Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32322d3232203d3e20323639303330.roa
File:                     34352e3137372e3139322e302f32322d3232203d3e20323639303330.roa (raw, json)
Hash identifier:          2x/Vcvey1mmjRA+/16C9hGjBUPDePOtXkublUKT9Tug=
Subject key identifier:   9D:CF:04:8B:C4:D4:28:48:83:AF:12:CB:DA:03:E5:31:57:3B:EC:45
Certificate issuer:       /CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
Certificate serial:       0568D8FE77BC2E13BF0ACD0450716EEE1DB3D7B9
Authority key identifier: 27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32322d3232203d3e20323639303330.roa
Signing time:             Thu 06 Mar 2025 00:54:08 +0000
ROA not before:           Thu 06 Mar 2025 00:49:08 +0000
ROA not after:            Thu 05 Mar 2026 00:54:08 +0000
asID:                     269030
IP address blocks:        45.177.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl
                          rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:68:d8:fe:77:bc:2e:13:bf:0a:cd:04:50:71:6e:ee:1d:b3:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270A6B614E226CC356973519B40E8C57F2B8A8C9
        Validity
            Not Before: Mar  6 00:49:08 2025 GMT
            Not After : Mar  5 00:54:08 2026 GMT
        Subject: CN=9DCF048BC4D4284883AF12CBDA03E531573BEC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c1:e3:73:99:3c:36:6b:db:f5:5a:40:ce:c9:
                    8a:ba:bd:04:8d:14:49:71:98:8e:ba:dd:03:ad:9e:
                    ab:e2:80:8f:74:65:0e:62:38:34:b9:61:1b:fe:7b:
                    e5:5f:98:db:7e:42:4c:b9:86:c0:c1:14:55:02:d3:
                    d3:9b:d5:c0:93:37:ff:d8:57:05:13:14:e4:a3:32:
                    3d:7f:03:3a:9b:1c:07:d3:83:22:07:5d:90:21:de:
                    2f:dc:15:06:a8:16:bb:fb:c4:43:3a:55:b3:7e:be:
                    be:ec:68:9d:a2:09:de:97:79:30:76:1a:d8:6b:f2:
                    74:a8:70:1b:be:f0:2f:36:50:3a:bb:92:9e:06:3f:
                    18:2e:ed:b6:3e:a2:73:07:4e:43:f3:e0:5b:06:90:
                    44:9e:9b:27:86:10:72:3d:a3:0a:1f:62:8c:53:04:
                    94:fd:97:2e:f9:bd:7e:42:a6:dd:a9:4b:4c:3b:84:
                    21:93:ad:49:ee:a6:aa:76:3b:63:56:b8:79:77:21:
                    f4:ab:c8:09:aa:1a:21:82:8d:25:e4:38:de:e7:81:
                    0c:79:70:47:c9:aa:4e:36:f3:b4:b8:52:d9:ce:1a:
                    d3:b5:ab:23:3c:ff:4e:ef:2c:00:82:d2:3a:c4:a1:
                    24:de:0b:ff:07:2a:48:3f:f8:72:54:ab:fa:8d:38:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CF:04:8B:C4:D4:28:48:83:AF:12:CB:DA:03:E5:31:57:3B:EC:45
            X509v3 Authority Key Identifier:
