Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
File:                     34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier:          iHw49napvtGpIceXq/i3qH9D90VV1/Ha18z1HiG2uzo=
Subject key identifier:   FE:62:AF:8F:82:B3:AB:67:C8:F3:1C:BC:7E:68:8F:C6:10:EE:43:34
Certificate issuer:       /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial:       2997E9A68E1F93EB3EB8B4CA921E12A6EB812E81
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa
Signing time:             Thu 06 Mar 2025 20:00:32 +0000
ROA not before:           Thu 06 Mar 2025 19:55:32 +0000
ROA not after:            Thu 05 Mar 2026 20:00:32 +0000
asID:                     268269
IP address blocks:        45.237.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
                          rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 15:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:e9:a6:8e:1f:93:eb:3e:b8:b4:ca:92:1e:12:a6:eb:81:2e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Validity
            Not Before: Mar  6 19:55:32 2025 GMT
            Not After : Mar  5 20:00:32 2026 GMT
        Subject: CN=FE62AF8F82B3AB67C8F31CBC7E688FC610EE4334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:88:40:23:6e:b3:47:b8:f2:c1:57:c2:f3:
                    02:c6:f1:b9:7c:7b:1d:f4:59:dd:7a:cf:99:47:19:
                    b0:4c:d2:0d:c1:96:9d:6b:24:61:58:fb:5d:29:f2:
                    55:1b:88:96:dd:5f:bb:70:20:61:2a:31:ab:b9:7a:
                    bc:5b:20:df:25:1a:e3:62:25:47:03:fd:9a:c9:2d:
                    9e:63:dd:0a:81:89:55:6e:06:ba:ce:b4:41:5d:26:
                    5c:b4:e7:03:3e:88:5b:7e:10:44:04:c6:1d:60:dd:
                    ea:b9:f0:3b:f7:66:04:18:17:fe:fd:b1:94:79:0c:
                    25:84:45:2c:1f:32:99:2c:be:5a:71:f0:e9:7f:06:
                    8c:43:5f:5d:54:fb:5e:82:48:4a:9f:0f:b9:c4:1c:
                    33:c7:6a:67:50:eb:92:48:72:71:64:ec:66:53:3e:
                    4e:b5:c0:ea:f9:45:41:b0:a8:63:71:ab:f4:25:24:
                    b3:41:12:80:c9:42:60:f5:aa:fc:93:1c:d7:7c:89:
                    be:80:fc:74:0d:5c:73:06:07:0e:27:43:b8:b3:15:
                    cf:1a:8d:df:34:c5:20:1b:9a:08:8f:da:13:01:06:
                    53:89:4e:f2:1e:57:b9:1e:a3:06:55:18:04:6a:a7:
                    b5:63:3a:5d:c5:3d:ee:cc:24:e2:49:f3:eb:4e:cf:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:AF:8F:82:B3:AB:67:C8:F3:1C:BC:7E:68:8F:C6:10:EE:43:34
            X509v3 Authority Key Identifier:
                keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130312e302f32342d3234203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:29:ad:e1:8d:dc:cc:bf:7d:c2:32:35:a1:44:69:f7:14:
         2a:78:55:d0:a0:c5:09:7d:53:5a:61:8a:f8:12:c7:fb:90:d9:
         b6:f9:99:58:b8:4d:fa:72:6f:67:59:6e:46:19:e2:fd:08:5d:
         7c:e8:5a:18:09:4a:98:dc:43:fb:de:3b:92:bc:31:7e:51:ec:
         9d:e1:0c:21:f6:3d:29:c6:7c:fe:dc:43:23:d8:4d:a7:b6:d3:
         61:09:88:ec:29:5a:a1:5d:e9:3c:ec:db:58:39:c3:cb:ca:98:
         80:2c:a0:62:39:94:d5:58:4f:4a:e7:1d:70:54:e5:cf:5a:14:
         1c:95:a2:1f:ea:fe:aa:b2:db:ce:fa:14:d5:c6:e7:9b:75:81:
         b6:a4:35:27:7a:ff:24:18:de:83:18:25:cd:e0:1a:3d:dc:3a:
         de:01:54:2b:70:50:7e:59:24:db:3c:3e:89:9c:27:fd:99:83:
         a2:d5:22:70:c9:34:13:c1:d0:17:39:80:09:98:32:fc:20:50:
         19:95:cd:03:d0:e0:ab:9e:80:0f:e1:d8:29:64:56:06:8f:6f:
         44:84:00:cc:48:02:8a:26:46:37:c9:fe:8d:d9:20:05:f9:f5:
         5e:f5:15:6e:0b:9e:1f:2c:97:5c:2e:e7:56:50:14:a3:9a:5a:
         c5:3f:fa:9c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKZfppo4fk+s+uLTKkh4SpuuBLoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYx
OUNFOEUyNDAeFw0yNTAzMDYxOTU1MzJaFw0yNjAzMDUyMDAwMzJaMDMxMTAvBgNV
BAMTKEZFNjJBRjhGODJCM0FCNjdDOEYzMUNCQzdFNjg4RkM2MTBFRTQzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtV4hAI26zR7jywVfC8wLG8bl8
ex30Wd16z5lHGbBM0g3Blp1rJGFY+10p8lUbiJbdX7twIGEqMau5erxbIN8lGuNi
JUcD/ZrJLZ5j3QqBiVVuBrrOtEFdJly05wM+iFt+EEQExh1g3eq58Dv3ZgQYF/79
sZR5DCWERSwfMpksvlpx8Ol/BoxDX11U+16CSEqfD7nEHDPHamdQ65JIcnFk7GZT
Pk61wOr5RUGwqGNxq/QlJLNBEoDJQmD1qvyTHNd8ib6A/HQNXHMGBw4nQ7izFc8a
jd80xSAbmgiP2hMBBlOJTvIeV7keowZVGARqp7VjOl3FPe7MJOJJ8+tOzyZNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU/mKvj4Kzq2fI8xy8fmiPxhDuQzQwHwYDVR0j
BBgwFoAUuCdCItrp/KgJdRcTN93k/xnOjiQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NY2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlC
LzEvQjgyNzQyMjJEQUU5RkNBODA5NzUxNzEzMzdEREU0RkYxOUNFOEUyNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODI3NDIyMkRBRTlGQ0E4MDk3
NTE3MTMzN0RERTRGRjE5Q0U4RTI0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
Y2ZrU1N5SGJBMjVWR0RTZXhpV0NQbUx3WndYRWROTFlZQzdqVTdESzlCLzEvMzQz
NTJlMzIzMzM3MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt7WUwDQYJKoZIhvcNAQELBQADggEBAFCtKa3hjdzM
v33CMjWhRGn3FCp4VdCgxQl9U1phivgSx/uQ2bb5mVi4Tfpyb2dZbkYZ4v0IXXzo
WhgJSpjcQ/veO5K8MX5R7J3hDCH2PSnGfP7cQyPYTae202EJiOwpWqFd6Tzs21g5
w8vKmIAsoGI5lNVYT0rnHXBU5c9aFByVoh/q/qqy2876FNXG55t1gbakNSd6/yQY
3oMYJc3gGj3cOt4BVCtwUH5ZJNs8PomcJ/2Zg6LVInDJNBPB0Bc5gAmYMvwgUBmV
zQPQ4KuegA/h2ClkVgaPb0SEAMxIAoomRjfJ/o3ZIAX59V71FW4Lnh8sl1wu51ZQ
FKOaWsU/+pw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:44:21 2025 by rpki-client