Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
File:                     34352e3233382e352e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier:          hN+ssXB7UvVgXuKBwqeeOOXThN18KVPgtz7ojShvW+w=
Subject key identifier:   F3:6D:E5:72:BA:8D:A7:8E:E8:E7:C6:B1:F3:10:86:A8:13:15:8D:10
Certificate issuer:       /CN=22384FCE6FE91AF1802DF9209B165E8A616D2AC1
Certificate serial:       06EF101404BF348CA07B66877FAE238BCBE3412C
Authority key identifier: 22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
Signing time:             Thu 05 Jun 2025 13:15:19 +0000
ROA not before:           Thu 05 Jun 2025 13:10:19 +0000
ROA not after:            Thu 04 Jun 2026 13:15:19 +0000
asID:                     268308
IP address blocks:        45.238.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 08:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ef:10:14:04:bf:34:8c:a0:7b:66:87:7f:ae:23:8b:cb:e3:41:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22384FCE6FE91AF1802DF9209B165E8A616D2AC1
        Validity
            Not Before: Jun  5 13:10:19 2025 GMT
            Not After : Jun  4 13:15:19 2026 GMT
        Subject: CN=F36DE572BA8DA78EE8E7C6B1F31086A813158D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:85:19:34:79:ef:71:63:e1:d8:de:6b:f9:
                    3e:23:98:76:c8:83:f4:e8:0d:64:27:21:3d:43:27:
                    0d:89:c7:76:97:a4:da:26:77:9d:d1:1e:d9:dd:aa:
                    50:f4:72:11:7e:51:71:a0:b8:cf:43:77:3f:8c:b1:
                    d9:ab:31:a7:dc:08:12:70:1f:37:5c:78:ff:b5:c2:
                    1e:43:e4:a9:98:05:d1:28:22:1f:dd:23:6d:2c:b2:
                    35:99:91:58:fa:d8:1c:c0:de:77:c4:d3:ec:2d:e2:
                    ac:40:1b:fc:60:9a:78:82:3f:76:15:dc:5c:fb:b4:
                    62:10:33:7e:a6:c2:92:4f:1d:a2:e3:2a:dc:90:ac:
                    0b:3b:0e:12:e8:de:6a:13:3b:13:28:c5:c4:be:77:
                    a1:f5:ab:22:cc:da:06:c5:e6:ff:bf:37:c6:07:0d:
                    5f:a8:4a:44:91:2b:79:22:8e:62:cb:cb:a7:77:67:
                    98:96:ad:ac:bd:8e:81:7d:d5:b3:59:c6:92:d8:70:
                    0c:a8:ae:c0:75:8e:a6:40:cd:7f:a3:ed:37:be:53:
                    76:4a:ed:7c:ff:30:12:cb:e9:88:1c:d7:ee:ca:f2:
                    98:bd:d0:05:bb:84:45:f2:88:2f:e4:c1:03:9b:19:
                    04:3f:ac:2c:dd:dc:26:70:ea:27:8c:6d:2c:66:f5:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6D:E5:72:BA:8D:A7:8E:E8:E7:C6:B1:F3:10:86:A8:13:15:8D:10
            X509v3 Authority Key Identifier:
                keyid:22:38:4F:CE:6F:E9:1A:F1:80:2D:F9:20:9B:16:5E:8A:61:6D:2A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22384FCE6FE91AF1802DF9209B165E8A616D2AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e352e302f32342d3234203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:02:30:96:53:2b:15:d0:64:ec:4b:ff:dd:cb:3e:24:d2:8d:
         28:71:33:95:13:5d:07:67:70:52:87:fc:b3:32:41:bc:6d:45:
         76:bb:2b:32:35:8f:2d:a6:33:47:1f:91:37:02:75:24:1f:ef:
         61:86:11:03:a6:ad:74:d4:b9:aa:23:86:6b:5d:23:20:df:d5:
         cf:cd:74:66:ff:ce:47:53:bd:95:45:df:c1:04:86:ab:db:df:
         7b:4f:d3:ae:d1:f6:7c:8a:e6:09:59:eb:3b:86:ab:90:66:5e:
         39:57:2d:27:0d:50:6b:a8:35:34:08:56:03:94:f7:78:4c:88:
         44:a6:37:40:b2:9c:91:4b:20:6b:36:99:d8:9d:cf:11:a5:36:
         de:48:d7:79:e4:da:93:2c:7b:58:a8:a9:b6:5f:a1:48:b3:54:
         4b:d9:ab:2c:f5:13:b5:66:d5:44:6a:7f:fa:ac:65:41:d5:4d:
         e9:4d:a4:dc:f0:85:a3:1f:0a:e8:d1:73:d7:b3:00:fa:e3:84:
         db:f1:48:e7:0e:e1:d8:ca:3a:33:bd:f7:5e:61:71:02:13:8b:
         41:81:6d:ca:f7:b3:fe:db:4e:da:bf:a9:b9:c4:a2:d6:b4:4a:
         91:74:e4:91:8e:84:d8:49:21:26:98:fb:03:f0:16:3d:a7:22:
         6f:a5:09:27
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBu8QFAS/NIyge2aHf64ji8vjQSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIzODRGQ0U2RkU5MUFGMTgwMkRGOTIwOUIxNjVFOEE2
MTZEMkFDMTAeFw0yNTA2MDUxMzEwMTlaFw0yNjA2MDQxMzE1MTlaMDMxMTAvBgNV
BAMTKEYzNkRFNTcyQkE4REE3OEVFOEU3QzZCMUYzMTA4NkE4MTMxNThEMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zYUZNHnvcWPh2N5r+T4jmHbI
g/ToDWQnIT1DJw2Jx3aXpNomd53RHtndqlD0chF+UXGguM9Ddz+MsdmrMafcCBJw
HzdceP+1wh5D5KmYBdEoIh/dI20ssjWZkVj62BzA3nfE0+wt4qxAG/xgmniCP3YV
3Fz7tGIQM36mwpJPHaLjKtyQrAs7DhLo3moTOxMoxcS+d6H1qyLM2gbF5v+/N8YH
DV+oSkSRK3kijmLLy6d3Z5iWray9joF91bNZxpLYcAyorsB1jqZAzX+j7Te+U3ZK
7Xz/MBLL6Ygc1+7K8pi90AW7hEXyiC/kwQObGQQ/rCzd3CZw6ieMbSxm9WlhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU823lcrqNp47o58ax8xCGqBMVjRAwHwYDVR0j
BBgwFoAUIjhPzm/pGvGALfkgmxZeimFtKsEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC8yMjM4NEZDRTZGRTkxQUYxODAyREY5MjA5QjE2NUU4QTYxNkQyQUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyMzg0RkNFNkZFOTFBRjE4
MDJERjkyMDlCMTY1RThBNjE2RDJBQzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC3uBTANBgkqhkiG9w0BAQsFAAOCAQEARgIwllMrFdBk
7Ev/3cs+JNKNKHEzlRNdB2dwUof8szJBvG1FdrsrMjWPLaYzRx+RNwJ1JB/vYYYR
A6atdNS5qiOGa10jIN/Vz810Zv/OR1O9lUXfwQSGq9vfe0/TrtH2fIrmCVnrO4ar
kGZeOVctJw1Qa6g1NAhWA5T3eEyIRKY3QLKckUsgazaZ2J3PEaU23kjXeeTakyx7
WKiptl+hSLNUS9mrLPUTtWbVRGp/+qxlQdVN6U2k3PCFox8K6NFz17MA+uOE2/FI
5w7h2Mo6M733XmFxAhOLQYFtyvez/ttO2r+pucSi1rRKkXTkkY6E2EkhJpj7A/AW
Pacib6UJJw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:22:30 2025 by rpki-client