Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/34352e3138332e3232382e302f32322d3234203d3e20323639323933.roa
File:                     34352e3138332e3232382e302f32322d3234203d3e20323639323933.roa (raw, json)
Hash identifier:          Y23ZIbI4Vi75rkjsjaf47hCGA+dE/+4AajDHVcFKg/g=
Subject key identifier:   C9:44:4A:65:50:A4:A2:E3:AF:58:76:CB:53:5D:FE:19:A2:56:F9:72
Certificate issuer:       /CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
Certificate serial:       7BE108CAAA75ED5A3B45859F6FE42FC01A9C7CDF
Authority key identifier: 85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/34352e3138332e3232382e302f32322d3234203d3e20323639323933.roa
Signing time:             Tue 06 May 2025 15:03:18 +0000
ROA not before:           Tue 06 May 2025 14:58:18 +0000
ROA not after:            Tue 05 May 2026 15:03:18 +0000
asID:                     269293
IP address blocks:        45.183.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl
                          rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 12:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e1:08:ca:aa:75:ed:5a:3b:45:85:9f:6f:e4:2f:c0:1a:9c:7c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
        Validity
            Not Before: May  6 14:58:18 2025 GMT
            Not After : May  5 15:03:18 2026 GMT
        Subject: CN=C9444A6550A4A2E3AF5876CB535DFE19A256F972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:ef:9e:ae:03:da:64:18:5c:6a:05:e7:a2:
                    cd:93:0a:d7:64:67:32:df:d8:47:d6:e5:12:4d:b1:
                    c9:d9:61:96:b6:bc:3d:ce:45:fd:28:1b:ac:1e:a3:
                    12:85:3f:1d:ad:7c:d7:c1:fe:73:ac:d4:78:3a:1b:
                    29:13:1a:84:ee:09:90:3b:ab:20:4b:41:17:1d:ea:
                    bc:75:f3:19:4c:3b:c1:3d:0b:e3:07:1d:e4:2e:b7:
                    1a:53:65:74:57:92:4a:29:ce:01:65:54:ff:4e:5c:
                    c1:e6:75:ba:a3:87:61:9b:c5:20:8c:83:ec:0c:4c:
                    0a:c4:73:7e:fc:a5:ac:bf:01:f0:f5:1c:2a:83:23:
                    cc:e0:e2:3c:a0:b7:8e:90:2b:cc:1d:46:97:c0:53:
                    39:b2:bd:61:ef:c0:54:d8:0b:b6:df:b2:8b:83:ca:
                    87:d9:38:88:54:16:09:70:ac:b4:11:6d:b6:1d:e5:
                    3e:72:d0:53:19:80:6a:7e:50:21:1e:72:71:b5:1a:
                    05:08:7e:b0:04:46:f3:06:2a:44:d3:d9:19:b1:7c:
                    08:fe:9e:6f:1c:f4:f2:f7:89:cc:0f:df:b3:b0:bf:
                    7c:07:0c:1a:97:f9:fd:ac:a8:4f:df:eb:e6:37:2c:
                    3e:d1:91:be:2c:0f:c3:8d:77:f0:80:9e:af:19:6b:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:44:4A:65:50:A4:A2:E3:AF:58:76:CB:53:5D:FE:19:A2:56:F9:72
            X509v3 Authority Key Identifier:
