Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39352e302f32342d3234203d3e20323638313833.roa
File:                     34352e3138362e39352e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          ofd2wR6pH72dv/mAMqhhf7mC9OiE6Aalc21ZieASeHI=
Subject key identifier:   9B:71:5A:0B:F8:3D:93:FC:4E:1F:36:32:FA:6C:62:A7:D8:A8:94:0F
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       377B4FE7AE89C3552B666BE6752952099F7231C3
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39352e302f32342d3234203d3e20323638313833.roa
Signing time:             Fri 23 May 2025 18:48:58 +0000
ROA not before:           Fri 23 May 2025 18:43:58 +0000
ROA not after:            Fri 22 May 2026 18:48:58 +0000
asID:                     268183
IP address blocks:        45.186.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:4f:e7:ae:89:c3:55:2b:66:6b:e6:75:29:52:09:9f:72:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: May 23 18:43:58 2025 GMT
            Not After : May 22 18:48:58 2026 GMT
        Subject: CN=9B715A0BF83D93FC4E1F3632FA6C62A7D8A8940F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:81:40:88:1b:87:93:3d:93:2d:bf:4f:40:
                    e9:97:c5:a9:cc:6d:85:e5:3d:bf:38:38:91:a1:73:
                    d2:0d:57:4a:44:08:e9:a7:31:04:9f:59:fb:8f:85:
                    a4:fa:3a:32:de:ee:c1:0c:c7:f6:5d:0a:86:d2:9e:
                    18:72:47:9c:91:6b:c5:1c:dc:18:0b:58:7b:b4:e4:
                    7c:8e:0e:a6:ea:17:20:48:03:a6:24:77:ac:c4:8a:
                    fc:de:6e:34:27:49:40:3c:2e:b3:b4:8b:04:ca:46:
                    9f:18:c4:88:30:9b:da:b1:40:9c:42:2e:c0:80:19:
                    be:72:d3:98:29:67:5c:1e:7f:3b:bc:9e:99:a9:83:
                    63:0e:25:2d:5d:3c:b3:0c:6c:61:06:be:f6:05:25:
                    ef:c5:ad:15:03:2e:e1:e6:35:56:62:8c:8d:ed:67:
                    94:77:c8:98:63:af:b7:45:cb:8e:ec:eb:ac:71:27:
                    30:2e:de:37:c9:16:1f:57:8e:fb:77:08:7e:28:ec:
                    9b:0f:97:8a:c7:a4:56:c9:15:12:94:91:e7:78:7e:
                    b1:a4:92:9d:01:74:47:d7:14:41:20:b4:e6:89:d3:
                    b3:23:af:d9:2d:4c:80:59:7f:55:b3:78:56:c5:37:
                    8a:6d:6a:ca:03:34:99:88:a5:54:51:d7:dd:d5:30:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:71:5A:0B:F8:3D:93:FC:4E:1F:36:32:FA:6C:62:A7:D8:A8:94:0F
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39352e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:af:f4:e3:9c:eb:25:6c:bf:f1:5f:3d:0d:42:6a:25:d9:
         e8:b8:99:c2:b6:6c:98:dd:32:06:14:7c:b2:72:06:16:f3:01:
