Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          wXsOy4dvJU1DwReiKB26sMTrUDi5L4nGEL93DZj316M=
Subject key identifier:   B1:1E:3A:71:38:0A:A7:47:C3:0A:B6:76:DE:F4:85:43:52:7B:C2:D9
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       76A310BFF7471123245FBD40ECFD0669BA4A3972
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        45.181.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 21:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a3:10:bf:f7:47:11:23:24:5f:bd:40:ec:fd:06:69:ba:4a:39:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=B11E3A71380AA747C30AB676DEF48543527BC2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:fb:93:b5:33:a8:23:ae:22:e5:75:61:41:
                    f6:e1:e3:33:e1:ae:f6:31:aa:52:0a:7e:d0:a5:59:
                    72:a8:e6:ff:5b:1c:89:1b:45:1f:77:28:0a:cf:00:
                    41:e5:51:4f:ce:ce:05:c0:dd:8a:b2:3a:ef:c9:93:
                    bb:4e:bc:d3:18:2d:c8:98:36:4b:2f:e7:31:ed:a5:
                    e9:e1:11:0a:74:8a:0a:c8:59:94:26:52:19:fd:a7:
                    a9:41:ca:71:1c:23:7b:8a:ce:9e:e2:c1:6e:4b:49:
                    ba:79:69:95:14:44:9a:51:63:79:f8:21:29:02:1f:
                    0d:e8:06:9c:51:d8:1d:4c:ac:ae:d3:b8:b9:e3:31:
                    ff:0e:b9:d6:74:cf:f9:17:e0:28:54:1d:4b:9f:b6:
                    6b:12:d6:75:b6:10:e0:1c:39:21:a8:88:c0:76:7d:
                    fd:07:30:89:12:91:b0:37:c3:7c:9d:50:c0:ca:2e:
                    e0:78:1f:9c:fa:d4:57:61:97:1d:63:6c:60:80:92:
                    a5:6c:33:0c:cd:8b:32:52:31:52:38:61:66:5c:32:
                    e8:ab:3c:8a:88:01:39:ca:b2:e1:7a:5a:4f:a4:fe:
                    ed:7e:bc:31:e3:3c:9a:3f:7d:ee:59:cd:98:ce:b8:
                    5d:f7:7a:35:17:6f:41:51:c5:05:06:58:96:08:ac:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:3A:71:38:0A:A7:47:C3:0A:B6:76:DE:F4:85:43:52:7B:C2:D9
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:59:c6:66:85:85:13:e7:ba:5c:94:95:aa:b0:46:e9:a8:
         d6:b9:96:e9:9c:08:91:50:a9:ab:7b:48:13:29:cd:b1:54:f0:
         92:38:87:94:37:80:b7:88:a2:95:6b:3e:23:1b:46:59:a4:68:
         d2:8c:a0:b8:4b:57:69:31:0f:5b:8c:90:37:c1:3e:49:35:82:
         bd:dd:0a:a5:bf:6b:54:81:0a:1d:ef:e7:63:64:cc:08:03:7e:
         df:23:4f:ef:f1:cb:9a:69:bb:47:ae:f5:27:dc:e3:22:d5:5a:
         62:60:f4:f2:0e:10:6b:c1:90:8f:2e:8c:e1:05:1b:75:d1:c5:
         fe:c3:bb:11:e4:e6:be:f1:75:9c:5b:5e:1e:c0:d1:4e:ce:b8:
         47:d3:b8:98:a9:6f:18:6a:df:95:ea:d4:c9:08:55:85:df:59:
         34:68:98:9a:5f:e3:ad:df:95:e1:de:71:51:3d:9a:a6:5d:dd:
         8e:e5:38:e2:f1:97:cd:b5:2f:24:1d:46:5d:67:34:f4:d6:29:
         8d:44:a6:05:86:dd:1e:31:f7:18:d4:fb:20:69:3f:ac:1c:c0:
         d1:7f:d6:d6:57:59:26:07:ea:a3:15:f6:44:7d:0e:79:0c:91:
         ed:14:c9:31:fe:47:81:99:4d:c9:9c:8a:02:fc:4a:d3:9f:bc:
         7b:dc:5c:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdqMQv/dHESMkX71A7P0GabpKOXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2NEIyRDE3NzFBQjMwRTE4ODgzQ0REMTQwMDFBODJE
OTkwNUY5ODAeFw0yNTA1MjkxODQ1MTJaFw0yNjA1MjgxODUwMTJaMDMxMTAvBgNV
BAMTKEIxMUUzQTcxMzgwQUE3NDdDMzBBQjY3NkRFRjQ4NTQzNTI3QkMyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3PuTtTOoI64i5XVhQfbh4zPh
rvYxqlIKftClWXKo5v9bHIkbRR93KArPAEHlUU/OzgXA3YqyOu/Jk7tOvNMYLciY
Nksv5zHtpenhEQp0igrIWZQmUhn9p6lBynEcI3uKzp7iwW5LSbp5aZUURJpRY3n4
ISkCHw3oBpxR2B1MrK7TuLnjMf8OudZ0z/kX4ChUHUuftmsS1nW2EOAcOSGoiMB2
ff0HMIkSkbA3w3ydUMDKLuB4H5z61Fdhlx1jbGCAkqVsMwzNizJSMVI4YWZcMuir
PIqIATnKsuF6Wk+k/u1+vDHjPJo/fe5ZzZjOuF33ejUXb0FRxQUGWJYIrCXFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsR46cTgKp0fDCrZ23vSFQ1J7wtkwHwYDVR0j
BBgwFoAUrGSy0Xcasw4YiDzdFAAagtmQX5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BQzY0QjJEMTc3MUFCMzBFMTg4ODNDREQxNDAwMUE4MkQ5OTA1Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNjRCMkQxNzcxQUIzMEUx
ODg4M0NERDE0MDAxQTgyRDk5MDVGOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzQzNTJlMzEzODMxMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtteYwDQYJKoZIhvcNAQELBQADggEBABOfWcZm
hYUT57pclJWqsEbpqNa5lumcCJFQqat7SBMpzbFU8JI4h5Q3gLeIopVrPiMbRlmk
aNKMoLhLV2kxD1uMkDfBPkk1gr3dCqW/a1SBCh3v52NkzAgDft8jT+/xy5ppu0eu
9Sfc4yLVWmJg9PIOEGvBkI8ujOEFG3XRxf7DuxHk5r7xdZxbXh7A0U7OuEfTuJip
bxhq35Xq1MkIVYXfWTRomJpf463fleHecVE9mqZd3Y7lOOLxl821LyQdRl1nNPTW
KY1EpgWG3R4x9xjU+yBpP6wcwNF/1tZXWSYH6qMV9kR9DnkMke0UyTH+R4GZTcmc
igL8StOfvHvcXAQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:53 2025 by rpki-client