Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa
File:                     34352e37312e3137302e302f32332d3233203d3e20323637363232.roa (raw, json)
Hash identifier:          t/d9tKarjc/ipWZtfMFhVKvl2LPoBs8/uU5COtzMBNM=
Subject key identifier:   C9:E0:F5:CD:D3:8A:46:09:F0:A4:97:90:68:3B:13:85:13:6D:F1:B3
Certificate issuer:       /CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
Certificate serial:       4830041F2AE36104B43291FB25D16CD8138BAEC2
Authority key identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa
Signing time:             Thu 06 Mar 2025 14:52:48 +0000
ROA not before:           Thu 06 Mar 2025 14:47:48 +0000
ROA not after:            Thu 05 Mar 2026 14:52:48 +0000
asID:                     267622
IP address blocks:        45.71.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl
                          rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:30:04:1f:2a:e3:61:04:b4:32:91:fb:25:d1:6c:d8:13:8b:ae:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Validity
            Not Before: Mar  6 14:47:48 2025 GMT
            Not After : Mar  5 14:52:48 2026 GMT
        Subject: CN=C9E0F5CDD38A4609F0A49790683B1385136DF1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:54:36:bb:91:37:8a:2d:1d:e5:db:c7:6a:
                    19:9c:51:15:4a:bb:0a:4e:bb:ff:75:d7:67:95:ea:
                    d7:9e:2b:3d:97:bc:41:58:0a:aa:a3:79:91:cb:01:
                    95:4a:63:ca:a3:6f:92:b2:2d:26:a8:98:1e:20:7b:
                    77:c5:28:69:9f:bf:38:33:3b:8d:07:75:7b:01:ea:
                    83:ea:f1:b1:b8:74:03:6c:00:b5:f6:2c:ac:3c:77:
                    87:b3:f6:d6:04:ba:e7:91:19:4d:30:9f:c6:03:42:
                    7e:46:6f:5c:f0:07:72:87:7e:69:63:ae:65:51:7c:
                    40:41:cc:3c:db:c4:67:d4:fe:80:84:9d:d6:67:b3:
                    44:68:eb:91:4f:f4:ff:16:ee:bd:08:c9:1e:c3:27:
                    09:4e:d4:64:9d:a5:96:c5:1d:41:9e:f9:48:b0:b8:
                    5a:8d:43:45:2c:d1:fa:8d:b0:e1:ad:e8:b8:47:cf:
                    bf:f8:f8:6c:0c:d0:3f:22:d3:b7:b4:bd:f8:de:0e:
                    f1:aa:80:2c:d6:db:27:6b:a9:ab:48:4c:db:73:a4:
                    85:3e:eb:b4:b2:6f:32:06:86:c8:41:86:fb:61:2c:
                    11:fa:4a:f4:bc:01:eb:94:5a:d1:b2:96:f2:5d:d2:
                    95:1c:c1:db:0f:bf:06:39:b5:96:4b:00:3d:b9:c5:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:F5:CD:D3:8A:46:09:F0:A4:97:90:68:3B:13:85:13:6D:F1:B3
            X509v3 Authority Key Identifier:
                keyid:D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:c9:cf:00:38:30:4d:89:9e:1e:8d:0d:c8:fe:51:8a:b9:4f:
