Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa
File:                     34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa (raw, json)
Hash identifier:          4+kBmRtb711bY1z+6PcNnsjifUyZQsgIMoZRlmQzz+s=
Subject key identifier:   32:DC:78:DF:A6:DE:D7:7A:23:94:2C:EA:67:78:33:FD:61:5B:ED:FF
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       4134F8F70AF1DEFB3ABDE21DA6ED34BCDE8EC5F4
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa
Signing time:             Wed 18 Jun 2025 18:53:35 +0000
ROA not before:           Wed 18 Jun 2025 18:48:35 +0000
ROA not after:            Wed 17 Jun 2026 18:53:35 +0000
asID:                     264398
IP address blocks:        45.167.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:34:f8:f7:0a:f1:de:fb:3a:bd:e2:1d:a6:ed:34:bc:de:8e:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: Jun 18 18:48:35 2025 GMT
            Not After : Jun 17 18:53:35 2026 GMT
        Subject: CN=32DC78DFA6DED77A23942CEA677833FD615BEDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:01:67:a6:65:e4:72:ce:0e:30:d7:03:63:
                    ab:af:35:f3:ae:7a:1a:4e:bc:2a:df:ca:b2:ed:af:
                    53:dc:4c:ce:9f:14:03:8f:57:ce:98:c9:df:f5:24:
                    2c:bd:5c:44:8b:ac:96:66:2e:3e:e8:d5:58:ea:dd:
                    27:33:dc:d8:ae:4e:8b:8a:e8:36:d6:fd:a9:5d:a4:
                    cf:c7:a9:4d:ee:94:7c:ae:39:5f:8d:93:8a:82:6c:
                    66:27:68:c6:ea:b4:1a:a0:84:0f:0d:75:b5:fc:3d:
                    b9:62:17:36:85:23:b7:ef:7f:05:05:54:03:73:57:
                    49:d2:ee:98:fb:80:64:9e:bf:85:5c:68:96:c9:17:
                    cf:0e:68:03:07:2c:03:91:2d:2d:17:83:40:a1:ff:
                    18:d9:c7:b4:a2:21:05:df:4c:81:c4:ac:75:a6:2c:
                    0e:dc:92:6f:99:35:1e:da:a9:ba:97:03:7c:94:5c:
                    ab:f4:6e:a0:ed:fe:a2:4d:d8:15:94:db:46:51:a0:
                    e8:37:70:a6:fa:54:6b:52:4e:cc:8b:e0:56:43:b9:
                    17:b4:57:20:2f:bb:e7:1b:ad:10:61:09:b5:4b:91:
                    3c:7c:1f:d2:bf:1e:4a:b8:93:ae:20:30:a6:69:ab:
                    c8:e7:c2:c8:88:3a:0c:90:3c:03:84:bb:4a:0f:19:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DC:78:DF:A6:DE:D7:7A:23:94:2C:EA:67:78:33:FD:61:5B:ED:FF
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3136372e3132382e302f32322d3332203d3e20323634333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:47:ed:a1:33:91:ff:67:1f:71:a4:71:56:17:55:25:93:
         58:1f:8e:40:4b:5e:4f:82:a1:67:34:bd:1c:f0:12:17:01:7e:
         ac:dc:24:bf:5e:37:29:d8:fa:85:b8:0d:35:38:ab:4b:60:eb:
         7b:71:21:3c:37:1e:f7:a3:ec:ea:58:f1:5f:fe:0f:15:20:f1:
         77:70:7d:6a:d6:f9:67:be:14:04:6a:92:a6:42:44:8c:5c:0f:
         42:53:19:16:d6:34:0b:8d:c5:93:cf:72:ed:0e:97:a4:c6:51:
         d5:30:b1:ff:96:18:89:b4:fe:5b:5d:2e:9b:1b:f5:b4:11:a1:
         a9:52:11:17:1b:7b:0d:71:b3:42:73:ac:52:91:61:d9:d2:b2:
         3e:c7:21:3e:db:b3:0f:1f:9e:7b:99:40:d7:de:c0:b8:89:28:
         91:0a:4e:37:b2:7c:71:32:fa:7b:31:01:12:b9:b2:ee:bd:b8:
         f0:5a:7e:43:6f:c8:12:3a:a1:bc:14:ab:9f:62:63:e4:fc:6e:
         1b:4d:4e:13:7c:4c:8b:f6:cd:55:7b:29:27:37:d3:e1:11:6b:
         d9:a9:4f:a8:97:43:d1:47:1b:7d:f8:a6:66:c7:f5:ec:0b:39:
         dd:4a:63:1c:dd:32:25:c7:a5:30:d2:ab:9d:5e:b6:36:2c:6d:
         ce:c4:35:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQTT49wrx3vs6veIdpu00vN6OxfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgyOEY4QTg5MTVBNzI3NTMxMzY4MjVBMUY0NkZFQ0JC
Rjk1QjdFNDAeFw0yNTA2MTgxODQ4MzVaFw0yNjA2MTcxODUzMzVaMDMxMTAvBgNV
BAMTKDMyREM3OERGQTZERUQ3N0EyMzk0MkNFQTY3NzgzM0ZENjE1QkVERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4wFnpmXkcs4OMNcDY6uvNfOu
ehpOvCrfyrLtr1PcTM6fFAOPV86Yyd/1JCy9XESLrJZmLj7o1Vjq3Scz3NiuTouK
6DbW/aldpM/HqU3ulHyuOV+Nk4qCbGYnaMbqtBqghA8NdbX8PbliFzaFI7fvfwUF
VANzV0nS7pj7gGSev4VcaJbJF88OaAMHLAORLS0Xg0Ch/xjZx7SiIQXfTIHErHWm
LA7ckm+ZNR7aqbqXA3yUXKv0bqDt/qJN2BWU20ZRoOg3cKb6VGtSTsyL4FZDuRe0
VyAvu+cbrRBhCbVLkTx8H9K/Hkq4k64gMKZpq8jnwsiIOgyQPAOEu0oPGZsLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMtx436be13ojlCzqZ3gz/WFb7f8wHwYDVR0j
BBgwFoAUmCj4qJFacnUxNoJaH0b+y7+Vt+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1Hdnd1NGRibmljR0xzdEQyS0p6ZEtmdzlrbUhOVVR6ZHdTWUdIa3dZ
b2ovMC85ODI4RjhBODkxNUE3Mjc1MzEzNjgyNUExRjQ2RkVDQkJGOTVCN0U0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MjhGOEE4OTE1QTcyNzUz
MTM2ODI1QTFGNDZGRUNCQkY5NUI3RTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNR3Z3dTRkYm5pY0dMc3REMktKemRLZnc5a21ITlVUemR3U1lHSGt3WW9qLzAv
MzQzNTJlMzEzNjM3MmUzMTMyMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItp4AwDQYJKoZIhvcNAQELBQADggEBABv2R+2h
M5H/Zx9xpHFWF1Ulk1gfjkBLXk+CoWc0vRzwEhcBfqzcJL9eNynY+oW4DTU4q0tg
63txITw3Hvej7OpY8V/+DxUg8XdwfWrW+We+FARqkqZCRIxcD0JTGRbWNAuNxZPP
cu0Ol6TGUdUwsf+WGIm0/ltdLpsb9bQRoalSERcbew1xs0JzrFKRYdnSsj7HIT7b
sw8fnnuZQNfewLiJKJEKTjeyfHEy+nsxARK5su69uPBafkNvyBI6obwUq59iY+T8
bhtNThN8TIv2zVV7KSc30+ERa9mpT6iXQ9FHG334pmbH9ewLOd1KYxzdMiXHpTDS
q51etjYsbc7ENd4=
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:37:41 2025 by rpki-client