Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
File:                     34352e342e38302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=
Subject key identifier:   37:6B:16:87:99:F4:63:6B:01:F2:FD:AA:D4:68:66:5A:71:CD:5C:03
Certificate issuer:       /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Certificate serial:       6DA0A8BC877DD13F37367288BCEB5C2EAE57DA04
Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
Signing time:             Wed 22 Jan 2025 14:57:21 +0000
ROA not before:           Wed 22 Jan 2025 14:52:21 +0000
ROA not after:            Wed 21 Jan 2026 14:57:21 +0000
asID:                     265933
IP address blocks:        45.4.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl
                          rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 09:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a0:a8:bc:87:7d:d1:3f:37:36:72:88:bc:eb:5c:2e:ae:57:da:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
        Validity
            Not Before: Jan 22 14:52:21 2025 GMT
            Not After : Jan 21 14:57:21 2026 GMT
        Subject: CN=376B168799F4636B01F2FDAAD468665A71CD5C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:00:89:e9:9a:4a:0c:6b:8e:bf:63:07:27:
                    32:eb:90:31:7c:66:c6:55:22:57:21:dc:90:ca:f9:
                    63:2b:8c:fc:fa:5f:28:fd:64:30:f2:a1:08:6d:5f:
                    db:5c:46:4c:51:3c:84:e0:97:64:6a:99:4f:c4:74:
                    a8:cc:e5:ac:e6:c8:08:37:97:96:2c:f2:ef:63:bc:
                    b2:3d:e3:53:70:d7:9e:34:ac:da:d3:64:dc:2d:aa:
                    f0:83:05:8f:d9:74:90:2d:f2:dd:55:1f:83:af:08:
                    b3:45:f2:a8:05:ee:7a:cb:11:88:92:d3:22:9a:9e:
                    cb:c4:c8:63:6d:78:ff:7c:8d:9d:84:41:c9:84:75:
                    0d:5f:cd:a3:67:a8:77:69:1a:3f:8f:d6:c5:ff:6d:
                    0a:66:4e:14:dd:91:48:f6:40:24:94:16:24:f4:4a:
                    5c:b9:30:63:dd:d0:89:81:ae:3d:d2:90:96:d7:f7:
                    71:28:1c:50:f0:13:cb:e5:51:5b:25:94:6c:5c:75:
                    3b:77:98:9c:fb:88:1d:59:e2:11:f3:2f:b3:7a:06:
                    ef:d2:46:b6:df:3f:a0:73:3a:e1:04:17:66:c9:be:
                    66:af:81:eb:10:f9:e1:02:3f:cf:48:81:84:28:0e:
                    07:44:01:d7:34:c7:ed:b4:34:e2:e1:70:2a:f3:0d:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:16:87:99:F4:63:6B:01:F2:FD:AA:D4:68:66:5A:71:CD:5C:03
            X509v3 Authority Key Identifier:
                keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:41:dd:ee:79:0d:1d:ac:fc:3b:7f:66:85:6b:ee:92:80:e4:
         62:34:b8:71:07:cd:da:b5:89:3c:94:d4:bc:cf:fc:ea:5e:09:
         5c:a7:7e:84:a2:e9:f1:7f:7b:cf:3c:18:c4:29:a3:7b:1f:1e:
         b3:d4:39:c3:a4:33:e1:e4:46:d5:7d:0f:9e:1d:49:20:17:8e:
         39:d3:48:35:6a:cd:94:1a:65:53:73:b8:3a:a8:56:ba:e6:a3:
         d1:ac:b7:87:5c:ae:d6:b8:b3:12:1d:5e:37:68:7d:5f:6f:18:
         e5:54:66:88:c1:62:f6:2a:ae:d8:de:ce:4e:2e:1b:13:1d:80:
         66:f4:46:06:0b:d9:9c:a5:f1:01:17:dc:a2:94:b5:45:d2:12:
         bf:3a:2a:a0:10:2f:7d:69:c7:b7:b4:fa:66:d0:99:10:77:af:
         2a:aa:2d:d1:18:3f:c5:c2:2b:99:e9:3f:bc:be:81:11:3d:b5:
         1c:49:81:79:6e:39:9f:d5:4f:7d:0a:b0:55:2f:4e:66:41:06:
         f8:9b:ce:4f:66:4d:45:b4:e1:15:b3:19:97:08:12:ff:60:3f:
         c4:c0:9e:ce:43:ff:7e:4a:f3:d7:71:4c:2b:96:13:7a:8b:e7:
         27:2a:9e:57:8e:59:8f:9a:6d:ec:d2:da:20:01:14:47:e7:0b:
         1c:a7:e5:d5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbaCovId90T83NnKIvOtcLq5X2gQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4
MkNDRTlDQzAeFw0yNTAxMjIxNDUyMjFaFw0yNjAxMjExNDU3MjFaMDMxMTAvBgNV
BAMTKDM3NkIxNjg3OTlGNDYzNkIwMUYyRkRBQUQ0Njg2NjVBNzFDRDVDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HACJ6ZpKDGuOv2MHJzLrkDF8
ZsZVIlch3JDK+WMrjPz6Xyj9ZDDyoQhtX9tcRkxRPITgl2RqmU/EdKjM5azmyAg3
l5Ys8u9jvLI941Nw1540rNrTZNwtqvCDBY/ZdJAt8t1VH4OvCLNF8qgF7nrLEYiS
0yKansvEyGNteP98jZ2EQcmEdQ1fzaNnqHdpGj+P1sX/bQpmThTdkUj2QCSUFiT0
Sly5MGPd0ImBrj3SkJbX93EoHFDwE8vlUVsllGxcdTt3mJz7iB1Z4hHzL7N6Bu/S
RrbfP6BzOuEEF2bJvmavgesQ+eECP89IgYQoDgdEAdc0x+20NOLhcCrzDUq1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUN2sWh5n0Y2sB8v2q1GhmWnHNXAMwHwYDVR0j
BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50
RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw
MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZTm5RdUE1TUdZajFKV3BFUHhVVEtIWTlmR2lpdmR0N1liQ3lhQmludERxLzAv
MzQzNTJlMzQyZTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzUzOTMz
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBFAwDQYJKoZIhvcNAQELBQADggEBANBB3e55DR2s/Dt/
ZoVr7pKA5GI0uHEHzdq1iTyU1LzP/OpeCVynfoSi6fF/e888GMQpo3sfHrPUOcOk
M+HkRtV9D54dSSAXjjnTSDVqzZQaZVNzuDqoVrrmo9Gst4dcrta4sxIdXjdofV9v
GOVUZojBYvYqrtjezk4uGxMdgGb0RgYL2Zyl8QEX3KKUtUXSEr86KqAQL31px7e0
+mbQmRB3ryqqLdEYP8XCK5npP7y+gRE9tRxJgXluOZ/VT30KsFUvTmZBBvibzk9m
TUW04RWzGZcIEv9gP8TAns5D/35K89dxTCuWE3qL5ycqnleOWY+abezS2iABFEfn
Cxyn5dU=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:01:50 2025 by rpki-client