Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
File:                     34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (raw, json)
Hash identifier:          SVqMJRxAmbTBPonMFZlJOsUUcVg3kCzTE3WIW9mrWG0=
Subject key identifier:   64:F6:63:04:7B:B9:67:5B:2C:DB:4F:FD:C2:5F:0C:27:8D:D1:75:CA
Certificate issuer:       /CN=209EFD9083A94B4FB53BE8E724DD5F2319ADEC09
Certificate serial:       6EAA8D278FECC3447D96FE82652F247142DBC1A5
Authority key identifier: 20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
Signing time:             Thu 06 Mar 2025 08:39:11 +0000
ROA not before:           Thu 06 Mar 2025 08:34:11 +0000
ROA not after:            Thu 05 Mar 2026 08:39:11 +0000
asID:                     268298
IP address blocks:        45.237.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.crl
                          rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 00:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:aa:8d:27:8f:ec:c3:44:7d:96:fe:82:65:2f:24:71:42:db:c1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209EFD9083A94B4FB53BE8E724DD5F2319ADEC09
        Validity
            Not Before: Mar  6 08:34:11 2025 GMT
            Not After : Mar  5 08:39:11 2026 GMT
        Subject: CN=64F663047BB9675B2CDB4FFDC25F0C278DD175CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:d5:62:c3:af:03:4f:17:4d:6f:f7:1b:84:
                    50:10:f4:03:2d:76:c9:7a:f2:6c:b4:52:ca:39:59:
                    16:0d:87:e6:8a:0e:d8:f1:5c:73:44:0b:f4:80:13:
                    30:97:6d:13:de:4c:24:85:46:da:25:b1:6f:f6:6b:
                    a4:48:91:59:80:ab:9f:99:28:f5:7a:c8:c8:a5:b2:
                    5f:dc:3d:17:da:4e:d6:14:e1:e0:78:92:63:7a:ee:
                    f6:cf:72:ce:f8:61:d7:6b:3e:92:7e:b4:4a:90:f2:
                    46:cc:4b:28:a0:7c:40:3b:45:71:7e:25:d1:4f:85:
                    47:c7:2d:cb:9b:74:ba:20:cc:88:8c:d3:ca:cf:70:
                    61:91:8d:94:4e:87:1d:f1:31:c3:93:2a:cc:11:de:
                    2b:cf:3c:48:6f:68:07:f1:80:d2:e3:52:9c:39:d6:
                    21:63:f1:a7:a6:4e:76:86:a2:8e:e8:3d:9d:96:01:
                    6e:83:59:b1:1c:9c:3e:60:d7:a5:67:38:74:4a:a3:
                    9b:e8:2e:6e:0d:70:e5:72:94:a4:25:65:c7:19:be:
                    eb:18:b9:59:95:d2:a2:cd:29:5d:82:22:41:d8:e4:
                    53:c6:57:78:a7:28:c4:44:52:6e:6a:86:4d:67:c7:
                    b4:b3:66:9c:e1:77:b0:ea:c8:e4:02:c8:e9:e2:0f:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:63:04:7B:B9:67:5B:2C:DB:4F:FD:C2:5F:0C:27:8D:D1:75:CA
            X509v3 Authority Key Identifier:
                keyid:20:9E:FD:90:83:A9:4B:4F:B5:3B:E8:E7:24:DD:5F:23:19:AD:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/209EFD9083A94B4FB53BE8E724DD5F2319ADEC09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/1/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:44:b9:1c:0a:c8:35:ec:84:d0:6e:26:cd:e0:11:70:6d:05:
         ab:c6:af:87:f1:ab:41:1d:4b:7a:7c:fc:18:34:47:4a:e1:24:
         69:ad:90:f8:43:1c:49:94:46:cf:23:76:2a:1c:8a:aa:84:40:
         cc:48:8a:ec:e8:16:a4:15:b0:f0:c6:56:5e:ef:b8:24:0a:42:
         24:e4:a0:29:cb:df:d5:4b:88:24:c9:f0:59:4f:0e:bc:1b:10:
         71:ca:27:9b:5b:a1:27:d8:cf:33:4a:6c:a4:cd:b6:ec:5d:6a:
         49:10:9b:a2:fd:83:a4:78:d0:75:64:27:2c:55:0b:9b:6e:cc:
         d4:07:96:06:16:92:9f:fb:70:bb:d6:eb:32:d7:65:5f:c7:b5:
         67:2c:49:05:1a:c5:35:be:19:8a:7a:53:c9:dc:65:40:fb:ba:
         00:c4:be:90:32:be:f4:94:88:f2:97:8d:c0:8a:a0:86:a6:d1:
         4d:ec:1b:7a:ad:6c:29:4b:fe:d6:e8:37:ce:ed:4c:4a:54:e4:
         95:a6:2d:84:7c:45:d6:2d:20:bf:16:39:17:08:7e:8e:2e:c9:
         d3:df:36:22:70:38:f3:e9:8d:5b:d3:e5:6d:21:0f:3f:84:42:
         89:86:25:45:f2:1c:74:86:21:14:8d:6a:39:cb:68:44:46:85:
         7f:9d:61:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbqqNJ4/sw0R9lv6CZS8kcULbwaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5RUZEOTA4M0E5NEI0RkI1M0JFOEU3MjRERDVGMjMx
OUFERUMwOTAeFw0yNTAzMDYwODM0MTFaFw0yNjAzMDUwODM5MTFaMDMxMTAvBgNV
BAMTKDY0RjY2MzA0N0JCOTY3NUIyQ0RCNEZGREMyNUYwQzI3OEREMTc1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrtViw68DTxdNb/cbhFAQ9AMt
dsl68my0Uso5WRYNh+aKDtjxXHNEC/SAEzCXbRPeTCSFRtolsW/2a6RIkVmAq5+Z
KPV6yMilsl/cPRfaTtYU4eB4kmN67vbPcs74YddrPpJ+tEqQ8kbMSyigfEA7RXF+
JdFPhUfHLcubdLogzIiM08rPcGGRjZROhx3xMcOTKswR3ivPPEhvaAfxgNLjUpw5
1iFj8aemTnaGoo7oPZ2WAW6DWbEcnD5g16VnOHRKo5voLm4NcOVylKQlZccZvusY
uVmV0qLNKV2CIkHY5FPGV3inKMREUm5qhk1nx7SzZpzhd7DqyOQCyOniD+rjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZPZjBHu5Z1ss20/9wl8MJ43RdcowHwYDVR0j
BBgwFoAUIJ79kIOpS0+1O+jnJN1fIxmt7AkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZNaXBMdlBMajU4R0pRaTRjN0hkcVpKeVdTa211aEJzbkdOTmN1aTQz
bUUvMS8yMDlFRkQ5MDgzQTk0QjRGQjUzQkU4RTcyNERENUYyMzE5QURFQzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwOUVGRDkwODNBOTRCNEZC
NTNCRThFNzI0REQ1RjIzMTlBREVDMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWTWlwTHZQTGo1OEdKUWk0YzdIZHFaSnlXU2ttdWhCc25HTk5jdWk0M21FLzEv
MzQzNTJlMzIzMzM3MmUzMjMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7dAwDQYJKoZIhvcNAQELBQADggEBADZEuRwK
yDXshNBuJs3gEXBtBavGr4fxq0EdS3p8/Bg0R0rhJGmtkPhDHEmURs8jdiociqqE
QMxIiuzoFqQVsPDGVl7vuCQKQiTkoCnL39VLiCTJ8FlPDrwbEHHKJ5tboSfYzzNK
bKTNtuxdakkQm6L9g6R40HVkJyxVC5tuzNQHlgYWkp/7cLvW6zLXZV/HtWcsSQUa
xTW+GYp6U8ncZUD7ugDEvpAyvvSUiPKXjcCKoIam0U3sG3qtbClL/tboN87tTEpU
5JWmLYR8RdYtIL8WORcIfo4uydPfNiJwOPPpjVvT5W0hDz+EQomGJUXyHHSGIRSN
ajnLaERGhX+dYfI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:20 2025 by rpki-client