Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa
File:                     34352e3232362e3139322e302f32322d3234203d3e203631383638.roa (raw, json)
Hash identifier:          pKxJiGWNAf7N2EV+W1YaK1PbuFnvSaKLGorBIR84edk=
Subject key identifier:   C4:9C:BB:32:D1:7B:4F:47:8C:FC:9F:E1:7D:15:B7:A8:5E:F6:F2:B3
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       4B6A56D5762652CB0E35ADF5EEEDD2D8643B5399
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa
Signing time:             Mon 07 Apr 2025 17:52:36 +0000
ROA not before:           Mon 07 Apr 2025 17:47:36 +0000
ROA not after:            Mon 06 Apr 2026 17:52:36 +0000
asID:                     61868
IP address blocks:        45.226.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl
                          rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:56:d5:76:26:52:cb:0e:35:ad:f5:ee:ed:d2:d8:64:3b:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: Apr  7 17:47:36 2025 GMT
            Not After : Apr  6 17:52:36 2026 GMT
        Subject: CN=C49CBB32D17B4F478CFC9FE17D15B7A85EF6F2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:46:23:1a:d5:bf:1b:4f:67:a1:07:8f:9a:
                    a0:55:23:48:1f:02:d4:5e:b4:49:9f:5c:15:8d:bf:
                    46:96:e4:7b:9a:12:19:f9:44:9b:28:62:41:8a:e8:
                    5d:5f:f2:65:00:29:95:69:54:90:f1:c7:47:c9:d7:
                    b4:a5:29:c3:34:6a:ab:a0:d0:e5:d6:71:46:98:30:
                    87:02:df:e2:8e:1f:cc:d3:ad:f3:02:28:57:24:07:
                    d5:a5:6d:3b:e5:c5:06:f2:74:2c:f0:67:5b:3d:81:
                    af:04:bd:5f:25:3d:3e:db:d0:ad:39:1f:a8:e1:ab:
                    c2:f4:74:e9:e4:b2:03:ce:74:99:76:c1:52:8a:33:
                    9e:16:37:f6:9e:f2:07:20:43:d9:9d:51:9d:40:51:
                    8f:95:5e:00:81:4e:71:98:a7:13:86:28:0f:fb:5b:
                    7a:e6:1e:e2:fe:d7:ad:2e:dd:c2:20:70:6f:9b:4a:
                    47:d1:cd:05:72:d4:a9:0a:99:89:74:cc:6f:6d:78:
                    25:8a:3f:fc:43:3b:18:0b:d9:dd:ec:be:ac:c9:4e:
                    c8:0b:3a:21:d3:b1:21:ef:1a:f0:9a:b8:20:4d:33:
                    51:8c:b3:92:81:0d:a8:0b:43:a7:99:e9:07:02:ff:
                    4f:14:ac:82:ee:53:2b:80:41:e5:63:54:89:09:67:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9C:BB:32:D1:7B:4F:47:8C:FC:9F:E1:7D:15:B7:A8:5E:F6:F2:B3
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/34352e3232362e3139322e302f32322d3234203d3e203631383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:ec:3b:f2:d4:22:a9:a9:24:5f:e9:c6:cc:7f:cf:ed:8f:0a:
         a9:19:6b:f2:8c:e8:de:61:93:ae:96:75:f0:97:bb:89:57:8c:
         3b:89:d6:78:c9:a8:ae:43:99:62:5a:fe:0e:7b:78:aa:11:b6:
         13:96:e2:cc:07:2f:87:c1:94:37:4f:7c:1a:1d:dd:aa:21:bf:
         46:b7:56:2c:6e:98:74:69:e6:01:19:eb:c2:04:22:8c:09:cf:
         4e:18:06:8b:92:33:8f:fa:f9:92:14:04:4a:24:f1:d7:35:78:
         fd:98:e4:47:63:4a:c0:e5:7c:a8:bb:55:c2:f1:28:c1:c5:10:
         59:4c:61:54:81:0b:c2:d5:3a:a6:1e:cc:77:a4:b9:34:ee:d7:
         11:c9:b9:16:0b:1b:12:c3:48:7a:18:1f:a9:45:36:95:12:e4:
         e9:a3:e9:d0:bc:a3:e1:b8:da:d9:42:5d:8c:02:5f:f8:39:3e:
         80:39:49:41:95:7e:6b:7a:ad:a5:ac:61:31:dc:c7:16:83:5c:
         de:03:68:0e:3e:34:b1:e8:df:6c:03:fd:9e:30:76:d9:2f:54:
         a2:6b:95:7c:53:29:36:1e:1d:a5:14:3a:0d:ac:4f:ce:c8:10:
         35:01:cc:bf:58:8c:70:f7:5d:23:27:58:86:05:ca:63:b6:bc:
         43:c4:b0:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS2pW1XYmUssONa317u3S2GQ7U5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczNDY4MkIwQ0MxRjhGQ0JEREZGQTk2ODVGRjEyOUZC
N0Y0NjI0MTAeFw0yNTA0MDcxNzQ3MzZaFw0yNjA0MDYxNzUyMzZaMDMxMTAvBgNV
BAMTKEM0OUNCQjMyRDE3QjRGNDc4Q0ZDOUZFMTdEMTVCN0E4NUVGNkYyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2EYjGtW/G09noQePmqBVI0gf
AtRetEmfXBWNv0aW5HuaEhn5RJsoYkGK6F1f8mUAKZVpVJDxx0fJ17SlKcM0aqug
0OXWcUaYMIcC3+KOH8zTrfMCKFckB9WlbTvlxQbydCzwZ1s9ga8EvV8lPT7b0K05
H6jhq8L0dOnksgPOdJl2wVKKM54WN/ae8gcgQ9mdUZ1AUY+VXgCBTnGYpxOGKA/7
W3rmHuL+160u3cIgcG+bSkfRzQVy1KkKmYl0zG9teCWKP/xDOxgL2d3svqzJTsgL
OiHTsSHvGvCauCBNM1GMs5KBDagLQ6eZ6QcC/08UrILuUyuAQeVjVIkJZ7TvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxJy7MtF7T0eM/J/hfRW3qF728rMwHwYDVR0j
BBgwFoAUxzRoKwzB+Py93/qWhf8Sn7f0YkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEZUbk5NcWZmM0pVem5Rd1kxNTJnQlNtb2ZCUndDelk3WWZ5Y0tCTWo3
aEcvMC9DNzM0NjgyQjBDQzFGOEZDQkRERkZBOTY4NUZGMTI5RkI3RjQ2MjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MzQ2ODJCMENDMUY4RkNC
RERGRkE5Njg1RkYxMjlGQjdGNDYyNDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRGVG5OTXFmZjNKVXpuUXdZMTUyZ0JTbW9mQlJ3Q3pZN1lmeWNLQk1qN2hHLzAv
MzQzNTJlMzIzMjM2MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeLAMA0GCSqGSIb3DQEBCwUAA4IBAQCP7Dvy1CKp
qSRf6cbMf8/tjwqpGWvyjOjeYZOulnXwl7uJV4w7idZ4yaiuQ5liWv4Oe3iqEbYT
luLMBy+HwZQ3T3waHd2qIb9Gt1Ysbph0aeYBGevCBCKMCc9OGAaLkjOP+vmSFARK
JPHXNXj9mORHY0rA5Xyou1XC8SjBxRBZTGFUgQvC1TqmHsx3pLk07tcRybkWCxsS
w0h6GB+pRTaVEuTpo+nQvKPhuNrZQl2MAl/4OT6AOUlBlX5req2lrGEx3McWg1ze
A2gOPjSx6N9sA/2eMHbZL1Sia5V8Uyk2Hh2lFDoNrE/OyBA1Acy/WIxw910jJ1iG
BcpjtrxDxLD5
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:33:14 2025 by rpki-client