Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa
File:                     34352e3232372e302e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          ayxQkNlfNfZ6cBV3hpffYPF8Iys3nEGOS+kHQWxw3jk=
Subject key identifier:   BA:CF:1B:52:2D:0E:C9:AD:24:BF:05:34:AA:30:13:08:D7:42:93:1C
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       37BE57DA4156EC23A21DD6C6858EDF834FBA4A54
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     0
IP address blocks:        45.227.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:57:da:41:56:ec:23:a2:1d:d6:c6:85:8e:df:83:4f:ba:4a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:a5:27:c9:2b:f2:aa:19:09:82:93:34:0a:
                    9b:2c:6e:41:e2:a5:e2:77:14:f3:f5:67:bf:9d:c5:
                    e4:d5:eb:e4:b5:37:b5:83:9c:e2:e4:ad:25:74:79:
                    44:21:c7:36:a2:cc:30:6d:be:3c:6e:ad:90:e3:85:
                    d8:0b:8f:aa:92:b3:53:4c:06:27:dd:65:07:ca:ff:
                    39:6e:62:30:de:18:50:7b:39:af:02:55:98:fc:dd:
                    c1:53:4a:aa:4d:05:49:ea:3d:cd:77:27:af:51:bb:
                    4c:c8:eb:8e:1e:fc:99:a8:12:bb:10:ed:80:41:5a:
                    3a:f2:de:23:ed:ec:87:b7:b8:20:78:a0:11:8b:f4:
                    5a:90:f2:44:43:5c:36:81:8d:f2:27:43:80:8b:f3:
                    a5:a9:2c:7d:ef:44:48:a7:34:a8:5e:1c:dc:c9:21:
                    a4:90:df:5f:d8:b1:38:09:46:4c:0f:3f:e4:c0:fb:
                    8a:d8:ba:90:2c:83:a4:84:92:50:1c:ce:9c:61:ea:
                    c3:29:99:5e:73:8f:5f:8d:82:67:3f:d9:11:65:de:
                    b1:6b:21:ea:61:b3:31:28:9d:86:0a:76:5a:1b:3e:
                    c2:a9:50:85:0d:48:02:f2:82:a1:73:56:6f:fc:19:
                    10:1f:06:59:4c:a9:ef:da:77:59:44:a4:5a:c8:4e:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CF:1B:52:2D:0E:C9:AD:24:BF:05:34:AA:30:13:08:D7:42:93:1C
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/34352e3232372e302e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:94:4d:01:d3:98:62:49:b6:3d:d4:73:ad:a8:7a:26:e2:28:
         02:47:89:8c:05:5d:f3:6f:30:aa:a8:87:e4:c6:0d:28:b1:0a:
         aa:3c:81:14:a5:75:37:49:0d:49:87:9d:d1:a5:81:3d:e6:ff:
         6f:36:b9:b2:62:e2:fb:bd:9c:ba:40:83:6c:ac:1f:57:b6:a3:
         92:18:62:06:b2:f6:9e:fe:e0:fe:4d:f5:79:1d:5a:74:eb:cb:
         a9:a0:df:4c:3d:60:a9:3a:cb:6d:06:a2:00:88:ab:e7:31:7d:
         4f:34:07:1c:d1:76:dc:ae:3a:fa:e8:0d:79:4d:24:ea:3e:7e:
