Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
File:                     34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa (raw, json)
Hash identifier:          hjiRErBMUAL3dJ/Hr0ptxhD4/rtZfGkOxH1A5J1Nh5w=
Subject key identifier:   1D:58:53:EC:0B:91:F4:FA:CB:F2:4F:44:92:64:18:1D:75:8E:66:E8
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       3E3E75E15FF33A2A3BF283380CF7879226C174EA
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268070
IP address blocks:        45.167.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3e:75:e1:5f:f3:3a:2a:3b:f2:83:38:0c:f7:87:92:26:c1:74:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100C471875A6E05D1AF37A7613B6F71BAC71ABA667C047E213D84CA6D2968C25A16868EEB5295BD59CBBDF050A5F32552E5F53486428A52C4F6C69EFC81CFAB461923B10E7AEC4497D274B4C0F776535056B7582B18D16451601132A75A9C5E5B9762A02BE61C7849AB77CE2B8B0D46FDEEA94C4192A7CF07FD7EE143AE9B9AEFB096634666A4933ED9FCCB0011EEBEBA10F8DDDDBB9319746C309B6FA6B20732C49B39162953B276988F304F7B934F2B6767D4C29CA70F7B18348D62A969B8472698BBDD70879BF46B17ECAC7ADAD56F39E93F2E10BFBE0247BED5F12CEED4F13A26A986EF24458471F803F00BA1B8477E20E6D6962A58A7BB037382EA338223C10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:87:5a:6e:05:d1:af:37:a7:61:3b:6f:71:
                    ba:c7:1a:ba:66:7c:04:7e:21:3d:84:ca:6d:29:68:
                    c2:5a:16:86:8e:eb:52:95:bd:59:cb:bd:f0:50:a5:
                    f3:25:52:e5:f5:34:86:42:8a:52:c4:f6:c6:9e:fc:
                    81:cf:ab:46:19:23:b1:0e:7a:ec:44:97:d2:74:b4:
                    c0:f7:76:53:50:56:b7:58:2b:18:d1:64:51:60:11:
                    32:a7:5a:9c:5e:5b:97:62:a0:2b:e6:1c:78:49:ab:
                    77:ce:2b:8b:0d:46:fd:ee:a9:4c:41:92:a7:cf:07:
                    fd:7e:e1:43:ae:9b:9a:ef:b0:96:63:46:66:a4:93:
                    3e:d9:fc:cb:00:11:ee:be:ba:10:f8:dd:dd:bb:93:
                    19:74:6c:30:9b:6f:a6:b2:07:32:c4:9b:39:16:29:
                    53:b2:76:98:8f:30:4f:7b:93:4f:2b:67:67:d4:c2:
                    9c:a7:0f:7b:18:34:8d:62:a9:69:b8:47:26:98:bb:
                    dd:70:87:9b:f4:6b:17:ec:ac:7a:da:d5:6f:39:e9:
                    3f:2e:10:bf:be:02:47:be:d5:f1:2c:ee:d4:f1:3a:
                    26:a9:86:ef:24:45:84:71:f8:03:f0:0b:a1:b8:47:
                    7e:20:e6:d6:96:2a:58:a7:bb:03:73:82:ea:33:82:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:58:53:EC:0B:91:F4:FA:CB:F2:4F:44:92:64:18:1D:75:8E:66:E8
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/34352e3136372e3132322e302f32342d3234203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:fb:c3:79:c2:fe:e8:fc:26:bb:5d:2d:76:42:b7:fa:b2:
         de:db:ac:df:1f:87:f0:c3:2c:e8:79:82:b0:b6:00:42:c7:d0:
         78:9d:e0:41:14:0d:b7:ee:44:c3:f6:96:f5:3e:46:6f:22:49:
         4e:35:f4:86:9b:ec:2d:5a:5d:0d:06:a4:16:e9:c2:61:29:65:
         01:cc:53:cf:01:7a:aa:fd:e9:4c:9b:7b:a1:89:54:b6:b5:42:
         12:00:02:19:b8:05:24:3e:eb:ab:8b:a3:2b:60:de:5e:7b:29:
