Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
File:                     34352e3233382e3136342e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          56f45/RiXsDRrVKSwoPO6NHI3PFFnG7oiV7Fq8v0f+U=
Subject key identifier:   1E:1B:51:04:A8:5C:74:70:B1:8F:71:72:AC:4A:EC:0D:6E:C3:31:68
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       6C0382750E6E0CC651D2741533219C3DF0823322
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:56:01 +0000
ROA not before:           Mon 12 May 2025 12:51:01 +0000
ROA not after:            Mon 11 May 2026 12:56:01 +0000
asID:                     28146
IP address blocks:        45.238.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:03:82:75:0e:6e:0c:c6:51:d2:74:15:33:21:9c:3d:f0:82:33:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:51:01 2025 GMT
            Not After : May 11 12:56:01 2026 GMT
        Subject: CN=1E1B5104A85C7470B18F7172AC4AEC0D6EC33168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:74:04:42:fc:9a:a2:64:6c:98:f6:4a:5d:
                    95:25:22:18:79:32:cc:e4:3a:98:8e:cb:8f:f0:cb:
                    70:05:d3:48:1b:25:e4:a0:a2:1d:5d:71:0f:be:4c:
                    f3:f6:f2:bb:fd:47:9e:16:5c:ed:0c:b5:b6:dc:8d:
                    05:64:db:55:44:b1:77:ec:4d:cd:07:95:0a:a8:ea:
                    b1:99:af:bc:1a:d7:90:15:4c:d0:93:34:d5:53:33:
                    8a:10:d1:4d:de:c4:d9:14:c7:fc:3e:a1:ea:00:0e:
                    36:63:0d:96:dc:f2:c9:f2:b3:39:bd:00:50:38:24:
                    be:30:ce:4e:5c:d6:89:b1:ae:c0:5c:ee:4d:eb:fe:
                    50:ef:26:59:29:fd:13:bd:2a:60:f7:e7:31:7a:cf:
                    04:e3:f3:4c:08:82:b3:16:27:03:6e:cf:f2:90:3b:
                    6e:7a:1f:8b:a4:0b:bd:0f:e7:e1:76:78:5e:e6:14:
                    db:c5:92:ca:5f:17:db:74:1c:86:8e:2c:04:aa:99:
                    b7:7b:65:c5:b3:f9:07:df:75:1a:c9:50:39:3c:47:
                    52:7f:8d:d9:d9:a5:c3:4b:16:89:bf:43:4c:0d:9e:
                    cd:c7:0f:16:2f:bd:0c:f1:06:45:f4:f1:f6:2b:da:
                    a0:7f:26:79:8f:8c:3e:f9:11:07:94:52:84:d3:8e:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:51:04:A8:5C:74:70:B1:8F:71:72:AC:4A:EC:0D:6E:C3:31:68
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/34352e3233382e3136342e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:6a:02:e6:90:62:61:93:61:06:0f:af:34:55:7b:14:84:
         13:ca:f7:7f:c0:24:d2:f7:ae:64:4a:fc:15:79:36:3a:4b:bd:
         00:94:61:e2:0f:54:84:79:a7:cc:56:d4:6b:7f:b9:4a:34:6e:
         b5:74:37:08:71:83:97:d9:92:5c:20:82:d7:af:07:84:18:97:
         a8:94:ee:db:92:9a:ef:b2:43:5f:da:09:6a:ec:46:2c:40:fd:
         a1:ef:4d:be:11:f9:f3:82:87:3f:62:2d:61:d1:7d:c4:84:20:
         dd:2f:cb:d6:15:c8:a3:a9:97:76:8b:35:bf:9d:cf:31:8a:26:
         36:1d:e3:80:0b:66:86:8f:ae:fc:4a:ac:9c:d8:83:1b:c6:71:
         88:12:74:73:27:0c:8c:ee:29:11:63:02:37:52:0b:8d:4f:72:
         f6:76:85:73:a5:74:5c:9c:6b:72:32:a4:43:c9:31:65:91:4c:
         a2:f8:d1:62:0a:61:e5:1c:77:cd:50:94:f1:cb:0e:22:2f:ce:
         37:41:0f:9b:8a:1b:9e:c0:4d:d9:e8:3a:32:17:2f:5e:83:9e:
         d2:c7:ff:d7:d1:b1:80:38:28:3d:a0:f0:4b:36:b1:de:56:e7:
         a1:0b:f3:9e:aa:42:60:33:e8:0a:28:31:ed:45:42:9d:72:84:
         78:39:1e:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbAOCdQ5uDMZR0nQVMyGcPfCCMyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjUxMDFaFw0yNjA1MTExMjU2MDFaMDMxMTAvBgNV
BAMTKDFFMUI1MTA0QTg1Qzc0NzBCMThGNzE3MkFDNEFFQzBENkVDMzMxNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/3QEQvyaomRsmPZKXZUlIhh5
MszkOpiOy4/wy3AF00gbJeSgoh1dcQ++TPP28rv9R54WXO0MtbbcjQVk21VEsXfs
Tc0HlQqo6rGZr7wa15AVTNCTNNVTM4oQ0U3exNkUx/w+oeoADjZjDZbc8snyszm9
AFA4JL4wzk5c1omxrsBc7k3r/lDvJlkp/RO9KmD35zF6zwTj80wIgrMWJwNuz/KQ
O256H4ukC70P5+F2eF7mFNvFkspfF9t0HIaOLASqmbd7ZcWz+QffdRrJUDk8R1J/
jdnZpcNLFom/Q0wNns3HDxYvvQzxBkX08fYr2qB/JnmPjD75EQeUUoTTjkZzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHhtRBKhcdHCxj3FyrErsDW7DMWgwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzQzNTJlMzIzMzM4MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe6kMA0GCSqGSIb3DQEBCwUAA4IBAQCVK2oC5pBi
YZNhBg+vNFV7FIQTyvd/wCTS965kSvwVeTY6S70AlGHiD1SEeafMVtRrf7lKNG61
dDcIcYOX2ZJcIILXrweEGJeolO7bkprvskNf2glq7EYsQP2h702+Efnzgoc/Yi1h
0X3EhCDdL8vWFcijqZd2izW/nc8xiiY2HeOAC2aGj678Sqyc2IMbxnGIEnRzJwyM
7ikRYwI3UguNT3L2doVzpXRcnGtyMqRDyTFlkUyi+NFiCmHlHHfNUJTxyw4iL843
QQ+bihuewE3Z6DoyFy9eg57Sx//X0bGAOCg9oPBLNrHeVuehC/OeqkJgM+gKKDHt
RUKdcoR4OR5v
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:45:49 2025 by rpki-client