Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
File:                     34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa (raw, json)
Hash identifier:          yyNX/EiK9cTepKnLikdWrniSnbSXruDhsO/skWPjBX8=
Subject key identifier:   6F:45:10:E9:71:CC:FF:07:B0:13:40:B6:E2:55:94:54:38:93:30:04
Certificate issuer:       /CN=D2FC8637672F6995F171A261D51674A50FE454A6
Certificate serial:       105348A506AE2E7C69BEBD37E462613E92C0C477
Authority key identifier: D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267334
IP address blocks:        45.233.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl
                          rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:53:48:a5:06:ae:2e:7c:69:be:bd:37:e4:62:61:3e:92:c0:c4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2FC8637672F6995F171A261D51674A50FE454A6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6F4510E971CCFF07B01340B6E255945438933004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:60:c6:56:89:d8:b8:c5:a2:0f:d9:e1:ae:
                    8f:17:2d:03:6d:d1:ef:36:97:a3:0a:14:78:96:57:
                    64:bc:ed:9d:96:36:52:c4:e4:e0:3d:d7:88:ae:6b:
                    c0:89:e1:2d:b3:23:8e:c5:cf:b4:e1:d1:a9:78:2d:
                    7a:b2:4b:83:95:cb:00:2c:26:30:99:89:be:b2:94:
                    0c:a6:1d:d5:75:bd:01:fa:6e:7a:3d:30:97:07:b8:
                    11:e6:09:b5:a0:5a:34:de:29:70:44:a3:27:60:26:
                    94:a2:1f:a5:b8:ef:f8:65:3d:da:12:97:fa:c8:47:
                    16:0e:94:39:bb:ed:6d:b5:a1:42:2b:29:f5:77:f7:
                    94:1f:fa:ec:ae:54:97:11:02:b9:32:ca:d1:aa:3b:
                    b6:5e:cf:c6:39:ba:78:5f:b0:0a:a0:ca:47:c5:87:
                    9e:92:34:10:88:1a:d2:e8:b4:03:4d:4c:66:e5:20:
                    6b:4e:4d:5a:51:c9:45:e2:1c:26:70:fc:9d:cc:d2:
                    6d:69:63:b5:d4:e4:47:7f:4b:11:08:2a:5e:69:d3:
                    ad:82:28:29:ac:35:10:f8:90:37:9e:05:cf:99:6d:
                    2c:15:2a:a3:5c:a1:62:be:fd:ff:6f:1a:e0:a9:27:
                    aa:43:95:26:3c:f8:68:af:a5:76:d8:30:ea:32:0d:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:10:E9:71:CC:FF:07:B0:13:40:B6:E2:55:94:54:38:93:30:04
            X509v3 Authority Key Identifier:
                keyid:D2:FC:86:37:67:2F:69:95:F1:71:A2:61:D5:16:74:A5:0F:E4:54:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/D2FC8637672F6995F171A261D51674A50FE454A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2FC8637672F6995F171A261D51674A50FE454A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/1/34352e3233332e3235352e302f32342d3234203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:d3:95:c6:13:9c:ae:ba:56:9d:5e:eb:74:f5:2e:f1:b7:
         67:9b:03:97:20:15:5e:a1:c6:82:c8:48:f0:f4:10:d4:08:6d:
         81:55:f9:37:5b:7e:7e:7e:c5:64:f4:3a:4e:9c:8e:05:70:8e:
         b0:a7:7a:e7:88:bf:2a:1d:a6:7f:0d:0f:bd:fe:eb:a7:0d:df:
         79:cb:ed:ff:b8:d6:3b:b1:11:18:2b:65:c4:cd:30:ff:0b:c7:
         51:5b:b6:cc:39:10:e2:86:3f:b0:c6:b3:97:2e:d3:bc:4b:2c:
         f8:ea:dd:df:5d:95:6b:5a:50:fc:66:0d:c8:84:de:77:47:95:
         0d:50:53:28:58:81:93:a0:8d:1f:d8:e9:e2:09:c9:02:66:95:
         d3:e3:2b:f9:a4:70:74:7e:9e:4c:c9:8e:bb:0f:7b:65:bd:47:
         83:ec:3c:04:12:7c:c0:ff:1e:43:51:02:e6:87:e2:b5:94:a3:
         69:de:ae:6b:d7:61:33:d4:f6:11:54:c3:03:7a:ae:ba:a1:5c:
         9a:0d:73:83:a0:da:bb:00:7c:47:d5:57:e9:4a:59:57:5f:cb:
         3c:15:21:16:89:25:82:ba:24:ae:50:b0:b4:fc:10:c7:1a:0e:
         42:55:8e:3a:e1:2a:25:19:ae:a8:55:57:f5:d4:f4:70:27:69:
         df:63:c2:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEFNIpQauLnxpvr035GJhPpLAxHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGQzg2Mzc2NzJGNjk5NUYxNzFBMjYxRDUxNjc0QTUw
RkU0NTRBNjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDZGNDUxMEU5NzFDQ0ZGMDdCMDEzNDBCNkUyNTU5NDU0Mzg5MzMwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOmDGVonYuMWiD9nhro8XLQNt
0e82l6MKFHiWV2S87Z2WNlLE5OA914iua8CJ4S2zI47Fz7Th0al4LXqyS4OVywAs
JjCZib6ylAymHdV1vQH6bno9MJcHuBHmCbWgWjTeKXBEoydgJpSiH6W47/hlPdoS
l/rIRxYOlDm77W21oUIrKfV395Qf+uyuVJcRArkyytGqO7Zez8Y5unhfsAqgykfF
h56SNBCIGtLotANNTGblIGtOTVpRyUXiHCZw/J3M0m1pY7XU5Ed/SxEIKl5p062C
KCmsNRD4kDeeBc+ZbSwVKqNcoWK+/f9vGuCpJ6pDlSY8+GivpXbYMOoyDWxNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb0UQ6XHM/wewE0C24lWUVDiTMAQwHwYDVR0j
BBgwFoAU0vyGN2cvaZXxcaJh1RZ0pQ/kVKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMS9EMkZDODYzNzY3MkY2OTk1RjE3MUEyNjFENTE2NzRBNTBGRTQ1NEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRkM4NjM3NjcyRjY5OTVG
MTcxQTI2MUQ1MTY3NEE1MEZFNDU0QTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzEv
MzQzNTJlMzIzMzMzMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6f8wDQYJKoZIhvcNAQELBQADggEBAH5t05XG
E5yuuladXut09S7xt2ebA5cgFV6hxoLISPD0ENQIbYFV+Tdbfn5+xWT0Ok6cjgVw
jrCneueIvyodpn8ND73+66cN33nL7f+41juxERgrZcTNMP8Lx1Fbtsw5EOKGP7DG
s5cu07xLLPjq3d9dlWtaUPxmDciE3ndHlQ1QUyhYgZOgjR/Y6eIJyQJmldPjK/mk
cHR+nkzJjrsPe2W9R4PsPAQSfMD/HkNRAuaH4rWUo2nermvXYTPU9hFUwwN6rrqh
XJoNc4Og2rsAfEfVV+lKWVdfyzwVIRaJJYK6JK5QsLT8EMcaDkJVjjrhKiUZrqhV
V/XU9HAnad9jwmM=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:27:51 2025 by rpki-client