Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
File:                     34352e3139312e37382e302f32332d3233203d3e20323639373030.roa (raw, json)
Hash identifier:          P0Sc+pSdsY38RTtrk5ksUj8K3zmljBle/qKX5h7f7WM=
Subject key identifier:   81:6A:C2:BC:5E:59:C9:F9:84:16:50:16:38:08:0D:54:3C:5A:4A:04
Certificate issuer:       /CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
Certificate serial:       2CAD2A210B99AD65D5A56E9F7789BE25B2F5F43C
Authority key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     269700
IP address blocks:        45.191.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl
                          rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ad:2a:21:0b:99:ad:65:d5:a5:6e:9f:77:89:be:25:b2:f5:f4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:82:59:fd:48:ee:74:b2:38:7a:1c:9e:69:
                    da:b6:1a:0e:1e:db:95:0a:5b:60:01:fd:37:0f:c1:
                    3d:38:64:2f:13:07:6e:6d:00:08:cb:36:0a:2a:fa:
                    d2:ad:c9:e6:38:4e:6d:e7:cb:a0:71:3c:50:47:af:
                    35:bb:fe:90:7d:c6:5d:8c:fa:50:dd:f4:11:c7:50:
                    14:0a:78:60:7f:f9:0e:8c:58:b3:aa:fb:f7:85:da:
                    a7:74:20:0b:7a:85:b2:fb:e0:d5:48:6e:00:0a:64:
                    92:08:1b:bb:5b:74:94:78:c9:1d:49:a3:3b:21:7d:
                    4a:cb:82:a4:e0:29:20:a7:28:a9:43:6d:7f:28:c6:
                    bf:f5:85:16:06:49:02:8d:4c:15:68:2f:66:e8:ec:
                    89:03:80:fb:1e:0c:85:6f:9e:28:74:3c:ae:30:f7:
                    a1:a0:22:06:46:16:a0:00:8e:c2:74:78:e8:6c:06:
                    25:d2:b2:68:b4:28:8f:ff:f0:58:e2:cc:32:0e:7f:
                    c7:57:aa:c9:41:00:24:78:11:15:6b:8c:b9:63:9a:
                    3c:7b:91:0d:27:38:85:de:b0:7a:67:0e:2a:b1:35:
                    87:5d:85:11:4c:74:e6:42:bb:2a:c7:83:c0:ca:a1:
                    af:b7:aa:16:7a:61:74:d1:2c:17:02:50:52:ea:f4:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:C2:BC:5E:59:C9:F9:84:16:50:16:38:08:0D:54:3C:5A:4A:04
            X509v3 Authority Key Identifier:
                keyid:83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/34352e3139312e37382e302f32332d3233203d3e20323639373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:eb:f0:cb:59:0e:ed:22:b4:63:1c:5f:47:1e:52:a3:00:
         0e:47:2f:c2:b6:c5:e7:50:08:e8:0a:6c:04:cf:0b:ee:97:b5:
         fb:c1:0a:ed:67:89:7d:e4:7b:80:0f:bf:ef:51:37:3e:f5:aa:
         84:5f:16:0e:6c:0f:23:47:e0:97:f0:a3:3b:0a:0a:10:0a:46:
         51:1b:00:ee:13:e5:9c:f2:3d:8f:49:a8:de:68:01:9f:93:7b:
         a5:93:c9:d4:d8:64:58:f2:99:8c:26:a0:d3:9f:47:d9:d4:24:
         48:7a:38:ca:5c:d8:bb:7b:69:7f:b7:d6:6c:61:f3:83:fe:d3:
         7f:06:e6:7d:25:2e:21:3c:c1:8c:29:f6:e0:8c:3c:eb:4f:38:
         47:2a:13:b5:9d:73:58:e4:38:9f:86:0b:29:fb:ee:a4:39:81:
