Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
File:                     34352e3137302e37332e302f32342d3234203d3e20323638313533.roa (raw, json)
Hash identifier:          vmSZoHGCdEsk6qWXyx8nN0rRtWUQ+iTIB9WbUTqx/QI=
Subject key identifier:   AD:9F:C8:92:3F:2E:CC:6E:2A:9A:D6:85:3E:F5:A7:BC:9A:80:97:B0
Certificate issuer:       /CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
Certificate serial:       132B86FDBC3D4CE8A9A0ABDFCFCC2FCFB12113EB
Authority key identifier: 6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa
Signing time:             Thu 06 Mar 2025 01:48:58 +0000
ROA not before:           Thu 06 Mar 2025 01:43:58 +0000
ROA not after:            Thu 05 Mar 2026 01:48:58 +0000
asID:                     268153
IP address blocks:        45.170.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2b:86:fd:bc:3d:4c:e8:a9:a0:ab:df:cf:cc:2f:cf:b1:21:13:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438
        Validity
            Not Before: Mar  6 01:43:58 2025 GMT
            Not After : Mar  5 01:48:58 2026 GMT
        Subject: CN=AD9FC8923F2ECC6E2A9AD6853EF5A7BC9A8097B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:d7:88:66:23:3c:b7:1a:0e:93:30:ff:bc:
                    2f:ea:5b:79:f5:a2:df:64:93:32:15:93:50:be:c2:
                    a2:03:62:9e:6d:1e:a4:2d:6b:74:b7:dd:6a:10:7e:
                    17:4e:b8:5d:83:f4:6d:e0:26:a3:c3:e7:64:5d:3e:
                    39:06:b4:c5:e5:4c:9c:7b:e0:90:0c:4e:1a:03:5d:
                    ba:fc:1b:25:90:70:f7:2e:29:ff:ad:0a:e9:88:14:
                    20:27:42:60:e1:d3:f0:cc:70:d3:e0:0c:ea:74:f1:
                    e1:71:06:0e:d6:1e:ed:77:09:ef:12:a8:ae:de:29:
                    b2:4e:0d:ba:c2:65:1e:89:f1:7c:1b:af:2c:35:34:
                    35:74:dc:ee:b9:1c:0d:c2:7b:57:c9:64:71:98:32:
                    be:5c:48:48:13:5c:26:81:6d:c0:68:ab:99:01:0d:
                    ce:1a:33:f5:41:75:bc:3d:f4:78:99:0e:39:22:e1:
                    8d:21:a2:15:e7:e8:b1:fb:7c:04:3c:f7:3e:14:4a:
                    6d:e6:e9:bb:37:98:f1:38:6b:6b:0d:c8:46:c6:39:
                    00:c8:e1:a3:cc:cd:22:71:84:6f:43:b2:57:9b:68:
                    21:59:4d:01:84:9b:70:9e:4b:18:76:af:8a:46:77:
                    d1:ad:4a:13:a2:df:d4:db:dd:77:21:9e:ca:27:6b:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:C8:92:3F:2E:CC:6E:2A:9A:D6:85:3E:F5:A7:BC:9A:80:97:B0
            X509v3 Authority Key Identifier:
                keyid:6B:DD:E9:7E:C2:F2:BE:52:8B:DA:85:FA:60:EA:EA:59:78:0E:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BDDE97EC2F2BE528BDA85FA60EAEA59780EA438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/1/34352e3137302e37332e302f32342d3234203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:df:7e:88:ff:df:65:25:ec:ec:15:f5:64:ac:b5:b1:4c:b4:
