Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
File:                     34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa (raw, json)
Hash identifier:          arERRLe6F4UNLeiKcviJ8dp0FmnMd1FyTwtTYQJmSUQ=
Subject key identifier:   73:3A:FA:F3:E4:AA:D7:05:E4:A6:C2:81:75:42:D5:6B:79:30:22:C5
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       24824B747496BDBD4D4798D70AE0CD1346937714
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa
Signing time:             Wed 19 Mar 2025 18:32:24 +0000
ROA not before:           Wed 19 Mar 2025 18:27:24 +0000
ROA not after:            Wed 18 Mar 2026 18:32:24 +0000
asID:                     269183
IP address blocks:        45.181.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:82:4b:74:74:96:bd:bd:4d:47:98:d7:0a:e0:cd:13:46:93:77:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: Mar 19 18:27:24 2025 GMT
            Not After : Mar 18 18:32:24 2026 GMT
        Subject: CN=733AFAF3E4AAD705E4A6C2817542D56B793022C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:ec:36:dc:38:7a:53:ac:e7:30:8d:08:ad:
                    48:39:6a:a5:f1:56:7a:fc:62:71:1c:b8:13:60:44:
                    26:30:3e:2d:13:be:05:f9:87:b4:52:29:da:d0:e1:
                    84:2e:98:ad:db:48:77:bb:22:8e:f9:0e:fa:17:b7:
                    7c:97:00:db:9e:27:56:19:50:6e:2e:ac:a6:42:7c:
                    d0:df:42:14:08:ab:d8:cf:f3:a3:45:a5:e7:2b:38:
                    bc:bf:af:9a:3a:e0:17:3c:92:2f:de:fb:c1:0d:79:
                    e4:a6:3b:f9:2e:aa:de:45:19:52:85:74:10:63:dc:
                    f9:86:a4:ec:a3:d3:ba:14:d3:25:d3:42:07:e0:28:
                    f0:ec:1a:6c:64:cd:00:70:f6:7c:cf:71:1f:07:dc:
                    a7:b5:2a:4c:5e:d9:34:72:57:1e:11:60:fd:fa:0e:
                    4c:32:54:2a:1c:20:ca:61:48:50:18:84:6c:79:ee:
                    80:62:2c:37:e4:27:b9:48:50:5c:d7:88:1c:0f:0f:
                    de:04:5e:15:53:82:59:ed:a1:b9:98:88:ba:42:1d:
                    7d:43:07:3f:d9:f2:6e:4b:c3:7e:cd:4a:41:a8:cf:
                    0d:59:6d:2a:29:ac:01:61:9f:c6:bd:61:0e:bc:db:
                    cc:9b:b6:39:0d:f1:fa:43:ab:75:76:b8:5b:9f:93:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3A:FA:F3:E4:AA:D7:05:E4:A6:C2:81:75:42:D5:6B:79:30:22:C5
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/34352e3138312e3131312e302f32342d3234203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:c6:5f:e1:99:9c:c0:b7:fa:c5:0f:7f:eb:a8:f4:eb:0a:
         84:4a:b1:0c:ce:a6:d7:17:78:7e:d4:52:6e:92:8b:18:3e:e7:
         54:63:34:59:66:24:52:8c:ba:03:fe:2f:f7:bd:42:47:f8:ca:
         3e:46:60:c0:4e:aa:01:b2:a5:69:69:65:56:a5:14:49:e3:05:
         81:43:30:59:79:70:1c:6d:1a:8f:a3:2f:36:df:5c:68:77:56:
         48:b5:48:0c:8d:3d:c2:4b:c9:45:28:4e:0d:25:0e:06:d1:ba:
         81:6a:81:4d:72:cc:fa:3f:a3:f4:c2:c9:be:34:f8:7e:85:3d:
         7d:d5:df:2b:22:3c:22:65:62:25:d6:13:3d:ef:68:d0:7a:60:
         3c:06:ea:22:e7:aa:5e:ca:71:f3:05:9c:d6:4e:ea:db:ae:dd:
         d4:fe:1f:22:47:27:e3:2d:67:c2:db:ad:f4:a1:18:22:1c:36:
         00:62:b9:50:9f:f2:c5:85:fb:9a:78:27:cc:68:85:79:9c:fc:
         29:e6:02:66:4f:8c:df:89:1e:86:4f:fb:b0:05:94:39:ec:4b:
         71:ef:b2:ac:e7:2f:87:b8:38:af:a1:01:33:27:37:c6:6d:81:
         f6:27:39:63:c4:55:54:3a:b3:ca:2a:a3:57:b6:84:55:c1:99:
         ba:9e:50:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJIJLdHSWvb1NR5jXCuDNE0aTdxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVENTEwN0MzRjk3NURDMjc5QjJFRTc3NDhCMDJBQjAx
MDQ3MEU2RDAeFw0yNTAzMTkxODI3MjRaFw0yNjAzMTgxODMyMjRaMDMxMTAvBgNV
BAMTKDczM0FGQUYzRTRBQUQ3MDVFNEE2QzI4MTc1NDJENTZCNzkzMDIyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP+ew23Dh6U6znMI0IrUg5aqXx
Vnr8YnEcuBNgRCYwPi0TvgX5h7RSKdrQ4YQumK3bSHe7Io75DvoXt3yXANueJ1YZ
UG4urKZCfNDfQhQIq9jP86NFpecrOLy/r5o64Bc8ki/e+8ENeeSmO/kuqt5FGVKF
dBBj3PmGpOyj07oU0yXTQgfgKPDsGmxkzQBw9nzPcR8H3Ke1Kkxe2TRyVx4RYP36
DkwyVCocIMphSFAYhGx57oBiLDfkJ7lIUFzXiBwPD94EXhVTglntobmYiLpCHX1D
Bz/Z8m5Lw37NSkGozw1ZbSoprAFhn8a9YQ6828ybtjkN8fpDq3V2uFufk89xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUczr68+Sq1wXkpsKBdULVa3kwIsUwHwYDVR0j
BBgwFoAUldUQfD+XXcJ5su53SLAqsBBHDm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3NKUDZxMUtUTFZZdG0zNFVHY3J4RlNSd1Z6a3lxVzdFZXNOdmVZSEVi
RGIvMC85NUQ1MTA3QzNGOTc1REMyNzlCMkVFNzc0OEIwMkFCMDEwNDcwRTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RDUxMDdDM0Y5NzVEQzI3
OUIyRUU3NzQ4QjAyQUIwMTA0NzBFNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdzSlA2cTFLVExWWXRtMzRVR2NyeEZTUndWemt5cVc3RWVzTnZlWUhFYkRiLzAv
MzQzNTJlMzEzODMxMmUzMTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttW8wDQYJKoZIhvcNAQELBQADggEBAJRfxl/h
mZzAt/rFD3/rqPTrCoRKsQzOptcXeH7UUm6Sixg+51RjNFlmJFKMugP+L/e9Qkf4
yj5GYMBOqgGypWlpZValFEnjBYFDMFl5cBxtGo+jLzbfXGh3Vki1SAyNPcJLyUUo
Tg0lDgbRuoFqgU1yzPo/o/TCyb40+H6FPX3V3ysiPCJlYiXWEz3vaNB6YDwG6iLn
ql7KcfMFnNZO6tuu3dT+HyJHJ+MtZ8LbrfShGCIcNgBiuVCf8sWF+5p4J8xohXmc
/CnmAmZPjN+JHoZP+7AFlDnsS3HvsqznL4e4OK+hATMnN8ZtgfYnOWPEVVQ6s8oq
o1e2hFXBmbqeUFY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:08 2025 by rpki-client