Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa
File:                     34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier:          iFINn/7IoYLlKosHmTHbVUchzT8FvzAwRkGhFStBa5I=
Subject key identifier:   3C:6F:BE:D4:38:3D:07:6B:7C:09:50:A1:E0:B2:BA:A3:44:75:D1:B0
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7C6926114C4ABFB7664763D203F6F7ED6F172EBE
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa
Signing time:             Mon 13 Jan 2025 12:54:55 +0000
ROA not before:           Mon 13 Jan 2025 12:49:55 +0000
ROA not after:            Mon 12 Jan 2026 12:54:55 +0000
asID:                     268568
IP address blocks:        45.163.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:69:26:11:4c:4a:bf:b7:66:47:63:d2:03:f6:f7:ed:6f:17:2e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:49:55 2025 GMT
            Not After : Jan 12 12:54:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d5:7c:e6:dc:48:fa:fa:7e:63:66:ac:3c:a5:
                    e7:68:26:a6:36:d4:c9:25:a7:e6:a3:91:53:4b:ae:
                    b1:b9:54:59:cb:31:4a:a8:4c:db:46:b0:9d:91:ef:
                    f7:a7:06:5c:49:33:68:79:a4:bd:46:9b:cc:ff:01:
                    e8:ef:3a:f4:55:b2:c5:e9:57:b6:1e:73:5a:9d:9c:
                    97:ec:79:f5:6a:74:47:52:bf:bc:ba:d7:a9:da:b7:
                    6e:1e:98:ad:7d:05:8c:9f:be:bd:0d:88:7a:f9:c6:
                    ee:81:9b:5a:47:21:99:73:2d:8a:6c:ea:04:a2:a4:
                    c8:fa:b5:15:99:51:65:b0:9a:67:8e:41:4a:aa:41:
                    c9:2c:f0:e8:bf:e2:c8:4f:52:38:43:ea:3f:15:cd:
                    c4:d6:5d:64:1b:6b:97:74:df:52:2d:2d:2c:72:e0:
                    74:2a:68:08:ff:39:53:ae:8d:93:1e:d5:69:db:c3:
                    4e:84:db:25:28:57:80:44:15:27:ad:46:80:d4:89:
                    15:94:5f:af:9a:d4:33:55:42:07:a5:47:f8:84:86:
                    d8:85:52:bd:3c:55:bb:fc:c4:2d:65:56:90:fe:29:
                    c7:dd:5e:21:79:1e:ec:ec:af:55:7c:a6:da:c0:e9:
                    f4:d4:a5:8e:3b:5a:51:e1:20:4f:c8:28:93:39:fe:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6F:BE:D4:38:3D:07:6B:7C:09:50:A1:E0:B2:BA:A3:44:75:D1:B0
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134372e302f32342d3234203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:2a:16:1d:2a:ba:3d:6d:d5:6c:16:e7:22:1a:8a:98:5e:a7:
         3c:9b:cd:52:58:a1:67:7b:fb:d0:ca:b2:16:b7:c8:4d:c6:79:
         93:c9:3d:80:ba:3e:5f:7e:f6:6f:e1:d8:3f:f4:45:10:f3:d6:
         14:5a:89:3c:9a:41:57:7e:b8:90:dc:f5:10:5d:73:4b:48:6f:
         8d:7b:3f:7d:bd:2c:1c:af:24:18:b7:f5:d9:d8:b2:e6:de:38:
