Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/34352e3136312e3139322e302f32322d3234203d3e20323638343831.roa
File:                     34352e3136312e3139322e302f32322d3234203d3e20323638343831.roa (raw, json)
Hash identifier:          fBAEhQtXNVgdXwiCpp5h1bjPHQrZTFRt4f9yNMPfgf8=
Subject key identifier:   86:4E:25:B7:4D:4E:61:E0:E6:83:E9:C9:61:29:B1:11:64:48:71:7A
Certificate issuer:       /CN=6A491773A546297AE0A6F4300C76B7D21766A14F
Certificate serial:       65A8FE99BACB62A3ABBD0D3A998D5BB6701A4039
Authority key identifier: 6A:49:17:73:A5:46:29:7A:E0:A6:F4:30:0C:76:B7:D2:17:66:A1:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A491773A546297AE0A6F4300C76B7D21766A14F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/34352e3136312e3139322e302f32322d3234203d3e20323638343831.roa
Signing time:             Thu 06 Mar 2025 14:02:12 +0000
ROA not before:           Thu 06 Mar 2025 13:57:12 +0000
ROA not after:            Thu 05 Mar 2026 14:02:12 +0000
asID:                     268481
IP address blocks:        45.161.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/6A491773A546297AE0A6F4300C76B7D21766A14F.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/6A491773A546297AE0A6F4300C76B7D21766A14F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A491773A546297AE0A6F4300C76B7D21766A14F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 18:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a8:fe:99:ba:cb:62:a3:ab:bd:0d:3a:99:8d:5b:b6:70:1a:40:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A491773A546297AE0A6F4300C76B7D21766A14F
        Validity
            Not Before: Mar  6 13:57:12 2025 GMT
            Not After : Mar  5 14:02:12 2026 GMT
        Subject: CN=864E25B74D4E61E0E683E9C96129B1116448717A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:1e:e2:1d:63:a0:63:2f:a8:1f:12:e3:e9:
                    10:af:5d:c4:62:67:6f:b2:e6:41:21:8f:36:cd:17:
                    f5:ff:73:ae:ae:7c:e5:9e:fc:f9:20:dc:e0:13:40:
                    73:34:44:7c:e0:2c:fc:d6:c9:57:74:28:1b:f5:6b:
                    a6:41:fb:ba:22:7f:c4:68:5b:14:55:43:91:c0:0b:
                    ac:e6:2e:0b:3d:66:60:eb:aa:0a:b6:97:1d:67:bf:
                    cf:70:bc:5f:e9:ce:df:01:80:a7:35:1f:9c:31:91:
                    ea:4d:e7:da:46:f2:39:3c:e6:52:ba:b5:e4:2a:55:
                    48:14:77:1c:5b:66:b8:58:01:27:77:52:b1:28:bf:
                    31:b0:84:dd:12:d9:74:4c:0b:85:49:41:d9:4f:10:
                    e3:f2:7b:a6:d6:8c:9c:84:66:81:9a:ba:54:a1:b7:
                    1d:17:3e:c7:49:78:37:cb:3a:7a:e9:e7:97:4d:77:
                    8e:c0:43:a6:7d:1e:f4:66:ed:02:f1:a6:f7:8a:4e:
                    b5:7b:5b:42:78:bc:c4:01:69:8a:7b:5c:d4:16:18:
                    69:f2:18:fb:33:54:13:c2:9c:d6:57:25:fe:84:17:
                    af:12:6d:06:c5:56:0a:45:39:83:d5:ff:96:76:84:
                    a2:f0:05:d1:b5:02:97:cb:9b:87:c0:41:9c:66:a5:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4E:25:B7:4D:4E:61:E0:E6:83:E9:C9:61:29:B1:11:64:48:71:7A
            X509v3 Authority Key Identifier:
                keyid:6A:49:17:73:A5:46:29:7A:E0:A6:F4:30:0C:76:B7:D2:17:66:A1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/6A491773A546297AE0A6F4300C76B7D21766A14F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A491773A546297AE0A6F4300C76B7D21766A14F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/1/34352e3136312e3139322e302f32322d3234203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:02:4f:02:63:51:81:ed:0c:12:d2:20:38:a1:dc:9c:2b:12:
         9b:9e:70:6f:3f:98:28:f3:ca:24:d3:cb:2c:04:34:04:f4:4a:
         06:90:15:f0:ec:4b:13:9c:12:b0:aa:a1:94:51:44:d6:3c:a0:
         12:33:4e:f6:f4:22:27:c7:56:8e:c9:a0:15:28:8a:67:9a:99:
         6e:3a:6f:b1:ee:56:79:35:46:ac:ee:cf:14:05:6a:79:18:54:
         45:25:46:03:77:3b:5d:f1:cf:79:5a:ed:fc:58:bb:ef:0f:4d:
         4d:5f:c7:91:ef:e6:06:c3:cb:4a:0b:9e:0d:14:d6:0f:c8:8e:
         e8:f9:92:66:eb:cf:dd:b5:49:68:8a:c4:2f:a0:cc:30:b7:2e:
         7b:9a:74:ee:44:a0:2f:9b:86:3c:fa:62:fb:e2:fd:8b:b9:48:
         c4:4c:d7:03:65:4b:e7:18:d1:66:52:8b:8a:bd:10:7a:f7:0d:
         ec:d1:ac:b3:1f:02:f8:77:d1:d8:50:69:c9:04:c0:17:0f:f9:
         fa:3f:dc:97:3d:da:c5:d1:4b:14:01:b1:c2:4d:a7:60:c9:1f:
         1c:3a:74:7a:6c:4d:72:fc:18:82:4a:b2:dd:ce:40:a0:53:58:
         11:89:a1:9f:22:26:06:b8:4b:34:5d:a3:b4:c8:ab:10:3c:2e:
         f3:af:3c:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZaj+mbrLYqOrvQ06mY1btnAaQDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0OTE3NzNBNTQ2Mjk3QUUwQTZGNDMwMEM3NkI3RDIx
NzY2QTE0RjAeFw0yNTAzMDYxMzU3MTJaFw0yNjAzMDUxNDAyMTJaMDMxMTAvBgNV
BAMTKDg2NEUyNUI3NEQ0RTYxRTBFNjgzRTlDOTYxMjlCMTExNjQ0ODcxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwh7iHWOgYy+oHxLj6RCvXcRi
Z2+y5kEhjzbNF/X/c66ufOWe/Pkg3OATQHM0RHzgLPzWyVd0KBv1a6ZB+7oif8Ro
WxRVQ5HAC6zmLgs9ZmDrqgq2lx1nv89wvF/pzt8BgKc1H5wxkepN59pG8jk85lK6
teQqVUgUdxxbZrhYASd3UrEovzGwhN0S2XRMC4VJQdlPEOPye6bWjJyEZoGaulSh
tx0XPsdJeDfLOnrp55dNd47AQ6Z9HvRm7QLxpveKTrV7W0J4vMQBaYp7XNQWGGny
GPszVBPCnNZXJf6EF68SbQbFVgpFOYPV/5Z2hKLwBdG1ApfLm4fAQZxmpSnTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhk4lt01OYeDmg+nJYSmxEWRIcXowHwYDVR0j
BBgwFoAUakkXc6VGKXrgpvQwDHa30hdmoU8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXU1cFZMVDNTd2FxdjNWdWpkNXIyaEpxc0FlRm52WWZpZXNVOEZTQ2U0
SFAvMS82QTQ5MTc3M0E1NDYyOTdBRTBBNkY0MzAwQzc2QjdEMjE3NjZBMTRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBNDkxNzczQTU0NjI5N0FF
MEE2RjQzMDBDNzZCN0QyMTc2NkExNEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1NXBWTFQzU3dhcXYzVnVqZDVyMmhKcXNBZUZudllmaWVzVThGU0NlNEhQLzEv
MzQzNTJlMzEzNjMxMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItocAwDQYJKoZIhvcNAQELBQADggEBAK8CTwJj
UYHtDBLSIDih3JwrEpuecG8/mCjzyiTTyywENAT0SgaQFfDsSxOcErCqoZRRRNY8
oBIzTvb0IifHVo7JoBUoimeamW46b7HuVnk1RqzuzxQFankYVEUlRgN3O13xz3la
7fxYu+8PTU1fx5Hv5gbDy0oLng0U1g/Ijuj5kmbrz921SWiKxC+gzDC3LnuadO5E
oC+bhjz6Yvvi/Yu5SMRM1wNlS+cY0WZSi4q9EHr3DezRrLMfAvh30dhQackEwBcP
+fo/3Jc92sXRSxQBscJNp2DJHxw6dHpsTXL8GIJKst3OQKBTWBGJoZ8iJga4SzRd
o7TIqxA8LvOvPMk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:09 2025 by rpki-client