         15:40:76:e4:d7:47:b2:a9:45:bf:d2:22:14:95:05:25:c2:28:
         77:f3:a7:5f:5c:d8:d2:5f:91:c6:28:6c:b2:f1:de:02:5f:1a:
         08:eb:3c:fd:42:12:b1:91:ed:f5:b7:66:bf:63:2a:4c:f3:50:
         03:3f:3b:7a:6c:8e:1f:60:ec:9b:b8:13:ad:cd:34:17:9f:d9:
         12:bf:0d:e1:ad:63:a7:14:8f:81:91:5b:b4:c0:a1:47:2a:eb:
         ad:1d:2c:b8:3d:75:5f:38:76:f3:d0:ea:4d:ee:77:6c:d3:f5:
         7d:70:92:38:90:ea:0d:3d:c0:93:f5:45:8c:34:57:44:57:e8:
         5c:ea:71:22:2b:d0:94:7e:8e:58:3f:a8:91:9d:60:65:7e:8a:
         56:c6:16:bf:57:a6:0c:2b:45:dd:1a:5a:f6:97:e8:20:9d:a9:
         13:27:50:6d:12:7a:f2:ce:1a:de:28:d9:11:8a:24:52:4d:60:
         de:ff:a1:bc:f4:74:3f:fe:ad:88:f6:2e:d4:c7:35:e3:a2:b7:
         8e:40:ae:6a:cc:ef:39:f8:fd:ad:03:30:35:4f:90:14:a2:de:
         6b:1c:37:cf:d7:fc:2b:af:aa:c1:c8:e8:48:1f:d9:cc:4b:ec:
         bb:cd:02:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEyuG/bw9TOipoKvfz8wvz7EhE+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJEREU5N0VDMkYyQkU1MjhCREE4NUZBNjBFQUVBNTk3
ODBFQTQzODAeFw0yNTAzMDYwMTQzNThaFw0yNjAzMDUwMTQ4NThaMDMxMTAvBgNV
BAMTKEFEOUZDODkyM0YyRUNDNkUyQTlBRDY4NTNFRjVBN0JDOUE4MDk3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FdeIZiM8txoOkzD/vC/qW3n1
ot9kkzIVk1C+wqIDYp5tHqQta3S33WoQfhdOuF2D9G3gJqPD52RdPjkGtMXlTJx7
4JAMThoDXbr8GyWQcPcuKf+tCumIFCAnQmDh0/DMcNPgDOp08eFxBg7WHu13Ce8S
qK7eKbJODbrCZR6J8Xwbryw1NDV03O65HA3Ce1fJZHGYMr5cSEgTXCaBbcBoq5kB
Dc4aM/VBdbw99HiZDjki4Y0hohXn6LH7fAQ89z4USm3m6bs3mPE4a2sNyEbGOQDI
4aPMzSJxhG9DslebaCFZTQGEm3CeSxh2r4pGd9GtShOi39Tb3Xchnsona4hXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrZ/Ikj8uzG4qmtaFPvWnvJqAl7AwHwYDVR0j
BBgwFoAUa93pfsLyvlKL2oX6YOrqWXgOpDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ2OG92UU1nS2ZTODVCN1Q1czZLb3dZY3FMMzRVZEh2RWgyY0J6azk4
SzEvMS82QkRERTk3RUMyRjJCRTUyOEJEQTg1RkE2MEVBRUE1OTc4MEVBNDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCRERFOTdFQzJGMkJFNTI4
QkRBODVGQTYwRUFFQTU5NzgwRUE0MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENjhvdlFNZ0tmUzg1QjdUNXM2S293WWNxTDM0VWRIdkVoMmNCems5OEsxLzEv
MzQzNTJlMzEzNzMwMmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALapJMA0GCSqGSIb3DQEBCwUAA4IBAQBr336I/99l
JezsFfVkrLWxTLQVQHbk10eyqUW/0iIUlQUlwih386dfXNjSX5HGKGyy8d4CXxoI
6zz9QhKxke31t2a/YypM81ADPzt6bI4fYOybuBOtzTQXn9kSvw3hrWOnFI+BkVu0
wKFHKuutHSy4PXVfOHbz0OpN7nds0/V9cJI4kOoNPcCT9UWMNFdEV+hc6nEiK9CU
fo5YP6iRnWBlfopWxha/V6YMK0XdGlr2l+ggnakTJ1BtEnryzhreKNkRiiRSTWDe
/6G89HQ//q2I9i7UxzXjoreOQK5qzO85+P2tAzA1T5AUot5rHDfP1/wrr6rByOhI
H9nMS+y7zQJv
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:03:53 2025 by rpki-client