Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
File:                     34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (raw, json)
Hash identifier:          P60bd7vynV184pYGMomwOOyjXMxtkwXf1QC3QcO9gko=
Subject key identifier:   9C:4A:DC:F1:B1:E0:55:E4:80:DA:CF:25:B6:F4:59:E1:09:06:9A:3C
Certificate issuer:       /CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
Certificate serial:       1ACBAB5F37F5E90AE96102B4E020B9D8967A87B4
Authority key identifier: F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa
Signing time:             Mon 04 Aug 2025 14:49:30 +0000
ROA not before:           Mon 04 Aug 2025 14:44:30 +0000
ROA not after:            Mon 03 Aug 2026 14:49:30 +0000
asID:                     267229
IP address blocks:        45.231.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cb:ab:5f:37:f5:e9:0a:e9:61:02:b4:e0:20:b9:d8:96:7a:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4
        Validity
            Not Before: Aug  4 14:44:30 2025 GMT
            Not After : Aug  3 14:49:30 2026 GMT
        Subject: CN=9C4ADCF1B1E055E480DACF25B6F459E109069A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:3b:5b:65:21:b5:f2:72:74:a9:83:e4:69:
                    50:f0:74:06:39:0b:a1:89:1e:7d:aa:e5:94:53:b3:
                    ff:a3:f9:32:88:0a:fb:b3:97:77:3c:a9:74:ad:c4:
                    f8:14:c9:d4:98:2d:60:5e:85:ef:86:60:5c:56:bb:
                    83:e9:39:6c:10:4e:91:ec:8e:97:36:d5:16:5c:97:
                    e6:cc:a9:6d:8f:85:9b:22:c2:a5:8f:dd:7b:51:57:
                    be:0c:b5:59:d3:a1:a8:35:18:e3:27:cc:b1:ed:68:
                    09:4b:9b:5d:89:fe:db:ea:3c:45:37:cf:97:84:ab:
                    dc:fc:47:d2:6a:94:56:9d:bb:3c:6a:18:7c:cc:8d:
                    cf:06:df:11:59:44:b7:fc:b7:cd:3f:60:95:83:b5:
                    77:4b:ed:ea:a7:ce:e3:69:3a:20:5d:d0:4f:67:1a:
                    cb:7f:ad:d5:f4:6f:0d:08:ee:66:06:bc:05:44:2a:
                    d5:b9:11:4f:7a:06:a9:5a:55:3b:26:84:58:8c:97:
                    d4:1e:95:14:ee:fa:37:9b:a8:b3:2d:71:af:d1:73:
                    29:dc:eb:44:e7:62:da:46:d6:61:71:a2:54:d3:ea:
                    24:d6:f9:0c:47:8c:bc:f8:7b:95:a1:9c:e7:77:fa:
                    58:10:8c:c5:7c:ae:d4:48:97:8f:3a:20:45:ba:8e:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:DC:F1:B1:E0:55:E4:80:DA:CF:25:B6:F4:59:E1:09:06:9A:3C
            X509v3 Authority Key Identifier:
                keyid:F9:AA:3F:12:A4:FC:F0:B7:33:F0:FF:95:94:2F:6F:21:D7:7D:63:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA3F12A4FCF0B733F0FF95942F6F21D77D63B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:d4:34:48:9f:e3:bc:c5:1c:ae:f8:fe:30:88:f2:cd:c7:ef:
