Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
File:                     34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          /y/94ilrU2B0FEiWde0MsSMx3bQUcxEBXoBGaW2/+io=
Subject key identifier:   BE:1A:BE:AE:25:86:6E:A5:3A:16:B0:F1:77:63:31:6A:DD:41:16:38
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       745EA20AFB50F965E46C82AF738FD6F983B5A4B6
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     266211
IP address blocks:        45.229.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5e:a2:0a:fb:50:f9:65:e4:6c:82:af:73:8f:d6:f9:83:b5:a4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=3082010A0282010100BE038947EEC8AF6DE37DB9DB02AE83630FF1EBD9AFE57D6A175CCF1BE84F95BA178B1CD824638877D55BF4BFFDF8CE8B9B2665A13207FD7366A45B8EC8137342B56A6342F774715797B8468494471D0C5FF7865640A4D475F46643BD07117B5266D71E799F0FE376DE37A6046A4C780E2B0079CFCB71EDF02F10DF05D804156ADC5DFAE794BD255DFCC0B774C56D8100F1B2508CECD89672B97A7E9EBC7EC7E542C0860D6389EEF1C22D87EA5535F86FFF910A48DA19CA54D935A67976CCACB92448CD0E4B0FE7AC670D0729D828873A3AC322F29CE6DA0FA5A62A256E47816C5BC9265BB31476316B2A53E96C76D81E0824B80DDEDE1ADCA9700383B82BC3930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:89:47:ee:c8:af:6d:e3:7d:b9:db:02:ae:
                    83:63:0f:f1:eb:d9:af:e5:7d:6a:17:5c:cf:1b:e8:
                    4f:95:ba:17:8b:1c:d8:24:63:88:77:d5:5b:f4:bf:
                    fd:f8:ce:8b:9b:26:65:a1:32:07:fd:73:66:a4:5b:
                    8e:c8:13:73:42:b5:6a:63:42:f7:74:71:57:97:b8:
                    46:84:94:47:1d:0c:5f:f7:86:56:40:a4:d4:75:f4:
                    66:43:bd:07:11:7b:52:66:d7:1e:79:9f:0f:e3:76:
                    de:37:a6:04:6a:4c:78:0e:2b:00:79:cf:cb:71:ed:
                    f0:2f:10:df:05:d8:04:15:6a:dc:5d:fa:e7:94:bd:
                    25:5d:fc:c0:b7:74:c5:6d:81:00:f1:b2:50:8c:ec:
                    d8:96:72:b9:7a:7e:9e:bc:7e:c7:e5:42:c0:86:0d:
                    63:89:ee:f1:c2:2d:87:ea:55:35:f8:6f:ff:91:0a:
                    48:da:19:ca:54:d9:35:a6:79:76:cc:ac:b9:24:48:
                    cd:0e:4b:0f:e7:ac:67:0d:07:29:d8:28:87:3a:3a:
                    c3:22:f2:9c:e6:da:0f:a5:a6:2a:25:6e:47:81:6c:
                    5b:c9:26:5b:b3:14:76:31:6b:2a:53:e9:6c:76:d8:
                    1e:08:24:b8:0d:de:de:1a:dc:a9:70:03:83:b8:2b:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:BE:AE:25:86:6E:A5:3A:16:B0:F1:77:63:31:6A:DD:41:16:38
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:93:fe:b1:73:74:47:54:57:1f:2a:2e:88:fa:82:79:ae:
         e1:44:75:31:77:60:3c:cc:24:87:f9:77:b9:f6:de:7b:1e:ea:
         42:b2:0a:fa:81:b9:78:93:68:c1:88:67:a2:b4:02:e5:67:20:
         1c:8c:1f:06:38:f6:a3:9d:42:49:17:98:83:ca:01:de:fb:60:
         50:0c:ee:05:03:92:6c:b9:00:b1:6f:43:80:4f:83:af:6d:76:
         78:c7:b6:a0:5e:f2:3e:54:25:f6:e9:99:53:42:2f:a1:7b:32:
         d5:c4:9e:bf:2b:bd:71:86:4f:df:3b:40:6b:82:94:39:58:ed:
         aa:da:ad:ad:e0:eb:86:9e:a4:7c:e0:05:52:bb:93:77:4d:56:
         85:d3:8e:c1:f1:13:18:34:fd:db:00:fd:a8:b8:e5:6b:27:14:
         3b:37:06:2d:6f:c8:c0:c0:5c:15:d3:e8:2d:b3:89:b3:dc:a0:
         48:32:62:3d:4b:f5:e5:3d:07:fb:39:5c:de:10:66:36:0b:dc:
         50:a0:d5:19:59:27:d5:a6:90:d7:a6:44:6b:67:b4:40:06:43:
         fd:7b:f3:d8:87:3f:75:29:af:c7:bb:9d:5c:9b:5a:1d:0f:bc:
         85:ae:d8:15:a5:ab:a7:d9:9e:fc:79:a8:5c:14:02:57:b7:79:
         b1:b9:fe:7e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdF6iCvtQ+WXkbIKvc4/W+YO1pLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCM0NDNjk2M0YyOTFEMTFGMDE5M0JEMjdGQzRFODNE
MTQ1OTJCOTAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUwMzg5NDdFRUM4QUY2REUz
N0RCOURCMDJBRTgzNjMwRkYxRUJEOUFGRTU3RDZBMTc1Q0NGMUJFODRGOTVCQTE3
OEIxQ0Q4MjQ2Mzg4NzdENTVCRjRCRkZERjhDRThCOUIyNjY1QTEzMjA3RkQ3MzY2
QTQ1QjhFQzgxMzczNDJCNTZBNjM0MkY3NzQ3MTU3OTdCODQ2ODQ5NDQ3MUQwQzVG
Rjc4NjU2NDBBNEQ0NzVGNDY2NDNCRDA3MTE3QjUyNjZENzFFNzk5RjBGRTM3NkRF
MzdBNjA0NkE0Qzc4MEUyQjAwNzlDRkNCNzFFREYwMkYxMERGMDVEODA0MTU2QURD
NURGQUU3OTRCRDI1NURGQ0MwQjc3NEM1NkQ4MTAwRjFCMjUwOENFQ0Q4OTY3MkI5
N0E3RTlFQkM3RUM3RTU0MkMwODYwRDYzODlFRUYxQzIyRDg3RUE1NTM1Rjg2RkZG
OTEwQTQ4REExOUNBNTREOTM1QTY3OTc2Q0NBQ0I5MjQ0OENEMEU0QjBGRTdBQzY3
MEQwNzI5RDgyODg3M0EzQUMzMjJGMjlDRTZEQTBGQTVBNjJBMjU2RTQ3ODE2QzVC
QzkyNjVCQjMxNDc2MzE2QjJBNTNFOTZDNzZEODFFMDgyNEI4MERERURFMUFEQ0E5
NzAwMzgzQjgyQkMzOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvgOJR+7Ir23jfbnbAq6DYw/x69mv5X1qF1zPG+hPlboXixzYJGOI
d9Vb9L/9+M6LmyZloTIH/XNmpFuOyBNzQrVqY0L3dHFXl7hGhJRHHQxf94ZWQKTU
dfRmQ70HEXtSZtceeZ8P43beN6YEakx4DisAec/Lce3wLxDfBdgEFWrcXfrnlL0l
XfzAt3TFbYEA8bJQjOzYlnK5en6evH7H5ULAhg1jie7xwi2H6lU1+G//kQpI2hnK
VNk1pnl2zKy5JEjNDksP56xnDQcp2CiHOjrDIvKc5toPpaYqJW5HgWxbySZbsxR2
MWsqU+lsdtgeCCS4Dd7eGtypcAODuCvDkwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FL4avq4lhm6lOhaw8XdjMWrdQRY4MB8GA1UdIwQYMBaAFPWzzGlj8pHRHwGTvSf8
ToPRRZK5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzEvRjVCM0NDNjk2M0YyOTFE
MTFGMDE5M0JEMjdGQzRFODNEMTQ1OTJCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GNUIzQ0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5
MkI5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8xLzM0MzUyZTMyMzIzOTJlMzEzNjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzIzMTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LeWkMA0GCSqGSIb3DQEBCwUAA4IBAQCQwZP+sXN0R1RXHyouiPqCea7hRHUxd2A8
zCSH+Xe59t57HupCsgr6gbl4k2jBiGeitALlZyAcjB8GOPajnUJJF5iDygHe+2BQ
DO4FA5JsuQCxb0OAT4OvbXZ4x7agXvI+VCX26ZlTQi+hezLVxJ6/K71xhk/fO0Br
gpQ5WO2q2q2t4OuGnqR84AVSu5N3TVaF047B8RMYNP3bAP2ouOVrJxQ7NwYtb8jA
wFwV0+gts4mz3KBIMmI9S/XlPQf7OVzeEGY2C9xQoNUZWSfVppDXpkRrZ7RABkP9
e/PYhz91Ka/Hu51cm1odD7yFrtgVpaun2Z78eahcFAJXt3mxuf5+
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:39 2025 by rpki-client