Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          rvvstdgHKBLZiYLtTVjHHFsA+uSpDvcNe0UPKBADsyk=
Subject key identifier:   47:79:C4:3C:73:FA:46:87:18:93:0B:56:B7:6C:C6:6C:AD:CD:7F:93
Certificate issuer:       /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
Certificate serial:       251FBFB9BBA304B47F8E32D41A5258297B1B4926
Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa
Signing time:             Sat 01 Feb 2025 21:53:47 +0000
ROA not before:           Sat 01 Feb 2025 21:48:47 +0000
ROA not after:            Sat 31 Jan 2026 21:53:47 +0000
asID:                     267229
IP address blocks:        45.231.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl
                          rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:bf:b9:bb:a3:04:b4:7f:8e:32:d4:1a:52:58:29:7b:1b:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35
        Validity
            Not Before: Feb  1 21:48:47 2025 GMT
            Not After : Jan 31 21:53:47 2026 GMT
        Subject: CN=4779C43C73FA468718930B56B76CC66CADCD7F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:2b:c5:6e:86:6f:39:b0:d8:af:b8:bb:68:
                    1f:30:be:e3:fe:95:09:2f:23:34:9c:fd:06:88:9b:
                    3e:00:6d:0e:12:e1:46:6b:be:0a:dc:6f:51:d0:6b:
                    6f:8f:92:c0:5e:6a:86:07:52:07:24:bf:32:d1:76:
                    a9:b5:ae:1f:bb:f8:c4:a3:b2:57:12:3d:19:b0:9d:
                    bd:6a:40:1f:e2:a8:e4:9c:eb:3a:32:66:53:05:1b:
                    b9:3c:1e:c2:2e:15:95:c4:1a:0c:e2:e2:99:42:90:
                    82:ec:df:6d:17:b7:ec:05:61:7e:a3:ab:54:07:ed:
                    8a:d4:de:42:4a:8e:89:c7:c2:08:96:31:28:15:2e:
                    4d:41:71:88:88:28:74:6d:d4:e7:f6:70:58:5f:25:
                    f5:82:f6:5d:2a:18:5c:f4:d7:e5:9f:1f:3b:b8:a0:
                    84:46:33:91:fe:46:24:5a:7f:15:df:52:c6:f3:29:
                    5a:0e:56:a1:ba:de:63:04:0c:58:f3:33:79:f9:a3:
                    8d:47:4f:a7:8b:74:f4:f2:52:8a:2c:ab:4a:3f:13:
                    c2:a9:a5:99:dc:b1:2d:d3:69:71:52:7a:ec:6d:17:
                    2c:58:aa:e9:fe:79:e3:9c:1e:4d:95:7a:20:36:be:
                    12:e4:55:31:3d:dd:1b:c6:0e:1e:f4:2e:a4:04:33:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:79:C4:3C:73:FA:46:87:18:93:0B:56:B7:6C:C6:6C:AD:CD:7F:93
            X509v3 Authority Key Identifier:
                keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4a:4a:5b:8e:4f:86:df:1a:8f:bc:21:06:5e:d3:c8:24:49:
         d2:5d:6e:6f:52:ff:8c:b7:52:b7:0d:c4:03:82:2c:fe:19:86:
         d7:91:06:fb:41:27:6f:28:17:b6:1e:d6:1d:bc:d4:56:b3:e9:
         85:22:3d:1f:9a:19:e4:98:6b:83:ff:92:76:3b:da:da:3a:3a:
         50:ad:24:80:29:11:d1:f5:42:f5:5c:0d:f7:72:09:ab:2c:d1:
         bb:dd:86:8b:fb:35:ee:12:11:bb:86:a4:4b:ba:fb:d4:5c:06:
         bc:74:6a:98:bd:dc:3f:b6:9e:fd:f9:b4:df:33:d5:8d:2b:bc:
         1a:2e:02:25:41:30:ec:f0:95:57:6a:14:a8:ba:0e:0f:a7:76:
         17:d6:ef:a6:2d:bf:23:98:43:21:df:14:a3:ee:0d:2f:f4:2d:
         5e:29:1d:62:7b:94:74:96:90:88:64:fb:12:0f:b0:44:20:81:
         6a:a1:47:51:8b:91:5c:b5:7d:ef:99:19:96:23:45:c2:66:5d:
         09:a5:92:da:28:45:1c:a3:8a:39:94:d4:76:77:82:70:35:3f:
         81:29:c8:ad:bf:d0:62:b8:dc:f3:3f:4c:cf:10:ef:22:ab:ae:
         40:5f:4f:38:06:08:99:36:01:d1:ac:42:8a:7d:c1:b7:0d:5c:
         fb:a5:ea:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJR+/ubujBLR/jjLUGlJYKXsbSSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2
RERDQkEzNTAeFw0yNTAyMDEyMTQ4NDdaFw0yNjAxMzEyMTUzNDdaMDMxMTAvBgNV
BAMTKDQ3NzlDNDNDNzNGQTQ2ODcxODkzMEI1NkI3NkNDNjZDQURDRDdGOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pivFboZvObDYr7i7aB8wvuP+
lQkvIzSc/QaImz4AbQ4S4UZrvgrcb1HQa2+PksBeaoYHUgckvzLRdqm1rh+7+MSj
slcSPRmwnb1qQB/iqOSc6zoyZlMFG7k8HsIuFZXEGgzi4plCkILs320Xt+wFYX6j
q1QH7YrU3kJKjonHwgiWMSgVLk1BcYiIKHRt1Of2cFhfJfWC9l0qGFz01+WfHzu4
oIRGM5H+RiRafxXfUsbzKVoOVqG63mMEDFjzM3n5o41HT6eLdPTyUoosq0o/E8Kp
pZncsS3TaXFSeuxtFyxYqun+eeOcHk2VeiA2vhLkVTE93RvGDh70LqQEM3KlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR3nEPHP6RocYkwtWt2zGbK3Nf5MwHwYDVR0j
BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB
OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzEv
MzQzNTJlMzIzMzMxMmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5/cwDQYJKoZIhvcNAQELBQADggEBAHdKSluO
T4bfGo+8IQZe08gkSdJdbm9S/4y3UrcNxAOCLP4ZhteRBvtBJ28oF7Ye1h281Faz
6YUiPR+aGeSYa4P/knY72to6OlCtJIApEdH1QvVcDfdyCass0bvdhov7Ne4SEbuG
pEu6+9RcBrx0api93D+2nv35tN8z1Y0rvBouAiVBMOzwlVdqFKi6Dg+ndhfW76Yt
vyOYQyHfFKPuDS/0LV4pHWJ7lHSWkIhk+xIPsEQggWqhR1GLkVy1fe+ZGZYjRcJm
XQmlktooRRyjijmU1HZ3gnA1P4EpyK2/0GK43PM/TM8Q7yKrrkBfTzgGCJk2AdGs
Qop9wbcNXPul6s4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:03 2025 by rpki-client