         49:c1:b5:98:51:18:5a:23:99:8b:cc:f0:3a:52:cb:3c:f5:e8:
         eb:b2:b7:44:e4:02:3d:23:0a:f0:ba:45:31:27:5e:1d:08:46:
         fc:b0:68:4a:2a:5e:89:b6:7f:16:ed:fe:56:be:c9:35:0f:13:
         55:f0:0b:4a:32:82:f2:a3:4d:d4:9f:06:d9:52:3d:e5:4b:12:
         0e:28:9b:e2:2a:8b:33:ed:f1:47:71:82:83:53:93:3b:50:27:
         08:d0:1e:26:04:3a:fe:5e:48:57:95:3f:8d:12:b4:e5:59:ce:
         ac:9e:c0:15:00:83:2e:65:ea:88:6a:ea:fa:29:d5:56:24:0f:
         94:bc:f3:5a:29:36:b7:a4:8d:3a:14:29:92:6e:29:0b:ad:6b:
         2a:73:dd:6b:da:39:43:80:08:e7:a2:f7:0b:bc:f8:31:15:34:
         12:b0:d5:ad:f1:1e:91:89:9c:ed:66:2b:53:cb:76:02:bf:8d:
         d0:cf:4a:84:e8:f5:ae:7d:c0:c8:c2:6f:4e:52:33:1b:11:97:
         ba:7d:60:98:9a:83:89:57:29:e8:44:99:ae:99:89:98:36:e7:
         2c:41:6b:ab:44:18:f1:0a:eb:5f:10:40:2b:70:19:ba:95:b6:
         55:f2:6e:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGsurXzf16QrpYQK04CC52JZ6h7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlBQTNGMTJBNEZDRjBCNzMzRjBGRjk1OTQyRjZGMjFE
NzdENjNCNDAeFw0yNTA4MDQxNDQ0MzBaFw0yNjA4MDMxNDQ5MzBaMDMxMTAvBgNV
BAMTKDlDNEFEQ0YxQjFFMDU1RTQ4MERBQ0YyNUI2RjQ1OUUxMDkwNjlBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQztbZSG18nJ0qYPkaVDwdAY5
C6GJHn2q5ZRTs/+j+TKICvuzl3c8qXStxPgUydSYLWBehe+GYFxWu4PpOWwQTpHs
jpc21RZcl+bMqW2PhZsiwqWP3XtRV74MtVnToag1GOMnzLHtaAlLm12J/tvqPEU3
z5eEq9z8R9JqlFaduzxqGHzMjc8G3xFZRLf8t80/YJWDtXdL7eqnzuNpOiBd0E9n
Gst/rdX0bw0I7mYGvAVEKtW5EU96BqlaVTsmhFiMl9QelRTu+jebqLMtca/Rcync
60TnYtpG1mFxolTT6iTW+QxHjLz4e5WhnOd3+lgQjMV8rtRIl486IEW6jvalAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnErc8bHgVeSA2s8ltvRZ4QkGmjwwHwYDVR0j
BBgwFoAU+ao/EqT88Lcz8P+VlC9vIdd9Y7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMC9GOUFBM0YxMkE0RkNGMEI3MzNGMEZGOTU5NDJGNkYyMUQ3N0Q2M0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5QUEzRjEyQTRGQ0YwQjcz
M0YwRkY5NTk0MkY2RjIxRDc3RDYzQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzAv
MzQzNTJlMzIzMzMxMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5/QwDQYJKoZIhvcNAQELBQADggEBAFbUNEif
47zFHK74/jCI8s3H70nBtZhRGFojmYvM8DpSyzz16Ouyt0TkAj0jCvC6RTEnXh0I
RvywaEoqXom2fxbt/la+yTUPE1XwC0oygvKjTdSfBtlSPeVLEg4om+IqizPt8Udx
goNTkztQJwjQHiYEOv5eSFeVP40StOVZzqyewBUAgy5l6ohq6vop1VYkD5S881op
NrekjToUKZJuKQutaypz3WvaOUOACOei9wu8+DEVNBKw1a3xHpGJnO1mK1PLdgK/
jdDPSoTo9a59wMjCb05SMxsRl7p9YJiag4lXKehEma6ZiZg25yxBa6tEGPEK618Q
QCtwGbqVtlXybmw=
-----END CERTIFICATE-----
Generated at Wed Aug 20 20:48:59 2025 by rpki-client