                keyid:27:0A:6B:61:4E:22:6C:C3:56:97:35:19:B4:0E:8C:57:F2:B8:A8:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/270A6B614E226CC356973519B40E8C57F2B8A8C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UbQ9SkZDWwvKjGWCP3D2EJWXjAeBNJ3nPSso3be6jhJ/1/34352e3137372e3139322e302f32322d3232203d3e20323639303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:95:57:4c:19:6d:9d:72:85:de:1d:4f:87:20:31:fe:c2:e9:
         64:e4:fb:79:32:b2:9f:a0:59:18:b0:80:f0:a0:81:d3:d9:c1:
         20:42:95:ce:ec:e4:83:59:4f:13:8f:c6:96:97:b0:1f:d4:ee:
         41:a6:6e:70:f7:0e:03:4c:50:57:bb:47:ba:4b:e0:c6:9b:c3:
         77:1e:b4:36:01:c3:c7:a5:81:2e:22:47:b2:7b:a6:13:c1:9a:
         b5:11:20:f5:a2:7c:bd:6e:52:cd:e7:5e:1b:6b:17:25:00:23:
         c9:f2:35:6d:a4:6b:62:50:72:34:aa:68:30:11:d2:13:90:13:
         56:97:06:c8:fd:36:12:86:80:da:25:3f:1d:ff:6a:8a:81:c7:
         45:71:cf:f1:cf:91:c0:21:dd:98:49:21:36:0d:8c:ce:b7:b5:
         44:de:5f:f2:4b:ec:1a:9a:8e:55:80:ab:e3:ab:22:4f:20:87:
         13:a0:f8:b4:18:16:3e:5f:23:1b:40:3c:4e:57:c9:5c:08:18:
         08:45:bb:f2:38:ca:e1:77:c3:a2:93:d9:8c:d7:dd:be:c9:d6:
         19:12:24:98:dc:68:8a:d2:63:96:96:2a:23:f3:5e:6d:22:be:
         a6:c4:8a:4a:bb:bd:c6:54:b7:40:9d:e1:77:a5:0b:b9:2a:3f:
         74:ea:8e:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBWjY/ne8LhO/Cs0EUHFu7h2z17kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcwQTZCNjE0RTIyNkNDMzU2OTczNTE5QjQwRThDNTdG
MkI4QThDOTAeFw0yNTAzMDYwMDQ5MDhaFw0yNjAzMDUwMDU0MDhaMDMxMTAvBgNV
BAMTKDlEQ0YwNDhCQzRENDI4NDg4M0FGMTJDQkRBMDNFNTMxNTczQkVDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpweNzmTw2a9v1WkDOyYq6vQSN
FElxmI663QOtnqvigI90ZQ5iODS5YRv+e+VfmNt+Qky5hsDBFFUC09Ob1cCTN//Y
VwUTFOSjMj1/AzqbHAfTgyIHXZAh3i/cFQaoFrv7xEM6VbN+vr7saJ2iCd6XeTB2
Gthr8nSocBu+8C82UDq7kp4GPxgu7bY+onMHTkPz4FsGkESemyeGEHI9owofYoxT
BJT9ly75vX5Cpt2pS0w7hCGTrUnupqp2O2NWuHl3IfSryAmqGiGCjSXkON7ngQx5
cEfJqk4287S4UtnOGtO1qyM8/07vLACC0jrEoSTeC/8HKkg/+HJUq/qNOMnvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnc8Ei8TUKEiDrxLL2gPlMVc77EUwHwYDVR0j
BBgwFoAUJwprYU4ibMNWlzUZtA6MV/K4qMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVViUTlTa1pEV3d2S2pHV0NQM0QyRUpXWGpBZUJOSjNuUFNzbzNiZTZq
aEovMS8yNzBBNkI2MTRFMjI2Q0MzNTY5NzM1MTlCNDBFOEM1N0YyQjhBOEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MEE2QjYxNEUyMjZDQzM1
Njk3MzUxOUI0MEU4QzU3RjJCOEE4QzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVVYlE5U2taRFd3dktqR1dDUDNEMkVKV1hqQWVCTkozblBTc28zYmU2amhKLzEv
MzQzNTJlMzEzNzM3MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItscAwDQYJKoZIhvcNAQELBQADggEBALiVV0wZ
bZ1yhd4dT4cgMf7C6WTk+3kysp+gWRiwgPCggdPZwSBClc7s5INZTxOPxpaXsB/U
7kGmbnD3DgNMUFe7R7pL4Mabw3cetDYBw8elgS4iR7J7phPBmrURIPWifL1uUs3n
XhtrFyUAI8nyNW2ka2JQcjSqaDAR0hOQE1aXBsj9NhKGgNolPx3/aoqBx0Vxz/HP
kcAh3ZhJITYNjM63tUTeX/JL7BqajlWAq+OrIk8ghxOg+LQYFj5fIxtAPE5XyVwI
GAhFu/I4yuF3w6KT2YzX3b7J1hkSJJjcaIrSY5aWKiPzXm0ivqbEikq7vcZUt0Cd
4XelC7kqP3Tqjso=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:00:58 2025 by rpki-client