Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          i/fVCslx8SbLNmysQpYNoDeGgkxrImGIHG0ibNFgU8I=
Subject key identifier:   04:C1:8B:1B:DA:DA:CE:31:93:39:75:8F:71:01:0D:6F:36:16:CF:83
Certificate issuer:       /CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
Certificate serial:       2D6EAC62824C35AD74CFD045A487CF69C49844F1
Authority key identifier: 88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa
Signing time:             Mon 17 Mar 2025 14:52:24 +0000
ROA not before:           Mon 17 Mar 2025 14:47:24 +0000
ROA not after:            Mon 16 Mar 2026 14:52:24 +0000
asID:                     269182
IP address blocks:        45.181.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6e:ac:62:82:4c:35:ad:74:cf:d0:45:a4:87:cf:69:c4:98:44:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882B21105A1E81CA39CEBB697647A9DF2F3E25C4
        Validity
            Not Before: Mar 17 14:47:24 2025 GMT
            Not After : Mar 16 14:52:24 2026 GMT
        Subject: CN=04C18B1BDADACE319339758F71010D6F3616CF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:f3:3b:8f:71:2d:df:b7:53:0c:23:41:81:
                    cc:76:97:b6:af:c6:22:14:20:fa:95:05:15:c3:84:
                    53:33:68:59:c4:a2:4c:db:aa:9d:32:e4:ee:00:8a:
                    db:04:e6:e3:72:e2:ef:b0:7f:eb:3d:03:af:61:25:
                    d9:13:3e:dc:14:8d:13:0c:ea:4a:81:5c:df:1f:45:
                    88:93:53:c1:a8:d0:54:32:ce:11:b8:13:9d:fd:54:
                    f0:50:da:96:b2:24:e8:47:68:96:f6:8a:aa:8d:07:
                    5c:03:a5:23:50:4b:c2:89:c8:71:97:4b:45:0f:0c:
                    24:b7:f4:f1:83:2d:69:9f:0c:d7:d6:1d:66:7f:0e:
                    8e:97:43:8a:a6:e2:ea:22:09:dc:62:97:b0:57:ca:
                    ea:e1:b7:15:b8:fd:7b:0d:cb:74:8e:3f:36:3c:62:
                    e1:15:1d:59:d9:62:78:9e:c5:91:6c:eb:3d:a4:0e:
                    02:2d:97:3a:e8:36:c1:42:a3:81:cf:24:97:dd:30:
                    1b:98:cc:f2:40:40:d4:80:03:8f:2a:32:9b:31:a1:
                    7c:51:81:9d:d2:db:a4:ea:dc:39:5d:32:50:22:ec:
                    66:0f:4f:e8:36:e2:0b:f6:14:f7:bb:8f:cd:27:12:
                    65:3c:85:45:2f:d6:91:bc:8e:17:41:2b:1c:9e:7e:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:8B:1B:DA:DA:CE:31:93:39:75:8F:71:01:0D:6F:36:16:CF:83
            X509v3 Authority Key Identifier:
                keyid:88:2B:21:10:5A:1E:81:CA:39:CE:BB:69:76:47:A9:DF:2F:3E:25:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/882B21105A1E81CA39CEBB697647A9DF2F3E25C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130322e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:db:36:90:b9:c9:b4:12:90:fe:6c:59:f1:0f:04:8a:d4:4f:
         49:25:4a:f9:e2:35:ac:d7:0a:5a:26:ee:52:0e:8e:b2:56:d7:
         63:87:d8:a9:e5:21:27:4a:b7:6d:e6:6b:30:cd:43:45:4c:20:
         f1:8b:99:52:e9:89:58:02:67:a0:45:bf:fd:a0:80:5f:67:44:
         40:e7:37:05:fd:79:c8:56:9b:dc:17:2e:b5:81:df:78:9e:a2:
         f7:24:0d:29:40:9f:1b:81:59:51:a7:87:e2:17:ab:9a:fc:f1:
         2b:be:5a:7b:48:a0:5f:be:ea:75:f9:a2:06:4d:f1:57:69:96:
         9d:12:1c:21:5a:4f:ce:cb:8e:0f:1d:7d:44:4e:8f:87:9c:21:
         cd:e8:5d:cd:57:90:c8:b5:48:99:b8:19:53:89:9e:61:a9:45:
         6d:d9:09:a9:a3:4f:84:bd:cf:62:e7:78:64:5c:50:aa:eb:2e:
         5b:68:cc:ae:d4:74:d7:ad:df:bd:e4:a6:7d:ca:19:f6:4e:50:
         2a:cc:cc:74:46:63:6a:56:19:d6:fe:0f:97:ba:03:91:11:61:
         de:ab:fd:e0:c9:58:1a:c3:6d:a4:a7:7e:4e:7f:64:ec:5c:50:
         da:db:f5:7b:ac:07:6c:0b:aa:f1:57:29:9f:37:ff:6d:2a:42:
         16:70:83:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULW6sYoJMNa10z9BFpIfPacSYRPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgyQjIxMTA1QTFFODFDQTM5Q0VCQjY5NzY0N0E5REYy
RjNFMjVDNDAeFw0yNTAzMTcxNDQ3MjRaFw0yNjAzMTYxNDUyMjRaMDMxMTAvBgNV
BAMTKDA0QzE4QjFCREFEQUNFMzE5MzM5NzU4RjcxMDEwRDZGMzYxNkNGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZjfM7j3Et37dTDCNBgcx2l7av
xiIUIPqVBRXDhFMzaFnEokzbqp0y5O4AitsE5uNy4u+wf+s9A69hJdkTPtwUjRMM
6kqBXN8fRYiTU8Go0FQyzhG4E539VPBQ2payJOhHaJb2iqqNB1wDpSNQS8KJyHGX
S0UPDCS39PGDLWmfDNfWHWZ/Do6XQ4qm4uoiCdxil7BXyurhtxW4/XsNy3SOPzY8
YuEVHVnZYniexZFs6z2kDgItlzroNsFCo4HPJJfdMBuYzPJAQNSAA48qMpsxoXxR
gZ3S26Tq3DldMlAi7GYPT+g24gv2FPe7j80nEmU8hUUv1pG8jhdBKxyeflhhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBMGLG9razjGTOXWPcQENbzYWz4MwHwYDVR0j
BBgwFoAUiCshEFoegco5zrtpdkep3y8+JcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC84ODJCMjExMDVBMUU4MUNBMzlDRUJCNjk3NjQ3QTlERjJGM0UyNUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4MkIyMTEwNUExRTgxQ0Ez
OUNFQkI2OTc2NDdBOURGMkYzRTI1QzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv
MzQzNTJlMzEzODMxMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttWYwDQYJKoZIhvcNAQELBQADggEBAFrbNpC5
ybQSkP5sWfEPBIrUT0klSvniNazXClom7lIOjrJW12OH2KnlISdKt23mazDNQ0VM
IPGLmVLpiVgCZ6BFv/2ggF9nREDnNwX9echWm9wXLrWB33ieovckDSlAnxuBWVGn
h+IXq5r88Su+WntIoF++6nX5ogZN8Vdplp0SHCFaT87Ljg8dfUROj4ecIc3oXc1X
kMi1SJm4GVOJnmGpRW3ZCamjT4S9z2LneGRcUKrrLltozK7UdNet373kpn3KGfZO
UCrMzHRGY2pWGdb+D5e6A5ERYd6r/eDJWBrDbaSnfk5/ZOxcUNrb9XusB2wLqvFX
KZ83/20qQhZwgyU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:29 2025 by rpki-client