Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
File:                     34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          Vrt0CzEyM2PFJe+InYR1IwnM+I67HCAmxDrqTTmERvo=
Subject key identifier:   19:99:24:24:51:DA:9D:41:0B:AA:4D:C5:26:F8:38:92:14:D1:C6:97
Certificate issuer:       /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
Certificate serial:       10BD8BDBF73B1EF0EE425A346201673DB8C156B4
Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa
Signing time:             Mon 05 May 2025 21:10:09 +0000
ROA not before:           Mon 05 May 2025 21:05:09 +0000
ROA not after:            Mon 04 May 2026 21:10:09 +0000
asID:                     268943
IP address blocks:        45.176.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 09:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bd:8b:db:f7:3b:1e:f0:ee:42:5a:34:62:01:67:3d:b8:c1:56:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A
        Validity
            Not Before: May  5 21:05:09 2025 GMT
            Not After : May  4 21:10:09 2026 GMT
        Subject: CN=1999242451DA9D410BAA4DC526F8389214D1C697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:ed:c0:dd:9f:b5:de:3d:4d:f0:73:f5:b1:
                    ae:c7:12:b0:f5:ff:a9:f1:e8:62:25:01:95:88:df:
                    dc:26:51:de:ea:1c:52:b7:6b:cd:02:fd:e8:b8:a4:
                    a3:bb:52:ec:2d:33:a6:7b:ea:54:22:75:b8:d8:9e:
                    a9:4d:f7:7f:89:59:53:1f:d5:e8:c7:44:72:1e:68:
                    a9:84:66:7f:e4:61:14:e6:ba:e7:39:97:4c:3d:ed:
                    6c:c8:a1:fe:3a:a7:ae:94:32:ce:bd:8f:75:d2:75:
                    7c:e8:a5:00:0c:fd:bc:13:d7:45:95:cd:38:82:59:
                    bf:99:a5:33:1e:a0:07:c1:4b:f7:ff:e1:23:b4:e1:
                    6b:8a:21:f7:d1:8d:4d:d2:46:d2:12:f3:66:83:af:
                    67:33:37:48:64:9c:af:36:d3:27:78:ca:e0:23:c7:
                    96:db:ec:b6:d2:f6:96:a5:75:e4:d5:e2:cd:91:87:
                    55:d9:a1:2f:e8:93:97:6e:16:41:4a:cf:fc:00:a5:
                    65:32:fa:0f:21:88:ea:f1:77:37:fd:10:9c:ab:1b:
                    be:9f:6f:4a:26:21:2e:26:4f:a4:8f:cb:10:05:3c:
                    d3:e0:2b:15:a4:c3:87:78:c7:f3:5d:35:5d:d6:9b:
                    8c:66:f9:16:0f:f8:fc:90:27:f3:7e:d6:d9:8b:99:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:99:24:24:51:DA:9D:41:0B:AA:4D:C5:26:F8:38:92:14:D1:C6:97
            X509v3 Authority Key Identifier:
                keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:f3:2c:38:42:2b:4e:31:21:7f:ea:15:2e:60:8a:96:a1:
         ec:38:eb:86:5e:57:a3:5a:7b:95:35:e9:3d:fd:65:3d:c9:55:
         29:39:68:25:47:85:93:07:63:e7:99:87:09:e9:43:fb:e5:23:
         4f:0f:ff:1a:57:cb:39:f0:76:86:e2:1f:b0:4b:4f:11:2b:cb:
         f4:6a:7b:23:45:14:92:a9:76:39:ee:fc:1e:2d:65:11:8b:a0:
         5f:71:02:4c:0e:a2:e8:df:c9:a2:0f:cf:eb:a9:76:b7:25:eb:
         58:40:41:f2:ed:fc:5e:90:90:09:f5:dc:02:4a:fa:91:ed:22:
         97:a1:01:18:61:bb:65:84:ad:d9:87:40:e9:fd:60:0f:5c:2f:
         1b:56:3e:ea:8c:20:af:3e:f9:b8:a1:d9:25:fe:5a:79:84:e0:
         ce:59:4f:d9:cd:1a:b3:fc:54:73:03:6a:1a:75:c3:b4:da:bb:
         ab:a0:4a:4f:02:ca:da:56:f3:65:d5:60:76:e3:b9:d3:2a:b5:
         91:b1:3f:1a:6b:e4:fd:5c:2d:44:4e:c2:c2:17:1b:e9:fa:aa:
         28:8e:39:98:5f:29:0d:d5:c4:eb:a7:8f:5b:ab:f6:73:f6:b2:
         cb:d0:96:a2:26:89:5f:8e:81:bd:28:65:68:5e:af:f1:4d:fa:
         78:b8:50:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEL2L2/c7HvDuQlo0YgFnPbjBVrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDQkU2MTJDRjk4N0JDMTlCMkVCRkE3NzVDMzdBQTg4
NzA0QTAyQTAeFw0yNTA1MDUyMTA1MDlaFw0yNjA1MDQyMTEwMDlaMDMxMTAvBgNV
BAMTKDE5OTkyNDI0NTFEQTlENDEwQkFBNERDNTI2RjgzODkyMTREMUM2OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WO3A3Z+13j1N8HP1sa7HErD1
/6nx6GIlAZWI39wmUd7qHFK3a80C/ei4pKO7UuwtM6Z76lQidbjYnqlN93+JWVMf
1ejHRHIeaKmEZn/kYRTmuuc5l0w97WzIof46p66UMs69j3XSdXzopQAM/bwT10WV
zTiCWb+ZpTMeoAfBS/f/4SO04WuKIffRjU3SRtIS82aDr2czN0hknK820yd4yuAj
x5bb7LbS9paldeTV4s2Rh1XZoS/ok5duFkFKz/wApWUy+g8hiOrxdzf9EJyrG76f
b0omIS4mT6SPyxAFPNPgKxWkw4d4x/NdNV3Wm4xm+RYP+PyQJ/N+1tmLmaC9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGZkkJFHanUELqk3FJvg4khTRxpcwHwYDVR0j
BBgwFoAUmcvmEs+Ye8GbLr+ndcN6qIcEoCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz
QzQvMC85OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5Q0JFNjEyQ0Y5ODdCQzE5
QjJFQkZBNzc1QzM3QUE4ODcwNEEwMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2NWhrdldSbVBBZ1U2RmlNbkwxd2kxMkZrbWVDa2V5UUFkQzNEb1JGc0M0LzAv
MzQzNTJlMzEzNzM2MmUzMTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsIgwDQYJKoZIhvcNAQELBQADggEBABTO8yw4
QitOMSF/6hUuYIqWoew464ZeV6Nae5U16T39ZT3JVSk5aCVHhZMHY+eZhwnpQ/vl
I08P/xpXyznwdobiH7BLTxEry/RqeyNFFJKpdjnu/B4tZRGLoF9xAkwOoujfyaIP
z+updrcl61hAQfLt/F6QkAn13AJK+pHtIpehARhhu2WErdmHQOn9YA9cLxtWPuqM
IK8++bih2SX+WnmE4M5ZT9nNGrP8VHMDahp1w7Tau6ugSk8CytpW82XVYHbjudMq
tZGxPxpr5P1cLUROwsIXG+n6qiiOOZhfKQ3VxOunj1ur9nP2ssvQlqImiV+Ogb0o
ZWher/FN+ni4UOA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:30 2025 by rpki-client