Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          PaAf6dbPKpSc1oNUTLWDquOzA8hHyoSm8cfYfORzNgQ=
Subject key identifier:   E1:DB:10:DD:C8:01:68:91:5C:DE:EB:8C:3B:EB:C4:50:0F:FA:1F:07
Certificate issuer:       /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial:       0C5685CBEC23592BFF4183D6E5A8688860BC83D9
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
Signing time:             Mon 31 Mar 2025 18:49:50 +0000
ROA not before:           Mon 31 Mar 2025 18:44:50 +0000
ROA not after:            Mon 30 Mar 2026 18:49:50 +0000
asID:                     266528
IP address blocks:        45.65.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl
                          rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 17:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:56:85:cb:ec:23:59:2b:ff:41:83:d6:e5:a8:68:88:60:bc:83:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
        Validity
            Not Before: Mar 31 18:44:50 2025 GMT
            Not After : Mar 30 18:49:50 2026 GMT
        Subject: CN=E1DB10DDC80168915CDEEB8C3BEBC4500FFA1F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:d1:e3:8c:cf:74:8b:73:f8:e5:0d:d0:47:
                    0f:ef:72:d4:f7:38:52:74:97:56:2e:4c:1a:6d:be:
                    6c:d4:82:2d:4b:e4:a1:6d:dc:3b:7a:21:82:19:96:
                    d2:1b:f4:23:ca:bb:1a:79:ce:c1:a8:d6:ab:76:f2:
                    d7:9e:26:b3:9a:a6:7a:b1:2a:5d:b1:87:35:87:0d:
                    22:4a:3e:ff:c6:d8:6b:c6:b2:2e:c5:ed:87:2f:dc:
                    5a:c3:3b:f9:65:52:35:af:6f:08:50:e8:8b:08:03:
                    51:8f:e9:dd:27:94:60:a2:0a:24:92:82:3b:6a:be:
                    62:cb:b9:f1:e2:89:cc:f2:a9:8b:15:9b:eb:33:24:
                    6a:71:94:d7:e5:0c:ed:91:a8:1c:3b:ab:cd:cb:1f:
                    30:89:55:dc:e7:fa:f5:f5:0b:b9:41:8e:04:77:9a:
                    62:f1:1f:47:45:28:39:51:55:be:b3:5b:27:5a:c7:
                    a9:5e:12:b6:6e:77:af:f4:38:fd:c1:fc:74:06:10:
                    e7:85:30:17:d4:91:6d:ce:25:bd:fa:fd:2d:b6:90:
                    a6:f5:8d:64:55:0a:e0:3f:79:61:18:e8:3d:02:77:
                    df:08:e4:8d:3c:7d:2b:50:1a:c6:2f:15:eb:66:dc:
                    5c:9e:7c:d9:6f:f8:cd:57:b3:1c:0f:32:8c:0e:17:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:10:DD:C8:01:68:91:5C:DE:EB:8C:3B:EB:C4:50:0F:FA:1F:07
            X509v3 Authority Key Identifier:
                keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:7b:ac:a7:ee:73:6e:54:55:76:07:cf:69:ce:c7:df:2a:
         9f:d4:c5:4b:de:fe:84:01:c2:39:0e:66:ed:06:0b:c7:3e:c0:
         8b:a6:1b:32:ce:84:b0:13:b1:63:3d:51:fd:ba:49:dd:82:29:
         ae:c4:9e:1d:50:00:4c:ec:1b:25:50:cb:3f:2a:05:21:cc:9d:
         21:2b:32:5d:ff:f3:6e:ae:7e:32:6d:45:21:38:68:89:f8:3d:
         16:97:73:66:38:52:ea:35:f2:76:8a:f2:af:f4:06:73:2d:29:
         60:e5:f0:eb:e9:31:f6:74:01:5d:7f:0a:13:fe:c5:66:75:49:
         75:d4:06:2c:57:7d:51:25:23:78:63:1b:06:a4:4e:a8:4d:95:
         b3:a3:38:0f:d8:92:de:ce:40:b8:f6:92:de:56:88:b2:cc:6f:
         d8:24:c7:a4:e4:61:b7:81:54:54:7a:80:63:d9:c4:81:5a:bd:
         79:2d:0f:38:b8:db:75:d4:0d:f9:fb:bb:3d:a9:cd:4a:58:4c:
         9a:ec:95:2c:79:ad:07:e0:2b:11:14:22:f2:e8:35:9a:25:d1:
         99:4c:0c:0e:17:de:58:a2:ea:b8:43:a6:bd:63:3d:24:e1:4a:
         7b:18:22:a0:13:a9:5b:21:16:85:c6:79:02:66:f2:44:73:56:
         3f:33:8c:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDFaFy+wjWSv/QYPW5ahoiGC8g9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2OUI0MzAxOTk4NTc1RTdFRTFBM0NFMDI2ODY4QkRB
RDZGRDE0QjAeFw0yNTAzMzExODQ0NTBaFw0yNjAzMzAxODQ5NTBaMDMxMTAvBgNV
BAMTKEUxREIxMEREQzgwMTY4OTE1Q0RFRUI4QzNCRUJDNDUwMEZGQTFGMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ENHjjM90i3P45Q3QRw/vctT3
OFJ0l1YuTBptvmzUgi1L5KFt3Dt6IYIZltIb9CPKuxp5zsGo1qt28teeJrOapnqx
Kl2xhzWHDSJKPv/G2GvGsi7F7Ycv3FrDO/llUjWvbwhQ6IsIA1GP6d0nlGCiCiSS
gjtqvmLLufHiiczyqYsVm+szJGpxlNflDO2RqBw7q83LHzCJVdzn+vX1C7lBjgR3
mmLxH0dFKDlRVb6zWydax6leErZud6/0OP3B/HQGEOeFMBfUkW3OJb36/S22kKb1
jWRVCuA/eWEY6D0Cd98I5I08fStQGsYvFetm3FyefNlv+M1XsxwPMowOF7dLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4dsQ3cgBaJFc3uuMO+vEUA/6HwcwHwYDVR0j
BBgwFoAUJmm0MBmYV15+4aPOAmhova1v0UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy
dzIvMC8yNjY5QjQzMDE5OTg1NzVFN0VFMUEzQ0UwMjY4NjhCREFENkZEMTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NjlCNDMwMTk5ODU3NUU3
RUUxQTNDRTAyNjg2OEJEQUQ2RkQxNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyTjVlWFQyTVVGNUZ2TW1oQmNuQ0RqSHZQbWJGYmtta1d4TUFTbzd1MncyLzAv
MzQzNTJlMzYzNTJlMzEzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUGDMA0GCSqGSIb3DQEBCwUAA4IBAQBq7nusp+5z
blRVdgfPac7H3yqf1MVL3v6EAcI5DmbtBgvHPsCLphsyzoSwE7FjPVH9ukndgimu
xJ4dUABM7BslUMs/KgUhzJ0hKzJd//Nurn4ybUUhOGiJ+D0Wl3NmOFLqNfJ2ivKv
9AZzLSlg5fDr6TH2dAFdfwoT/sVmdUl11AYsV31RJSN4YxsGpE6oTZWzozgP2JLe
zkC49pLeVoiyzG/YJMek5GG3gVRUeoBj2cSBWr15LQ84uNt11A35+7s9qc1KWEya
7JUsea0H4CsRFCLy6DWaJdGZTAwOF95Youq4Q6a9Yz0k4Up7GCKgE6lbIRaFxnkC
ZvJEc1Y/M4yJ
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:22:36 2025 by rpki-client