Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa
File:                     34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa (raw, json)
Hash identifier:          eqqfYP5Kh8QIH7clBXSyBhqialr/Y42KYJ0I6naQTsk=
Subject key identifier:   C4:F3:9A:56:EA:60:53:48:D6:8E:67:49:92:C1:AB:0F:AD:30:AB:13
Certificate issuer:       /CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
Certificate serial:       131CC1131691EC97024F069206ACEB70253F2B16
Authority key identifier: 35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa
Signing time:             Thu 06 Mar 2025 14:41:20 +0000
ROA not before:           Thu 06 Mar 2025 14:36:20 +0000
ROA not after:            Thu 05 Mar 2026 14:41:20 +0000
asID:                     268116
IP address blocks:        45.169.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1c:c1:13:16:91:ec:97:02:4f:06:92:06:ac:eb:70:25:3f:2b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA
        Validity
            Not Before: Mar  6 14:36:20 2025 GMT
            Not After : Mar  5 14:41:20 2026 GMT
        Subject: CN=C4F39A56EA605348D68E674992C1AB0FAD30AB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:b2:ee:cb:8b:da:7c:e6:9f:7a:16:43:06:
                    8b:86:eb:b9:71:64:be:fe:db:43:4e:96:2f:7f:9d:
                    3b:bc:cb:81:1e:26:cc:b4:a7:9b:95:4d:ee:c0:54:
                    99:83:3c:44:7e:f6:1c:ae:fb:6c:85:f0:2a:d1:fa:
                    40:97:0c:5e:c3:e0:1d:9d:5e:f2:c9:d7:1f:98:91:
                    29:73:2e:d4:d4:50:1f:c5:3f:da:91:ef:f0:37:4d:
                    86:c8:6c:e1:67:72:6a:e0:35:39:df:c5:eb:4a:f5:
                    c6:93:21:c9:64:78:47:36:10:3f:33:b6:41:0d:77:
                    1e:f2:8b:bd:51:55:1a:20:69:be:2d:7b:ad:01:0c:
                    24:d0:ad:1b:06:62:0a:d6:25:b2:da:27:cc:0a:64:
                    f4:ca:4c:30:98:14:d5:02:3e:de:84:5c:cb:11:c4:
                    65:5e:7f:85:d3:65:8a:1c:51:8a:17:a0:72:7d:b1:
                    3f:65:05:6b:e8:36:50:23:4b:9c:1a:a8:71:0c:c9:
                    87:49:79:07:5f:ed:99:de:e4:e6:b4:84:a1:6e:6f:
                    ae:79:f2:70:39:06:a2:15:c9:3c:4f:5e:ff:97:2d:
                    90:5f:3f:ad:9a:dc:52:6d:82:89:47:26:60:c3:ec:
                    13:8f:fd:ad:4c:b8:43:80:7a:f9:6b:d8:31:a6:53:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:9A:56:EA:60:53:48:D6:8E:67:49:92:C1:AB:0F:AD:30:AB:13
            X509v3 Authority Key Identifier:
                keyid:35:7C:66:AE:DE:5C:85:D6:2E:43:F2:E7:B4:7A:9A:4D:2A:DB:ED:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/357C66AEDE5C85D62E43F2E7B47A9A4D2ADBEDBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/2/34352e3136392e3135362e302f32342d3234203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:1b:57:eb:91:b9:68:97:c7:31:9b:01:07:fd:7a:42:51:
         19:94:6f:26:11:10:bc:c4:c0:2a:56:03:91:23:1d:5a:a1:a7:
         e3:f5:32:06:e2:62:7e:ed:ce:e0:5a:94:98:87:19:e3:a1:b5:
         cc:e2:f4:88:18:27:d1:15:5b:8f:97:bb:84:ab:67:a4:a3:2b:
         58:a1:92:98:08:df:d4:57:dc:0a:7d:29:7e:0e:f5:2d:31:a7:
         11:2f:31:44:0f:ca:8a:91:52:b9:31:64:60:13:53:da:b3:fd:
         1c:c0:1c:95:97:e8:83:5f:4b:65:a9:1d:41:6a:5d:37:84:ff:
         c1:28:a8:e6:e4:7b:b5:7e:3b:6a:c2:d0:06:73:3a:9d:ea:ba:
         ba:96:a5:1f:59:46:17:22:bc:3e:62:13:05:c7:f4:f7:cc:b5:
         02:13:89:b0:be:09:d1:a4:94:c6:07:e3:1b:2f:d4:a8:dc:a0:
         5a:56:c8:c6:c5:03:74:72:2a:4c:d1:41:85:8f:55:31:6c:19:
         a4:f0:34:ba:73:a1:cb:41:6d:52:3b:a4:39:8c:c7:0c:9f:00:
         7c:a3:dd:21:8a:1a:f6:c9:dc:8b:a1:9d:f2:b8:32:e2:37:dd:
         f5:4e:ec:9e:fc:cc:1c:23:2f:4a:98:13:33:d1:86:42:cc:ae:
         e0:7b:54:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUExzBExaR7JcCTwaSBqzrcCU/KxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU3QzY2QUVERTVDODVENjJFNDNGMkU3QjQ3QTlBNEQy
QURCRURCQTAeFw0yNTAzMDYxNDM2MjBaFw0yNjAzMDUxNDQxMjBaMDMxMTAvBgNV
BAMTKEM0RjM5QTU2RUE2MDUzNDhENjhFNjc0OTkyQzFBQjBGQUQzMEFCMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBbLuy4vafOafehZDBouG67lx
ZL7+20NOli9/nTu8y4EeJsy0p5uVTe7AVJmDPER+9hyu+2yF8CrR+kCXDF7D4B2d
XvLJ1x+YkSlzLtTUUB/FP9qR7/A3TYbIbOFncmrgNTnfxetK9caTIclkeEc2ED8z
tkENdx7yi71RVRogab4te60BDCTQrRsGYgrWJbLaJ8wKZPTKTDCYFNUCPt6EXMsR
xGVef4XTZYocUYoXoHJ9sT9lBWvoNlAjS5waqHEMyYdJeQdf7Zne5Oa0hKFub655
8nA5BqIVyTxPXv+XLZBfP62a3FJtgolHJmDD7BOP/a1MuEOAevlr2DGmU2U5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxPOaVupgU0jWjmdJksGrD60wqxMwHwYDVR0j
BBgwFoAUNXxmrt5chdYuQ/LntHqaTSrb7bowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlhRjZnVjVYNkV6WUU0dTlFc0pqMVhtZFpOUlExakFYVGdyM2RQMjZT
NlYvMi8zNTdDNjZBRURFNUM4NUQ2MkU0M0YyRTdCNDdBOUE0RDJBREJFREJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1N0M2NkFFREU1Qzg1RDYy
RTQzRjJFN0I0N0E5QTREMkFEQkVEQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5YUY2Z1Y1WDZFellFNHU5RXNKajFYbWRaTlJRMWpBWFRncjNkUDI2UzZWLzIv
MzQzNTJlMzEzNjM5MmUzMTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqZwwDQYJKoZIhvcNAQELBQADggEBADz+G1fr
kblol8cxmwEH/XpCURmUbyYRELzEwCpWA5EjHVqhp+P1MgbiYn7tzuBalJiHGeOh
tczi9IgYJ9EVW4+Xu4SrZ6SjK1ihkpgI39RX3Ap9KX4O9S0xpxEvMUQPyoqRUrkx
ZGATU9qz/RzAHJWX6INfS2WpHUFqXTeE/8EoqObke7V+O2rC0AZzOp3qurqWpR9Z
RhcivD5iEwXH9PfMtQITibC+CdGklMYH4xsv1KjcoFpWyMbFA3RyKkzRQYWPVTFs
GaTwNLpzoctBbVI7pDmMxwyfAHyj3SGKGvbJ3IuhnfK4MuI33fVO7J78zBwjL0qY
EzPRhkLMruB7VP8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:20 2025 by rpki-client