         8c:fa:95:b5:fc:7e:4d:b9:04:7c:06:d4:fa:d5:40:91:40:2b:
         99:49:73:59:1e:f8:e3:b7:20:ba:91:5f:32:66:0a:9b:37:52:
         e1:11:f8:a8:15:54:12:61:b2:7b:24:ab:00:07:57:c0:50:07:
         33:2b:f3:36:4e:1d:ff:77:99:a8:02:b6:63:d3:dc:5c:3a:3a:
         7b:b9:49:41:f6:9a:a1:77:00:71:85:49:5f:ae:59:97:46:53:
         16:bf:74:92:ed:fe:95:b0:56:f9:de:f1:db:e5:ca:28:b7:d5:
         b8:64:69:07:12:38:cf:18:c4:ea:79:64:2f:92:9e:31:0c:5d:
         a7:dc:e5:ea:e3:3b:b9:2f:85:34:65:93:25:a4:75:22:d8:bf:
         88:73:20:49:53:f6:93:dc:f0:38:d5:91:28:78:82:e1:e3:c5:
         e8:4b:0b:ab
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfGkmEUxKv7dmR2PSA/b37W8XLr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTAxMTMxMjQ5NTVaFw0yNjAxMTIxMjU0NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjFENTdDRTZEQzQ4RkFGQTdF
NjM2NkFDM0NBNUU3NjgyNkE2MzZENEM5MjVBN0U2QTM5MTUzNEJBRUIxQjk1NDU5
Q0IzMTRBQTg0Q0RCNDZCMDlEOTFFRkY3QTcwNjVDNDkzMzY4NzlBNEJENDY5QkND
RkYwMUU4RUYzQUY0NTVCMkM1RTk1N0I2MUU3MzVBOUQ5Qzk3RUM3OUY1NkE3NDQ3
NTJCRkJDQkFEN0E5REFCNzZFMUU5OEFEN0QwNThDOUZCRUJEMEQ4ODdBRjlDNkVF
ODE5QjVBNDcyMTk5NzMyRDhBNkNFQTA0QTJBNEM4RkFCNTE1OTk1MTY1QjA5QTY3
OEU0MTRBQUE0MUM5MkNGMEU4QkZFMkM4NEY1MjM4NDNFQTNGMTVDREM0RDY1RDY0
MUI2Qjk3NzRERjUyMkQyRDJDNzJFMDc0MkE2ODA4RkYzOTUzQUU4RDkzMUVENTY5
REJDMzRFODREQjI1Mjg1NzgwNDQxNTI3QUQ0NjgwRDQ4OTE1OTQ1RkFGOUFENDMz
NTU0MjA3QTU0N0Y4ODQ4NkQ4ODU1MkJEM0M1NUJCRkNDNDJENjU1NjkwRkUyOUM3
REQ1RTIxNzkxRUVDRUNBRjU1N0NBNkRBQzBFOUY0RDRBNThFM0I1QTUxRTEyMDRG
QzgyODkzMzlGRTc1QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8dV85txI+vp+Y2asPKXnaCamNtTJJafmo5FTS66xuVRZyzFKqEzb
RrCdke/3pwZcSTNoeaS9RpvM/wHo7zr0VbLF6Ve2HnNanZyX7Hn1anRHUr+8utep
2rduHpitfQWMn769DYh6+cbugZtaRyGZcy2KbOoEoqTI+rUVmVFlsJpnjkFKqkHJ
LPDov+LIT1I4Q+o/Fc3E1l1kG2uXdN9SLS0scuB0KmgI/zlTro2THtVp28NOhNsl
KFeARBUnrUaA1IkVlF+vmtQzVUIHpUf4hIbYhVK9PFW7/MQtZVaQ/inH3V4heR7s
7K9VfKbawOn01KWOO1pR4SBPyCiTOf51qwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDxvvtQ4PQdrfAlQoeCyuqNEddGwMB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzM0MzUyZTMxMzYzMzJlMzEzNDM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzUzNjM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LaOTMA0GCSqGSIb3DQEBCwUAA4IBAQDaKhYdKro9bdVsFuciGoqYXqc8m81SWKFn
e/vQyrIWt8hNxnmTyT2Auj5ffvZv4dg/9EUQ89YUWok8mkFXfriQ3PUQXXNLSG+N
ez99vSwcryQYt/XZ2LLm3jiM+pW1/H5NuQR8BtT61UCRQCuZSXNZHvjjtyC6kV8y
ZgqbN1LhEfioFVQSYbJ7JKsAB1fAUAczK/M2Th3/d5moArZj09xcOjp7uUlB9pqh
dwBxhUlfrlmXRlMWv3SS7f6VsFb53vHb5coot9W4ZGkHEjjPGMTqeWQvkp4xDF2n
3OXq4zu5L4U0ZZMlpHUi2L+IcyBJU/aT3PA41ZEoeILh48XoSwur
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:27 2025 by rpki-client