Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36362e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          II1RzsGPkHnpbxVSJUK9zXey6ZFdJi87qI01L71x/ME=
Subject key identifier:   F0:23:B4:46:52:6D:4F:6F:87:C1:D0:FF:A1:90:AA:43:CB:91:E2:7F
Certificate issuer:       /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial:       099E5BF9333586561E888D678E36DF7A02F9B8EF
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa
Signing time:             Wed 26 Feb 2025 00:18:41 +0000
ROA not before:           Wed 26 Feb 2025 00:13:41 +0000
ROA not after:            Wed 25 Feb 2026 00:18:41 +0000
asID:                     269528
IP address blocks:        45.187.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9e:5b:f9:33:35:86:56:1e:88:8d:67:8e:36:df:7a:02:f9:b8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
        Validity
            Not Before: Feb 26 00:13:41 2025 GMT
            Not After : Feb 25 00:18:41 2026 GMT
        Subject: CN=F023B446526D4F6F87C1D0FFA190AA43CB91E27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:2f:36:7d:6d:b8:47:f2:a3:52:bf:d2:9a:
                    94:95:d4:f2:1c:1a:1f:a9:50:55:62:71:96:ce:e9:
                    46:42:1f:a6:2b:48:9c:86:55:fe:bf:fd:ee:d6:b8:
                    d1:ad:d0:af:48:df:e6:19:70:63:75:16:ec:e5:45:
                    ea:7d:96:05:59:f0:c3:90:d0:84:b3:5c:5d:d7:67:
                    4a:8e:f5:d9:b9:a0:36:ce:4b:20:9a:0d:1a:b3:1f:
                    55:09:37:2f:19:b5:79:fa:dc:68:61:36:aa:bb:33:
                    62:8f:80:80:98:11:f6:63:d7:d8:d3:35:5a:d4:9e:
                    e9:09:f3:84:48:ac:99:67:e5:95:b5:d5:a4:7c:33:
                    6c:f5:9f:ab:6e:3b:a7:1c:a6:b0:2b:c5:d1:7e:b7:
                    79:1a:3b:a1:95:8e:9f:17:46:b7:f7:b3:ef:dd:9c:
                    f6:85:51:7e:33:68:63:59:3b:3a:21:82:74:6a:6c:
                    9c:41:2d:11:e8:b1:35:ba:e1:40:6b:fe:d3:95:27:
                    d1:a1:64:f7:d2:04:39:dd:55:22:b1:45:5b:b6:e8:
                    eb:e8:1c:78:3a:df:88:3d:9a:2a:39:d0:24:ad:4c:
                    c9:a3:f8:73:82:4b:4a:9e:2c:0c:15:30:dd:d6:56:
                    86:e4:57:05:a1:25:24:b2:94:3c:4e:b1:d3:7c:53:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:23:B4:46:52:6D:4F:6F:87:C1:D0:FF:A1:90:AA:43:CB:91:E2:7F
            X509v3 Authority Key Identifier:
                keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36362e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:11:f8:d5:7e:0f:39:6d:6e:33:99:b2:31:9c:13:f8:93:f2:
         25:26:4c:94:31:e5:50:e5:3a:e2:6f:5c:27:c3:a7:18:f9:a9:
         04:fe:c4:e7:26:83:9a:31:c1:8d:4f:ff:f5:3d:12:d1:8a:ef:
         da:ec:95:96:d5:01:cd:76:33:43:e2:81:db:b3:e0:05:93:9b:
         5c:94:fe:23:c2:72:a3:ec:25:9e:0d:fd:a0:49:dc:df:e1:90:
         46:fc:24:9a:ab:28:d2:a8:26:4b:8a:b1:58:40:fb:d2:b6:6b:
         8b:42:5e:6f:0b:8d:14:d0:bf:13:dd:79:4e:a7:52:50:e5:1c:
         7c:5e:d7:0d:91:ef:4d:6d:d7:0e:c6:bc:f9:61:c5:bf:ec:2c:
         38:e0:22:93:8a:c0:1a:bb:27:88:3b:02:e6:c4:fe:50:2a:2a:
         35:fc:02:11:f9:47:1f:ec:33:dd:4e:84:08:ec:49:a1:17:e5:
         57:8a:e3:12:23:9e:6a:98:86:25:71:23:66:63:5e:6f:ac:0c:
         00:a0:6a:a1:a1:c9:19:7f:35:b6:18:b3:9f:69:ac:6e:ad:94:
         91:61:c6:38:da:68:1b:aa:2d:ea:e3:43:56:7b:85:5e:eb:25:
         87:db:39:49:e7:c9:85:b6:79:cf:71:0b:97:0e:46:0b:bf:99:
         6b:07:9a:fb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCZ5b+TM1hlYeiI1njjbfegL5uO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENGREI2MzJDOEEzRTlDODIzMzIzQjJFNTkwN0E5MjM4
RTZCODU1NDAeFw0yNTAyMjYwMDEzNDFaFw0yNjAyMjUwMDE4NDFaMDMxMTAvBgNV
BAMTKEYwMjNCNDQ2NTI2RDRGNkY4N0MxRDBGRkExOTBBQTQzQ0I5MUUyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcy82fW24R/KjUr/SmpSV1PIc
Gh+pUFVicZbO6UZCH6YrSJyGVf6//e7WuNGt0K9I3+YZcGN1FuzlRep9lgVZ8MOQ
0ISzXF3XZ0qO9dm5oDbOSyCaDRqzH1UJNy8ZtXn63GhhNqq7M2KPgICYEfZj19jT
NVrUnukJ84RIrJln5ZW11aR8M2z1n6tuO6ccprArxdF+t3kaO6GVjp8XRrf3s+/d
nPaFUX4zaGNZOzohgnRqbJxBLRHosTW64UBr/tOVJ9GhZPfSBDndVSKxRVu26Ovo
HHg634g9mio50CStTMmj+HOCS0qeLAwVMN3WVobkVwWhJSSylDxOsdN8U1RPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8CO0RlJtT2+HwdD/oZCqQ8uR4n8wHwYDVR0j
BBgwFoAUTP22Msij6cgjMjsuWQepI45rhVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFT
VzIvMC80Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkRCNjMyQzhBM0U5Qzgy
MzMyM0IyRTU5MDdBOTIzOEU2Qjg1NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhENnpzNmV2akVUYndCWXN5aEhGZTZSS3BIY01XRXc4WmcyR2pSd2phU1cyLzAv
MzQzNTJlMzEzODM3MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbtCMA0GCSqGSIb3DQEBCwUAA4IBAQCWEfjVfg85
bW4zmbIxnBP4k/IlJkyUMeVQ5Trib1wnw6cY+akE/sTnJoOaMcGNT//1PRLRiu/a
7JWW1QHNdjND4oHbs+AFk5tclP4jwnKj7CWeDf2gSdzf4ZBG/CSaqyjSqCZLirFY
QPvStmuLQl5vC40U0L8T3XlOp1JQ5Rx8XtcNke9NbdcOxrz5YcW/7Cw44CKTisAa
uyeIOwLmxP5QKio1/AIR+Ucf7DPdToQI7EmhF+VXiuMSI55qmIYlcSNmY15vrAwA
oGqhockZfzW2GLOfaaxurZSRYcY42mgbqi3q40NWe4Ve6yWH2zlJ58mFtnnPcQuX
DkYLv5lrB5r7
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:58:57 2025 by rpki-client