Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32332d3233203d3e20323639343131.roa (raw, json)
Hash identifier:          VKIHzMffVy5s78Xyx9ZH/WkiA1hIjXIINhtZm/ysLw8=
Subject key identifier:   09:23:07:08:5D:14:86:DD:03:7E:F3:F0:FE:BC:73:AE:50:78:68:D7
Certificate issuer:       /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial:       71B455D18889B739644EE02C6863837E252236C9
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
Signing time:             Sat 22 Mar 2025 05:07:07 +0000
ROA not before:           Sat 22 Mar 2025 05:02:07 +0000
ROA not after:            Sat 21 Mar 2026 05:07:07 +0000
asID:                     269411
IP address blocks:        45.186.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 17:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b4:55:d1:88:89:b7:39:64:4e:e0:2c:68:63:83:7e:25:22:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
        Validity
            Not Before: Mar 22 05:02:07 2025 GMT
            Not After : Mar 21 05:07:07 2026 GMT
        Subject: CN=092307085D1486DD037EF3F0FEBC73AE507868D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:ce:91:e8:43:de:45:f8:2d:24:ce:ed:8c:
                    9c:66:a8:10:35:d3:59:02:e0:9b:64:02:1b:db:eb:
                    12:8f:b1:04:3f:93:d1:2d:17:54:4f:d5:4e:a7:a0:
                    15:c8:e0:6a:45:b8:17:76:33:8a:81:49:c7:77:82:
                    97:51:25:7a:e3:45:97:45:5a:ff:54:de:c8:ea:21:
                    e6:33:6d:eb:ea:e1:71:99:27:a8:7d:a9:2a:9c:7f:
                    ab:c8:04:ba:c1:f5:30:60:39:91:8e:b7:ee:e4:43:
                    1c:4f:5d:94:7a:48:78:3b:43:c1:92:de:66:2e:e6:
                    7f:bc:70:85:e5:ab:d6:c0:c8:30:7a:58:33:dd:af:
                    0a:59:4c:b5:6a:c9:4c:7c:7f:0d:1f:5c:a0:6f:dc:
                    c9:76:48:09:8c:9a:ef:45:e2:49:b6:08:61:b5:aa:
                    52:27:16:b2:2c:d1:6f:02:2f:cc:bd:30:a7:0b:2c:
                    59:1a:f7:7e:4c:fa:91:27:ac:59:97:69:61:00:29:
                    70:83:95:1d:40:4b:21:d9:5d:d2:4f:b0:1c:e5:2e:
                    55:92:91:5b:c8:64:28:48:04:28:bf:32:71:97:a6:
                    36:ea:7b:b2:ea:fe:10:4f:fd:41:ce:3c:61:66:d8:
                    cb:14:07:d2:c1:f4:a3:90:d4:33:1d:4e:c8:c5:d5:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:23:07:08:5D:14:86:DD:03:7E:F3:F0:FE:BC:73:AE:50:78:68:D7
            X509v3 Authority Key Identifier:
                keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:b1:7a:cd:9f:2d:4e:ab:5a:60:4f:86:4b:da:5b:4b:db:
         c9:6f:7d:e0:c6:c8:3f:b8:7b:25:66:e1:b5:13:fb:a3:34:05:
         df:44:d5:1a:7f:37:4d:65:84:9c:b6:87:92:48:36:d7:ba:fd:
         8b:cf:8c:2f:86:58:bf:89:2c:e9:42:0f:89:03:a7:1d:38:03:
         1d:09:9b:3b:89:0a:4d:90:e4:97:cc:6c:75:5a:fc:c7:0a:70:
         d9:1f:83:c3:17:65:50:b2:b7:9b:00:96:31:4b:d5:5b:ee:15:
         66:12:5c:99:cc:41:ef:e0:dd:79:4d:b6:98:fa:c1:ba:cd:ef:
         4d:34:1d:7a:cf:a9:10:44:57:1d:9f:68:f5:50:b2:de:3b:ee:
         f4:30:b8:1e:33:e4:7c:49:72:47:af:16:d9:4e:28:ca:12:d9:
         43:3a:8c:8e:4c:ad:1d:4e:02:c5:02:ac:9a:fc:6c:31:29:9a:
         4f:32:9d:6e:01:e2:f2:67:6c:7c:90:ef:ab:f9:72:55:2d:9b:
         53:c2:74:ad:a5:e9:a3:30:a7:1b:fd:0f:bc:60:a6:c0:8f:9b:
         1b:18:51:66:07:89:a6:e8:80:e5:5d:f2:84:de:8b:4c:e1:f4:
         fc:4b:52:c5:f3:b5:58:7a:91:51:f3:4b:09:13:8a:01:5f:0b:
         b0:31:cc:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcbRV0YiJtzlkTuAsaGODfiUiNskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI2MTJFRTU4MkVBNTlGQjVBMjJDQTBEQzc1OTc0RkFD
QkE1MzMwMzAeFw0yNTAzMjIwNTAyMDdaFw0yNjAzMjEwNTA3MDdaMDMxMTAvBgNV
BAMTKDA5MjMwNzA4NUQxNDg2REQwMzdFRjNGMEZFQkM3M0FFNTA3ODY4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6s6R6EPeRfgtJM7tjJxmqBA1
01kC4JtkAhvb6xKPsQQ/k9EtF1RP1U6noBXI4GpFuBd2M4qBScd3gpdRJXrjRZdF
Wv9U3sjqIeYzbevq4XGZJ6h9qSqcf6vIBLrB9TBgOZGOt+7kQxxPXZR6SHg7Q8GS
3mYu5n+8cIXlq9bAyDB6WDPdrwpZTLVqyUx8fw0fXKBv3Ml2SAmMmu9F4km2CGG1
qlInFrIs0W8CL8y9MKcLLFka935M+pEnrFmXaWEAKXCDlR1ASyHZXdJPsBzlLlWS
kVvIZChIBCi/MnGXpjbqe7Lq/hBP/UHOPGFm2MsUB9LB9KOQ1DMdTsjF1SRDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCSMHCF0Uht0DfvPw/rxzrlB4aNcwHwYDVR0j
BBgwFoAU+2Eu5YLqWftaIsoNx1l0+sulMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC9GQjYxMkVFNTgyRUE1OUZCNUEyMkNBMERDNzU5NzRGQUNCQTUzMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNjEyRUU1ODJFQTU5RkI1
QTIyQ0EwREM3NTk3NEZBQ0JBNTMzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbo0MA0GCSqGSIb3DQEBCwUAA4IBAQCdMbF6zZ8t
TqtaYE+GS9pbS9vJb33gxsg/uHslZuG1E/ujNAXfRNUafzdNZYSctoeSSDbXuv2L
z4wvhli/iSzpQg+JA6cdOAMdCZs7iQpNkOSXzGx1WvzHCnDZH4PDF2VQsrebAJYx
S9Vb7hVmElyZzEHv4N15TbaY+sG6ze9NNB16z6kQRFcdn2j1ULLeO+70MLgeM+R8
SXJHrxbZTijKEtlDOoyOTK0dTgLFAqya/GwxKZpPMp1uAeLyZ2x8kO+r+XJVLZtT
wnStpemjMKcb/Q+8YKbAj5sbGFFmB4mm6IDlXfKE3otM4fT8S1LF87VYepFR80sJ
E4oBXwuwMcxC
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:20:43 2025 by rpki-client