Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32332d3233203d3e20323634343739.roa
File:                     34352e3136352e39302e302f32332d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          skJv4a1tGTERZBZg/PLO7X6bHGBAZo9955N32mHwcy0=
Subject key identifier:   DA:75:55:15:8C:98:C1:D7:17:1C:C2:D3:1B:25:21:52:83:BD:FC:CB
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       1B5675CF7A2DFEADCDF7550E42EFE8F482C3F551
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32332d3233203d3e20323634343739.roa
Signing time:             Sat 22 Mar 2025 16:33:36 +0000
ROA not before:           Sat 22 Mar 2025 16:28:36 +0000
ROA not after:            Sat 21 Mar 2026 16:33:36 +0000
asID:                     264479
IP address blocks:        45.165.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:56:75:cf:7a:2d:fe:ad:cd:f7:55:0e:42:ef:e8:f4:82:c3:f5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Mar 22 16:28:36 2025 GMT
            Not After : Mar 21 16:33:36 2026 GMT
        Subject: CN=DA7555158C98C1D7171CC2D31B25215283BDFCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:7e:39:a6:90:1c:39:ea:71:21:ba:8b:e1:
                    93:16:3a:0f:5a:07:5f:fc:02:e0:99:ba:cd:64:44:
                    6e:53:21:4a:8d:91:73:2e:52:f6:cb:bf:61:3f:c0:
                    cd:c0:1f:32:86:bd:1f:90:30:61:23:57:2e:7c:95:
                    9a:c6:ef:d6:37:c8:4f:aa:64:78:14:75:f1:bc:fa:
                    fa:45:ec:5e:7f:62:6c:52:80:d2:a4:70:64:b2:7c:
                    54:64:ab:cf:43:57:ce:24:76:df:cd:4f:e7:28:53:
                    41:f9:df:34:e6:aa:c7:58:58:cd:6f:8a:bf:b6:24:
                    4f:56:04:26:55:f6:57:33:29:1f:75:21:1e:a1:c8:
                    8c:b0:6c:d7:f3:0f:11:df:2a:85:12:59:44:6d:5e:
                    9c:c3:a3:aa:8d:30:d3:33:c9:74:52:03:04:5a:b9:
                    d2:db:d5:e9:f2:f1:83:bc:e6:08:00:f3:79:50:68:
                    d1:45:4b:d3:43:fd:90:0f:ed:2b:2e:dc:e1:72:8f:
                    db:ce:64:8e:08:fe:62:f9:15:21:7a:7a:54:03:5e:
                    f1:ba:df:1d:a4:ef:11:d3:e2:11:b1:a7:54:ad:f8:
                    be:4d:ce:52:55:d9:17:76:45:b1:77:7f:11:b3:3b:
                    4b:b4:e9:df:4d:17:f9:bd:a6:96:3d:3f:60:36:74:
                    6b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:55:15:8C:98:C1:D7:17:1C:C2:D3:1B:25:21:52:83:BD:FC:CB
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/34352e3136352e39302e302f32332d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:d3:25:7a:7c:ab:37:35:d3:c4:99:fd:4a:ef:63:06:68:5a:
         11:5b:0e:d7:89:71:71:72:c7:88:69:b0:fc:c4:92:ed:5b:70:
         56:2f:bf:2f:fd:e1:5c:f8:5f:de:a5:1a:56:69:53:1f:94:e5:
         35:6d:92:f1:1c:22:c2:c4:7c:85:a3:6e:43:ab:04:53:fe:13:
         28:0f:3d:02:5a:74:47:37:ec:4d:f7:eb:52:fa:32:63:35:9b:
         e0:17:14:37:0b:86:49:2f:9a:57:63:12:47:ff:a3:8a:92:7c:
         5d:f6:91:3e:2e:bd:cc:d2:8e:33:9c:2d:5b:a7:b1:80:e5:b4:
         eb:2a:88:34:51:f3:a7:3b:1a:fd:2f:8b:73:c5:67:8c:31:4e:
         aa:ea:1a:41:15:e0:83:cf:76:1d:69:40:0c:1a:2b:c7:84:d7:
         2d:1a:92:52:e9:42:e6:ee:1c:1f:ef:db:90:73:22:ac:4d:83:
         58:24:82:69:ed:22:66:01:01:02:c8:ef:58:a3:99:b5:34:a2:
         5a:5d:a8:c4:51:f1:96:43:f1:3a:2a:02:c3:7d:43:ed:81:e2:
         4c:c5:d1:0f:56:f8:08:07:2f:3d:fc:d9:7a:28:50:e3:dc:d9:
         bb:38:4f:ce:ba:33:71:e1:dc:a9:08:a3:cb:e0:4e:d2:2a:da:
         86:3b:a3:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG1Z1z3ot/q3N91UOQu/o9ILD9VEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCQzAwMENCMEE0NzhBNzBFNEZCQTU1MjIxN0YyNDJD
REYwN0FFOTAeFw0yNTAzMjIxNjI4MzZaFw0yNjAzMjExNjMzMzZaMDMxMTAvBgNV
BAMTKERBNzU1NTE1OEM5OEMxRDcxNzFDQzJEMzFCMjUyMTUyODNCREZDQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9345ppAcOepxIbqL4ZMWOg9a
B1/8AuCZus1kRG5TIUqNkXMuUvbLv2E/wM3AHzKGvR+QMGEjVy58lZrG79Y3yE+q
ZHgUdfG8+vpF7F5/YmxSgNKkcGSyfFRkq89DV84kdt/NT+coU0H53zTmqsdYWM1v
ir+2JE9WBCZV9lczKR91IR6hyIywbNfzDxHfKoUSWURtXpzDo6qNMNMzyXRSAwRa
udLb1eny8YO85ggA83lQaNFFS9ND/ZAP7Ssu3OFyj9vOZI4I/mL5FSF6elQDXvG6
3x2k7xHT4hGxp1St+L5NzlJV2Rd2RbF3fxGzO0u06d9NF/m9ppY9P2A2dGsJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2nVVFYyYwdcXHMLTGyUhUoO9/MswHwYDVR0j
BBgwFoAUFrwADLCkeKcOT7pVIhfyQs3weukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMS8xNkJDMDAwQ0IwQTQ3OEE3MEU0RkJBNTUyMjE3RjI0MkNERjA3QUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QkMwMDBDQjBBNDc4QTcw
RTRGQkE1NTIyMTdGMjQyQ0RGMDdBRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzEv
MzQzNTJlMzEzNjM1MmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaVaMA0GCSqGSIb3DQEBCwUAA4IBAQCt0yV6fKs3
NdPEmf1K72MGaFoRWw7XiXFxcseIabD8xJLtW3BWL78v/eFc+F/epRpWaVMflOU1
bZLxHCLCxHyFo25DqwRT/hMoDz0CWnRHN+xN9+tS+jJjNZvgFxQ3C4ZJL5pXYxJH
/6OKknxd9pE+Lr3M0o4znC1bp7GA5bTrKog0UfOnOxr9L4tzxWeMMU6q6hpBFeCD
z3YdaUAMGivHhNctGpJS6ULm7hwf79uQcyKsTYNYJIJp7SJmAQECyO9Yo5m1NKJa
XajEUfGWQ/E6KgLDfUPtgeJMxdEPVvgIBy89/Nl6KFDj3Nm7OE/OujNx4dypCKPL
4E7SKtqGO6N8
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:28:35 2025 by rpki-client