Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39352e302f32342d3234203d3e20323636313239.roa
File:                     34352e362e39352e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier:          B49GYt/0VpQWGLY+OgzNpCluYKqAUoDn4u2uYj0alFw=
Subject key identifier:   4A:17:6F:CE:04:6E:36:A8:31:A0:1B:40:F1:74:EF:A1:DF:24:0A:EF
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       06C688C0ECBF8A5949FB760EA005234D6647751A
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39352e302f32342d3234203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:16 +0000
ROA not before:           Wed 05 Mar 2025 18:55:16 +0000
ROA not after:            Wed 04 Mar 2026 19:00:16 +0000
asID:                     266129
IP address blocks:        45.6.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c6:88:c0:ec:bf:8a:59:49:fb:76:0e:a0:05:23:4d:66:47:75:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:16 2025 GMT
            Not After : Mar  4 19:00:16 2026 GMT
        Subject: CN=4A176FCE046E36A831A01B40F174EFA1DF240AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:f0:c5:ef:42:a2:c4:8d:fc:65:f8:85:19:
                    0e:07:af:0d:13:f9:d6:4c:53:b5:eb:48:07:7d:f9:
                    27:2b:03:5a:3f:f4:11:2c:f0:56:64:20:b3:81:1c:
                    b8:7b:4f:45:c7:e2:70:10:d2:e0:d6:25:7c:38:4f:
                    88:9b:16:ae:9d:85:60:9e:d4:f7:b6:35:73:04:5d:
                    35:aa:5e:09:34:e5:a0:f3:b4:3e:db:7b:20:83:37:
                    d5:6c:e2:03:d5:b6:5e:c8:88:a4:2c:58:1f:a9:9e:
                    1c:81:52:e2:a8:39:b5:cb:52:0c:40:41:a0:92:bc:
                    30:f3:b7:fd:fc:b1:5b:e9:88:58:50:b4:37:ac:37:
                    a3:e3:f8:d4:0e:49:df:41:43:b4:97:41:46:f9:a1:
                    81:44:ec:23:f9:9a:de:89:ea:bd:07:1b:e6:c6:4a:
                    9f:0c:e2:5b:81:56:11:ec:7d:4c:ce:a5:61:4f:5c:
                    a0:43:b6:10:b6:61:3e:bd:d9:6b:4b:4d:03:77:1f:
                    f8:4f:14:59:8f:29:67:5e:57:f3:03:9b:cc:21:22:
                    41:b2:8a:93:e4:4d:ff:f0:1b:f5:4f:62:68:cb:ae:
                    87:35:ee:9b:95:ae:0a:3f:1c:49:8a:df:e8:dc:b2:
                    01:1b:36:ca:5c:8d:d9:26:1c:43:02:ef:09:67:08:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:6F:CE:04:6E:36:A8:31:A0:1B:40:F1:74:EF:A1:DF:24:0A:EF
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39352e302f32342d3234203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:fb:1e:3e:16:66:40:0e:2e:79:f2:ee:bf:1a:5b:37:a0:
         a6:42:34:d5:96:76:4c:3c:35:78:b0:8e:bc:d2:b9:95:f7:16:
         4f:cb:32:2c:c8:af:0a:18:45:3e:28:9a:b0:57:db:0a:a2:7f:
         30:d7:cc:b8:ba:77:17:38:64:ea:42:78:9a:bd:18:35:97:0d:
         3b:20:e4:e7:38:2d:4f:f6:35:27:01:a4:68:6e:24:6f:d6:ad:
         0c:b9:37:33:94:87:82:81:01:d6:b2:0b:97:24:0f:c3:f3:fc:
         07:d0:46:39:1a:af:cd:66:aa:4e:fb:2e:3e:5c:03:d3:fb:15:
         ed:9d:bf:3d:6b:dd:42:98:ca:83:07:29:fe:5d:8a:05:3a:9f:
         01:f8:b1:49:0d:4e:23:78:2d:4b:b0:f2:b6:15:3f:6e:05:1b:
         7b:0e:1e:53:e6:0c:dd:39:5b:af:6f:b3:a8:71:9c:0e:f9:55:
         58:44:8c:40:be:70:6b:24:d2:08:d9:8b:1c:ce:0f:2c:ce:8a:
         8a:4e:f6:fe:4a:ba:4e:fb:bc:3d:76:c7:24:e5:27:2c:ad:5a:
         bc:d0:f2:2c:23:27:32:8b:e1:b7:71:11:99:50:77:c5:e6:2b:
         76:9a:bb:fd:f3:9e:82:6f:50:38:e7:98:9d:80:cc:27:8d:76:
         ce:06:bb:40
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBsaIwOy/illJ+3YOoAUjTWZHdRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNTAzMDUxODU1MTZaFw0yNjAzMDQxOTAwMTZaMDMxMTAvBgNV
BAMTKDRBMTc2RkNFMDQ2RTM2QTgzMUEwMUI0MEYxNzRFRkExREYyNDBBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a/DF70KixI38ZfiFGQ4Hrw0T
+dZMU7XrSAd9+ScrA1o/9BEs8FZkILOBHLh7T0XH4nAQ0uDWJXw4T4ibFq6dhWCe
1Pe2NXMEXTWqXgk05aDztD7beyCDN9Vs4gPVtl7IiKQsWB+pnhyBUuKoObXLUgxA
QaCSvDDzt/38sVvpiFhQtDesN6Pj+NQOSd9BQ7SXQUb5oYFE7CP5mt6J6r0HG+bG
Sp8M4luBVhHsfUzOpWFPXKBDthC2YT692WtLTQN3H/hPFFmPKWdeV/MDm8whIkGy
ipPkTf/wG/VPYmjLroc17puVrgo/HEmK3+jcsgEbNspcjdkmHEMC7wlnCMfhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUShdvzgRuNqgxoBtA8XTvod8kCu8wHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzQzNTJlMzYyZTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMy
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBl8wDQYJKoZIhvcNAQELBQADggEBAF4r+x4+FmZADi55
8u6/Gls3oKZCNNWWdkw8NXiwjrzSuZX3Fk/LMizIrwoYRT4omrBX2wqifzDXzLi6
dxc4ZOpCeJq9GDWXDTsg5Oc4LU/2NScBpGhuJG/WrQy5NzOUh4KBAdayC5ckD8Pz
/AfQRjkar81mqk77Lj5cA9P7Fe2dvz1r3UKYyoMHKf5digU6nwH4sUkNTiN4LUuw
8rYVP24FG3sOHlPmDN05W69vs6hxnA75VVhEjEC+cGsk0gjZixzODyzOiopO9v5K
uk77vD12xyTlJyytWrzQ8iwjJzKL4bdxEZlQd8XmK3aau/3znoJvUDjnmJ2AzCeN
ds4Gu0A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:36:05 2025 by rpki-client