Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/34352e3136312e38382e302f32322d3332203d3e20323638343536.roa
File:                     34352e3136312e38382e302f32322d3332203d3e20323638343536.roa (raw, json)
Hash identifier:          7kQg9hFshySn9NHWKTY2iHob8FJnJIdqN/MKccIhdE4=
Subject key identifier:   ED:E6:03:71:3F:B4:32:C1:6E:3E:42:6B:CA:25:E0:64:6E:FC:10:1B
Certificate issuer:       /CN=47F7BDC381D25855954B36ACF82259F7CE8074E5
Certificate serial:       45723A73906D1D1894B0ADAABACA2ECAF67B82E1
Authority key identifier: 47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/34352e3136312e38382e302f32322d3332203d3e20323638343536.roa
Signing time:             Wed 30 Apr 2025 15:09:13 +0000
ROA not before:           Wed 30 Apr 2025 15:04:13 +0000
ROA not after:            Wed 29 Apr 2026 15:09:13 +0000
asID:                     268456
IP address blocks:        45.161.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl
                          rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 06:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:3a:73:90:6d:1d:18:94:b0:ad:aa:ba:ca:2e:ca:f6:7b:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F7BDC381D25855954B36ACF82259F7CE8074E5
        Validity
            Not Before: Apr 30 15:04:13 2025 GMT
            Not After : Apr 29 15:09:13 2026 GMT
        Subject: CN=EDE603713FB432C16E3E426BCA25E0646EFC101B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:a7:9c:9e:55:6f:0c:c8:7c:d2:0b:77:56:
                    45:0b:ea:74:8c:d2:dc:ff:d9:ef:62:a8:98:f7:7a:
                    5b:09:aa:01:0b:a9:87:0a:8f:18:6a:d6:a7:b4:53:
                    e7:79:98:10:42:03:23:09:72:4e:38:f5:cd:76:a2:
                    87:3b:ce:e6:02:57:2f:28:77:ad:41:c4:34:84:8c:
                    41:6c:b6:12:d3:84:bd:18:8f:a9:93:4f:d8:69:77:
                    24:79:73:7d:78:fb:da:29:c8:de:3b:6a:71:04:b3:
                    b8:2e:54:d5:6a:7e:33:b2:13:01:ca:dc:b0:76:6f:
                    9b:e0:07:7e:b5:7f:2f:3e:89:4a:fd:da:5a:2a:fc:
                    dc:dd:5f:10:71:d9:ad:27:5f:24:f2:98:50:61:c7:
                    f0:bb:c7:03:ab:b8:54:4d:68:81:93:55:75:00:da:
                    06:f1:bc:13:67:26:1c:ef:15:cc:3a:89:00:e7:6f:
                    77:dd:9b:58:bd:30:4d:d4:9b:9c:86:62:5f:9e:6e:
                    7d:d7:d7:33:06:8c:fe:ab:22:7c:30:21:b8:a8:18:
                    29:f8:d0:e9:ff:37:9d:d1:1f:39:da:97:26:63:af:
                    be:c1:61:68:85:7f:ab:a8:6d:fd:6a:1b:35:89:8a:
                    b7:31:3a:f3:c6:94:b8:a8:1e:a2:92:f9:f9:b6:db:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:03:71:3F:B4:32:C1:6E:3E:42:6B:CA:25:E0:64:6E:FC:10:1B
            X509v3 Authority Key Identifier:
