Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa
File:                     34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa (raw, json)
Hash identifier:          MWS0pYAIpkBrVgEReFQMlh8Woh3zJk+fWLTHP3xuDi4=
Subject key identifier:   48:1C:37:D4:45:23:E5:C5:3E:4C:74:BF:6F:0F:21:8B:69:AD:A1:17
Certificate issuer:       /CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
Certificate serial:       19763B8630382AED7DDA5E67483A82A7331F4C9E
Authority key identifier: 1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa
Signing time:             Thu 06 Mar 2025 16:52:22 +0000
ROA not before:           Thu 06 Mar 2025 16:47:22 +0000
ROA not after:            Thu 05 Mar 2026 16:52:22 +0000
asID:                     269148
IP address blocks:        45.180.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl
                          rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 22:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:76:3b:86:30:38:2a:ed:7d:da:5e:67:48:3a:82:a7:33:1f:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
        Validity
            Not Before: Mar  6 16:47:22 2025 GMT
            Not After : Mar  5 16:52:22 2026 GMT
        Subject: CN=481C37D44523E5C53E4C74BF6F0F218B69ADA117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:c7:6a:af:30:11:fc:96:b6:ed:b6:f6:54:
                    df:2d:e3:cf:41:59:8e:26:44:0b:ec:2e:60:71:9a:
                    a4:7e:d3:aa:1f:b7:03:08:af:b3:40:ae:15:6b:0d:
                    01:e2:e8:ad:8d:c3:ab:ac:c6:f2:71:00:67:3c:8b:
                    a8:b6:f4:31:c7:0d:25:a9:29:7e:a5:a2:60:e4:28:
                    25:c9:28:55:76:84:c1:49:6a:da:46:c5:04:4b:4b:
                    ab:66:36:ea:98:c2:1f:57:33:ce:97:f2:5e:1d:f4:
                    93:43:c2:af:3a:d6:7c:68:ef:cc:39:1c:c0:6a:3d:
                    5e:3d:cc:76:1f:20:4e:7f:0d:4f:94:dc:2a:3e:99:
                    2d:00:be:e9:a4:ac:ee:95:21:5b:6f:bd:c4:cc:56:
                    05:06:cd:9e:d2:15:a8:39:70:89:1d:03:be:77:2d:
                    f0:63:75:8c:c5:14:b5:b3:cb:7c:aa:44:82:5f:12:
                    cb:42:c6:a1:c4:d0:b8:b5:be:87:12:87:04:fb:1a:
                    91:eb:36:69:01:11:b8:65:b7:3b:ec:fe:6a:73:4a:
                    d6:47:fe:27:6d:47:05:bc:d4:a9:6f:6f:65:fe:2d:
                    8c:5a:0c:08:5b:82:09:26:b2:4e:bc:b0:53:71:1c:
                    ac:a3:fc:40:48:ff:1a:01:5e:42:36:a6:f1:13:f9:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:37:D4:45:23:E5:C5:3E:4C:74:BF:6F:0F:21:8B:69:AD:A1:17
            X509v3 Authority Key Identifier:
                keyid:1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/34352e3138302e3230302e302f32322d3234203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:99:34:ae:8c:4d:3c:3c:75:02:93:d0:fe:28:74:b0:7d:a3:
         7b:4e:a6:d5:08:b8:0b:1b:5c:33:e8:5d:56:25:93:b0:e4:32:
         92:16:b8:60:69:cf:4c:0d:94:cd:77:75:13:2a:da:5a:a3:4c:
         03:ba:3d:c1:25:be:55:ec:27:5a:ca:35:2d:c2:db:b7:51:f2:
         33:08:09:09:e3:ee:f0:b4:02:46:70:d7:1a:d7:4e:5d:d6:fe:
         60:c5:96:08:d3:2f:82:bf:90:84:f9:c3:82:f8:03:f1:90:6d:
         80:8d:5b:a7:0e:e0:f7:5c:11:48:f9:ed:78:89:73:1f:54:05:
         8a:b8:4e:ea:c5:94:8b:43:6c:54:97:e2:96:a7:ac:cd:a7:af:
         24:c1:70:ae:ea:a4:f6:32:89:e4:08:9b:5a:dc:c0:13:fe:ca:
         f3:78:40:cc:ee:ab:ea:11:e7:d7:7f:51:a8:f8:89:6b:c7:26:
         7a:67:5f:8e:43:aa:df:41:76:a0:ad:04:22:6d:80:17:ad:42:
         38:85:71:02:fe:8e:01:5e:2d:b0:48:bc:33:d6:b8:ab:85:86:
         cb:53:df:f8:28:90:f2:33:0b:72:0a:b3:a2:94:8f:fb:28:be:
         07:bf:aa:eb:52:0a:4c:f8:3e:95:f4:5e:43:d8:40:55:24:e4:
         8a:fd:a3:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGXY7hjA4Ku192l5nSDqCpzMfTJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQzODI5RTVBOTA3M0Y3RjU2MTRCQ0Y5NjFDRjY0MTUx
OUE1OEU5NDAeFw0yNTAzMDYxNjQ3MjJaFw0yNjAzMDUxNjUyMjJaMDMxMTAvBgNV
BAMTKDQ4MUMzN0Q0NDUyM0U1QzUzRTRDNzRCRjZGMEYyMThCNjlBREExMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlcdqrzAR/Ja27bb2VN8t489B
WY4mRAvsLmBxmqR+06oftwMIr7NArhVrDQHi6K2Nw6usxvJxAGc8i6i29DHHDSWp
KX6lomDkKCXJKFV2hMFJatpGxQRLS6tmNuqYwh9XM86X8l4d9JNDwq861nxo78w5
HMBqPV49zHYfIE5/DU+U3Co+mS0AvumkrO6VIVtvvcTMVgUGzZ7SFag5cIkdA753
LfBjdYzFFLWzy3yqRIJfEstCxqHE0Li1vocShwT7GpHrNmkBEbhltzvs/mpzStZH
/idtRwW81Klvb2X+LYxaDAhbggkmsk68sFNxHKyj/EBI/xoBXkI2pvET+bWfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSBw31EUj5cU+THS/bw8hi2mtoRcwHwYDVR0j
BBgwFoAUHTgp5akHP39WFLz5Yc9kFRmljpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTJSY2FSWnVKc1VmZUNGSm54QUNGNmVEaVJmeXo2NnNiQWhTMVFqZkIz
TWkvMi8xRDM4MjlFNUE5MDczRjdGNTYxNEJDRjk2MUNGNjQxNTE5QTU4RTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMzgyOUU1QTkwNzNGN0Y1
NjE0QkNGOTYxQ0Y2NDE1MTlBNThFOTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkyUmNhUlp1SnNVZmVDRkpueEFDRjZlRGlSZnl6NjZzYkFoUzFRamZCM01pLzIv
MzQzNTJlMzEzODMwMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttMgwDQYJKoZIhvcNAQELBQADggEBAMGZNK6M
TTw8dQKT0P4odLB9o3tOptUIuAsbXDPoXVYlk7DkMpIWuGBpz0wNlM13dRMq2lqj
TAO6PcElvlXsJ1rKNS3C27dR8jMICQnj7vC0AkZw1xrXTl3W/mDFlgjTL4K/kIT5
w4L4A/GQbYCNW6cO4PdcEUj57XiJcx9UBYq4TurFlItDbFSX4panrM2nryTBcK7q
pPYyieQIm1rcwBP+yvN4QMzuq+oR59d/Uaj4iWvHJnpnX45Dqt9BdqCtBCJtgBet
QjiFcQL+jgFeLbBIvDPWuKuFhstT3/gokPIzC3IKs6KUj/sovge/qutSCkz4PpX0
XkPYQFUk5Ir9o8A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:18:34 2025 by rpki-client