         7c:d0:0a:3f:bd:e0:93:07:42:b4:37:a9:3a:15:14:77:fe:30:
         ab:9f:9f:40:01:09:b9:18:e2:80:3d:b3:ea:84:3b:f4:1d:78:
         01:e2:a6:4b:9d:6e:88:b7:93:e5:43:5e:a8:2d:2d:19:79:4f:
         e6:f4:e9:74:6a:8f:0a:0e:c5:c1:f3:df:83:36:9b:17:ca:2c:
         8c:d5:3d:d2:98:f8:8f:7f:58:05:2e:be:cc:33:38:d8:08:50:
         ac:1e:9a:75:a3:56:f6:0b:cc:02:a0:18:88:ec:51:80:14:f1:
         13:a0:9f:1b:a7:78:31:d5:3a:39:91:47:bf:ee:37:a3:b6:a4:
         2a:6c:62:43:ae:23:87:63:5a:d8:2b:a4:aa:90:b9:d1:a6:8c:
         22:d7:3d:c9:be:fe:1d:8c:0a:40:04:09:43:fd:d2:0d:8c:57:
         38:3f:39:8d:28:a3:96:f1:ee:7b:19:a2:e1:45:b0:8d:7a:c0:
         1f:00:c3:86:4a:bd:3b:e2:de:24:18:bd:a4:93:c7:65:a3:28:
         7d:c6:62:28:fc:f1:78:4e:fc:2d:a9:e4:5a:07:e1:25:0e:e9:
         45:0f:67:53:2b:46:87:d7:7b:e9:e7:2c:89:0b:24:03:47:b7:
         09:0e:d0:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSDAEHyrjYQS0MpH7JdFs2BOLrsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RUMyNDU5M0QyMDI2RDJENUI3RDdFRjc2QzBFNTIz
MzEyMzRERjAeFw0yNTAzMDYxNDQ3NDhaFw0yNjAzMDUxNDUyNDhaMDMxMTAvBgNV
BAMTKEM5RTBGNUNERDM4QTQ2MDlGMEE0OTc5MDY4M0IxMzg1MTM2REYxQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnlQ2u5E3ii0d5dvHahmcURVK
uwpOu/9112eV6teeKz2XvEFYCqqjeZHLAZVKY8qjb5KyLSaomB4ge3fFKGmfvzgz
O40HdXsB6oPq8bG4dANsALX2LKw8d4ez9tYEuueRGU0wn8YDQn5Gb1zwB3KHfmlj
rmVRfEBBzDzbxGfU/oCEndZns0Ro65FP9P8W7r0IyR7DJwlO1GSdpZbFHUGe+Uiw
uFqNQ0Us0fqNsOGt6LhHz7/4+GwM0D8i07e0vfjeDvGqgCzW2ydrqatITNtzpIU+
67SybzIGhshBhvthLBH6SvS8AeuUWtGylvJd0pUcwdsPvwY5tZZLAD25xfjdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyeD1zdOKRgnwpJeQaDsThRNt8bMwHwYDVR0j
BBgwFoAU0F7CRZPSAm0tW31+92wOUjMSNN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW1pUFNZRzRxcXdhRW9UV0J1NmFzcVNMRkFDcTFuVFF3MXJLNEJRemtD
R2YvMS9EMDVFQzI0NTkzRDIwMjZEMkQ1QjdEN0VGNzZDMEU1MjMzMTIzNERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUVDMjQ1OTNEMjAyNkQy
RDVCN0Q3RUY3NkMwRTUyMzMxMjM0REYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzltaVBTWUc0cXF3YUVvVFdCdTZhc3FTTEZBQ3ExblRRdzFySzRCUXprQ0dmLzEv
MzQzNTJlMzczMTJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUeqMA0GCSqGSIb3DQEBCwUAA4IBAQCqyc8AODBN
iZ4ejQ3I/lGKuU980Ao/veCTB0K0N6k6FRR3/jCrn59AAQm5GOKAPbPqhDv0HXgB
4qZLnW6It5PlQ16oLS0ZeU/m9Ol0ao8KDsXB89+DNpsXyiyM1T3SmPiPf1gFLr7M
MzjYCFCsHpp1o1b2C8wCoBiI7FGAFPEToJ8bp3gx1To5kUe/7jejtqQqbGJDriOH
Y1rYK6SqkLnRpowi1z3Jvv4djApABAlD/dINjFc4PzmNKKOW8e57GaLhRbCNesAf
AMOGSr074t4kGL2kk8dloyh9xmIo/PF4TvwtqeRaB+ElDulFD2dTK0aH13vp5yyJ
CyQDR7cJDtAl
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:34:31 2025 by rpki-client