                keyid:47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/34352e3136312e38382e302f32322d3332203d3e20323638343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:d9:b1:db:c8:e5:bf:13:d0:1c:c4:72:09:19:09:a5:23:
         f4:5c:62:06:b5:90:ff:94:a3:ba:13:01:93:4c:93:cb:ea:5c:
         52:c3:1a:43:c1:93:87:49:f6:af:bf:a8:be:e4:fc:54:df:dc:
         30:d2:77:10:2c:96:fe:b7:5b:12:e0:09:58:45:09:78:dd:33:
         16:27:96:f3:03:45:0e:dd:24:c4:46:6a:92:4d:65:ad:be:a0:
         7e:39:70:2d:4f:e1:04:68:65:f8:a2:22:4d:24:51:08:98:56:
         bd:e3:66:cc:ff:d3:51:23:53:e0:15:59:e2:23:2f:29:0a:ea:
         9d:7e:f4:52:16:3c:36:74:79:3e:f5:02:49:b4:f6:e0:56:b7:
         e1:37:a5:e1:3c:fc:8a:60:ca:13:2a:80:8c:fc:36:29:04:81:
         42:06:bd:83:31:fd:0d:34:69:46:99:dd:80:95:9f:f3:a1:90:
         cb:6d:0d:b5:32:3d:95:93:40:ae:a9:35:84:78:af:b4:29:f5:
         06:54:2e:ad:3c:bb:2b:2e:58:b8:49:b8:50:cc:be:5f:b9:7c:
         bf:9f:a6:00:cc:88:50:40:8c:f6:38:53:39:70:3e:29:1b:03:
         2c:b1:8a:07:6f:34:11:e7:53:22:05:dd:6b:be:84:7b:79:d1:
         4e:17:40:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURXI6c5BtHRiUsK2qusouyvZ7guEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGN0JEQzM4MUQyNTg1NTk1NEIzNkFDRjgyMjU5RjdD
RTgwNzRFNTAeFw0yNTA0MzAxNTA0MTNaFw0yNjA0MjkxNTA5MTNaMDMxMTAvBgNV
BAMTKEVERTYwMzcxM0ZCNDMyQzE2RTNFNDI2QkNBMjVFMDY0NkVGQzEwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2qecnlVvDMh80gt3VkUL6nSM
0tz/2e9iqJj3elsJqgELqYcKjxhq1qe0U+d5mBBCAyMJck449c12ooc7zuYCVy8o
d61BxDSEjEFsthLThL0Yj6mTT9hpdyR5c314+9opyN47anEEs7guVNVqfjOyEwHK
3LB2b5vgB361fy8+iUr92loq/NzdXxBx2a0nXyTymFBhx/C7xwOruFRNaIGTVXUA
2gbxvBNnJhzvFcw6iQDnb3fdm1i9ME3Um5yGYl+ebn3X1zMGjP6rInwwIbioGCn4
0On/N53RHznalyZjr77BYWiFf6uobf1qGzWJircxOvPGlLioHqKS+fm22wsHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7eYDcT+0MsFuPkJryiXgZG78EBswHwYDVR0j
BBgwFoAUR/e9w4HSWFWVSzas+CJZ986AdOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJoM2ZpMjl6cVJUcHRTazlFdm9neUJQUmNXQlhlYlhYZER2aGpCWG9q
OU0vMC80N0Y3QkRDMzgxRDI1ODU1OTU0QjM2QUNGODIyNTlGN0NFODA3NEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjdCREMzODFEMjU4NTU5
NTRCMzZBQ0Y4MjI1OUY3Q0U4MDc0RTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCaDNmaTI5enFSVHB0U2s5RXZvZ3lCUFJjV0JYZWJYWGREdmhqQlhvajlNLzAv
MzQzNTJlMzEzNjMxMmUzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFYMA0GCSqGSIb3DQEBCwUAA4IBAQA7Xtmx28jl
vxPQHMRyCRkJpSP0XGIGtZD/lKO6EwGTTJPL6lxSwxpDwZOHSfavv6i+5PxU39ww
0ncQLJb+t1sS4AlYRQl43TMWJ5bzA0UO3STERmqSTWWtvqB+OXAtT+EEaGX4oiJN
JFEImFa942bM/9NRI1PgFVniIy8pCuqdfvRSFjw2dHk+9QJJtPbgVrfhN6XhPPyK
YMoTKoCM/DYpBIFCBr2DMf0NNGlGmd2AlZ/zoZDLbQ21Mj2Vk0CuqTWEeK+0KfUG
VC6tPLsrLli4SbhQzL5fuXy/n6YAzIhQQIz2OFM5cD4pGwMssYoHbzQR51MiBd1r
voR7edFOF0DY
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:26 2025 by rpki-client