Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
File:                     34352e3136322e32332e302f32342d3234203d3e20323638353038.roa (raw, json)
Hash identifier:          LRC8p9meT8uN3Ny2zsQWRjI9wz8FYRj35b4IeeZGOdM=
Subject key identifier:   AD:01:7E:C9:B1:9B:24:A5:D9:E4:5E:DD:B6:BB:0E:23:A7:C1:34:A7
Certificate issuer:       /CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
Certificate serial:       685086F8C18EFE2CE1CAAF2135A5786C231528FC
Authority key identifier: 18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
Signing time:             Sat 15 Mar 2025 16:57:57 +0000
ROA not before:           Sat 15 Mar 2025 16:52:57 +0000
ROA not after:            Sat 14 Mar 2026 16:57:57 +0000
asID:                     268508
IP address blocks:        45.162.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:86:f8:c1:8e:fe:2c:e1:ca:af:21:35:a5:78:6c:23:15:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
        Validity
            Not Before: Mar 15 16:52:57 2025 GMT
            Not After : Mar 14 16:57:57 2026 GMT
        Subject: CN=AD017EC9B19B24A5D9E45EDDB6BB0E23A7C134A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:74:8a:23:1f:8d:67:7a:f8:3c:53:1f:c9:
                    89:d5:07:42:78:da:33:28:88:f9:8e:d4:42:c9:3b:
                    b1:6c:0f:27:ba:6a:31:27:c9:81:7a:5b:f0:59:78:
                    a6:fc:1a:e5:74:42:e0:40:f8:af:53:ea:37:13:c0:
                    87:f3:01:21:3f:6e:64:35:92:b8:1e:71:e5:7a:ca:
                    c4:8f:03:6e:c9:84:b3:65:68:1d:f2:e3:ca:a8:88:
                    40:8f:ca:64:40:9c:3e:40:25:3a:df:29:54:02:b8:
                    70:11:24:0d:67:29:de:fd:cb:89:62:c7:8e:ba:ef:
                    9f:0b:4d:99:e0:03:97:26:84:19:3e:92:0a:45:38:
                    af:92:1d:ae:a8:b7:33:11:9c:70:cc:8c:32:41:2d:
                    da:ba:34:29:c4:85:67:43:2b:c5:f6:a2:42:18:6c:
                    3a:33:51:24:4e:d4:23:01:a7:05:07:f1:f0:61:44:
                    f2:81:f4:9b:99:60:ae:e9:f0:33:54:18:f6:a5:2d:
                    58:7f:cf:b3:b0:c4:f1:bb:d8:30:a7:e9:56:da:bb:
                    a6:65:51:63:53:b6:05:04:26:be:6a:d2:dd:71:e8:
                    da:2a:77:19:57:13:eb:73:92:42:f0:fa:86:62:9c:
                    45:19:d8:33:b7:7e:f0:73:0a:99:19:7f:89:03:ff:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:7E:C9:B1:9B:24:A5:D9:E4:5E:DD:B6:BB:0E:23:A7:C1:34:A7
            X509v3 Authority Key Identifier:
                keyid:18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:13:5b:99:97:41:83:84:2e:5d:c4:d3:4c:11:7d:fe:c3:d3:
         82:22:90:6b:2f:c1:93:3f:e2:04:0a:3c:88:3d:0c:6d:43:9b:
         6d:4c:ce:28:ac:34:0d:be:78:8a:e8:ac:ce:48:7c:77:a3:07:
         1f:70:3d:25:eb:bf:c0:42:47:10:e7:d5:b1:08:f7:b5:1a:09:
         fc:5d:0c:3c:5a:37:d9:40:2a:57:b2:2a:86:82:29:64:25:06:
         14:cb:81:1a:e5:12:c6:96:62:69:86:3d:a3:0d:50:67:ec:80:
         40:5e:65:89:c4:31:da:b1:49:dc:ea:33:b1:a7:bc:8e:d0:e4:
         44:ed:00:97:b8:7d:77:52:d7:0c:5a:d8:06:f2:70:d6:c8:55:
         59:6d:8d:3c:88:2e:bf:d0:83:a4:1c:d0:ec:33:a9:2c:d1:9b:
         d2:b5:bf:70:e0:f6:b1:8b:36:69:fd:80:ac:c3:d4:b4:f6:04:
         be:8b:62:1b:31:75:11:9b:04:9a:71:39:77:d1:77:19:07:03:
         a7:3d:4e:ac:e1:86:21:ca:de:a2:4e:4b:a4:17:c9:f4:27:7f:
         b1:72:66:e6:22:ef:c8:d6:dc:1b:57:ee:09:cf:dd:27:85:bc:
         e4:5a:a9:90:c0:9e:f6:f2:95:14:c8:c9:78:a6:0c:10:b5:2b:
         fb:50:eb:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaFCG+MGO/izhyq8hNaV4bCMVKPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThCMTBGMkY1RDc4QUQ0NDFBNDYxNzZGOURGMjc4RjBE
RTczRDQwRTAeFw0yNTAzMTUxNjUyNTdaFw0yNjAzMTQxNjU3NTdaMDMxMTAvBgNV
BAMTKEFEMDE3RUM5QjE5QjI0QTVEOUU0NUVEREI2QkIwRTIzQTdDMTM0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjx3SKIx+NZ3r4PFMfyYnVB0J4
2jMoiPmO1ELJO7FsDye6ajEnyYF6W/BZeKb8GuV0QuBA+K9T6jcTwIfzASE/bmQ1
krgeceV6ysSPA27JhLNlaB3y48qoiECPymRAnD5AJTrfKVQCuHARJA1nKd79y4li
x466758LTZngA5cmhBk+kgpFOK+SHa6otzMRnHDMjDJBLdq6NCnEhWdDK8X2okIY
bDozUSRO1CMBpwUH8fBhRPKB9JuZYK7p8DNUGPalLVh/z7OwxPG72DCn6Vbau6Zl
UWNTtgUEJr5q0t1x6NoqdxlXE+tzkkLw+oZinEUZ2DO3fvBzCpkZf4kD/yx1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrQF+ybGbJKXZ5F7dtrsOI6fBNKcwHwYDVR0j
BBgwFoAUGLEPL114rUQaRhdvnfJ48N5z1A4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtl
MVYvMC8xOEIxMEYyRjVENzhBRDQ0MUE0NjE3NkY5REYyNzhGMERFNzNENDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4QjEwRjJGNUQ3OEFENDQx
QTQ2MTc2RjlERjI3OEYwREU3M0Q0MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDaHNjYURTRjVpb2FUclM5c1E1dHh1VnRzYjJaY1ZRYXBGeWpIMnRrZTFWLzAv
MzQzNTJlMzEzNjMyMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaIXMA0GCSqGSIb3DQEBCwUAA4IBAQBQE1uZl0GD
hC5dxNNMEX3+w9OCIpBrL8GTP+IECjyIPQxtQ5ttTM4orDQNvniK6KzOSHx3owcf
cD0l67/AQkcQ59WxCPe1Ggn8XQw8WjfZQCpXsiqGgilkJQYUy4Ea5RLGlmJphj2j
DVBn7IBAXmWJxDHasUnc6jOxp7yO0ORE7QCXuH13UtcMWtgG8nDWyFVZbY08iC6/
0IOkHNDsM6ks0ZvStb9w4PaxizZp/YCsw9S09gS+i2IbMXURmwSacTl30XcZBwOn
PU6s4YYhyt6iTkukF8n0J3+xcmbmIu/I1twbV+4Jz90nhbzkWqmQwJ728pUUyMl4
pgwQtSv7UOuo
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:36:10 2025 by rpki-client