Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
File:                     34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa (raw, json)
Hash identifier:          HZOMCQvACxK5hIcxem65Z0htR9GEeLOhQ6yQeHTZFOk=
Subject key identifier:   90:62:F2:DA:59:3B:36:10:FE:3A:D2:94:CD:2D:67:45:2B:DB:6A:45
Certificate issuer:       /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Certificate serial:       635E96FF4E934ED8C87404054BCA80F0AB6FF827
Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
Signing time:             Thu 06 Mar 2025 13:22:11 +0000
ROA not before:           Thu 06 Mar 2025 13:17:11 +0000
ROA not after:            Thu 05 Mar 2026 13:22:11 +0000
asID:                     267283
IP address blocks:        45.232.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl
                          rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5e:96:ff:4e:93:4e:d8:c8:74:04:05:4b:ca:80:f0:ab:6f:f8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
        Validity
            Not Before: Mar  6 13:17:11 2025 GMT
            Not After : Mar  5 13:22:11 2026 GMT
        Subject: CN=9062F2DA593B3610FE3AD294CD2D67452BDB6A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:09:07:50:c7:d1:d4:c0:50:3f:fb:6b:5b:
                    81:09:52:5c:12:46:7f:cb:74:8a:bf:43:f3:97:a9:
                    13:c1:b6:28:b8:99:cb:13:51:4d:ba:6b:2c:6c:6b:
                    75:51:7a:7d:6f:81:6c:1c:39:b1:65:54:3c:24:80:
                    62:c0:47:da:ef:ca:6a:75:6e:ae:ef:0b:ca:9c:db:
                    11:e8:a0:14:3c:e9:f1:31:a7:03:83:d0:75:02:2f:
                    18:c8:12:d3:40:b9:cc:f2:20:d9:b1:fe:e2:b2:c9:
                    95:59:f9:84:c9:01:a5:64:bb:0b:f6:ba:7b:4a:5f:
                    e7:ec:75:a3:cf:7d:a8:ef:6b:38:01:e0:80:5e:40:
                    88:73:cd:50:c5:f2:bd:6c:f3:20:65:09:c0:e3:e9:
                    a2:77:89:66:77:3f:0c:6b:ff:d9:ee:f0:cb:5f:77:
                    b2:e8:aa:d6:d5:04:71:bd:27:1d:5d:26:83:11:a7:
                    2b:d5:99:10:8c:c1:af:3b:be:64:bf:e8:b9:5f:9e:
                    29:8d:29:3a:b2:92:3f:c6:03:68:b2:52:4e:2c:6b:
                    44:f4:c2:b1:b5:1a:de:ba:f2:c0:0f:3b:4c:f3:e2:
                    66:7b:b6:42:a4:d2:a8:27:72:5e:68:7f:c2:8b:73:
                    7d:3c:2f:7d:d2:16:0f:1d:76:aa:e1:fa:b9:40:d1:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:62:F2:DA:59:3B:36:10:FE:3A:D2:94:CD:2D:67:45:2B:DB:6A:45
            X509v3 Authority Key Identifier:
                keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:48:4e:62:24:0c:ea:0c:02:0d:52:6f:22:5d:10:92:d4:fa:
         2b:a0:7d:80:cc:20:27:c7:13:c0:33:51:bf:c8:3c:d6:5a:3b:
         6e:c0:31:45:96:6b:50:c0:16:cc:16:c4:fd:59:c8:99:4a:43:
         ec:66:02:a0:a6:85:c1:a5:82:7e:ad:0b:96:97:eb:9b:61:1e:
         07:02:9b:2f:85:62:bc:19:4a:4a:06:b1:e4:fe:7c:39:91:eb:
         88:dc:a7:2e:98:59:62:fd:39:cf:eb:d4:eb:de:f4:d1:43:a3:
         1e:07:96:bf:4e:80:11:f3:5e:ce:fb:9f:2a:a6:19:aa:a0:25:
         16:ee:f8:cc:02:d4:ee:a6:ed:9d:9a:68:ee:a3:83:6d:cd:3c:
         f6:2a:0b:12:85:82:7c:bf:f9:3d:24:2b:87:56:b6:60:cc:cc:
         bd:b9:73:1f:54:47:ca:18:de:a9:63:c3:c7:c8:c8:6c:65:ed:
         34:20:eb:9a:ba:12:ae:64:0d:18:0f:61:22:2a:e7:be:66:c5:
         1d:81:48:a9:fb:9f:96:30:ec:61:29:0a:4e:86:96:e1:e7:6c:
         99:6a:b9:56:9b:0c:4c:f9:5b:c0:7d:ae:31:af:51:85:0f:2d:
         36:8b:ba:4d:d9:a8:f4:8e:e8:c7:af:57:ee:a6:56:01:d5:c5:
         27:6b:3d:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY16W/06TTtjIdAQFS8qA8Ktv+CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNFRjRFOEVFNTlCQjYyMzA1RUZDRDQ2MjRDQUU5RDUy
NDRFREM3QTAeFw0yNTAzMDYxMzE3MTFaFw0yNjAzMDUxMzIyMTFaMDMxMTAvBgNV
BAMTKDkwNjJGMkRBNTkzQjM2MTBGRTNBRDI5NENEMkQ2NzQ1MkJEQjZBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1wkHUMfR1MBQP/trW4EJUlwS
Rn/LdIq/Q/OXqRPBtii4mcsTUU26ayxsa3VRen1vgWwcObFlVDwkgGLAR9rvymp1
bq7vC8qc2xHooBQ86fExpwOD0HUCLxjIEtNAuczyINmx/uKyyZVZ+YTJAaVkuwv2
untKX+fsdaPPfajvazgB4IBeQIhzzVDF8r1s8yBlCcDj6aJ3iWZ3Pwxr/9nu8Mtf
d7LoqtbVBHG9Jx1dJoMRpyvVmRCMwa87vmS/6LlfnimNKTqykj/GA2iyUk4sa0T0
wrG1Gt668sAPO0zz4mZ7tkKk0qgncl5of8KLc308L33SFg8ddqrh+rlA0d3zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkGLy2lk7NhD+OtKUzS1nRSvbakUwHwYDVR0j
BBgwFoAUQ+9OjuWbtiMF781GJMrp1SRO3HowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZTYmlZRG1uN25ldTViR1hVYWRZY255dFp6ZVJLRWdRZFBUcjhLckJz
aGcvMS80M0VGNEU4RUU1OUJCNjIzMDVFRkNENDYyNENBRTlENTI0NEVEQzdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRUY0RThFRTU5QkI2MjMw
NUVGQ0Q0NjI0Q0FFOUQ1MjQ0RURDN0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2U2JpWURtbjduZXU1YkdYVWFkWWNueXRaemVSS0VnUWRQVHI4S3JCc2hnLzEv
MzQzNTJlMzIzMzMyMmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6NgwDQYJKoZIhvcNAQELBQADggEBAMdITmIk
DOoMAg1SbyJdEJLU+iugfYDMICfHE8AzUb/IPNZaO27AMUWWa1DAFswWxP1ZyJlK
Q+xmAqCmhcGlgn6tC5aX65thHgcCmy+FYrwZSkoGseT+fDmR64jcpy6YWWL9Oc/r
1Ove9NFDox4Hlr9OgBHzXs77nyqmGaqgJRbu+MwC1O6m7Z2aaO6jg23NPPYqCxKF
gny/+T0kK4dWtmDMzL25cx9UR8oY3qljw8fIyGxl7TQg65q6Eq5kDRgPYSIq575m
xR2BSKn7n5Yw7GEpCk6GluHnbJlquVabDEz5W8B9rjGvUYUPLTaLuk3ZqPSO6Mev
V+6mVgHVxSdrPbA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:42 2025 by rpki-client