         96:e0:9a:fb:b1:de:43:4b:0e:61:df:31:80:1e:ae:b0:c8:57:
         c4:d2:07:27:8d:cc:32:29:d2:e7:cc:e7:99:d6:5c:24:fd:7d:
         8a:bc:26:2b:70:8e:19:b3:f5:2b:e5:e6:4b:14:17:e4:45:d2:
         80:ad:0e:6b:b8:98:76:4d:cd:1e:d6:bb:22:e7:1e:71:59:89:
         d3:5e:66:6f:74:1b:d7:d6:53:f3:5a:34:a8:cb:e6:18:cf:1d:
         1c:e2:ea:a0:32:d9:df:39:70:57:11:03:30:4b:36:96:61:16:
         ac:f6:2e:c3:d9:8d:46:b1:24:4d:f4:0b:16:c0:30:54:f5:2e:
         70:a6:f8:ae
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUN75X2kFW7COiHdbGhY7fg0+6SlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTAzMTcxNzM5MDNaFw0yNjAzMTYxNzQ0MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTcwQ0E1MjdDOTJCRjJBQTE5
MDk4MjkzMzQwQTlCMkM2RTQxRTJBNUUyNzcxNEYzRjU2N0JGOURDNUU0RDVFQkU0
QjUzN0I1ODM5Q0UyRTRBRDI1NzQ3OTQ0MjFDNzM2QTJDQzMwNkRCRTNDNkVBRDkw
RTM4NUQ4MEI4RkFBOTJCMzUzNEMwNjI3REQ2NTA3Q0FGRjM5NkU2MjMwREUxODUw
N0IzOUFGMDI1NTk4RkNEREMxNTM0QUFBNEQwNTQ5RUEzRENENzcyN0FGNTFCQjRD
QzhFQjhFMUVGQzk5QTgxMkJCMTBFRDgwNDE1QTNBRjJERTIzRURFQzg3QjdCODIw
NzhBMDExOEJGNDVBOTBGMjQ0NDM1QzM2ODE4REYyMjc0MzgwOEJGM0E1QTkyQzdE
RUY0NDQ4QTczNEE4NUUxQ0RDQzkyMUE0OTBERjVGRDhCMTM4MDk0NjRDMEYzRkU0
QzBGQjhBRDhCQTkwMkM4M0E0ODQ5MjUwMUNDRTlDNjFFQUMzMjk5OTVFNzM4RjVG
OEQ4MjY3M0ZEOTExNjVERUIxNkIyMUVBNjFCMzMxMjg5RDg2MEE3NjVBMUIzRUMy
QTk1MDg1MEQ0ODAyRjI4MkExNzM1NjZGRkMxOTEwMUYwNjU5NENBOUVGREE3NzU5
NDRBNDVBQzg0RTEzNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlwylJ8kr8qoZCYKTNAqbLG5B4qXidxTz9We/ncXk1evktTe1g5zi
5K0ldHlEIcc2oswwbb48bq2Q44XYC4+qkrNTTAYn3WUHyv85bmIw3hhQezmvAlWY
/N3BU0qqTQVJ6j3NdyevUbtMyOuOHvyZqBK7EO2AQVo68t4j7eyHt7ggeKARi/Ra
kPJEQ1w2gY3yJ0OAi/OlqSx970RIpzSoXhzcySGkkN9f2LE4CUZMDz/kwPuK2LqQ
LIOkhJJQHM6cYerDKZlec49fjYJnP9kRZd6xayHqYbMxKJ2GCnZaGz7CqVCFDUgC
8oKhc1Zv/BkQHwZZTKnv2ndZRKRayE4TQwIDAQABo4ICQzCCAj8wHQYDVR0OBBYE
FLrPG1ItDsmtJL8FNKowEwjXQpMcMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzM0MzUyZTMyMzIzNzJlMzAyZTMw
MmYzMjMyMmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3jADANBgkqhkiG9w0B
AQsFAAOCAQEABZRNAdOYYkm2PdRzrah6JuIoAkeJjAVd828wqqiH5MYNKLEKqjyB
FKV1N0kNSYed0aWBPeb/bza5smLi+72cukCDbKwfV7ajkhhiBrL2nv7g/k31eR1a
dOvLqaDfTD1gqTrLbQaiAIir5zF9TzQHHNF23K46+ugNeU0k6j5+luCa+7HeQ0sO
Yd8xgB6usMhXxNIHJ43MMinS58znmdZcJP19irwmK3COGbP1K+XmSxQX5EXSgK0O
a7iYdk3NHta7IucecVmJ015mb3Qb19ZT81o0qMvmGM8dHOLqoDLZ3zlwVxEDMEs2
lmEWrPYuw9mNRrEkTfQLFsAwVPUucKb4rg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:39:37 2025 by rpki-client