Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa
File:                     34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa (raw, json)
Hash identifier:          CPvT3p3XAZFfu3gOfh4/owWrLpHzeZEHAOI08mcgjF4=
Subject key identifier:   A7:7A:69:5D:A1:73:26:75:C4:16:8B:AA:F6:19:18:15:08:2F:99:94
Certificate issuer:       /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F
Certificate serial:       20903A1DEC8525184D614E82EAA4E63C92E6F972
Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa
Signing time:             Fri 25 Jul 2025 17:55:30 +0000
ROA not before:           Fri 25 Jul 2025 17:50:30 +0000
ROA not after:            Fri 24 Jul 2026 17:55:30 +0000
asID:                     264293
IP address blocks:        45.232.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:3a:1d:ec:85:25:18:4d:61:4e:82:ea:a4:e6:3c:92:e6:f9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F
        Validity
            Not Before: Jul 25 17:50:30 2025 GMT
            Not After : Jul 24 17:55:30 2026 GMT
        Subject: CN=A77A695DA1732675C4168BAAF6191815082F9994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:e2:07:19:a6:14:7d:91:0f:08:3c:18:9b:
                    17:51:04:47:0f:b8:b1:c3:a9:a8:1a:68:20:7a:b9:
                    fa:d3:f1:dd:a5:d1:62:45:70:c3:cd:0e:43:53:18:
                    72:1a:fd:bf:31:a7:ea:c3:43:e6:e0:d4:19:9a:93:
                    b8:9b:06:72:26:cc:e7:49:9e:09:c2:84:20:43:73:
                    c0:4e:97:18:e8:39:36:bd:12:64:24:85:7c:fb:41:
                    3d:35:95:98:40:c4:2e:c1:eb:c5:9f:4c:6d:5c:94:
                    da:ec:df:22:24:6e:8e:cc:7e:6b:81:2f:c7:98:b0:
                    00:d3:11:d7:10:f2:f5:8d:dd:52:5c:b4:3b:80:bc:
                    56:fb:6f:0c:09:52:01:b6:b2:59:81:64:47:a8:05:
                    e8:74:24:b2:a3:9e:9b:b9:62:17:cd:06:0f:84:e9:
                    91:89:bd:33:08:83:3c:89:35:e1:2b:9c:dd:be:7e:
                    aa:bc:12:4a:4a:a7:65:27:65:79:da:09:ab:76:3d:
                    aa:13:d1:f5:85:e6:7a:ea:a5:81:54:ec:c6:db:f2:
                    4a:66:4c:94:68:d7:8d:e1:70:d5:50:a1:2e:08:28:
                    b8:27:3a:96:8a:d3:e1:ea:bf:cf:08:74:88:82:3d:
                    65:61:27:ca:99:7d:05:8e:7a:ff:e1:32:07:57:e8:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:69:5D:A1:73:26:75:C4:16:8B:AA:F6:19:18:15:08:2F:99:94
            X509v3 Authority Key Identifier:
                keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:e7:24:7d:82:ea:fb:fe:d2:04:ea:b0:6e:0e:5e:39:c0:
         5f:ff:55:8c:ed:ed:c7:4d:66:6d:50:03:70:ac:10:25:d5:f7:
         6b:29:08:48:6c:03:30:50:8e:17:5a:d7:5f:9b:08:96:26:f6:
         c2:5b:4d:32:27:97:a4:62:8c:e0:fc:97:3c:39:aa:11:d3:43:
         72:94:b3:39:2e:17:d9:68:47:a3:b7:83:66:3b:07:22:61:d6:
         79:7f:59:db:b2:c1:1d:dc:3e:9a:92:c9:11:d2:51:a4:f4:1d:
         e1:ff:89:e0:07:dd:b1:9d:2f:a2:f3:c4:b2:8e:1c:d0:88:d5:
         ac:a6:db:af:ed:af:ff:1b:c7:c9:7c:5f:9a:d3:3b:b7:85:af:
         af:45:8f:a2:42:67:a2:e5:42:7f:44:0c:24:bd:00:e4:78:1d:
         6a:be:85:83:6f:5f:aa:e4:b5:77:77:4d:ea:4d:d1:7d:e5:e2:
         f5:6e:b5:11:ab:13:4e:39:f3:75:3b:1d:d0:22:cc:7b:62:04:
         65:37:b0:f0:2a:22:5d:ec:d4:7f:fe:95:b1:35:45:d0:0b:7b:
         ff:84:ed:68:37:ab:5b:3a:1b:da:1b:97:f1:b9:c4:e3:b2:79:
         3a:25:4d:87:94:13:c5:c3:14:4f:51:90:7c:df:72:3d:5b:ba:
         82:34:b2:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIJA6HeyFJRhNYU6C6qTmPJLm+XIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5
NTNFQTI5RjAeFw0yNTA3MjUxNzUwMzBaFw0yNjA3MjQxNzU1MzBaMDMxMTAvBgNV
BAMTKEE3N0E2OTVEQTE3MzI2NzVDNDE2OEJBQUY2MTkxODE1MDgyRjk5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmOIHGaYUfZEPCDwYmxdRBEcP
uLHDqagaaCB6ufrT8d2l0WJFcMPNDkNTGHIa/b8xp+rDQ+bg1Bmak7ibBnImzOdJ
ngnChCBDc8BOlxjoOTa9EmQkhXz7QT01lZhAxC7B68WfTG1clNrs3yIkbo7MfmuB
L8eYsADTEdcQ8vWN3VJctDuAvFb7bwwJUgG2slmBZEeoBeh0JLKjnpu5YhfNBg+E
6ZGJvTMIgzyJNeErnN2+fqq8EkpKp2UnZXnaCat2PaoT0fWF5nrqpYFU7Mbb8kpm
TJRo143hcNVQoS4IKLgnOpaK0+Hqv88IdIiCPWVhJ8qZfQWOev/hMgdX6NXbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp3ppXaFzJnXEFouq9hkYFQgvmZQwHwYDVR0j
BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW
RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx
ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dha3R0Q2syaktDMnlxU2d6aXpySnJyWTVhZ3pzWjJ3N0JRcXZrWEZYVkZoLzAv
MzQzNTJlMzIzMzMyMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6KAwDQYJKoZIhvcNAQELBQADggEBAE9p5yR9
gur7/tIE6rBuDl45wF//VYzt7cdNZm1QA3CsECXV92spCEhsAzBQjhda11+bCJYm
9sJbTTInl6RijOD8lzw5qhHTQ3KUszkuF9loR6O3g2Y7ByJh1nl/WduywR3cPpqS
yRHSUaT0HeH/ieAH3bGdL6LzxLKOHNCI1aym26/tr/8bx8l8X5rTO7eFr69Fj6JC
Z6LlQn9EDCS9AOR4HWq+hYNvX6rktXd3TepN0X3l4vVutRGrE04583U7HdAizHti
BGU3sPAqIl3s1H/+lbE1RdALe/+E7Wg3q1s6G9obl/G5xOOyeTolTYeUE8XDFE9R
kHzfcj1buoI0sp8=
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:45 2025 by rpki-client