Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
File:                     34352e3233312e31362e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier:          WubKiRuIAD8T6g+ABY+T/iGw55jIfAQf0QIsSh5cuS4=
Subject key identifier:   FE:B4:3C:67:79:17:62:30:3F:F8:88:3A:39:BA:96:A7:11:EC:9D:BA
Certificate issuer:       /CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
Certificate serial:       20F78D8F404AE5A75EBC454F75E4F84121571993
Authority key identifier: 07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
Signing time:             Thu 13 Feb 2025 17:03:46 +0000
ROA not before:           Thu 13 Feb 2025 16:58:46 +0000
ROA not after:            Thu 12 Feb 2026 17:03:46 +0000
asID:                     267191
IP address blocks:        45.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl
                          rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:8d:8f:40:4a:e5:a7:5e:bc:45:4f:75:e4:f8:41:21:57:19:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735F183418EC62A4A31A369DAE7B7C754A48BDE
        Validity
            Not Before: Feb 13 16:58:46 2025 GMT
            Not After : Feb 12 17:03:46 2026 GMT
        Subject: CN=FEB43C67791762303FF8883A39BA96A711EC9DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:ac:c9:6c:98:5f:68:d1:31:da:fe:39:ed:
                    f4:3e:29:b9:cb:29:d2:ec:8c:02:30:be:88:3c:9b:
                    d0:38:f6:fb:9e:e6:8f:fe:8c:e1:c5:66:4a:ca:88:
                    9d:37:4c:4a:08:1f:0c:7c:73:85:b7:47:bd:0c:32:
                    85:fd:9b:0b:0d:13:cd:57:3b:c4:7d:b8:e2:4a:a0:
                    1a:c1:6b:44:11:50:d1:98:e2:8f:e1:d6:d2:d2:c3:
                    64:b7:67:d3:75:83:a3:17:b7:cc:5e:ab:38:ac:40:
                    d9:84:eb:bd:7b:f8:74:e4:df:d3:13:f8:27:5b:90:
                    d0:d7:fa:fa:6e:a7:0e:e9:db:cb:c7:2b:04:c0:0f:
                    aa:9d:9b:c1:d2:63:a9:cc:03:4c:15:45:c6:f8:e7:
                    38:0b:28:21:0b:ca:2b:52:4d:a7:f5:8f:d1:dc:60:
                    4a:c7:82:54:df:d7:8a:c0:c5:b1:9e:df:ec:ea:8c:
                    48:f5:5e:e4:2d:c3:35:eb:f7:3b:a5:ea:a8:53:4b:
                    02:0d:76:83:6e:ad:6a:65:7b:7b:0d:7e:d9:c1:08:
                    80:fd:c2:85:38:87:6b:1c:6d:38:63:c8:68:c8:79:
                    2b:82:02:78:81:5c:97:20:d1:ec:2e:bc:5d:a1:13:
                    a6:45:7c:a6:5a:f1:a2:c0:46:e0:aa:88:d9:40:24:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:3C:67:79:17:62:30:3F:F8:88:3A:39:BA:96:A7:11:EC:9D:BA
            X509v3 Authority Key Identifier:
                keyid:07:35:F1:83:41:8E:C6:2A:4A:31:A3:69:DA:E7:B7:C7:54:A4:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/0735F183418EC62A4A31A369DAE7B7C754A48BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0735F183418EC62A4A31A369DAE7B7C754A48BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/0/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:aa:33:7d:72:3c:ad:59:14:50:33:34:51:98:ff:e4:ea:
         c4:20:3c:48:b6:26:81:d7:3e:9a:cb:de:23:ce:42:b8:64:b1:
         19:2f:fb:56:a9:53:eb:40:93:13:51:5f:a9:d7:e3:98:09:04:
         9a:14:db:18:84:e8:c2:09:d0:a6:c4:af:47:cf:66:a1:a9:e6:
         bf:c7:ba:26:14:1d:63:09:8e:43:d0:14:a7:0d:c3:68:a6:52:
         ba:7a:66:66:b8:97:fb:5d:1f:e0:a1:8b:d6:a9:bf:8a:27:2c:
         52:57:83:77:46:43:d0:dd:ec:fc:dc:6e:55:11:7c:db:e5:3f:
         4b:ab:06:05:b3:e3:47:8b:8d:4b:3c:77:69:ef:68:cc:45:06:
         21:d2:a9:b8:34:22:d6:b6:4d:93:86:1e:eb:21:06:9d:30:81:
         a1:2b:f1:57:62:5f:5b:5b:cf:fc:17:7c:f5:eb:61:f2:f4:11:
         17:a8:73:51:94:08:21:ab:23:32:9c:d2:82:c7:67:43:96:85:
         32:8d:9c:74:69:c4:25:02:d7:60:22:a8:43:40:59:35:6b:11:
         d3:c4:8c:2d:99:d6:16:3b:6b:f3:01:c7:3b:3f:1c:cd:5a:f9:
         ef:6a:7c:6c:5a:50:7d:6f:1d:ae:d0:73:3e:26:8d:e6:03:3d:
         75:72:65:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIPeNj0BK5adevEVPdeT4QSFXGZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDczNUYxODM0MThFQzYyQTRBMzFBMzY5REFFN0I3Qzc1
NEE0OEJERTAeFw0yNTAyMTMxNjU4NDZaFw0yNjAyMTIxNzAzNDZaMDMxMTAvBgNV
BAMTKEZFQjQzQzY3NzkxNzYyMzAzRkY4ODgzQTM5QkE5NkE3MTFFQzlEQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCws6zJbJhfaNEx2v457fQ+KbnL
KdLsjAIwvog8m9A49vue5o/+jOHFZkrKiJ03TEoIHwx8c4W3R70MMoX9mwsNE81X
O8R9uOJKoBrBa0QRUNGY4o/h1tLSw2S3Z9N1g6MXt8xeqzisQNmE6717+HTk39MT
+CdbkNDX+vpupw7p28vHKwTAD6qdm8HSY6nMA0wVRcb45zgLKCELyitSTaf1j9Hc
YErHglTf14rAxbGe3+zqjEj1XuQtwzXr9zul6qhTSwINdoNurWple3sNftnBCID9
woU4h2scbThjyGjIeSuCAniBXJcg0ewuvF2hE6ZFfKZa8aLARuCqiNlAJBOvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/rQ8Z3kXYjA/+Ig6ObqWpxHsnbowHwYDVR0j
BBgwFoAUBzXxg0GOxipKMaNp2ue3x1Ski94wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtTbXQxZXlKWXlMVWpBQ1g4TFZrVFUxZktkQ3dkNjF3Vlh1VnZYU04y
OXQvMC8wNzM1RjE4MzQxOEVDNjJBNEEzMUEzNjlEQUU3QjdDNzU0QTQ4QkRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3MzVGMTgzNDE4RUM2MkE0
QTMxQTM2OURBRTdCN0M3NTRBNDhCREUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrU210MWV5Sll5TFVqQUNYOExWa1RVMWZLZEN3ZDYxd1ZYdVZ2WFNOMjl0LzAv
MzQzNTJlMzIzMzMxMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALecQMA0GCSqGSIb3DQEBCwUAA4IBAQBZ7KozfXI8
rVkUUDM0UZj/5OrEIDxItiaB1z6ay94jzkK4ZLEZL/tWqVPrQJMTUV+p1+OYCQSa
FNsYhOjCCdCmxK9Hz2ahqea/x7omFB1jCY5D0BSnDcNoplK6emZmuJf7XR/goYvW
qb+KJyxSV4N3RkPQ3ez83G5VEXzb5T9LqwYFs+NHi41LPHdp72jMRQYh0qm4NCLW
tk2Thh7rIQadMIGhK/FXYl9bW8/8F3z162Hy9BEXqHNRlAghqyMynNKCx2dDloUy
jZx0acQlAtdgIqhDQFk1axHTxIwtmdYWO2vzAcc7PxzNWvnvanxsWlB9bx2u0HM+
Jo3mAz11cmUO
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:19 2025 by rpki-client