Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323732313739.roa
File:                     34352e3138322e36332e302f32342d3332203d3e20323732313739.roa (raw, json)
Hash identifier:          /7spmLmLE1mM7UbmowMvLeUeat77+Z9BlM9R5i5ySCM=
Subject key identifier:   E7:6F:7E:6A:23:4B:5A:7E:B4:1E:88:9F:15:95:A5:56:B9:DC:34:20
Certificate issuer:       /CN=9FA538F973CB18AB688469E52C0575A71BEA5AC8
Certificate serial:       4DC64CAAB5343788778DA12A50B9A16E7DD0FC72
Authority key identifier: 9F:A5:38:F9:73:CB:18:AB:68:84:69:E5:2C:05:75:A7:1B:EA:5A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323732313739.roa
Signing time:             Mon 19 May 2025 14:38:05 +0000
ROA not before:           Mon 19 May 2025 14:33:05 +0000
ROA not after:            Mon 18 May 2026 14:38:05 +0000
asID:                     272179
IP address blocks:        45.182.63.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.crl
                          rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 12:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c6:4c:aa:b5:34:37:88:77:8d:a1:2a:50:b9:a1:6e:7d:d0:fc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA538F973CB18AB688469E52C0575A71BEA5AC8
        Validity
            Not Before: May 19 14:33:05 2025 GMT
            Not After : May 18 14:38:05 2026 GMT
        Subject: CN=E76F7E6A234B5A7EB41E889F1595A556B9DC3420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:c8:6a:36:d5:98:a5:2b:97:c4:e6:c3:83:
                    66:4e:f3:c6:4f:a7:47:e6:4e:24:56:79:d4:92:ae:
                    38:76:0c:05:59:08:72:7c:97:38:f5:73:03:f6:4f:
                    39:7a:d6:ef:6c:70:de:9c:76:56:be:db:ec:35:a5:
                    95:ee:42:9e:a7:67:9a:e4:86:79:63:15:8d:4e:69:
                    51:cf:5a:e1:ae:51:be:a8:d8:94:ec:42:fd:55:74:
                    1f:ae:d0:dd:d9:52:5f:2c:d5:fc:83:85:82:6b:60:
                    bc:63:9d:23:26:02:ee:cc:27:ed:20:79:6d:d1:26:
                    09:1b:2f:ed:27:ca:ad:02:25:75:0b:50:af:bd:4a:
                    6b:40:96:40:8b:9f:52:2a:f2:93:40:e6:09:41:b7:
                    3a:9b:94:eb:a1:64:81:a2:47:6b:61:5a:28:6d:5f:
                    14:ae:52:f6:a5:ff:fd:66:0e:9e:fc:62:23:52:75:
                    61:1f:e4:f2:a7:f6:cf:91:52:68:76:fa:e1:33:4d:
                    13:72:bf:94:37:d0:cd:f6:d2:84:53:62:5a:1b:3c:
                    4e:6f:b7:a5:3d:fb:66:ad:41:81:2d:5a:2f:da:e5:
                    5d:39:6b:e4:7e:0d:99:bd:57:73:34:93:cd:41:d2:
                    44:1d:78:d3:c1:aa:2c:aa:95:6e:bd:49:4f:4d:3c:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6F:7E:6A:23:4B:5A:7E:B4:1E:88:9F:15:95:A5:56:B9:DC:34:20
            X509v3 Authority Key Identifier:
                keyid:9F:A5:38:F9:73:CB:18:AB:68:84:69:E5:2C:05:75:A7:1B:EA:5A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323732313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:1f:6f:1f:97:d5:ba:a0:0a:00:99:d3:a4:45:fa:c9:4a:
         32:a4:9e:35:34:e7:1b:df:cf:97:20:e6:65:24:4b:8a:90:a6:
         a4:14:6c:89:81:87:4a:83:4a:ba:55:09:b2:e8:05:99:c2:dc:
         f0:ce:c7:dd:e3:b9:33:d3:5c:86:49:2d:57:ea:ea:7a:a5:f9:
         29:5f:93:f6:17:2a:62:2d:9f:92:3f:bc:4b:86:af:51:ba:ac:
         b1:70:fc:1d:f8:a2:ee:29:4c:de:9a:31:c2:f1:d6:48:fe:c1:
         04:b7:09:ef:23:5e:ec:e4:3e:47:2e:a5:14:22:7b:2a:3e:6f:
         32:db:32:e1:b5:14:0f:c0:2f:31:b9:46:a2:42:1d:2a:b7:81:
         95:53:13:c6:9b:d7:f2:3e:71:6e:dc:76:57:77:4a:35:3a:da:
         c0:16:72:dc:96:2c:a9:1b:65:35:5f:59:bf:e3:17:6b:4f:8b:
         6a:a2:87:6f:62:9c:b7:e8:03:8a:fb:2d:0e:0a:fd:af:b8:d1:
         21:89:f8:52:f4:35:61:dc:53:57:fa:ea:63:89:bc:61:a1:91:
         36:6e:45:75:2a:f1:30:d5:1e:40:1d:66:7d:f4:55:0a:b0:88:
         eb:f6:ba:f4:b1:1b:82:64:99:14:90:9d:3d:35:bf:ec:03:1a:
         3b:e0:03:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTcZMqrU0N4h3jaEqULmhbn3Q/HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZBNTM4Rjk3M0NCMThBQjY4ODQ2OUU1MkMwNTc1QTcx
QkVBNUFDODAeFw0yNTA1MTkxNDMzMDVaFw0yNjA1MTgxNDM4MDVaMDMxMTAvBgNV
BAMTKEU3NkY3RTZBMjM0QjVBN0VCNDFFODg5RjE1OTVBNTU2QjlEQzM0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rchqNtWYpSuXxObDg2ZO88ZP
p0fmTiRWedSSrjh2DAVZCHJ8lzj1cwP2Tzl61u9scN6cdla+2+w1pZXuQp6nZ5rk
hnljFY1OaVHPWuGuUb6o2JTsQv1VdB+u0N3ZUl8s1fyDhYJrYLxjnSMmAu7MJ+0g
eW3RJgkbL+0nyq0CJXULUK+9SmtAlkCLn1Iq8pNA5glBtzqblOuhZIGiR2thWiht
XxSuUval//1mDp78YiNSdWEf5PKn9s+RUmh2+uEzTRNyv5Q30M320oRTYlobPE5v
t6U9+2atQYEtWi/a5V05a+R+DZm9V3M0k81B0kQdeNPBqiyqlW69SU9NPE13AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU529+aiNLWn60HoifFZWlVrncNCAwHwYDVR0j
BBgwFoAUn6U4+XPLGKtohGnlLAV1pxvqWsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhSU0xTdFBwVUF4anJRQjdUZEhoU1VmOXVTdTFLQ1VBMk1MaW1HckhU
dmYvMC85RkE1MzhGOTczQ0IxOEFCNjg4NDY5RTUyQzA1NzVBNzFCRUE1QUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQTUzOEY5NzNDQjE4QUI2
ODg0NjlFNTJDMDU3NUE3MUJFQTVBQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoUlNMU3RQcFVBeGpyUUI3VGRIaFNVZjl1U3UxS0NVQTJNTGltR3JIVHZmLzAv
MzQzNTJlMzEzODMyMmUzNjMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNzMy
MzEzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY/MA0GCSqGSIb3DQEBCwUAA4IBAQAgtB9vH5fV
uqAKAJnTpEX6yUoypJ41NOcb38+XIOZlJEuKkKakFGyJgYdKg0q6VQmy6AWZwtzw
zsfd47kz01yGSS1X6up6pfkpX5P2FypiLZ+SP7xLhq9RuqyxcPwd+KLuKUzemjHC
8dZI/sEEtwnvI17s5D5HLqUUInsqPm8y2zLhtRQPwC8xuUaiQh0qt4GVUxPGm9fy
PnFu3HZXd0o1OtrAFnLcliypG2U1X1m/4xdrT4tqoodvYpy36AOK+y0OCv2vuNEh
ifhS9DVh3FNX+upjibxhoZE2bkV1KvEw1R5AHWZ99FUKsIjr9rr0sRuCZJkUkJ09
Nb/sAxo74AMU
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:37:43 2025 by rpki-client