Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa
File:                     34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa (raw, json)
Hash identifier:          pzqdmzFCQIm7MSvbsv2japPxFtd56k5KnlEFU5k01e0=
Subject key identifier:   C1:60:0D:EE:2F:7E:D2:5F:7E:6B:CF:B7:F2:6C:A9:C7:EF:F3:F3:A1
Certificate issuer:       /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial:       7847630162F4F15D26579033F71B6DDFA890B6BA
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa
Signing time:             Mon 13 Jan 2025 12:55:01 +0000
ROA not before:           Mon 13 Jan 2025 12:50:01 +0000
ROA not after:            Mon 12 Jan 2026 12:55:01 +0000
asID:                     268144
IP address blocks:        45.168.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
                          rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:63:01:62:f4:f1:5d:26:57:90:33:f7:1b:6d:df:a8:90:b6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
        Validity
            Not Before: Jan 13 12:50:01 2025 GMT
            Not After : Jan 12 12:55:01 2026 GMT
        Subject: CN=3082010A0282010100C32B3D8D9BDAC635D867AE408130719BB8B27420771EBC71C78D5197EE63D9EF6EDB354FDB429E24F13E92F7F3E7A4B02D4DC24763FB3ABE9A14AE0698FE3FD759841FD2BADDD54892628A4C236EF0EA6EF24A3C9E364B9AD605516E7E2B93593D84E837D7A08EAB66B4FC31F53FA0D28E7E3655ED43F8B7A81027661FF17ABE9976A28D16D6CBC7F31EF8A065B66DF94A71FDC7AEF5AEC2C7C9C57AD7094DDC2B5E0A37AA0F505C15067E78FB87C709F943626EB009FCC80339D96264466549ABB66A6301CAFEEC7EBFF082554F00A9FC739BF72A9FB55AFAA020F7A8D7B28415FD191E9852A9BE5010C6D1005F3A4121A1E771FA6220749BF889733AE63C890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:3d:8d:9b:da:c6:35:d8:67:ae:40:81:30:
                    71:9b:b8:b2:74:20:77:1e:bc:71:c7:8d:51:97:ee:
                    63:d9:ef:6e:db:35:4f:db:42:9e:24:f1:3e:92:f7:
                    f3:e7:a4:b0:2d:4d:c2:47:63:fb:3a:be:9a:14:ae:
                    06:98:fe:3f:d7:59:84:1f:d2:ba:dd:d5:48:92:62:
                    8a:4c:23:6e:f0:ea:6e:f2:4a:3c:9e:36:4b:9a:d6:
                    05:51:6e:7e:2b:93:59:3d:84:e8:37:d7:a0:8e:ab:
                    66:b4:fc:31:f5:3f:a0:d2:8e:7e:36:55:ed:43:f8:
                    b7:a8:10:27:66:1f:f1:7a:be:99:76:a2:8d:16:d6:
                    cb:c7:f3:1e:f8:a0:65:b6:6d:f9:4a:71:fd:c7:ae:
                    f5:ae:c2:c7:c9:c5:7a:d7:09:4d:dc:2b:5e:0a:37:
                    aa:0f:50:5c:15:06:7e:78:fb:87:c7:09:f9:43:62:
                    6e:b0:09:fc:c8:03:39:d9:62:64:46:65:49:ab:b6:
                    6a:63:01:ca:fe:ec:7e:bf:f0:82:55:4f:00:a9:fc:
                    73:9b:f7:2a:9f:b5:5a:fa:a0:20:f7:a8:d7:b2:84:
                    15:fd:19:1e:98:52:a9:be:50:10:c6:d1:00:5f:3a:
                    41:21:a1:e7:71:fa:62:20:74:9b:f8:89:73:3a:e6:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:0D:EE:2F:7E:D2:5F:7E:6B:CF:B7:F2:6C:A9:C7:EF:F3:F3:A1
            X509v3 Authority Key Identifier:
                keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136382e3230322e302f32342d3234203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:18:78:08:74:74:a9:13:93:1a:b3:89:27:73:67:c2:66:55:
         07:db:dd:c6:5a:46:b2:66:94:92:d5:47:cf:52:38:73:da:2e:
