Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa
File:                     34352e3137312e36302e302f32322d3234203d3e203631363133.roa (raw, json)
Hash identifier:          dbLAkZEz/5LCZ85Hg9KhUt21lXPpwFaKR4qY1XaULAE=
Subject key identifier:   9B:38:D5:48:21:A6:93:F0:3F:5B:B5:AD:D1:2E:C9:60:AB:EF:82:B0
Certificate issuer:       /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Certificate serial:       7E79BC9BD7869231E17CCE9D5C458ED6DC2AAD01
Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa
Signing time:             Tue 20 May 2025 16:00:29 +0000
ROA not before:           Tue 20 May 2025 15:55:29 +0000
ROA not after:            Tue 19 May 2026 16:00:29 +0000
asID:                     61613
IP address blocks:        45.171.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl
                          rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:79:bc:9b:d7:86:92:31:e1:7c:ce:9d:5c:45:8e:d6:dc:2a:ad:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
        Validity
            Not Before: May 20 15:55:29 2025 GMT
            Not After : May 19 16:00:29 2026 GMT
        Subject: CN=9B38D54821A693F03F5BB5ADD12EC960ABEF82B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:9a:ed:21:e4:62:b1:44:c9:bb:0c:f4:f0:
                    26:2d:3a:51:d6:0a:84:34:68:15:54:65:ef:00:00:
                    e4:8a:11:70:69:63:a3:9f:73:3f:c0:a6:0d:2b:86:
                    81:e7:c8:1a:25:a3:9b:7c:f2:10:d5:13:53:6b:1b:
                    a8:bd:07:e3:e9:65:cd:ec:5d:c4:2e:57:5f:bd:f9:
                    cf:87:47:f5:da:12:80:61:ce:3d:9b:0d:68:6a:0f:
                    97:63:30:0f:ce:38:ce:2b:b5:7f:9f:9e:89:22:87:
                    1a:22:18:a0:59:a4:c2:f4:0d:18:5a:ec:bd:13:df:
                    be:db:e9:b9:ab:38:57:0a:80:5e:87:48:73:11:7b:
                    ab:25:a3:71:20:d0:56:b1:86:7f:ca:79:76:0e:20:
                    d3:6f:8f:ac:09:a2:9f:b0:2d:f7:d8:6b:e9:56:9e:
                    28:cb:dd:02:ab:cd:4f:61:92:79:c8:e8:7f:0b:db:
                    b0:01:b2:ef:89:4c:ad:72:7c:65:51:d6:09:eb:8c:
                    8e:f5:51:59:2f:53:e6:4b:4e:44:0d:7b:4f:02:90:
                    12:d0:32:2b:bf:be:da:b8:ca:6a:9a:73:5f:d9:75:
                    5f:32:77:7b:34:46:a0:81:aa:fd:f4:dd:ba:6e:21:
                    15:b0:08:ea:d7:07:16:17:98:67:cf:07:e4:08:a1:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:D5:48:21:A6:93:F0:3F:5B:B5:AD:D1:2E:C9:60:AB:EF:82:B0
            X509v3 Authority Key Identifier:
                keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:33:56:2d:94:60:86:a1:c1:77:ef:79:bc:1b:49:fb:35:be:
         54:6f:fd:e7:a3:1c:1f:e9:a1:e7:28:cf:1b:ec:12:6d:b3:fa:
         0b:af:77:68:8a:f9:3a:b4:99:4e:6e:f2:d4:65:72:f0:59:50:
         b9:f7:e9:2a:e9:61:17:ac:1e:ad:f4:89:6f:17:a9:2d:80:f4:
         25:a2:d9:ae:fa:f3:45:47:c5:18:f0:51:aa:76:6b:d6:13:8f:
         6f:7e:9d:b5:b9:f0:7e:32:4e:7f:81:29:41:2c:0c:88:ae:a8:
         7b:0b:ad:08:47:0c:de:9d:36:87:07:76:54:ac:17:3f:06:65:
         ab:59:79:35:38:4b:40:1f:57:ef:d4:d3:1a:9b:f1:4e:42:b2:
         81:e5:37:04:19:87:ad:fd:99:a6:4b:f3:b7:1d:b6:3d:01:ac:
         15:be:38:79:05:27:6e:ce:03:bb:27:da:b5:22:85:cc:81:ec:
         6c:4f:51:33:a1:29:ac:d1:4b:fe:27:78:8a:15:1c:7e:6b:9b:
         14:20:17:dc:73:9c:2e:0b:3d:4e:8c:ca:60:d1:3c:3c:8f:95:
         fc:27:29:9d:db:65:89:eb:9d:82:db:b1:6e:37:89:05:db:c0:
         71:3e:33:a8:9b:64:58:9f:40:89:0f:e2:da:ba:4d:13:53:34:
         9e:55:73:ea
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfnm8m9eGkjHhfM6dXEWO1twqrQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDRjlGRURCRTI0ODFENzcxMTk1RDA2MDgxRDQ5RkE0
QUYwNzE3MTAeFw0yNTA1MjAxNTU1MjlaFw0yNjA1MTkxNjAwMjlaMDMxMTAvBgNV
BAMTKDlCMzhENTQ4MjFBNjkzRjAzRjVCQjVBREQxMkVDOTYwQUJFRjgyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK5rtIeRisUTJuwz08CYtOlHW
CoQ0aBVUZe8AAOSKEXBpY6Ofcz/Apg0rhoHnyBolo5t88hDVE1NrG6i9B+PpZc3s
XcQuV1+9+c+HR/XaEoBhzj2bDWhqD5djMA/OOM4rtX+fnokihxoiGKBZpML0DRha
7L0T377b6bmrOFcKgF6HSHMRe6slo3Eg0Faxhn/KeXYOINNvj6wJop+wLffYa+lW
nijL3QKrzU9hknnI6H8L27ABsu+JTK1yfGVR1gnrjI71UVkvU+ZLTkQNe08CkBLQ
Miu/vtq4ymqac1/ZdV8yd3s0RqCBqv303bpuIRWwCOrXBxYXmGfPB+QIoZGXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmzjVSCGmk/A/W7Wt0S7JYKvvgrAwHwYDVR0j
BBgwFoAUxc+f7b4kgddxGV0GCB1J+krwcXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU
d1QvMC9DNUNGOUZFREJFMjQ4MUQ3NzExOTVEMDYwODFENDlGQTRBRjA3MTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1Q0Y5RkVEQkUyNDgxRDc3
MTE5NUQwNjA4MUQ0OUZBNEFGMDcxNzEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2M1BBMWhmSldyNFJUZFFuTVRIWHdtTlNTczFFQ1VoVXZQanhQTkRYVHdULzAv
MzQzNTJlMzEzNzMxMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM2
MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2rPDANBgkqhkiG9w0BAQsFAAOCAQEARTNWLZRghqHB
d+95vBtJ+zW+VG/956McH+mh5yjPG+wSbbP6C693aIr5OrSZTm7y1GVy8FlQuffp
KulhF6werfSJbxepLYD0JaLZrvrzRUfFGPBRqnZr1hOPb36dtbnwfjJOf4EpQSwM
iK6oewutCEcM3p02hwd2VKwXPwZlq1l5NThLQB9X79TTGpvxTkKygeU3BBmHrf2Z
pkvztx22PQGsFb44eQUnbs4DuyfatSKFzIHsbE9RM6EprNFL/id4ihUcfmubFCAX
3HOcLgs9TozKYNE8PI+V/CcpndtlieudgtuxbjeJBdvAcT4zqJtkWJ9AiQ/i2rpN
E1M0nlVz6g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:40:43 2025 by rpki-client