Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa
File:                     34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (raw, json)
Hash identifier:          iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=
Subject key identifier:   05:F6:B3:4B:6F:81:71:D5:83:8E:89:D3:0B:58:7E:D7:1F:A8:FD:08
Certificate issuer:       /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
Certificate serial:       71B5A27BBB377AAEFFD4049C9A79F71485038C2E
Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa
Signing time:             Wed 16 Jul 2025 17:17:35 +0000
ROA not before:           Wed 16 Jul 2025 17:12:35 +0000
ROA not after:            Wed 15 Jul 2026 17:17:35 +0000
asID:                     268669
IP address blocks:        45.164.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl
                          rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 16:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b5:a2:7b:bb:37:7a:ae:ff:d4:04:9c:9a:79:f7:14:85:03:8c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F
        Validity
            Not Before: Jul 16 17:12:35 2025 GMT
            Not After : Jul 15 17:17:35 2026 GMT
        Subject: CN=05F6B34B6F8171D5838E89D30B587ED71FA8FD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:2c:02:92:ab:8e:2a:33:17:2a:5d:d6:a0:
                    d2:68:54:86:72:19:c5:5d:d1:f3:13:0b:e1:29:e1:
                    c3:83:03:dd:60:f9:ba:fb:17:4d:3d:8c:de:83:a6:
                    f5:d2:f5:e3:49:5c:52:b6:d8:0e:4e:b6:e6:1e:54:
                    df:29:d3:9e:7b:d7:9b:18:4f:0b:e8:51:b5:ec:1d:
                    83:06:d4:6a:ea:b9:47:4d:49:59:3f:85:a5:06:15:
                    b1:57:fc:ca:4b:c4:18:ea:d3:97:2e:d7:e6:18:e0:
                    19:3c:0c:c2:42:05:85:30:7b:82:5d:9c:ee:8b:33:
                    53:8f:36:8f:42:95:96:b7:bb:2c:0d:95:58:21:16:
                    bf:5d:ea:4d:6b:bd:9b:91:36:a1:59:4f:4d:a6:9f:
                    bd:e2:ba:93:32:2b:ae:01:5d:90:c6:26:bd:bb:36:
                    eb:08:9d:98:7b:6d:21:16:dc:e6:db:36:b5:d7:4c:
                    9e:94:68:d6:03:42:bd:47:18:b9:36:d5:34:a4:a1:
                    77:07:af:17:20:ce:d4:53:08:cb:6c:2a:09:96:5f:
                    0a:ea:5e:21:33:9a:35:21:78:91:c5:c0:00:aa:51:
                    7c:47:d4:78:ea:6f:44:6a:4c:9a:0b:05:1b:22:3a:
                    4a:d7:a2:54:eb:3e:a7:8f:53:f6:34:86:75:f8:11:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:B3:4B:6F:81:71:D5:83:8E:89:D3:0B:58:7E:D7:1F:A8:FD:08
            X509v3 Authority Key Identifier:
                keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:12:7c:69:23:a4:c1:ee:10:4c:7d:88:0e:f3:b0:6e:0a:3a:
         2b:1e:4e:ae:f2:31:b0:ee:50:39:01:de:a5:71:a7:f3:6b:23:
         a2:58:d5:3d:d2:75:eb:dd:b2:38:b2:a2:9e:a0:f6:35:57:d9:
         cc:d2:16:82:b8:26:6c:a7:d4:a1:09:47:81:85:9c:03:55:4c:
         4f:9a:ee:ea:a7:f3:f1:e3:23:11:40:24:eb:ea:1f:eb:10:a2:
         47:1a:43:6e:e3:c9:d7:09:b1:f6:9e:8c:63:7b:fe:a5:96:01:
         1b:60:a1:01:57:35:96:b8:9a:23:42:22:62:aa:f0:c7:00:aa:
         dc:24:42:d9:71:b2:f6:ca:85:09:dc:21:74:ea:dd:22:fc:dd:
         da:a1:e0:3d:26:70:14:dd:b2:10:37:bb:1a:89:40:b5:a7:20:
         b6:26:10:56:fa:26:fe:5e:be:0c:0f:7c:78:69:29:c9:22:50:
         9c:be:bd:56:30:fd:ef:a3:6e:19:f1:3d:31:62:91:79:69:39:
         fb:11:9a:a8:73:fe:3d:dd:3d:8d:6f:04:69:a8:7e:56:65:55:
         38:d0:ad:85:7d:99:3e:1e:2b:7d:d8:8d:b2:6a:f3:9f:2f:ca:
         83:64:3b:4a:ba:0b:2a:55:17:79:a9:02:53:c6:40:51:0e:e3:
         94:36:17:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcbWie7s3eq7/1AScmnn3FIUDjC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0
RTkzQkE2RjAeFw0yNTA3MTYxNzEyMzVaFw0yNjA3MTUxNzE3MzVaMDMxMTAvBgNV
BAMTKDA1RjZCMzRCNkY4MTcxRDU4MzhFODlEMzBCNTg3RUQ3MUZBOEZEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJJCwCkquOKjMXKl3WoNJoVIZy
GcVd0fMTC+Ep4cODA91g+br7F009jN6DpvXS9eNJXFK22A5OtuYeVN8p055715sY
TwvoUbXsHYMG1GrquUdNSVk/haUGFbFX/MpLxBjq05cu1+YY4Bk8DMJCBYUwe4Jd
nO6LM1OPNo9ClZa3uywNlVghFr9d6k1rvZuRNqFZT02mn73iupMyK64BXZDGJr27
NusInZh7bSEW3ObbNrXXTJ6UaNYDQr1HGLk21TSkoXcHrxcgztRTCMtsKgmWXwrq
XiEzmjUheJHFwACqUXxH1Hjqb0RqTJoLBRsiOkrXolTrPqePU/Y0hnX4EYc3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBfazS2+BcdWDjonTC1h+1x+o/QgwHwYDVR0j
BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz
dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw
QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoN2hXRnJqWUdMOVJMN2dxa2tzWkZoMlpERlJ1aHBxWjFVNk1WTnlWc3VDLzAv
MzQzNTJlMzEzNjM0MmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpGQwDQYJKoZIhvcNAQELBQADggEBADgSfGkj
pMHuEEx9iA7zsG4KOiseTq7yMbDuUDkB3qVxp/NrI6JY1T3Sdevdsjiyop6g9jVX
2czSFoK4Jmyn1KEJR4GFnANVTE+a7uqn8/HjIxFAJOvqH+sQokcaQ27jydcJsfae
jGN7/qWWARtgoQFXNZa4miNCImKq8McAqtwkQtlxsvbKhQncIXTq3SL83dqh4D0m
cBTdshA3uxqJQLWnILYmEFb6Jv5evgwPfHhpKckiUJy+vVYw/e+jbhnxPTFikXlp
OfsRmqhz/j3dPY1vBGmoflZlVTjQrYV9mT4eK33YjbJq858vyoNkO0q6CypVF3mp
AlPGQFEO45Q2F3E=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:37:29 2025 by rpki-client