Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa
File:                     34352e36352e3232392e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          Cas32WTSzh7Gfld6xuxeuP9bGIX6yqFnLgXZEKWJUiM=
Subject key identifier:   B6:01:9A:CB:1E:22:CD:FE:2A:BC:42:22:A9:D9:9D:01:9C:07:75:BD
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       7FF3E90F16FAF55931E39C30EA6F673FB59AC91F
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 06 Mar 2025 18:36:36 +0000
ROA not before:           Thu 06 Mar 2025 18:31:36 +0000
ROA not after:            Thu 05 Mar 2026 18:36:36 +0000
asID:                     262617
IP address blocks:        45.65.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 02:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:e9:0f:16:fa:f5:59:31:e3:9c:30:ea:6f:67:3f:b5:9a:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Mar  6 18:31:36 2025 GMT
            Not After : Mar  5 18:36:36 2026 GMT
        Subject: CN=B6019ACB1E22CDFE2ABC4222A9D99D019C0775BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:92:27:79:96:fb:3d:07:dc:41:16:6b:0e:
                    93:a1:f8:c1:63:ed:53:d5:50:71:8e:58:d2:0c:bd:
                    68:9b:2f:2c:b6:ed:80:86:39:ea:c2:d8:29:e7:e4:
                    60:8d:c5:37:e4:14:4f:f6:5c:b7:f7:5b:b2:d7:2b:
                    f8:0c:73:27:8d:11:e8:ea:a6:b5:b3:5b:e6:55:7b:
                    9d:be:88:a2:8d:bb:9b:1d:9d:18:ab:14:79:0a:b4:
                    f1:c3:c3:a0:33:34:d4:f8:38:c0:84:a2:97:98:4f:
                    df:a7:13:80:c7:3c:0b:e0:6c:77:9b:84:51:dd:65:
                    f2:30:2c:51:aa:1a:67:2e:bc:e1:3c:96:40:29:79:
                    a4:4c:7e:80:a5:f2:40:a2:fb:bc:58:e3:ea:51:dc:
                    66:3d:31:12:2f:3b:ce:aa:ac:63:ec:28:60:87:c1:
                    b9:2b:da:6d:7e:bc:cb:0a:c6:9c:69:2c:10:8a:b9:
                    a1:41:7d:db:88:3b:d6:19:8d:51:da:5b:80:9b:e6:
                    91:63:b6:b7:4e:0b:e0:0f:89:99:c1:14:9e:67:e1:
                    70:e9:06:8d:e6:27:64:cf:2e:07:21:e6:be:f2:f8:
                    f2:f1:7f:5c:8c:c7:df:b3:15:a2:7d:f5:2f:c7:ad:
                    7a:89:28:c7:8d:c9:9e:60:31:24:e2:92:44:83:79:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:9A:CB:1E:22:CD:FE:2A:BC:42:22:A9:D9:9D:01:9C:07:75:BD
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3232392e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:df:51:f3:5d:07:a9:dd:d2:e1:5e:4d:d7:37:c5:ff:5d:49:
         78:83:e6:90:b9:f5:fa:cf:36:58:b4:72:0d:15:1e:13:98:a9:
         9d:d8:c1:a7:23:a8:3d:eb:bb:65:d9:7f:e1:6c:2d:37:5d:8f:
         26:eb:af:f8:e5:48:9d:98:e7:c9:20:7c:bd:27:e8:b8:ce:48:
         a2:73:c2:4b:8f:4e:8e:5a:12:46:d3:e2:14:35:cc:c9:61:f9:
         76:94:2d:3a:52:8e:53:91:59:85:11:a7:ad:0b:f4:12:d6:36:
         79:81:9d:34:0a:01:c6:b2:de:66:a3:d0:85:31:3e:d6:89:b7:
         8b:42:eb:99:56:21:fd:f0:24:79:c3:6b:c3:6f:08:9c:ab:11:
         52:a1:30:2d:5c:24:be:1c:52:3c:e0:4e:b7:39:d3:41:47:ea:
         bb:87:a1:eb:72:ab:67:96:7a:6c:ad:19:f7:5b:3a:ba:85:17:
         7d:9c:ce:e0:3d:38:9f:bc:c6:bf:26:99:1b:6a:95:3b:96:17:
         d5:34:23:22:b7:cc:a7:38:a0:cf:7d:a3:73:fa:15:fb:36:30:
         d1:e3:ab:93:f3:d6:50:ba:3f:a8:40:6c:78:c0:c9:ae:b8:81:
         87:d2:e2:f2:3e:69:7d:76:59:55:99:ac:3d:7e:28:98:26:b4:
         e0:fd:9e:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf/PpDxb69Vkx45ww6m9nP7WayR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQUVCRjc0MjczNzIzQjc2Njg0NTgwNTYyQjE3QTc3
Q0RFRjA0MjAeFw0yNTAzMDYxODMxMzZaFw0yNjAzMDUxODM2MzZaMDMxMTAvBgNV
BAMTKEI2MDE5QUNCMUUyMkNERkUyQUJDNDIyMkE5RDk5RDAxOUMwNzc1QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NpIneZb7PQfcQRZrDpOh+MFj
7VPVUHGOWNIMvWibLyy27YCGOerC2Cnn5GCNxTfkFE/2XLf3W7LXK/gMcyeNEejq
prWzW+ZVe52+iKKNu5sdnRirFHkKtPHDw6AzNNT4OMCEopeYT9+nE4DHPAvgbHeb
hFHdZfIwLFGqGmcuvOE8lkApeaRMfoCl8kCi+7xY4+pR3GY9MRIvO86qrGPsKGCH
wbkr2m1+vMsKxpxpLBCKuaFBfduIO9YZjVHaW4Cb5pFjtrdOC+APiZnBFJ5n4XDp
Bo3mJ2TPLgch5r7y+PLxf1yMx9+zFaJ99S/HrXqJKMeNyZ5gMSTikkSDeZ0xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtgGayx4izf4qvEIiqdmdAZwHdb0wHwYDVR0j
BBgwFoAUOSrr90Jzcjt2aEWAVisXp3ze8EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMS8zOTJBRUJGNzQyNzM3MjNCNzY2ODQ1ODA1NjJCMTdBNzdDREVGMDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFFQkY3NDI3MzcyM0I3
NjY4NDU4MDU2MkIxN0E3N0NERUYwNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzEv
MzQzNTJlMzYzNTJlMzIzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUHlMA0GCSqGSIb3DQEBCwUAA4IBAQBS31HzXQep
3dLhXk3XN8X/XUl4g+aQufX6zzZYtHINFR4TmKmd2MGnI6g967tl2X/hbC03XY8m
66/45UidmOfJIHy9J+i4zkiic8JLj06OWhJG0+IUNczJYfl2lC06Uo5TkVmFEaet
C/QS1jZ5gZ00CgHGst5mo9CFMT7WibeLQuuZViH98CR5w2vDbwicqxFSoTAtXCS+
HFI84E63OdNBR+q7h6HrcqtnlnpsrRn3Wzq6hRd9nM7gPTifvMa/JpkbapU7lhfV
NCMit8ynOKDPfaNz+hX7NjDR46uT89ZQuj+oQGx4wMmuuIGH0uLyPml9dllVmaw9
fiiYJrTg/Z74
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:28:04 2025 by rpki-client