                keyid:85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/34352e3138332e3232382e302f32322d3234203d3e20323639323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:95:ab:0e:b6:ea:3b:8d:bd:42:9e:b5:f5:04:26:3c:d7:5c:
         05:ca:b0:14:ae:23:a9:87:ce:7f:61:28:47:1e:41:16:16:c8:
         ee:3a:a3:6f:14:eb:cf:24:f5:78:60:0b:80:61:52:ac:50:ae:
         28:ea:1a:a7:2b:bf:ab:a7:b2:a3:fe:22:70:4a:67:1f:f7:b9:
         56:80:ee:ca:e3:3a:b4:35:40:69:aa:b7:1c:0d:6d:85:b6:07:
         ad:e5:0b:f3:df:fb:65:ff:0c:c8:73:ef:e6:bf:86:7a:c1:c9:
         1b:e6:6f:34:c4:ac:23:87:3d:a1:3d:cb:33:a0:c1:6e:d1:63:
         64:0d:2e:a3:91:b7:83:bd:3a:0b:e4:d2:18:0b:17:19:b0:1c:
         ad:aa:64:32:45:4b:87:2a:3e:40:2c:6d:7f:c4:0a:0d:06:7e:
         cf:1e:cd:bf:04:8d:cd:94:56:4e:29:a3:11:31:63:1c:d8:77:
         c2:0e:37:1d:da:3f:1e:98:01:76:0d:0a:7b:5c:e0:a9:a2:54:
         18:f0:75:e8:01:e3:02:06:9c:bc:7c:5d:08:b0:ec:e7:34:56:
         fd:e2:bc:a8:ce:ea:71:b0:b3:d3:f8:a4:26:65:a8:2b:74:c8:
         d8:77:16:9e:42:f2:cb:fc:b1:d9:05:aa:c8:5e:46:78:cc:41:
         c6:c6:19:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe+EIyqp17Vo7RYWfb+QvwBqcfN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0NEE5Q0M0MTM4ODk5MjEwRjQ3QjZCQkNEQUQ3NUNC
OTdBNUM1MjAeFw0yNTA1MDYxNDU4MThaFw0yNjA1MDUxNTAzMThaMDMxMTAvBgNV
BAMTKEM5NDQ0QTY1NTBBNEEyRTNBRjU4NzZDQjUzNURGRTE5QTI1NkY5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ye+ergPaZBhcagXnos2TCtdk
ZzLf2EfW5RJNscnZYZa2vD3ORf0oG6weoxKFPx2tfNfB/nOs1Hg6GykTGoTuCZA7
qyBLQRcd6rx18xlMO8E9C+MHHeQutxpTZXRXkkopzgFlVP9OXMHmdbqjh2GbxSCM
g+wMTArEc378pay/AfD1HCqDI8zg4jygt46QK8wdRpfAUzmyvWHvwFTYC7bfsouD
yofZOIhUFglwrLQRbbYd5T5y0FMZgGp+UCEecnG1GgUIfrAERvMGKkTT2RmxfAj+
nm8c9PL3icwP37Owv3wHDBqX+f2sqE/f6+Y3LD7Rkb4sD8ONd/CAnq8Za0irAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyURKZVCkouOvWHbLU13+GaJW+XIwHwYDVR0j
BBgwFoAUhUSpzEE4iZIQ9HtrvNrXXLl6XFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVBDY3FmMXFNalUxN3VtOFR2ckZobXBGZDhIREs5UTM3OGFHQW1aZThl
VFkvMC84NTQ0QTlDQzQxMzg4OTkyMTBGNDdCNkJCQ0RBRDc1Q0I5N0E1QzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDRBOUNDNDEzODg5OTIx
MEY0N0I2QkJDREFENzVDQjk3QTVDNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlQQ2NxZjFxTWpVMTd1bThUdnJGaG1wRmQ4SERLOVEzNzhhR0FtWmU4ZVRZLzAv
MzQzNTJlMzEzODMzMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItt+QwDQYJKoZIhvcNAQELBQADggEBAL2Vqw62
6juNvUKetfUEJjzXXAXKsBSuI6mHzn9hKEceQRYWyO46o28U688k9XhgC4BhUqxQ
rijqGqcrv6unsqP+InBKZx/3uVaA7srjOrQ1QGmqtxwNbYW2B63lC/Pf+2X/DMhz
7+a/hnrByRvmbzTErCOHPaE9yzOgwW7RY2QNLqORt4O9Ogvk0hgLFxmwHK2qZDJF
S4cqPkAsbX/ECg0Gfs8ezb8Ejc2UVk4poxExYxzYd8IONx3aPx6YAXYNCntc4Kmi
VBjwdegB4wIGnLx8XQiw7Oc0Vv3ivKjO6nGws9P4pCZlqCt0yNh3Fp5C8sv8sdkF
qsheRnjMQcbGGb8=
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:01:08 2025 by rpki-client