         2e:8a:4a:f5:d1:f7:e1:53:3b:9b:27:47:16:9a:68:aa:6f:f1:
         e4:50:a1:7a:65:a4:ac:43:30:f4:32:f9:1a:0f:57:e8:ff:b2:
         00:8d:42:df:bc:55:fa:e5:6f:f2:36:f5:0c:aa:8c:be:60:ed:
         15:8e:5d:1f:d6:0a:f8:84:ad:69:75:48:9b:3a:ad:8d:e7:e3:
         ef:95:c9:f6:3f:7d:24:b8:1e:6d:05:55:e0:4a:49:4e:88:f4:
         0e:aa:93:33:25:50:59:76:c0:d3:e3:d5:97:f4:eb:f6:14:7a:
         3c:09:c5:18:78:e4:5d:3a:90:da:ea:2a:12:aa:78:21:d2:15:
         41:08:a2:74:46:3b:13:74:7d:47:b8:fe:13:04:d1:5d:05:da:
         a8:e1:6a:57:b1:d8:48:8a:a0:fa:29:a3:d2:6d:e8:1b:cc:0c:
         4e:0f:62:2b:04:f5:fe:54:6a:79:30:8a:d7:79:62:2d:b1:ad:
         e8:44:54:2e:14:ba:2a:ee:2b:f2:b5:5f:59:7c:53:bf:1e:7f:
         7b:d3:3a:99:f2:24:9f:bf:ed:ee:77:0b:71:ce:f6:23:37:2f:
         ef:a3:12:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN3tP566Jw1UrZmvmdSlSCZ9yMcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwRkI1QkRGNDY1RUI1MjgzNTM2RjU3RkNDQTM3N0I4
MjBCRUQyQTAeFw0yNTA1MjMxODQzNThaFw0yNjA1MjIxODQ4NThaMDMxMTAvBgNV
BAMTKDlCNzE1QTBCRjgzRDkzRkM0RTFGMzYzMkZBNkM2MkE3RDhBODk0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6oFAiBuHkz2TLb9PQOmXxanM
bYXlPb84OJGhc9INV0pECOmnMQSfWfuPhaT6OjLe7sEMx/ZdCobSnhhyR5yRa8Uc
3BgLWHu05HyODqbqFyBIA6Ykd6zEivzebjQnSUA8LrO0iwTKRp8YxIgwm9qxQJxC
LsCAGb5y05gpZ1wefzu8npmpg2MOJS1dPLMMbGEGvvYFJe/FrRUDLuHmNVZijI3t
Z5R3yJhjr7dFy47s66xxJzAu3jfJFh9Xjvt3CH4o7JsPl4rHpFbJFRKUked4frGk
kp0BdEfXFEEgtOaJ07Mjr9ktTIBZf1WzeFbFN4ptasoDNJmIpVRR193VMCvnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm3FaC/g9k/xOHzYy+mxip9iolA8wHwYDVR0j
BBgwFoAUQw+1vfRl61KDU29X/Mo3e4IL7SowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWRBZDliZlFoWXN0enBHSFNWdkJSQkFSZ3FnQ0IzM1poczVTY3JHdzRL
YWovMC80MzBGQjVCREY0NjVFQjUyODM1MzZGNTdGQ0NBMzc3QjgyMEJFRDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMEZCNUJERjQ2NUVCNTI4
MzUzNkY1N0ZDQ0EzNzdCODIwQkVEMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkQWQ5YmZRaFlzdHpwR0hTVnZCUkJBUmdxZ0NCMzNaaHM1U2NyR3c0S2FqLzAv
MzQzNTJlMzEzODM2MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbpfMA0GCSqGSIb3DQEBCwUAA4IBAQBNVK/045zr
JWy/8V89DUJqJdnouJnCtmyY3TIGFHyycgYW8wEuikr10ffhUzubJ0cWmmiqb/Hk
UKF6ZaSsQzD0MvkaD1fo/7IAjULfvFX65W/yNvUMqoy+YO0Vjl0f1gr4hK1pdUib
Oq2N5+Pvlcn2P30kuB5tBVXgSklOiPQOqpMzJVBZdsDT49WX9Ov2FHo8CcUYeORd
OpDa6ioSqngh0hVBCKJ0RjsTdH1HuP4TBNFdBdqo4WpXsdhIiqD6KaPSbegbzAxO
D2IrBPX+VGp5MIrXeWItsa3oRFQuFLoq7ivytV9ZfFO/Hn970zqZ8iSfv+3udwtx
zvYjNy/voxLz
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:25:23 2025 by rpki-client