Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137392e302f32342d3234203d3e20323636393138.roa
File:                     34352e3232342e3137392e302f32342d3234203d3e20323636393138.roa (raw, json)
Hash identifier:          Zwh1gpyjFLgvFlw9gbuUKSoaSSO3wacx3eQMqFO32ME=
Subject key identifier:   81:9D:69:41:F4:A2:81:0A:53:2A:FA:FD:26:E7:C6:BC:C6:8B:68:CF
Certificate issuer:       /CN=44E04535A0B2769897B15757A3419A5A38572BBA
Certificate serial:       03A85F00A6F923B0B0B41164DDA69E3C1F529FAA
Authority key identifier: 44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137392e302f32342d3234203d3e20323636393138.roa
Signing time:             Wed 15 Jan 2025 12:01:16 +0000
ROA not before:           Wed 15 Jan 2025 11:56:16 +0000
ROA not after:            Wed 14 Jan 2026 12:01:16 +0000
asID:                     266918
IP address blocks:        45.224.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl
                          rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a8:5f:00:a6:f9:23:b0:b0:b4:11:64:dd:a6:9e:3c:1f:52:9f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E04535A0B2769897B15757A3419A5A38572BBA
        Validity
            Not Before: Jan 15 11:56:16 2025 GMT
            Not After : Jan 14 12:01:16 2026 GMT
        Subject: CN=819D6941F4A2810A532AFAFD26E7C6BCC68B68CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:4e:be:eb:9e:6b:d6:0b:21:85:35:21:c2:
                    04:6c:46:f5:6a:2f:6e:82:03:bb:05:b9:99:ae:69:
                    00:b9:48:60:66:9b:b7:44:5b:14:a0:ef:4b:34:e3:
                    63:1e:99:92:50:ac:02:94:cc:ae:90:03:7b:ec:24:
                    1b:27:0c:59:63:5b:0a:6a:d8:a4:cf:47:2a:a8:b4:
                    bc:ac:bf:53:1c:6f:94:6d:fd:b0:67:57:de:69:ad:
                    6e:06:94:52:cd:8c:37:70:d5:46:7c:80:dd:ce:88:
                    72:61:2a:eb:d1:89:e3:fd:18:72:cc:08:00:06:6e:
                    1f:73:5d:c1:72:9a:35:1f:ee:0e:1a:4a:77:a1:c4:
                    16:16:d7:d1:20:ca:6d:6d:7d:35:30:8c:d2:1d:09:
                    3e:42:73:da:e8:f2:8d:8d:6c:93:ee:38:12:a6:24:
                    f9:a0:b0:9e:3e:54:a2:94:0f:a4:02:67:09:a2:ea:
                    40:99:12:1f:9f:50:60:eb:60:ba:32:6f:79:33:a1:
                    c3:e2:dd:8e:5c:6f:c1:0b:52:b1:1e:f5:7b:b9:50:
                    65:3c:72:4d:3a:49:d7:71:3a:09:b5:f3:04:49:e1:
                    64:b5:88:12:b4:ba:18:2f:45:1f:11:d2:e9:98:5b:
                    88:4e:b9:48:c2:46:ee:1c:96:2e:73:07:80:7d:6e:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:69:41:F4:A2:81:0A:53:2A:FA:FD:26:E7:C6:BC:C6:8B:68:CF
            X509v3 Authority Key Identifier:
                keyid:44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137392e302f32342d3234203d3e20323636393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:01:29:8e:d7:8a:54:53:9c:04:14:e3:9a:16:74:89:15:c5:
         10:57:f4:19:99:f1:2f:aa:b5:6b:40:c4:f0:8b:44:88:6f:f5:
         87:97:2d:cc:9c:25:7b:27:c8:05:60:bf:b4:76:d1:ed:04:71:
         37:12:e2:74:1a:b5:f0:e0:a5:2a:7f:62:7e:56:e0:ca:58:b1:
         ea:46:f1:8c:11:8c:a9:51:0e:cd:39:b8:0a:55:a1:0c:cb:73:
         02:e0:d9:11:39:95:e8:61:e7:69:d1:2e:13:fb:67:3f:c0:40:
         eb:cf:0a:4f:4e:7a:af:9e:2b:46:5f:8d:5d:60:09:90:eb:0a:
         61:e0:5c:55:50:c2:4e:fe:02:85:f9:ff:b6:55:6e:de:67:fb:
         c7:62:b4:8c:08:4b:d1:fc:d7:63:7f:e0:3d:af:fa:48:ca:9e:
         7f:8e:f0:a0:69:b3:a2:bc:83:e6:10:4b:20:04:80:7e:23:d9:
         32:88:7c:72:66:8b:c8:76:5c:7d:ba:0d:cf:d0:fb:b6:37:a0:
         61:8b:aa:f8:62:41:f1:04:01:79:85:87:06:5e:15:99:83:6f:
         98:a0:a2:b1:ec:8a:60:35:6b:02:c3:f3:f1:43:a0:05:9d:7d:
         db:a1:5d:94:fe:54:61:95:de:11:a2:f5:cb:58:6f:12:e0:32:
         8a:11:d8:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA6hfAKb5I7CwtBFk3aaePB9Sn6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRFMDQ1MzVBMEIyNzY5ODk3QjE1NzU3QTM0MTlBNUEz
ODU3MkJCQTAeFw0yNTAxMTUxMTU2MTZaFw0yNjAxMTQxMjAxMTZaMDMxMTAvBgNV
BAMTKDgxOUQ2OTQxRjRBMjgxMEE1MzJBRkFGRDI2RTdDNkJDQzY4QjY4Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdU6+655r1gshhTUhwgRsRvVq
L26CA7sFuZmuaQC5SGBmm7dEWxSg70s042MemZJQrAKUzK6QA3vsJBsnDFljWwpq
2KTPRyqotLysv1Mcb5Rt/bBnV95prW4GlFLNjDdw1UZ8gN3OiHJhKuvRieP9GHLM
CAAGbh9zXcFymjUf7g4aSnehxBYW19Egym1tfTUwjNIdCT5Cc9ro8o2NbJPuOBKm
JPmgsJ4+VKKUD6QCZwmi6kCZEh+fUGDrYLoyb3kzocPi3Y5cb8ELUrEe9Xu5UGU8
ck06SddxOgm18wRJ4WS1iBK0uhgvRR8R0umYW4hOuUjCRu4cli5zB4B9booJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgZ1pQfSigQpTKvr9JufGvMaLaM8wHwYDVR0j
BBgwFoAUROBFNaCydpiXsVdXo0GaWjhXK7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREd6S2tZQk43UHlwdVE5bkg4RUtOeGNBTjhkcFhCMlZOM0U4SFQ3dXNE
WEIvMC80NEUwNDUzNUEwQjI3Njk4OTdCMTU3NTdBMzQxOUE1QTM4NTcyQkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RTA0NTM1QTBCMjc2OTg5
N0IxNTc1N0EzNDE5QTVBMzg1NzJCQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHektrWUJON1B5cHVROW5IOEVLTnhjQU44ZHBYQjJWTjNFOEhUN3VzRFhCLzAv
MzQzNTJlMzIzMjM0MmUzMTM3MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4LMwDQYJKoZIhvcNAQELBQADggEBALEBKY7X
ilRTnAQU45oWdIkVxRBX9BmZ8S+qtWtAxPCLRIhv9YeXLcycJXsnyAVgv7R20e0E
cTcS4nQatfDgpSp/Yn5W4MpYsepG8YwRjKlRDs05uApVoQzLcwLg2RE5lehh52nR
LhP7Zz/AQOvPCk9Oeq+eK0ZfjV1gCZDrCmHgXFVQwk7+AoX5/7ZVbt5n+8ditIwI
S9H812N/4D2v+kjKnn+O8KBps6K8g+YQSyAEgH4j2TKIfHJmi8h2XH26Dc/Q+7Y3
oGGLqvhiQfEEAXmFhwZeFZmDb5igorHsimA1awLD8/FDoAWdfduhXZT+VGGV3hGi
9ctYbxLgMooR2LM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:34 2025 by rpki-client