Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
File:                     34352e3136372e382e302f32322d3232203d3e20323638303230.roa (raw, json)
Hash identifier:          xTTcySSkuKiPg0AZFi/C00m5o91qPTPyZwF/vEm21cE=
Subject key identifier:   59:8D:C7:37:3A:E6:5B:1D:B0:17:B4:FC:F4:A4:24:60:8E:2F:03:78
Certificate issuer:       /CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
Certificate serial:       67295B21FE6B7937CA300F1AC95F8A49299A1733
Authority key identifier: 28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
Signing time:             Wed 27 Aug 2025 15:05:05 +0000
ROA not before:           Wed 27 Aug 2025 15:00:05 +0000
ROA not after:            Wed 26 Aug 2026 15:05:05 +0000
asID:                     268020
IP address blocks:        45.167.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl
                          rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:29:5b:21:fe:6b:79:37:ca:30:0f:1a:c9:5f:8a:49:29:9a:17:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
        Validity
            Not Before: Aug 27 15:00:05 2025 GMT
            Not After : Aug 26 15:05:05 2026 GMT
        Subject: CN=598DC7373AE65B1DB017B4FCF4A424608E2F0378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:67:a2:f7:4a:47:1c:66:cc:83:aa:9c:b3:
                    84:78:4a:e9:3b:bd:b6:5c:a7:5b:fb:cd:56:cc:e9:
                    a8:df:8d:a8:4c:3b:64:f8:19:ae:95:65:43:05:40:
                    b7:e2:d0:0c:d6:91:d9:ef:23:aa:47:a0:67:42:ff:
                    30:89:61:53:80:96:cf:7f:65:b4:08:d2:5e:75:90:
                    2c:26:3c:f6:69:bd:8e:b8:1f:6f:f3:39:cc:b6:78:
                    e9:e5:e5:38:e4:4a:5b:a5:af:09:1c:a8:03:7f:7d:
                    bd:14:41:f3:6b:69:51:59:e2:07:3d:7a:3e:f7:64:
                    8f:6b:0e:0d:61:66:97:1e:ef:bf:aa:ab:53:23:66:
                    b5:2e:b6:9f:ab:3c:07:fd:61:34:a2:28:a8:f5:8e:
                    90:a3:85:27:1a:cd:b4:b6:6b:bc:17:18:2c:ae:06:
                    0a:59:92:f2:5e:1b:c6:5f:01:93:eb:be:88:2a:e6:
                    bb:2f:b9:43:54:e9:06:81:ba:f6:df:3d:ea:31:98:
                    9d:11:5b:a7:63:a0:a2:80:ce:46:c2:86:cb:03:0f:
                    52:26:e5:1b:5a:85:6e:44:e2:10:7f:d0:8f:8f:af:
                    a2:1b:f1:05:df:2c:4c:fe:b9:85:e2:1a:c6:3b:1f:
                    e9:3f:b0:b4:3f:4a:b9:6d:1f:84:7c:a8:67:da:7f:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:C7:37:3A:E6:5B:1D:B0:17:B4:FC:F4:A4:24:60:8E:2F:03:78
            X509v3 Authority Key Identifier:
                keyid:28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:a6:29:8a:ff:78:c4:6a:a9:47:55:ee:71:82:f0:e7:16:
         8c:29:a1:dc:4e:5c:88:69:bd:9b:07:6c:36:c2:d0:14:90:e9:
         79:8e:89:65:6d:16:27:87:01:0b:c5:52:f0:15:d9:fa:7f:76:
         71:71:93:a0:d1:4a:fe:ff:93:3b:34:09:c9:70:41:50:ea:c3:
         b1:e4:f8:e3:cb:7c:66:e5:38:cd:00:27:d6:d1:0a:30:15:36:
         66:4b:ca:23:37:24:be:61:00:80:5a:f7:33:ca:e3:3c:59:3c:
         60:02:e9:dc:1e:81:b6:64:aa:2a:93:6a:49:4e:65:d5:4b:b7:
         68:d1:c9:2d:3d:6b:e0:88:b7:01:bb:3a:f2:cb:11:48:82:5e:
         bd:5c:d6:48:93:7a:46:22:e4:92:cf:1d:a9:9f:81:87:65:71:
         cf:45:33:7a:88:19:dc:75:81:0a:ac:8c:d2:4c:41:c7:cd:ad:
         f6:0f:f0:0c:74:a3:ac:9d:89:70:fc:a2:75:9f:e6:c6:f4:56:
         16:9e:a7:72:e7:8d:d0:56:55:85:40:07:88:7d:a5:05:70:bb:
         67:2d:58:f5:48:d8:49:23:62:1c:93:3a:c8:16:5e:6d:2f:d3:
         8f:03:17:3f:83:69:18:a4:93:e5:fd:4c:37:b0:96:9d:9d:bf:
         04:f9:f3:62
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZylbIf5reTfKMA8ayV+KSSmaFzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0RUVBOEU2RURCOTRBRjk3OTNBMjZFNTExQjQ5OTND
RjA5MkJDQTAeFw0yNTA4MjcxNTAwMDVaFw0yNjA4MjYxNTA1MDVaMDMxMTAvBgNV
BAMTKDU5OERDNzM3M0FFNjVCMURCMDE3QjRGQ0Y0QTQyNDYwOEUyRjAzNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5Gei90pHHGbMg6qcs4R4Suk7
vbZcp1v7zVbM6ajfjahMO2T4Ga6VZUMFQLfi0AzWkdnvI6pHoGdC/zCJYVOAls9/
ZbQI0l51kCwmPPZpvY64H2/zOcy2eOnl5TjkSlulrwkcqAN/fb0UQfNraVFZ4gc9
ej73ZI9rDg1hZpce77+qq1MjZrUutp+rPAf9YTSiKKj1jpCjhScazbS2a7wXGCyu
BgpZkvJeG8ZfAZPrvogq5rsvuUNU6QaBuvbfPeoxmJ0RW6djoKKAzkbChssDD1Im
5RtahW5E4hB/0I+Pr6Ib8QXfLEz+uYXiGsY7H+k/sLQ/SrltH4R8qGfaf24tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWY3HNzrmWx2wF7T89KQkYI4vA3gwHwYDVR0j
BBgwFoAUKE7qjm7blK+Xk6JuURtJk88JK8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JLNFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVq
V2QvMC8yODRFRUE4RTZFREI5NEFGOTc5M0EyNkU1MTFCNDk5M0NGMDkyQkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NEVFQThFNkVEQjk0QUY5
NzkzQTI2RTUxMUI0OTkzQ0YwOTJCQ0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSSzRVQW1acjJFMVRoa3IyS1RxdDRwN3d2ekhkd2paZGVQOHVUWE5laldkLzAv
MzQzNTJlMzEzNjM3MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODMw
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2nCDANBgkqhkiG9w0BAQsFAAOCAQEAW8qmKYr/eMRq
qUdV7nGC8OcWjCmh3E5ciGm9mwdsNsLQFJDpeY6JZW0WJ4cBC8VS8BXZ+n92cXGT
oNFK/v+TOzQJyXBBUOrDseT448t8ZuU4zQAn1tEKMBU2ZkvKIzckvmEAgFr3M8rj
PFk8YALp3B6BtmSqKpNqSU5l1Uu3aNHJLT1r4Ii3Abs68ssRSIJevVzWSJN6RiLk
ks8dqZ+Bh2Vxz0UzeogZ3HWBCqyM0kxBx82t9g/wDHSjrJ2JcPyidZ/mxvRWFp6n
cueN0FZVhUAHiH2lBXC7Zy1Y9UjYSSNiHJM6yBZebS/TjwMXP4NpGKST5f1MN7CW
nZ2/BPnzYg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:53:29 2025 by rpki-client