         19:59:01:89:9e:ce:4e:8f:88:62:2a:1a:ae:cc:46:f4:d5:1b:
         db:89:0a:f3:fb:a7:64:f0:df:26:ff:27:46:90:75:42:c5:4e:
         fd:37:26:16:d1:1f:b9:07:f6:88:a1:5d:3a:12:22:51:f3:29:
         16:66:1d:10:49:02:fb:81:19:64:42:6f:83:d4:fc:01:98:62:
         1e:8f:d9:ec:ac:a3:2f:38:28:f0:5f:5f:69:78:7d:73:cc:d3:
         d0:be:b9:7f
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIULK0qIQuZrWXVpW6fd4m+JbL19DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM3M0MxMzQwODY4MkUzQkE0ODY1MkE5QkU1OTBDNUU0
RTRBMENGQTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVBQTgyNTlGRDQ4RUU3NEIy
Mzg3QTFDOUU2OURBQjYxQTBFMUVEQjk1MEE1QjYwMDFGRDM3MEZDMTNEMzg2NDJG
MTMwNzZFNkQwMDA4Q0IzNjBBMkFGQUQyQURDOUU2Mzg0RTZERTdDQkEwNzEzQzUw
NDdBRjM1QkJGRTkwN0RDNjVEOENGQTUwRERGNDExQzc1MDE0MEE3ODYwN0ZGOTBF
OEM1OEIzQUFGQkY3ODVEQUE3NzQyMDBCN0E4NUIyRkJFMEQ1NDg2RTAwMEE2NDky
MDgxQkJCNUI3NDk0NzhDOTFENDlBMzNCMjE3RDRBQ0I4MkE0RTAyOTIwQTcyOEE5
NDM2RDdGMjhDNkJGRjU4NTE2MDY0OTAyOEQ0QzE1NjgyRjY2RThFQzg5MDM4MEZC
MUUwQzg1NkY5RTI4NzQzQ0FFMzBGN0ExQTAyMjA2NDYxNkEwMDA4RUMyNzQ3OEU4
NkMwNjI1RDJCMjY4QjQyODhGRkZGMDU4RTJDQzMyMEU3RkM3NTdBQUM5NDEwMDI0
NzgxMTE1NkI4Q0I5NjM5QTNDN0I5MTBEMjczODg1REVCMDdBNjcwRTJBQjEzNTg3
NUQ4NTExNEM3NEU2NDJCQjJBQzc4M0MwQ0FBMUFGQjdBQTE2N0E2MTc0RDEyQzE3
MDI1MDUyRUFGNDYxMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxaqCWf1I7nSyOHocnmnathoOHtuVCltgAf03D8E9OGQvEwdubQAI
yzYKKvrSrcnmOE5t58ugcTxQR681u/6QfcZdjPpQ3fQRx1AUCnhgf/kOjFizqvv3
hdqndCALeoWy++DVSG4ACmSSCBu7W3SUeMkdSaM7IX1Ky4Kk4CkgpyipQ21/KMa/
9YUWBkkCjUwVaC9m6OyJA4D7HgyFb54odDyuMPehoCIGRhagAI7CdHjobAYl0rJo
tCiP//BY4swyDn/HV6rJQQAkeBEVa4y5Y5o8e5ENJziF3rB6Zw4qsTWHXYURTHTm
Qrsqx4PAyqGvt6oWemF00SwXAlBS6vRhGQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIFqwrxeWcn5hBZQFjgIDVQ8WkoEMB8GA1UdIwQYMBaAFINzwTQIaC47pIZSqb5Z
DF5OSgz6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FyY0JyUXB6RnVUZkVr
SFZGRnFoTWt2VVl6QTNSaFNWVG10MnN2TUQyS3F5LzEvODM3M0MxMzQwODY4MkUz
QkE0ODY1MkE5QkU1OTBDNUU0RTRBMENGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84MzczQzEzNDA4NjgyRTNCQTQ4NjUyQTlCRTU5MEM1RTRFNEEw
Q0ZBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BcmNCclFwekZ1VGZFa0hWRkZx
aE1rdlVZekEzUmhTVlRtdDJzdk1EMktxeS8xLzM0MzUyZTMxMzkzMTJlMzczODJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM3MzAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2/
TjANBgkqhkiG9w0BAQsFAAOCAQEALT7r8MtZDu0itGMcX0ceUqMADkcvwrbF51AI
6ApsBM8L7pe1+8EK7WeJfeR7gA+/71E3PvWqhF8WDmwPI0fgl/CjOwoKEApGURsA
7hPlnPI9j0mo3mgBn5N7pZPJ1NhkWPKZjCag059H2dQkSHo4ylzYu3tpf7fWbGHz
g/7TfwbmfSUuITzBjCn24Iw86084RyoTtZ1zWOQ4n4YLKfvupDmBGVkBiZ7OTo+I
YioarsxG9NUb24kK8/unZPDfJv8nRpB1QsVO/TcmFtEfuQf2iKFdOhIiUfMpFmYd
EEkC+4EZZEJvg9T8AZhiHo/Z7KyjLzgo8F9faXh9c8zT0L65fw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:33 2025 by rpki-client