         ea:8d:51:9d:f3:4b:72:ff:16:f6:d6:27:85:c5:53:2d:82:45:
         39:81:aa:1d:be:53:3a:56:3c:ed:ea:29:e5:6f:3b:14:7e:ed:
         cd:17:f2:9b:36:78:60:59:31:b5:d8:8c:0b:5a:ee:42:32:e0:
         a6:29:70:26:cd:97:f2:96:33:bb:f6:7d:55:9b:28:9c:5a:a0:
         54:94:5c:79:e0:90:52:c4:24:c1:71:de:23:0a:4d:dd:9c:77:
         cf:60:1a:e7:8d:d1:c3:fd:59:94:4a:3c:06:02:94:97:0e:53:
         ad:7e:5a:2a:ad:ec:b0:eb:5c:91:0d:d7:a7:d8:c8:66:5a:cb:
         46:d0:4f:6d:12:09:dd:cd:72:dd:f5:72:13:da:af:09:7a:42:
         6a:9a:56:ab:d6:18:f2:64:d0:df:87:dc:03:32:b3:4c:a0:40:
         e8:bf:83:07:30:ab:bd:55:86:39:51:58:0b:cd:f6:73:b4:b5:
         0e:be:e8:bb:65:ef:a8:0d:37:83:42:2e:40:02:5d:28:8b:08:
         22:98:24:c6:91:6d:b3:d1:ec:10:9f:36:ad:5a:a2:1b:43:a0:
         3e:32:95:1e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeEdjAWL08V0mV5Az9xtt36iQtrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY4OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNB
QzZBRTIyQzAeFw0yNTAxMTMxMjUwMDFaFw0yNjAxMTIxMjU1MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzMyQjNEOEQ5QkRBQzYzNUQ4
NjdBRTQwODEzMDcxOUJCOEIyNzQyMDc3MUVCQzcxQzc4RDUxOTdFRTYzRDlFRjZF
REIzNTRGREI0MjlFMjRGMTNFOTJGN0YzRTdBNEIwMkQ0REMyNDc2M0ZCM0FCRTlB
MTRBRTA2OThGRTNGRDc1OTg0MUZEMkJBRERENTQ4OTI2MjhBNEMyMzZFRjBFQTZF
RjI0QTNDOUUzNjRCOUFENjA1NTE2RTdFMkI5MzU5M0Q4NEU4MzdEN0EwOEVBQjY2
QjRGQzMxRjUzRkEwRDI4RTdFMzY1NUVENDNGOEI3QTgxMDI3NjYxRkYxN0FCRTk5
NzZBMjhEMTZENkNCQzdGMzFFRjhBMDY1QjY2REY5NEE3MUZEQzdBRUY1QUVDMkM3
QzlDNTdBRDcwOTREREMyQjVFMEEzN0FBMEY1MDVDMTUwNjdFNzhGQjg3QzcwOUY5
NDM2MjZFQjAwOUZDQzgwMzM5RDk2MjY0NDY2NTQ5QUJCNjZBNjMwMUNBRkVFQzdF
QkZGMDgyNTU0RjAwQTlGQzczOUJGNzJBOUZCNTVBRkFBMDIwRjdBOEQ3QjI4NDE1
RkQxOTFFOTg1MkE5QkU1MDEwQzZEMTAwNUYzQTQxMjFBMUU3NzFGQTYyMjA3NDlC
Rjg4OTczM0FFNjNDODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwys9jZvaxjXYZ65AgTBxm7iydCB3Hrxxx41Rl+5j2e9u2zVP20Ke
JPE+kvfz56SwLU3CR2P7Or6aFK4GmP4/11mEH9K63dVIkmKKTCNu8Opu8ko8njZL
mtYFUW5+K5NZPYToN9egjqtmtPwx9T+g0o5+NlXtQ/i3qBAnZh/xer6ZdqKNFtbL
x/Me+KBltm35SnH9x671rsLHycV61wlN3CteCjeqD1BcFQZ+ePuHxwn5Q2JusAn8
yAM52WJkRmVJq7ZqYwHK/ux+v/CCVU8Aqfxzm/cqn7Va+qAg96jXsoQV/RkemFKp
vlAQxtEAXzpBIaHncfpiIHSb+IlzOuY8iQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FMFgDe4vftJffmvPt/Jsqcfv8/OhMB8GA1UdIwQYMBaAFP+JXIL1c74OTfOEmhId
h4OsauIsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlIanRnOWR2RFU3U0hS
aUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4OTVDODJGNTczQkUw
RTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjg5NUM4MkY1NzNCRTBFNERGMzg0OUExMjFEODc4M0FDNkFF
MjJDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SGp0ZzlkdkRVN1NIUmlLdG91
N3M4czl5YkNWTk5pM0p0Q3hXQ0d6QVl6bi8xLzM0MzUyZTMxMzYzODJlMzIzMDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzEzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LajKMA0GCSqGSIb3DQEBCwUAA4IBAQC7GHgIdHSpE5Mas4knc2fCZlUH293GWkay
ZpSS1UfPUjhz2i7qjVGd80ty/xb21ieFxVMtgkU5gaodvlM6Vjzt6inlbzsUfu3N
F/KbNnhgWTG12IwLWu5CMuCmKXAmzZfyljO79n1VmyicWqBUlFx54JBSxCTBcd4j
Ck3dnHfPYBrnjdHD/VmUSjwGApSXDlOtfloqreyw61yRDden2MhmWstG0E9tEgnd
zXLd9XIT2q8JekJqmlar1hjyZNDfh9wDMrNMoEDov4MHMKu9VYY5UVgLzfZztLUO
vui7Ze+oDTeDQi5AAl0oiwgimCTGkW2z0ewQnzatWqIbQ6A+MpUe
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:30 2025 by rpki-client