bc:64:d6:e7:c2:
         7e:d8:b2:d8:b9:66:58:37:cd:dd:2c:da:3e:87:d3:ac:8a:1b:
         a1:37:85:51:3f:c6:30:2a:44:72:ce:4a:96:2f:5c:06:0e:65:
         4b:d4:9a:f9:9b:8b:5a:5c:fe:2a:c9:21:01:64:29:0e:e2:d9:
         5d:2e:ad:a7:00:73:98:1e:a5:f4:6f:6f:21:ad:d1:c2:51:10:
         ba:03:51:e1:6e:3a:b2:bc:a5:44:52:bb:8a:1a:de:06:3e:d2:
         36:37:6f:75:16:9a:43:1a:87:b3:dc:e2:d6:ba:dd:93:11:d5:
         18:bc:68:6d:68:8b:5a:a5:53:f8:10:51:89:87:d5:39:2f:e2:
         d5:51:c9:ef
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdH80ewPI3/TcKhKzK8lMT4XuhO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNTAzMDUxODU1MTRaFw0yNjAzMDQxOTAwMTRaMDMxMTAvBgNV
BAMTKDZDOUY0OTA1RTREODZGMDg4RUZDMEMxQjM2OUM4NzlFQTNDQUVDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRI+rwnbduECzBtVSRXTB+t5Og
qowH54C3Krz9CZsHjHVI7rFcwrMw/pZRut/ZdQhWBDIdjz1V93SzkT4RI/+a4Xws
tw4ZbnxGJXdffeLpiRIIPrV7KOuc6XVIjxmGYCAf7VcBiCuI40z1m0Ih3bLTYemy
6ETFCVSDvmbQEDVcU312zW/Q7qrz++4E9qCaepit9uOXOlzsO5gW3vaO1gYB2q1v
HtG48lkmOjcBvLZXSlt13xB9SO3uZeQ8VY9Rjy8qOw1nB/k6SiTxgC4W9x6tNJhu
g3ySjDpwbQfg9PKOgZwKWiaxwj21NHLsn/Aw2GrIrf3Oi8ZDzCKFxVgG75JzAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUbJ9JBeTYbwiO/AwbNpyHnqPK7NQwHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzQzNTJlMzYyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzYzMTMy
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBlwwDQYJKoZIhvcNAQELBQADggEBALUqzJGO/MIWO6Iw
CioBF108wCqw1DaPIwVWzh9pn/4y0dxoVI0mpvdF+4sVVOT15oaVdYPNXXdbYEY9
rTnBpGo8M616UfIYjcO4KMtEBFD8R4hdm5uxdMQm0jhrvglPAVtQpvOcvO+ANOwH
Ws0IT7wBiY4btRckFpS8ZNbnwn7Ysti5Zlg3zd0s2j6H06yKG6E3hVE/xjAqRHLO
SpYvXAYOZUvUmvmbi1pc/irJIQFkKQ7i2V0uracAc5gepfRvbyGt0cJRELoDUeFu
OrK8pURSu4oa3gY+0jY3b3UWmkMah7Pc4ta63ZMR1Ri8aG1oi1qlU/gQUYmH1Tkv
4tVRye8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:35 2025 by rpki-client