         da:96:f6:98:42:ce:0e:bf:b1:5a:a7:90:a1:39:b3:98:b9:17:
         98:3e:eb:4b:a7:30:a3:04:ad:18:fe:fe:c8:ea:8b:b9:7e:5d:
         7c:6b:74:9a:77:a1:10:a1:e8:17:c7:1f:af:d3:7f:40:b8:e7:
         bb:9d:51:f8:fa:82:10:2f:6b:e3:8e:c6:7a:5d:ff:b3:48:4a:
         e4:12:0a:d2:fc:d8:d8:0a:9f:73:74:0d:c8:0f:24:9d:45:34:
         fa:97:e0:e6:2b:eb:da:4a:74:31:1e:4d:e1:f5:ab:b2:90:dc:
         30:77:53:ad:ae:99:d6:72:62:31:7f:09:d4:b1:18:d7:8b:d8:
         14:21:83:97:17:15:08:ba:0a:bf:23:f8:ac:25:c2:68:07:a1:
         a5:71:c2:f5
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPj514V/zOio78oM4DPeHkibBdOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVDNDIwNTVBRkM1OUExMDRCODdGRDY3MDYzNzUzMzFC
OEY2QkY1NTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ3MTg3NUE2RTA1RDFBRjM3
QTc2MTNCNkY3MUJBQzcxQUJBNjY3QzA0N0UyMTNEODRDQTZEMjk2OEMyNUExNjg2
OEVFQjUyOTVCRDU5Q0JCREYwNTBBNUYzMjU1MkU1RjUzNDg2NDI4QTUyQzRGNkM2
OUVGQzgxQ0ZBQjQ2MTkyM0IxMEU3QUVDNDQ5N0QyNzRCNEMwRjc3NjUzNTA1NkI3
NTgyQjE4RDE2NDUxNjAxMTMyQTc1QTlDNUU1Qjk3NjJBMDJCRTYxQzc4NDlBQjc3
Q0UyQjhCMEQ0NkZERUVBOTRDNDE5MkE3Q0YwN0ZEN0VFMTQzQUU5QjlBRUZCMDk2
NjM0NjY2QTQ5MzNFRDlGQ0NCMDAxMUVFQkVCQTEwRjhEREREQkI5MzE5NzQ2QzMw
OUI2RkE2QjIwNzMyQzQ5QjM5MTYyOTUzQjI3Njk4OEYzMDRGN0I5MzRGMkI2NzY3
RDRDMjlDQTcwRjdCMTgzNDhENjJBOTY5Qjg0NzI2OThCQkRENzA4NzlCRjQ2QjE3
RUNBQzdBREFENTZGMzlFOTNGMkUxMEJGQkUwMjQ3QkVENUYxMkNFRUQ0RjEzQTI2
QTk4NkVGMjQ0NTg0NzFGODAzRjAwQkExQjg0NzdFMjBFNkQ2OTYyQTU4QTdCQjAz
NzM4MkVBMzM4MjIzQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxHGHWm4F0a83p2E7b3G6xxq6ZnwEfiE9hMptKWjCWhaGjutSlb1Z
y73wUKXzJVLl9TSGQopSxPbGnvyBz6tGGSOxDnrsRJfSdLTA93ZTUFa3WCsY0WRR
YBEyp1qcXluXYqAr5hx4Sat3ziuLDUb97qlMQZKnzwf9fuFDrpua77CWY0ZmpJM+
2fzLABHuvroQ+N3du5MZdGwwm2+msgcyxJs5FilTsnaYjzBPe5NPK2dn1MKcpw97
GDSNYqlpuEcmmLvdcIeb9GsX7Kx62tVvOek/LhC/vgJHvtXxLO7U8TomqYbvJEWE
cfgD8AuhuEd+IObWlipYp7sDc4LqM4IjwQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FB1YU+wLkfT6y/JPRJJkGB11jmboMB8GA1UdIwQYMBaAFC7EIFWvxZoQS4f9ZwY3
UzG49r9VMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZRUZWTEtUV1JkRzdv
b0V4OVF6UGdaajhlVzhOZThqN1p3WERSRFA5aWFELzEvMkVDNDIwNTVBRkM1OUEx
MDRCODdGRDY3MDYzNzUzMzFCOEY2QkY1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRUM0MjA1NUFGQzU5QTEwNEI4N0ZENjcwNjM3NTMzMUI4RjZC
RjU1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWUVGVkxLVFdSZEc3b29FeDlR
elBnWmo4ZVc4TmU4ajdad1hEUkRQOWlhRC8xLzM0MzUyZTMxMzYzNzJlMzEzMjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Lad6MA0GCSqGSIb3DQEBCwUAA4IBAQB30PvDecL+6Pwmu10tdkK3+rLe26zfH4fw
wyzoeYKwtgBCx9B4neBBFA237kTD9pb1PkZvIklONfSGm+wtWl0NBqQW6cJhKWUB
zFPPAXqq/elMm3uhiVS2tUISAAIZuAUkPuuri6MrYN5eeynalvaYQs4Ov7Fap5Ch
ObOYuReYPutLpzCjBK0Y/v7I6ou5fl18a3Sad6EQoegXxx+v039AuOe7nVH4+oIQ
L2vjjsZ6Xf+zSErkEgrS/NjYCp9zdA3IDySdRTT6l+DmK+vaSnQxHk3h9auykNww
d1OtrpnWcmIxfwnUsRjXi9gUIYOXFxUIugq/I/isJcJoB6GlccL1
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:26 2025 by rpki-client