Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          dG17mTKNexKH23rpzuO8OTDgyGG3rkh3DuY5WxAQhXk=
Subject key identifier:   A2:E0:61:02:A7:01:C0:02:40:BE:BA:E4:08:B4:AA:84:7B:C2:75:86
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       1DC1F86514C31BC766E4CBE69F06E967FC706FDB
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa
Signing time:             Sun 01 Jun 2025 18:55:54 +0000
ROA not before:           Sun 01 Jun 2025 18:50:54 +0000
ROA not after:            Sun 31 May 2026 18:55:54 +0000
asID:                     267961
IP address blocks:        45.165.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c1:f8:65:14:c3:1b:c7:66:e4:cb:e6:9f:06:e9:67:fc:70:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: Jun  1 18:50:54 2025 GMT
            Not After : May 31 18:55:54 2026 GMT
        Subject: CN=A2E06102A701C00240BEBAE408B4AA847BC27586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:cc:1a:27:07:fe:39:1a:0d:e0:4c:4d:f6:
                    5c:f9:9f:39:0a:7c:05:89:6e:20:16:9f:75:d4:1f:
                    b6:f1:c1:a8:44:d1:40:1b:2f:93:46:0b:7b:af:a2:
                    60:54:dd:96:9c:7b:1d:6c:58:43:de:64:b2:5f:2c:
                    b3:de:fc:5a:ab:f2:ad:9c:b7:5a:ab:f6:f6:c6:26:
                    90:af:9b:70:9f:cf:d9:14:3b:5c:26:21:0e:7f:1f:
                    fc:db:5a:a6:14:cc:72:81:01:ae:75:03:7a:8c:7e:
                    61:38:70:14:05:1e:bc:e8:0c:37:ec:11:a9:38:57:
                    59:ae:aa:3d:7f:92:15:c1:e1:7a:e2:d9:02:32:7d:
                    e0:c0:47:09:45:83:06:85:22:e5:9a:e1:ab:4e:99:
                    cb:0c:5a:0b:53:b6:02:cc:25:8b:b5:13:bb:83:3f:
                    da:2f:bf:32:d3:b9:d4:84:f6:ed:80:04:bf:94:0e:
                    b1:32:f7:0d:1a:96:92:34:ec:30:50:3a:65:b7:6f:
                    9d:45:6a:6c:5e:f6:bf:65:80:25:91:c7:ce:a9:13:
                    a9:e1:b6:11:53:0a:19:2c:6d:db:62:79:b6:b9:df:
                    2e:92:a9:fb:ad:2e:8a:e0:2b:e1:22:79:a9:c3:c2:
                    09:ef:33:90:f8:ff:fe:30:e6:a0:af:90:8e:70:3a:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:61:02:A7:01:C0:02:40:BE:BA:E4:08:B4:AA:84:7B:C2:75:86
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136302e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:ec:81:60:a0:f4:ad:53:e6:6a:d3:ee:be:b0:28:4e:dc:
         7e:eb:97:36:cc:a9:c0:fc:e4:52:9b:f0:38:2f:86:bb:1b:2b:
         f2:3a:e6:75:76:10:51:00:49:a8:87:0f:b4:52:4e:27:a0:e8:
         c1:70:ab:25:85:de:5a:49:05:59:8b:36:25:23:ff:ac:f4:60:
         d3:a2:3a:90:fe:92:6f:af:f2:81:1f:c0:4b:a0:43:6c:e3:14:
         71:ab:24:5b:f8:bb:f6:a0:b5:60:d5:62:3c:89:3d:35:03:3b:
         47:86:c5:3c:2f:51:c8:17:6f:f4:0c:71:39:b4:29:71:bd:c7:
         bb:3c:9a:6a:8d:2f:b3:1a:e5:09:4c:82:51:5a:54:9f:2e:ea:
         09:7d:81:33:b6:43:63:03:e4:98:a9:da:51:2f:b9:7a:d1:b2:
         f6:63:e5:73:ff:92:df:20:46:43:45:55:aa:32:00:d5:5a:21:
         b0:47:9e:8f:ce:78:a9:87:5f:c0:96:12:f4:8f:b3:c2:d3:0e:
         be:04:bb:99:61:d6:90:fa:ba:b0:51:4c:11:02:8f:7d:0e:68:
         6b:dc:35:3e:28:c6:db:e4:53:e1:f3:d9:2e:1c:11:09:d7:5a:
         9e:13:1c:cf:4d:64:44:1e:73:0a:44:26:df:b3:4c:a6:e6:09:
         56:d5:fb:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHcH4ZRTDG8dm5MvmnwbpZ/xwb9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCN0FFQ0IxODMxODk3MzEzNEVBRTkyNzY0NTJBRTRC
Njg0NTNDRjAeFw0yNTA2MDExODUwNTRaFw0yNjA1MzExODU1NTRaMDMxMTAvBgNV
BAMTKEEyRTA2MTAyQTcwMUMwMDI0MEJFQkFFNDA4QjRBQTg0N0JDMjc1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aMwaJwf+ORoN4ExN9lz5nzkK
fAWJbiAWn3XUH7bxwahE0UAbL5NGC3uvomBU3Zacex1sWEPeZLJfLLPe/Fqr8q2c
t1qr9vbGJpCvm3Cfz9kUO1wmIQ5/H/zbWqYUzHKBAa51A3qMfmE4cBQFHrzoDDfs
Eak4V1muqj1/khXB4Xri2QIyfeDARwlFgwaFIuWa4atOmcsMWgtTtgLMJYu1E7uD
P9ovvzLTudSE9u2ABL+UDrEy9w0alpI07DBQOmW3b51Famxe9r9lgCWRx86pE6nh
thFTChksbdtieba53y6SqfutLorgK+EieanDwgnvM5D4//4w5qCvkI5wOkOxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUouBhAqcBwAJAvrrkCLSqhHvCdYYwHwYDVR0j
BBgwFoAUCbeuyxgxiXMTTq6SdkUq5LaEU88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wOUI3QUVDQjE4MzE4OTczMTM0RUFFOTI3NjQ1MkFFNEI2ODQ1M0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5QjdBRUNCMTgzMTg5NzMx
MzRFQUU5Mjc2NDUyQUU0QjY4NDUzQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzQzNTJlMzEzNjM1MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpaAwDQYJKoZIhvcNAQELBQADggEBAJbt7IFg
oPStU+Zq0+6+sChO3H7rlzbMqcD85FKb8DgvhrsbK/I65nV2EFEASaiHD7RSTieg
6MFwqyWF3lpJBVmLNiUj/6z0YNOiOpD+km+v8oEfwEugQ2zjFHGrJFv4u/agtWDV
YjyJPTUDO0eGxTwvUcgXb/QMcTm0KXG9x7s8mmqNL7Ma5QlMglFaVJ8u6gl9gTO2
Q2MD5Jip2lEvuXrRsvZj5XP/kt8gRkNFVaoyANVaIbBHno/OeKmHX8CWEvSPs8LT
Dr4Eu5lh1pD6urBRTBECj30OaGvcNT4oxtvkU+Hz2S4cEQnXWp4THM9NZEQecwpE
Jt+zTKbmCVbV+x0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:23 2025 by rpki-client