Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa
File:                     34352e3232342e37352e302f32342d3234203d3e20323637363638.roa (raw, json)
Hash identifier:          pjpm6esZBfLVzXe6RauTGZfNdoFvJzI0iRGGygA/r1w=
Subject key identifier:   4F:E1:C1:B0:34:B9:AD:31:7B:26:E5:D6:3F:C0:34:72:AB:B3:B6:86
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       13606ADD49462DC4B5320417AFC4C4DC634203A7
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa
Signing time:             Fri 28 Feb 2025 14:02:25 +0000
ROA not before:           Fri 28 Feb 2025 13:57:25 +0000
ROA not after:            Fri 27 Feb 2026 14:02:25 +0000
asID:                     267668
IP address blocks:        45.224.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:60:6a:dd:49:46:2d:c4:b5:32:04:17:af:c4:c4:dc:63:42:03:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Feb 28 13:57:25 2025 GMT
            Not After : Feb 27 14:02:25 2026 GMT
        Subject: CN=4FE1C1B034B9AD317B26E5D63FC03472ABB3B686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:c0:0e:83:c1:a4:62:a4:e4:00:01:99:fc:
                    55:84:19:3a:4e:36:ac:50:46:4b:0b:86:74:0a:31:
                    20:22:b7:34:e6:7a:b7:a7:ee:7f:c2:ca:81:d9:d4:
                    b3:6c:75:81:cb:26:a1:03:81:74:82:94:bd:16:74:
                    71:1e:2e:01:23:a1:1f:f8:e5:5c:a9:28:69:96:f0:
                    70:7e:c0:04:51:d3:9a:70:ab:d9:75:15:da:53:ba:
                    31:11:03:34:c3:cc:99:6a:2f:5b:bf:ee:7c:ad:4f:
                    73:42:a6:79:9b:6c:00:c4:91:c0:c0:d3:17:68:91:
                    fd:91:7c:09:81:8d:8b:58:9f:16:ca:c9:0c:94:56:
                    92:da:54:06:9f:3e:d1:eb:46:6f:04:17:4a:e5:fe:
                    19:24:72:83:34:8b:1d:ba:eb:b4:2b:e7:53:25:30:
                    73:b5:8c:da:92:25:64:4c:81:b7:6f:03:8c:08:75:
                    38:0d:1e:bd:0e:a8:18:a1:82:3d:32:06:09:63:14:
                    fd:d6:ee:c4:d0:15:b0:3b:4a:a2:74:4c:05:6d:67:
                    d2:77:08:47:1d:61:86:e6:8c:83:66:28:0f:b6:9f:
                    b8:a4:d2:3a:89:99:81:37:ab:1b:93:f0:3a:c2:9b:
                    a6:4c:61:18:ab:0b:ab:08:de:05:ca:05:12:db:62:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E1:C1:B0:34:B9:AD:31:7B:26:E5:D6:3F:C0:34:72:AB:B3:B6:86
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/34352e3232342e37352e302f32342d3234203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:f0:22:28:c8:c0:6d:ff:aa:40:b5:2b:5d:f3:cc:c1:3f:
         cd:4c:1f:dc:12:f9:47:90:f7:06:87:0e:72:7b:d7:d0:59:32:
         8b:be:d6:0d:a7:a9:96:e2:f0:6f:7e:22:e7:a6:f2:f2:b1:16:
         ae:91:80:ae:df:3a:ed:15:9c:46:1c:6d:31:0f:90:2a:e2:e8:
         31:7c:ce:7b:6c:33:7e:de:8b:77:ca:a3:9f:e1:31:8b:20:58:
         60:fb:ae:68:19:c6:e8:d7:d8:4e:f0:90:09:08:6a:6a:3b:54:
         14:a8:7e:12:24:cd:c7:22:fa:07:33:b6:76:32:e0:0e:46:12:
         c3:9a:a3:8f:bb:73:a1:32:f1:ba:e4:80:3f:93:35:47:72:40:
         cf:91:d2:30:35:92:4c:da:63:c7:be:3e:b8:31:81:09:62:fc:
         f1:ee:ec:0f:5a:9f:10:03:cd:e7:de:4c:41:d8:1c:91:4c:05:
         0d:b5:be:37:7a:9e:66:fd:c1:33:0e:84:1e:ed:ae:5c:83:45:
         46:ab:18:9b:d8:cb:93:eb:0f:e3:98:39:c8:90:47:4a:70:49:
         15:3c:85:c3:4d:35:1d:05:a8:8a:96:55:be:39:44:48:38:b1:
         da:32:b3:27:40:4b:f0:c4:4c:8d:af:12:3c:c1:ea:ad:93:f6:
         fa:8d:70:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE2Bq3UlGLcS1MgQXr8TE3GNCA6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4RjBBMjE1MkYxQThFNEQ1QjMwOTc3NDI3MkRCNzBE
OEJERTA1RDAeFw0yNTAyMjgxMzU3MjVaFw0yNjAyMjcxNDAyMjVaMDMxMTAvBgNV
BAMTKDRGRTFDMUIwMzRCOUFEMzE3QjI2RTVENjNGQzAzNDcyQUJCM0I2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJsAOg8GkYqTkAAGZ/FWEGTpO
NqxQRksLhnQKMSAitzTmeren7n/CyoHZ1LNsdYHLJqEDgXSClL0WdHEeLgEjoR/4
5VypKGmW8HB+wARR05pwq9l1FdpTujERAzTDzJlqL1u/7nytT3NCpnmbbADEkcDA
0xdokf2RfAmBjYtYnxbKyQyUVpLaVAafPtHrRm8EF0rl/hkkcoM0ix2667Qr51Ml
MHO1jNqSJWRMgbdvA4wIdTgNHr0OqBihgj0yBgljFP3W7sTQFbA7SqJ0TAVtZ9J3
CEcdYYbmjINmKA+2n7ik0jqJmYE3qxuT8DrCm6ZMYRirC6sI3gXKBRLbYjQTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT+HBsDS5rTF7JuXWP8A0cquztoYwHwYDVR0j
BBgwFoAU548KIVLxqOTVswl3QnLbcNi94F0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMS9FNzhGMEEyMTUyRjFBOEU0RDVCMzA5Nzc0MjcyREI3MEQ4QkRFMDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEYwQTIxNTJGMUE4RTRE
NUIzMDk3NzQyNzJEQjcwRDhCREUwNUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzEv
MzQzNTJlMzIzMjM0MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeBLMA0GCSqGSIb3DQEBCwUAA4IBAQCsjPAiKMjA
bf+qQLUrXfPMwT/NTB/cEvlHkPcGhw5ye9fQWTKLvtYNp6mW4vBvfiLnpvLysRau
kYCu3zrtFZxGHG0xD5Aq4ugxfM57bDN+3ot3yqOf4TGLIFhg+65oGcbo19hO8JAJ
CGpqO1QUqH4SJM3HIvoHM7Z2MuAORhLDmqOPu3OhMvG65IA/kzVHckDPkdIwNZJM
2mPHvj64MYEJYvzx7uwPWp8QA83n3kxB2ByRTAUNtb43ep5m/cEzDoQe7a5cg0VG
qxib2MuT6w/jmDnIkEdKcEkVPIXDTTUdBaiKllW+OURIOLHaMrMnQEvwxEyNrxI8
weqtk/b6jXBV
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:21:26 2025 by rpki-client