Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          kqmdAZInjdbguSOW9PSOZ9hWhaH1AFNlkcKwfYRVwvk=
Subject key identifier:   8E:6B:A6:FD:71:B4:50:D2:FC:BC:9B:8D:6F:1E:3B:5B:F7:B8:17:9B
Certificate issuer:       /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial:       6E7BACCA7F7EE7EDFE2F481F8FC08A1F263528FB
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa
Signing time:             Mon 26 May 2025 16:07:18 +0000
ROA not before:           Mon 26 May 2025 16:02:18 +0000
ROA not after:            Mon 25 May 2026 16:07:18 +0000
asID:                     267961
IP address blocks:        45.165.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 09:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:ac:ca:7f:7e:e7:ed:fe:2f:48:1f:8f:c0:8a:1f:26:35:28:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
        Validity
            Not Before: May 26 16:02:18 2025 GMT
            Not After : May 25 16:07:18 2026 GMT
        Subject: CN=8E6BA6FD71B450D2FCBC9B8D6F1E3B5BF7B8179B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:21:08:e5:13:49:cf:f9:6e:8a:4a:39:1b:
                    42:d1:0d:a7:25:7d:5f:85:6a:5d:8b:91:c1:fb:8c:
                    67:71:f3:f8:69:f8:b5:b4:04:49:6c:61:17:45:39:
                    d9:cc:b2:06:99:12:d3:1f:54:ed:9b:78:3a:a5:db:
                    4f:09:32:af:65:2d:78:de:c2:81:a7:9e:89:3b:32:
                    75:d1:5d:9f:7b:a2:2a:49:ef:6b:57:8f:c3:f1:b0:
                    16:fc:f3:76:25:0d:7d:81:0d:25:a9:fb:1e:79:09:
                    49:79:fa:b3:75:f1:4a:dd:57:64:34:db:38:5d:a0:
                    d6:f6:d9:78:fd:a5:57:e5:13:5f:96:b2:f2:58:4b:
                    9c:62:4c:72:0f:a7:76:e7:93:c1:42:bf:0b:57:77:
                    a8:2f:05:84:38:03:20:5a:f3:b9:13:63:36:93:26:
                    97:61:fb:ff:d6:3d:33:32:de:24:ca:09:b7:28:86:
                    f3:5d:67:51:0e:6b:d7:2d:71:46:c9:72:91:fc:15:
                    cf:8d:55:48:0e:f4:66:56:d4:e6:67:8e:96:08:12:
                    46:52:59:3b:eb:85:1a:dc:96:d9:23:c0:85:74:55:
                    0d:8a:e0:e2:3d:8e:98:3b:91:c0:55:2a:07:15:0f:
                    f2:79:48:b8:15:8f:c5:24:42:1d:54:c4:86:27:ff:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6B:A6:FD:71:B4:50:D2:FC:BC:9B:8D:6F:1E:3B:5B:F7:B8:17:9B
            X509v3 Authority Key Identifier:
                keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136322e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5d:2b:72:27:05:c1:d8:c6:ae:8f:0c:af:7a:b8:90:8c:ba:
         ff:b0:9c:4d:c3:a2:73:c5:82:eb:b0:9e:21:7d:06:a3:c8:e0:
         5e:d6:da:f4:62:4d:2f:85:5b:f4:c2:6a:4a:9e:a0:55:46:02:
         4c:46:4d:2d:35:c9:25:25:be:5c:ce:87:6e:7d:fa:84:81:78:
         b6:99:df:b3:53:ae:93:56:c5:10:a8:10:e0:e6:33:a9:2f:4c:
         c9:ad:17:9c:79:e9:7b:92:da:93:e4:c8:87:3d:dd:c7:30:7b:
         2d:9c:70:43:69:3d:78:42:f2:7e:c8:5e:04:4c:b6:b8:b8:69:
         49:77:20:38:95:65:d0:0e:f5:a7:64:3d:29:3a:0a:4e:3e:c1:
         5e:50:84:82:bd:94:b4:9b:72:a3:32:0e:5f:0d:1a:5b:5b:1e:
         13:d7:b4:c3:ef:8a:80:54:d8:a2:fd:5d:5c:44:12:fc:fd:c6:
         4c:52:29:a9:b9:09:6a:d8:dc:1b:60:cc:51:6d:16:6d:99:9b:
         85:c1:5f:d1:cc:15:4b:a2:85:9e:b3:41:b5:4f:82:a7:ac:3b:
         ab:56:f4:1e:68:6a:3f:74:af:de:23:e8:15:a6:e0:02:72:7d:
         a8:5e:ed:b5:3a:7a:9e:23:33:ce:2f:12:38:ff:f9:a1:4c:59:
         36:0a:0b:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbnusyn9+5+3+L0gfj8CKHyY1KPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCN0FFQ0IxODMxODk3MzEzNEVBRTkyNzY0NTJBRTRC
Njg0NTNDRjAeFw0yNTA1MjYxNjAyMThaFw0yNjA1MjUxNjA3MThaMDMxMTAvBgNV
BAMTKDhFNkJBNkZENzFCNDUwRDJGQ0JDOUI4RDZGMUUzQjVCRjdCODE3OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpiEI5RNJz/luiko5G0LRDacl
fV+Fal2LkcH7jGdx8/hp+LW0BElsYRdFOdnMsgaZEtMfVO2beDql208JMq9lLXje
woGnnok7MnXRXZ97oipJ72tXj8PxsBb883YlDX2BDSWp+x55CUl5+rN18UrdV2Q0
2zhdoNb22Xj9pVflE1+WsvJYS5xiTHIPp3bnk8FCvwtXd6gvBYQ4AyBa87kTYzaT
Jpdh+//WPTMy3iTKCbcohvNdZ1EOa9ctcUbJcpH8Fc+NVUgO9GZW1OZnjpYIEkZS
WTvrhRrcltkjwIV0VQ2K4OI9jpg7kcBVKgcVD/J5SLgVj8UkQh1UxIYn/xFdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjmum/XG0UNL8vJuNbx47W/e4F5swHwYDVR0j
BBgwFoAUCbeuyxgxiXMTTq6SdkUq5LaEU88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wOUI3QUVDQjE4MzE4OTczMTM0RUFFOTI3NjQ1MkFFNEI2ODQ1M0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5QjdBRUNCMTgzMTg5NzMx
MzRFQUU5Mjc2NDUyQUU0QjY4NDUzQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzQzNTJlMzEzNjM1MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpaIwDQYJKoZIhvcNAQELBQADggEBADxdK3In
BcHYxq6PDK96uJCMuv+wnE3DonPFguuwniF9BqPI4F7W2vRiTS+FW/TCakqeoFVG
AkxGTS01ySUlvlzOh259+oSBeLaZ37NTrpNWxRCoEODmM6kvTMmtF5x56XuS2pPk
yIc93ccwey2ccENpPXhC8n7IXgRMtri4aUl3IDiVZdAO9adkPSk6Ck4+wV5QhIK9
lLSbcqMyDl8NGltbHhPXtMPvioBU2KL9XVxEEvz9xkxSKam5CWrY3BtgzFFtFm2Z
m4XBX9HMFUuihZ6zQbVPgqesO6tW9B5oaj90r94j6BWm4AJyfahe7bU6ep4jM84v
Ejj/+aFMWTYKCw8=
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:49:47 2025 by rpki-client