Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa
File:                     34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa (raw, json)
Hash identifier:          jtFElTz8oytUM7g/88+s3Odz8MbeYH/AwCbCTYqnAQ8=
Subject key identifier:   A6:5D:88:86:DC:8C:0C:A2:D5:88:DD:8F:10:02:98:53:50:8B:06:C0
Certificate issuer:       /CN=E312F825223DA5B1F75598C00FD0F34488E55230
Certificate serial:       288581966538312278BC091AE07CB5174D077681
Authority key identifier: E3:12:F8:25:22:3D:A5:B1:F7:55:98:C0:0F:D0:F3:44:88:E5:52:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E312F825223DA5B1F75598C00FD0F34488E55230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa
Signing time:             Tue 01 Apr 2025 16:06:09 +0000
ROA not before:           Tue 01 Apr 2025 16:01:09 +0000
ROA not after:            Tue 31 Mar 2026 16:06:09 +0000
asID:                     267161
IP address blocks:        45.230.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.crl
                          rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E312F825223DA5B1F75598C00FD0F34488E55230.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:85:81:96:65:38:31:22:78:bc:09:1a:e0:7c:b5:17:4d:07:76:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E312F825223DA5B1F75598C00FD0F34488E55230
        Validity
            Not Before: Apr  1 16:01:09 2025 GMT
            Not After : Mar 31 16:06:09 2026 GMT
        Subject: CN=A65D8886DC8C0CA2D588DD8F10029853508B06C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:8f:8a:86:90:fe:f0:e7:9a:17:a0:7d:43:
                    26:e2:e2:3d:b5:2a:5e:68:de:04:60:e1:59:2b:9a:
                    c5:f4:cf:58:86:45:79:f5:bf:d4:9d:74:58:a5:3e:
                    6d:c8:50:03:bc:a3:50:1c:ec:a4:e0:54:b3:0e:8e:
                    c3:7a:c3:ca:41:bd:0a:66:88:ca:b5:64:74:b3:85:
                    0c:dd:ff:0a:d8:c0:b1:4c:04:01:06:a0:8a:76:a2:
                    dc:42:2a:75:0a:bc:15:35:8d:16:91:e5:3a:a0:6a:
                    40:9c:91:6b:2c:e9:e9:5e:ef:9f:db:fb:36:15:5b:
                    6e:5d:40:fe:09:f2:99:d5:db:f1:2c:f2:e1:9d:0d:
                    e9:4b:88:cf:b6:db:75:92:aa:a3:63:fd:dc:47:c1:
                    20:77:9d:80:67:e8:9e:2b:a1:74:7b:f8:65:54:2c:
                    23:8f:45:23:9b:cf:a4:31:98:ba:27:a4:ad:19:8b:
                    b3:fd:be:e7:d7:7f:23:f4:0d:ab:33:49:af:83:e0:
                    9f:46:6a:3a:d8:89:68:a3:ee:01:6e:ca:6c:84:f0:
                    06:f6:12:f0:a7:dc:68:a3:b4:ec:da:ec:7c:05:77:
                    bd:fd:be:17:cc:8e:ff:8c:f1:28:7c:81:48:9c:45:
                    33:22:f7:f1:49:ef:d2:78:77:a6:07:c5:4e:47:b4:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:88:86:DC:8C:0C:A2:D5:88:DD:8F:10:02:98:53:50:8B:06:C0
            X509v3 Authority Key Identifier:
                keyid:E3:12:F8:25:22:3D:A5:B1:F7:55:98:C0:0F:D0:F3:44:88:E5:52:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/E312F825223DA5B1F75598C00FD0F34488E55230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E312F825223DA5B1F75598C00FD0F34488E55230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/34352e3233302e3133362e302f32322d3234203d3e20323637313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:cb:b2:35:7b:32:f7:be:6a:eb:e8:bf:8a:b7:56:74:8d:
         6e:bf:83:9c:de:70:d2:a5:0b:92:8a:94:18:ed:3d:2f:f8:6f:
         60:69:2c:89:73:ee:6e:ae:8a:52:b7:2e:88:9b:5a:5b:2b:bf:
         b1:20:6f:63:ee:af:f8:4a:0e:df:40:bc:26:f1:ff:fe:d0:10:
         87:49:46:4e:4a:39:d6:d0:0c:17:af:55:5d:4c:44:99:d3:ab:
         7c:6f:2b:c9:99:7e:e6:83:01:d4:6d:b6:74:d0:05:73:e7:e4:
         2f:d7:d7:db:49:f1:0e:42:fe:5d:bb:f3:e5:0e:64:ff:c9:4b:
         e0:18:99:77:1e:94:88:0e:8a:37:bb:9f:71:c8:a7:ac:8b:82:
         98:8a:87:ad:20:b4:03:04:9f:9e:92:6e:45:04:ce:51:64:26:
         9d:77:a7:f4:92:de:21:fc:74:c8:13:af:4e:13:54:79:fc:af:
         6f:68:0d:23:a8:f7:8f:d0:0e:50:90:86:ef:3b:15:88:0c:50:
         36:74:ce:05:db:16:ff:b6:66:05:fa:a0:44:56:42:e3:1f:80:
         f4:43:3b:cd:dd:c1:05:fe:90:d6:d2:8d:3a:80:80:e1:53:14:
         0b:59:be:ab:21:94:10:42:67:e1:5e:8e:94:cd:b4:ba:b9:87:
         14:97:ac:d8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKIWBlmU4MSJ4vAka4Hy1F00HdoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMxMkY4MjUyMjNEQTVCMUY3NTU5OEMwMEZEMEYzNDQ4
OEU1NTIzMDAeFw0yNTA0MDExNjAxMDlaFw0yNjAzMzExNjA2MDlaMDMxMTAvBgNV
BAMTKEE2NUQ4ODg2REM4QzBDQTJENTg4REQ4RjEwMDI5ODUzNTA4QjA2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAY+KhpD+8OeaF6B9Qybi4j21
Kl5o3gRg4VkrmsX0z1iGRXn1v9SddFilPm3IUAO8o1Ac7KTgVLMOjsN6w8pBvQpm
iMq1ZHSzhQzd/wrYwLFMBAEGoIp2otxCKnUKvBU1jRaR5TqgakCckWss6ele75/b
+zYVW25dQP4J8pnV2/Es8uGdDelLiM+223WSqqNj/dxHwSB3nYBn6J4roXR7+GVU
LCOPRSObz6QxmLonpK0Zi7P9vufXfyP0DaszSa+D4J9GajrYiWij7gFuymyE8Ab2
EvCn3GijtOza7HwFd739vhfMjv+M8Sh8gUicRTMi9/FJ79J4d6YHxU5HtNI/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpl2IhtyMDKLViN2PEAKYU1CLBsAwHwYDVR0j
BBgwFoAU4xL4JSI9pbH3VZjAD9DzRIjlUjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2gzVDg3OTV5Nm5TUnRWdW1BVTNKblpzQmJocTdDN3lRcVBwZ1I3VGc3
elkvMC9FMzEyRjgyNTIyM0RBNUIxRjc1NTk4QzAwRkQwRjM0NDg4RTU1MjMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMTJGODI1MjIzREE1QjFG
NzU1OThDMDBGRDBGMzQ0ODhFNTUyMzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdoM1Q4Nzk1eTZuU1J0VnVtQVUzSm5ac0JiaHE3Qzd5UXFQcGdSN1RnN3pZLzAv
MzQzNTJlMzIzMzMwMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5ogwDQYJKoZIhvcNAQELBQADggEBAJO3y7I1
ezL3vmrr6L+Kt1Z0jW6/g5zecNKlC5KKlBjtPS/4b2BpLIlz7m6uilK3LoibWlsr
v7Egb2Pur/hKDt9AvCbx//7QEIdJRk5KOdbQDBevVV1MRJnTq3xvK8mZfuaDAdRt
tnTQBXPn5C/X19tJ8Q5C/l278+UOZP/JS+AYmXcelIgOije7n3HIp6yLgpiKh60g
tAMEn56SbkUEzlFkJp13p/SS3iH8dMgTr04TVHn8r29oDSOo94/QDlCQhu87FYgM
UDZ0zgXbFv+2ZgX6oERWQuMfgPRDO83dwQX+kNbSjTqAgOFTFAtZvqshlBBCZ+Fe
jpTNtLq5hxSXrNg=
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:02:32 2025 by rpki-client