Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
File:                     34352e3233312e32302e302f32322d3234203d3e20323637313833.roa (raw, json)
Hash identifier:          qlr8W9ebrgVGimi7rMegjAbc5ArjIJgimJZ8Cp9doCw=
Subject key identifier:   A3:D8:DF:BC:CF:93:51:03:BD:67:52:E8:63:D9:C8:D4:4C:53:93:72
Certificate issuer:       /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial:       656AA9C495E13C23BB265852C9368322C88ADC6C
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa
Signing time:             Wed 05 Mar 2025 19:45:26 +0000
ROA not before:           Wed 05 Mar 2025 19:40:26 +0000
ROA not after:            Wed 04 Mar 2026 19:45:26 +0000
asID:                     267183
IP address blocks:        45.231.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
                          rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6a:a9:c4:95:e1:3c:23:bb:26:58:52:c9:36:83:22:c8:8a:dc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
        Validity
            Not Before: Mar  5 19:40:26 2025 GMT
            Not After : Mar  4 19:45:26 2026 GMT
        Subject: CN=A3D8DFBCCF935103BD6752E863D9C8D44C539372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:c4:76:02:d4:4d:a0:d3:6f:30:fc:b7:81:
                    9f:45:03:93:aa:f9:b1:a0:f5:2b:c3:3d:d4:73:a6:
                    e5:ad:5d:0b:07:d9:97:4c:94:44:6e:a6:82:06:9d:
                    b8:5f:0b:10:67:25:19:0d:d2:61:79:e5:fa:13:72:
                    f7:c8:f1:59:f1:1a:1f:c2:04:c5:d5:5a:20:27:2f:
                    b0:d7:f7:80:57:4c:cd:cd:5b:b7:b4:0a:8d:09:70:
                    84:f5:92:1d:74:30:5d:a9:09:84:3f:93:6b:aa:7a:
                    3a:8e:25:d6:9a:72:68:87:48:05:23:03:92:d7:cd:
                    9e:8f:4a:ed:af:93:2b:91:74:f3:6b:2d:2b:27:fc:
                    5f:50:d2:e0:b0:f6:2a:55:4b:20:40:01:38:80:f7:
                    b1:0a:d6:c4:f4:80:7d:7e:9f:6d:a5:15:b0:0b:cf:
                    a1:06:eb:0d:46:b6:97:bc:3f:4c:e4:f7:d8:83:ef:
                    c5:d5:d9:bc:cf:0b:a3:47:76:32:ce:64:8f:4f:30:
                    d7:e5:29:b3:fd:fa:0e:e5:7d:97:f0:7c:13:84:9e:
                    1e:f2:f0:6f:b0:ec:e6:ba:6e:45:19:8c:5a:bf:ed:
                    2f:c1:45:d0:9d:9d:f3:bf:a4:ce:42:35:93:02:f3:
                    10:9d:6f:3c:7b:0e:9f:bd:91:a2:f8:64:5c:14:ec:
                    8e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:DF:BC:CF:93:51:03:BD:67:52:E8:63:D9:C8:D4:4C:53:93:72
            X509v3 Authority Key Identifier:
                keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/34352e3233312e32302e302f32322d3234203d3e20323637313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:4a:17:54:57:37:c8:33:bb:ce:2b:16:e6:b3:e5:a7:ff:
         28:91:d0:8b:78:19:7d:78:a8:02:90:27:77:1b:a7:73:e6:d6:
         e2:48:62:59:af:63:70:0c:f1:c1:02:5c:e6:d7:3e:c8:2b:08:
         39:7f:6f:46:e7:8a:80:ff:79:fb:47:ed:85:ff:e7:17:c7:49:
         58:5d:33:81:ca:76:84:a3:80:46:a1:5e:fd:d1:22:ee:38:af:
         a6:97:77:67:05:16:73:73:6f:38:6a:f9:2e:ac:1f:51:f8:77:
         76:d8:dd:da:7e:c6:a5:c4:c6:c7:f0:29:1a:ee:d0:7e:70:e7:
         c8:68:f3:3d:d7:04:50:95:80:05:3b:fe:ef:26:67:66:ac:0b:
         3e:50:f3:d5:ff:8d:51:85:82:21:44:6a:65:81:72:4b:66:70:
         cf:dc:16:93:e1:01:77:04:8a:35:0f:67:57:ef:d2:77:b0:b4:
         e2:44:66:bf:24:07:8a:4a:5a:3a:99:7d:3b:f3:98:92:1a:a5:
         1a:30:dd:74:cd:f5:cd:e5:b4:5d:d0:e4:58:12:f4:d7:77:9c:
         9e:15:56:0b:c0:bb:8b:bc:72:1a:60:bc:73:63:38:c7:a8:69:
         d6:96:fa:17:46:05:ae:45:31:03:19:00:7d:41:27:26:a8:a2:
         8f:49:22:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZWqpxJXhPCO7JlhSyTaDIsiK3GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUREMThENEI5RDRFQjVCOEU1NTIwQzBFMDAzMkMyMkVE
QjA1RjQxMTAeFw0yNTAzMDUxOTQwMjZaFw0yNjAzMDQxOTQ1MjZaMDMxMTAvBgNV
BAMTKEEzRDhERkJDQ0Y5MzUxMDNCRDY3NTJFODYzRDlDOEQ0NEM1MzkzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcsR2AtRNoNNvMPy3gZ9FA5Oq
+bGg9SvDPdRzpuWtXQsH2ZdMlERupoIGnbhfCxBnJRkN0mF55foTcvfI8VnxGh/C
BMXVWiAnL7DX94BXTM3NW7e0Co0JcIT1kh10MF2pCYQ/k2uqejqOJdaacmiHSAUj
A5LXzZ6PSu2vkyuRdPNrLSsn/F9Q0uCw9ipVSyBAATiA97EK1sT0gH1+n22lFbAL
z6EG6w1Gtpe8P0zk99iD78XV2bzPC6NHdjLOZI9PMNflKbP9+g7lfZfwfBOEnh7y
8G+w7Oa6bkUZjFq/7S/BRdCdnfO/pM5CNZMC8xCdbzx7Dp+9kaL4ZFwU7I7pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUo9jfvM+TUQO9Z1LoY9nI1ExTk3IwHwYDVR0j
BBgwFoAUrdGNS51OtbjlUgwOADLCLtsF9BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdNTXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1
eHUvMS9BREQxOEQ0QjlENEVCNUI4RTU1MjBDMEUwMDMyQzIyRURCMDVGNDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERDE4RDRCOUQ0RUI1QjhF
NTUyMEMwRTAwMzJDMjJFREIwNUY0MTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3TU1wRVVuZGQxa1czbUVHSFE4N3FRM3lmREFjV1BqbjF6UGtHb3MxdXh1LzEv
MzQzNTJlMzIzMzMxMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLecUMA0GCSqGSIb3DQEBCwUAA4IBAQAgHUoXVFc3
yDO7zisW5rPlp/8okdCLeBl9eKgCkCd3G6dz5tbiSGJZr2NwDPHBAlzm1z7IKwg5
f29G54qA/3n7R+2F/+cXx0lYXTOBynaEo4BGoV790SLuOK+ml3dnBRZzc284avku
rB9R+Hd22N3afsalxMbH8Cka7tB+cOfIaPM91wRQlYAFO/7vJmdmrAs+UPPV/41R
hYIhRGplgXJLZnDP3BaT4QF3BIo1D2dX79J3sLTiRGa/JAeKSlo6mX0785iSGqUa
MN10zfXN5bRd0ORYEvTXd5yeFVYLwLuLvHIaYLxzYzjHqGnWlvoXRgWuRTEDGQB9
QScmqKKPSSKB
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:45:39 2025 by rpki-client