Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa
File:                     34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa (raw, json)
Hash identifier:          60b6rUwqOUd+SrcfRN6uzFkOfU2p4a5YSxG8U10rjDA=
Subject key identifier:   F6:03:64:11:11:18:DA:B3:9B:C6:98:25:78:00:37:B5:16:12:83:ED
Certificate issuer:       /CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
Certificate serial:       69F0CC89241A02886EFA77C1D68747364C99D586
Authority key identifier: 78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa
Signing time:             Mon 30 Jun 2025 12:55:31 +0000
ROA not before:           Mon 30 Jun 2025 12:50:31 +0000
ROA not after:            Mon 29 Jun 2026 12:55:31 +0000
asID:                     268556
IP address blocks:        45.163.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl
                          rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f0:cc:89:24:1a:02:88:6e:fa:77:c1:d6:87:47:36:4c:99:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78FAEDBB051194630540EEEFB7EB5EDD6D083EE5
        Validity
            Not Before: Jun 30 12:50:31 2025 GMT
            Not After : Jun 29 12:55:31 2026 GMT
        Subject: CN=F60364111118DAB39BC69825780037B5161283ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:33:14:e9:e5:7f:0a:81:2c:03:49:70:ec:
                    7a:7d:ae:75:fd:e0:a7:9e:1a:82:f1:c8:a4:f6:e6:
                    e6:45:81:4b:3b:a3:9f:d8:ce:a4:9c:10:69:16:9a:
                    48:54:be:d7:b8:6a:c8:17:9f:96:6a:8c:2f:7c:a1:
                    96:36:0d:a5:e8:f0:5b:99:fe:f7:ab:39:12:df:47:
                    0b:8a:b0:25:3c:44:e4:25:0a:59:e8:b8:54:9b:7f:
                    61:18:d9:8d:96:e3:4b:64:f2:16:d4:ee:a9:d8:fe:
                    12:ca:0f:98:9b:f5:e4:86:72:d2:00:99:6c:43:bb:
                    af:04:10:9c:92:f0:4c:e0:7d:e1:9f:63:91:d0:da:
                    bd:2f:55:c9:40:e3:23:4f:51:c5:17:11:e9:eb:bd:
                    00:68:fe:a9:ad:06:d1:b8:69:d6:8f:34:00:73:41:
                    0a:72:6b:13:b3:96:d9:45:81:48:40:17:be:b7:ef:
                    7a:b8:15:f5:d2:b2:46:3d:69:4f:f2:15:d6:86:64:
                    dd:e1:e9:5e:c7:62:b5:73:b0:05:4f:86:03:1f:ec:
                    b7:a2:4f:df:9e:a2:55:5f:b7:e7:53:a9:97:fe:f0:
                    71:b7:bf:a3:67:56:c0:d2:36:e4:46:4e:5e:53:51:
                    f0:6b:ed:9e:99:4c:b0:ba:3d:13:16:b0:34:53:5e:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:64:11:11:18:DA:B3:9B:C6:98:25:78:00:37:B5:16:12:83:ED
            X509v3 Authority Key Identifier:
                keyid:78:FA:ED:BB:05:11:94:63:05:40:EE:EF:B7:EB:5E:DD:6D:08:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78FAEDBB051194630540EEEFB7EB5EDD6D083EE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uxPqsHx5ZrJ7MHT1J4hbHZMrXBWJZK4zSymwC3CyM3h/0/34352e3136332e3137332e302f32342d3234203d3e20323638353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:78:51:01:69:1a:5b:99:e7:50:c6:25:ee:dd:4f:c7:a6:
         0d:98:cb:5b:51:3f:8e:c7:87:80:83:e0:73:5f:b9:16:f7:8f:
         c6:c5:96:8a:fc:03:6d:2a:3c:b7:c3:52:70:d5:be:c2:82:37:
         49:36:52:a5:c2:4a:f0:54:1c:7d:cf:64:65:a6:f6:04:c1:f4:
         e2:6a:c5:2d:01:23:e7:8e:ae:6d:68:08:d0:4b:6a:25:46:05:
         d7:22:10:9d:30:c0:95:d0:e6:ce:dc:12:30:49:58:1f:fb:18:
         31:c9:e1:d2:84:d5:f7:8c:fb:a7:d6:8d:fd:9e:50:36:62:d2:
         80:3b:b2:a5:93:cb:ba:d2:10:6b:ed:e3:13:22:85:66:f0:37:
         d7:c5:8d:53:fb:88:d1:75:4e:42:25:37:01:3f:74:50:b5:5d:
         50:4e:ab:65:d1:3a:68:2c:77:f0:af:d9:85:84:d2:85:9a:de:
         60:e1:ea:2a:75:64:6e:cc:1c:de:6d:9b:21:bb:bb:15:c2:14:
         f4:49:67:34:d0:9a:23:ae:09:74:8d:c9:1d:49:e0:80:6c:50:
         56:35:f8:39:39:c3:1a:f1:0f:53:b1:00:76:20:8b:33:cd:0e:
         8b:02:32:64:51:3a:3b:ce:12:78:fc:78:30:cd:2e:d1:cc:45:
         14:c9:06:83
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUafDMiSQaAohu+nfB1odHNkyZ1YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhGQUVEQkIwNTExOTQ2MzA1NDBFRUVGQjdFQjVFREQ2
RDA4M0VFNTAeFw0yNTA2MzAxMjUwMzFaFw0yNjA2MjkxMjU1MzFaMDMxMTAvBgNV
BAMTKEY2MDM2NDExMTExOERBQjM5QkM2OTgyNTc4MDAzN0I1MTYxMjgzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cjMU6eV/CoEsA0lw7Hp9rnX9
4KeeGoLxyKT25uZFgUs7o5/YzqScEGkWmkhUvte4asgXn5ZqjC98oZY2DaXo8FuZ
/verORLfRwuKsCU8ROQlClnouFSbf2EY2Y2W40tk8hbU7qnY/hLKD5ib9eSGctIA
mWxDu68EEJyS8EzgfeGfY5HQ2r0vVclA4yNPUcUXEenrvQBo/qmtBtG4adaPNABz
QQpyaxOzltlFgUhAF76373q4FfXSskY9aU/yFdaGZN3h6V7HYrVzsAVPhgMf7Lei
T9+eolVft+dTqZf+8HG3v6NnVsDSNuRGTl5TUfBr7Z6ZTLC6PRMWsDRTXoPjAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9gNkEREY2rObxpgleAA3tRYSg+0wHwYDVR0j
BBgwFoAUePrtuwURlGMFQO7vt+te3W0IPuUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5bXdDM0N5TTNo
LzAvNzhGQUVEQkIwNTExOTQ2MzA1NDBFRUVGQjdFQjVFREQ2RDA4M0VFNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OEZBRURCQjA1MTE5NDYzMDU0
MEVFRUZCN0VCNUVERDZEMDgzRUU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
eFBxc0h4NVpySjdNSFQxSjRoYkhaTXJYQldKWks0elN5bXdDM0N5TTNoLzAvMzQz
NTJlMzEzNjMzMmUzMTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAto60wDQYJKoZIhvcNAQELBQADggEBALTreFEBaRpb
medQxiXu3U/Hpg2Yy1tRP47Hh4CD4HNfuRb3j8bFlor8A20qPLfDUnDVvsKCN0k2
UqXCSvBUHH3PZGWm9gTB9OJqxS0BI+eOrm1oCNBLaiVGBdciEJ0wwJXQ5s7cEjBJ
WB/7GDHJ4dKE1feM+6fWjf2eUDZi0oA7sqWTy7rSEGvt4xMihWbwN9fFjVP7iNF1
TkIlNwE/dFC1XVBOq2XROmgsd/Cv2YWE0oWa3mDh6ip1ZG7MHN5tmyG7uxXCFPRJ
ZzTQmiOuCXSNyR1J4IBsUFY1+Dk5wxrxD1OxAHYgizPNDosCMmRROjvOEnj8eDDN
LtHMRRTJBoM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:23:44 2025 by rpki-client