Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32332d3233203d3e20323638353536.roa
File:                     34352e3136332e3137322e302f32332d3233203d3e20323638353536.roa (raw, json)
Hash identifier:          pneKyM/Uib65g0vFzZAZnJT/bSYGMAikT2GcM+KeYCo=
Subject key identifier:   E2:A5:64:01:80:9F:82:6B:5C:AC:53:17:A2:54:0F:EA:22:AD:A1:6F
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       5C23AC9714B7F17E4337906F627FDDEC9E8239C5
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32332d3233203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:31 +0000
ROA not before:           Mon 30 Jun 2025 12:50:31 +0000
ROA not after:            Mon 29 Jun 2026 12:55:31 +0000
asID:                     268556
IP address blocks:        45.163.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:ac:97:14:b7:f1:7e:43:37:90:6f:62:7f:dd:ec:9e:82:39:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:31 2025 GMT
            Not After : Jun 29 12:55:31 2026 GMT
        Subject: CN=E2A56401809F826B5CAC5317A2540FEA22ADA16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:2b:a3:43:6e:7f:ba:d9:58:69:c1:01:e0:
                    0c:32:4b:d6:42:3a:c2:23:8d:81:a8:9e:85:7e:2c:
                    57:bc:ee:95:da:1a:fd:62:46:b8:c7:c8:5f:fd:eb:
                    04:34:d6:17:08:49:29:38:8e:db:08:10:f0:24:e3:
                    39:aa:3a:b5:85:10:34:ba:ea:51:7d:62:bc:95:dc:
                    a6:fc:77:82:13:83:c5:f9:ad:78:c7:0a:20:12:0c:
                    61:4d:ff:f1:e8:2d:15:0b:5e:b1:18:c5:00:15:0d:
                    45:00:9d:9e:21:73:f6:92:25:d8:69:c3:1e:8c:85:
                    dc:c6:aa:fe:40:e6:e1:c2:9a:95:73:98:71:cc:a9:
                    1a:75:05:e0:cd:af:ad:d8:b0:db:0b:a1:c1:03:ee:
                    55:9c:28:8e:57:24:f2:94:71:c9:df:c9:2b:6c:32:
                    dc:8b:76:83:71:3a:17:7b:35:e2:a2:75:6d:8b:36:
                    dd:30:6f:8c:b0:aa:41:a5:81:20:f2:c2:91:29:35:
                    bf:15:b8:44:0a:d4:c8:45:88:df:ab:d7:1b:a4:3f:
                    6e:28:42:2f:e2:16:d3:87:8e:38:2f:de:63:42:d8:
                    12:85:6e:8b:a9:7a:56:4f:c1:de:a4:79:bc:d5:a7:
                    da:ad:82:ee:c4:43:05:56:63:7f:58:cd:0d:3c:c4:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:64:01:80:9F:82:6B:5C:AC:53:17:A2:54:0F:EA:22:AD:A1:6F
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137322e302f32332d3233203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:ed:9b:bf:63:64:35:22:24:d5:c0:88:fd:1c:b1:b8:67:
         2b:c1:88:0d:06:cb:a0:23:28:a7:ae:40:be:aa:ae:88:e8:71:
         33:f9:cf:ca:8d:49:65:60:e4:c8:d0:d0:0e:18:56:dd:b6:ad:
         c1:bc:f7:0e:d7:14:b8:fe:dd:82:2f:09:f8:74:ec:38:75:ad:
         ef:18:25:23:2a:cd:b0:6f:14:c1:48:f3:0f:e0:d6:08:b1:4d:
         d1:08:52:e0:b9:01:84:50:e8:0c:ed:ea:98:f9:af:d4:c5:d2:
         75:3a:f8:47:1a:93:4d:bb:15:47:45:43:79:b3:55:b8:59:e2:
         74:81:f2:32:09:ae:ac:a7:9a:e6:38:5d:5c:07:60:95:45:bf:
         f1:9d:fe:ea:24:f4:8b:5f:1f:6c:19:56:b6:66:3c:b5:5c:11:
         42:d1:c1:16:ac:ca:2d:34:69:33:61:c4:dc:6e:d4:f4:bc:8e:
         17:08:88:17:7d:bd:1d:3b:59:6f:3d:e4:6f:c2:7c:0e:f7:07:
         b5:e1:42:c9:ae:b4:51:7b:a0:59:4f:9f:a6:25:5a:73:9b:84:
         81:93:a3:53:00:9d:a8:57:31:9f:e2:80:aa:b0:4d:7d:1e:72:
         f1:6d:b6:4c:8c:31:43:ed:cd:c9:88:4e:f2:e7:b7:7a:ad:79:
         02:27:94:e4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXCOslxS38X5DN5BvYn/d7J6COcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhGQUVEQkIwNTExOTQ2MzA1NDBFRUVGQjdFQjVFREQ2
RDA4M0VFNTAeFw0yNTA2MzAxMjUwMzFaFw0yNjA2MjkxMjU1MzFaMDMxMTAvBgNV
BAMTKEUyQTU2NDAxODA5RjgyNkI1Q0FDNTMxN0EyNTQwRkVBMjJBREExNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hSujQ25/utlYacEB4AwyS9ZC
OsIjjYGonoV+LFe87pXaGv1iRrjHyF/96wQ01hcISSk4jtsIEPAk4zmqOrWFEDS6
6lF9YryV3Kb8d4ITg8X5rXjHCiASDGFN//HoLRULXrEYxQAVDUUAnZ4hc/aSJdhp
wx6MhdzGqv5A5uHCmpVzmHHMqRp1BeDNr63YsNsLocED7lWcKI5XJPKUccnfySts
MtyLdoNxOhd7NeKidW2LNt0wb4ywqkGlgSDywpEpNb8VuEQK1MhFiN+r1xukP24o
Qi/iFtOHjjgv3mNC2BKFboupelZPwd6kebzVp9qtgu7EQwVWY39YzQ08xNwBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU4qVkAYCfgmtcrFMXolQP6iKtoW8wHwYDVR0j
BBgwFoAUePrtuwURlGMFQO7vt+te3W0IPuUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5bXdDM0N5TTNo
LzAvNzhGQUVEQkIwNTExOTQ2MzA1NDBFRUVGQjdFQjVFREQ2RDA4M0VFNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OEZBRURCQjA1MTE5NDYzMDU0
MEVFRUZCN0VCNUVERDZEMDgzRUU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5bXdDM0N5TTNoLzAvMzQz
NTJlMzEzNjMzMmUzMTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
NTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEto6wwDQYJKoZIhvcNAQELBQADggEBAEhP7Zu/Y2Q1
IiTVwIj9HLG4ZyvBiA0Gy6AjKKeuQL6qrojocTP5z8qNSWVg5MjQ0A4YVt22rcG8
9w7XFLj+3YIvCfh07Dh1re8YJSMqzbBvFMFI8w/g1gixTdEIUuC5AYRQ6Azt6pj5
r9TF0nU6+Ecak027FUdFQ3mzVbhZ4nSB8jIJrqynmuY4XVwHYJVFv/Gd/uok9Itf
H2wZVrZmPLVcEULRwRasyi00aTNhxNxu1PS8jhcIiBd9vR07WW895G/CfA73B7Xh
QsmutFF7oFlPn6YlWnObhIGTo1MAnahXMZ/igKqwTX0ecvFttkyMMUPtzcmITvLn
t3qteQInlOQ=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:22:03 2025 by rpki-client