Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230322e302f32332d3233203d3e20323638383239.roa
File:                     34352e3232392e3230322e302f32332d3233203d3e20323638383239.roa (raw, json)
Hash identifier:          8wOVIak/EYu4qCR3u1w/NJbgPFUtXwI/incxnTe1xE4=
Subject key identifier:   73:17:7F:5B:93:CC:7A:20:F4:68:8C:13:97:04:5B:4A:34:46:DC:05
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       48D029CED41F75A6510B6A01E36543E2535AD5C6
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230322e302f32332d3233203d3e20323638383239.roa
Signing time:             Fri 18 Jul 2025 18:09:02 +0000
ROA not before:           Fri 18 Jul 2025 18:04:02 +0000
ROA not after:            Fri 17 Jul 2026 18:09:02 +0000
asID:                     268829
IP address blocks:        45.229.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 22:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:29:ce:d4:1f:75:a6:51:0b:6a:01:e3:65:43:e2:53:5a:d5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jul 18 18:04:02 2025 GMT
            Not After : Jul 17 18:09:02 2026 GMT
        Subject: CN=73177F5B93CC7A20F4688C1397045B4A3446DC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:c7:33:a3:ed:a3:2e:81:1b:be:37:06:3f:
                    6c:1a:e8:0e:31:b2:df:c3:9f:ba:3a:44:5b:b7:a3:
                    03:a4:1a:8c:13:c9:b8:48:ea:ba:db:c6:78:a8:03:
                    75:ce:e0:cb:37:06:89:1e:d0:6c:93:2b:c6:7e:39:
                    17:3d:39:0e:d9:ca:87:cf:92:f2:06:aa:98:96:33:
                    ce:d5:ee:a9:26:46:fa:0a:2c:1e:40:35:85:8d:3e:
                    3b:88:55:d4:a4:55:7e:b5:82:b4:01:81:c1:08:d3:
                    a2:e7:72:92:37:53:26:9e:14:a6:1e:25:4b:f2:3e:
                    3b:92:e5:ac:db:47:b4:ae:34:64:b5:88:b7:86:7a:
                    f5:53:f3:e2:ba:c7:74:38:e4:19:77:20:a0:83:22:
                    8f:b0:48:5b:ab:eb:da:29:d6:6f:d1:d2:0b:b9:4d:
                    4c:4d:63:59:ea:97:30:7e:b4:2f:d9:a2:30:3b:a1:
                    2a:a2:c2:63:05:eb:3a:f3:b7:e5:12:e4:6b:b4:35:
                    ea:53:87:3b:5b:2c:10:2a:7c:d5:dd:75:3e:fd:8c:
                    a2:71:b7:9a:e2:80:db:26:5a:d3:f3:c6:78:95:eb:
                    80:81:88:85:6b:d6:9a:ae:d3:ed:8a:b8:67:c8:0c:
                    ad:b0:ad:ff:9b:b3:df:98:c2:e7:1d:28:88:ab:54:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:17:7F:5B:93:CC:7A:20:F4:68:8C:13:97:04:5B:4A:34:46:DC:05
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3232392e3230322e302f32332d3233203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:f4:b7:be:a0:52:7b:1a:86:b4:81:e7:21:cf:40:f5:36:
         cc:67:ad:8a:20:18:0c:c9:df:eb:20:66:e9:06:ea:53:ea:ee:
         e7:5f:0a:d2:59:ea:70:b4:b1:a3:d0:8c:8b:b7:08:55:88:0e:
         36:c4:37:52:48:be:39:8c:fc:de:27:c0:e5:49:09:bc:d9:8b:
         7f:a4:8b:de:9a:6a:72:1e:81:04:e6:16:09:7d:5c:3c:b7:cf:
         06:fa:4a:26:02:73:c6:29:40:48:36:af:4b:58:8c:ba:0a:04:
         1d:a3:70:d9:ed:5e:f7:d5:77:a2:38:37:06:27:85:eb:5d:c7:
         a7:12:f8:93:ca:f0:73:93:59:24:24:84:ad:09:20:96:fe:74:
         f6:ec:f8:be:5a:f8:13:8b:ad:ce:d2:d8:aa:11:30:8e:f7:70:
         41:99:0e:a7:6a:93:57:ce:87:81:19:ba:12:47:40:28:07:6b:
         f8:e4:3e:f1:cd:14:d5:dc:49:b1:55:52:d5:74:a2:cf:7a:d3:
         1f:17:c1:fa:d5:df:41:24:8c:ec:1f:bd:6e:7a:53:af:e7:11:
         6d:8f:16:56:56:43:e5:dc:f8:41:b6:24:d1:44:48:7a:37:e2:
         d5:2d:90:34:22:b4:4d:89:66:3e:91:b1:59:bc:37:b7:1b:71:
         59:73:69:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSNApztQfdaZRC2oB42VD4lNa1cYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzExOTE3MjlBMENCNTJDRDZBQjQyNTMxRDlFMUI1QjA1
NkY1MDIwQjAeFw0yNTA3MTgxODA0MDJaFw0yNjA3MTcxODA5MDJaMDMxMTAvBgNV
BAMTKDczMTc3RjVCOTNDQzdBMjBGNDY4OEMxMzk3MDQ1QjRBMzQ0NkRDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucMczo+2jLoEbvjcGP2wa6A4x
st/Dn7o6RFu3owOkGowTybhI6rrbxnioA3XO4Ms3Boke0GyTK8Z+ORc9OQ7ZyofP
kvIGqpiWM87V7qkmRvoKLB5ANYWNPjuIVdSkVX61grQBgcEI06LncpI3UyaeFKYe
JUvyPjuS5azbR7SuNGS1iLeGevVT8+K6x3Q45Bl3IKCDIo+wSFur69op1m/R0gu5
TUxNY1nqlzB+tC/ZojA7oSqiwmMF6zrzt+US5Gu0NepThztbLBAqfNXddT79jKJx
t5rigNsmWtPzxniV64CBiIVr1pqu0+2KuGfIDK2wrf+bs9+YwucdKIirVJ4fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcxd/W5PMeiD0aIwTlwRbSjRG3AUwHwYDVR0j
BBgwFoAUMRkXKaDLUs1qtCUx2eG1sFb1AgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8zMTE5MTcyOUEwQ0I1MkNENkFCNDI1MzFEOUUxQjVCMDU2RjUwMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxMTkxNzI5QTBDQjUyQ0Q2
QUI0MjUzMUQ5RTFCNUIwNTZGNTAyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDRGh4ZUh5Qms0UVB2dUpnYWJmNVJLOVV3VXZyclNKbWRLQ0hQSkE1WVpxLzAv
MzQzNTJlMzIzMjM5MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzODMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5cowDQYJKoZIhvcNAQELBQADggEBAH1t9Le+
oFJ7Goa0gechz0D1NsxnrYogGAzJ3+sgZukG6lPq7udfCtJZ6nC0saPQjIu3CFWI
DjbEN1JIvjmM/N4nwOVJCbzZi3+ki96aanIegQTmFgl9XDy3zwb6SiYCc8YpQEg2
r0tYjLoKBB2jcNntXvfVd6I4NwYnhetdx6cS+JPK8HOTWSQkhK0JIJb+dPbs+L5a
+BOLrc7S2KoRMI73cEGZDqdqk1fOh4EZuhJHQCgHa/jkPvHNFNXcSbFVUtV0os96
0x8XwfrV30EkjOwfvW56U6/nEW2PFlZWQ+Xc+EG2JNFESHo34tUtkDQitE2JZj6R
sVm8N7cbcVlzabI=
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:04 2025 by rpki-client