Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/34352e3233302e38372e302f32342d3234203d3e20323731363835.roa
File:                     34352e3233302e38372e302f32342d3234203d3e20323731363835.roa (raw, json)
Hash identifier:          9KJcwWcBCuH/rf/IQKbxQdfrVYN52iwpoZlL+Vok+Ks=
Subject key identifier:   30:01:CC:7B:E4:7E:CB:ED:AF:A6:40:9E:3A:24:EE:01:6A:9B:F9:FA
Certificate issuer:       /CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6
Certificate serial:       512C6B5449B93DD67D220F6F7C66C98250D00B28
Authority key identifier: D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/34352e3233302e38372e302f32342d3234203d3e20323731363835.roa
Signing time:             Tue 17 Jun 2025 16:27:54 +0000
ROA not before:           Tue 17 Jun 2025 16:22:54 +0000
ROA not after:            Tue 16 Jun 2026 16:27:54 +0000
asID:                     271685
IP address blocks:        45.230.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl
                          rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2c:6b:54:49:b9:3d:d6:7d:22:0f:6f:7c:66:c9:82:50:d0:0b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6
        Validity
            Not Before: Jun 17 16:22:54 2025 GMT
            Not After : Jun 16 16:27:54 2026 GMT
        Subject: CN=3001CC7BE47ECBEDAFA6409E3A24EE016A9BF9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:92:dc:9a:33:4c:e3:72:af:f9:ae:fd:6c:
                    40:28:1c:c1:aa:f5:b1:0f:1b:a2:21:57:bc:91:26:
                    77:42:81:36:20:2c:ba:72:51:82:cc:55:e2:bd:0c:
                    70:e1:07:d1:51:3a:89:14:97:57:56:04:22:94:d3:
                    4c:80:0f:09:81:e1:47:4f:d0:63:1c:3d:16:76:f4:
                    99:53:d5:e4:49:ed:a3:68:2e:0f:9a:8e:16:76:59:
                    3e:82:75:68:9a:cd:d5:02:0e:05:61:bf:04:d7:e0:
                    20:2f:ad:ed:25:81:33:03:2b:2f:73:74:18:fb:23:
                    13:70:5b:c4:43:12:d6:4d:4d:fa:d4:d7:91:18:73:
                    a9:40:37:b9:a8:04:3e:c7:5d:1c:ea:f1:cc:d1:55:
                    b7:8a:48:b3:00:6c:6b:59:99:d1:81:da:bd:19:6b:
                    74:ed:fd:b3:ed:71:5e:63:a7:95:d6:7a:dc:63:29:
                    4c:60:da:aa:04:6f:b2:e4:b8:17:fa:03:4e:90:fd:
                    4a:e1:ff:62:16:bc:ef:5b:63:20:9f:81:74:33:d7:
                    17:c4:2e:d0:45:e5:2e:11:7e:3d:cd:63:26:6c:b2:
                    80:65:96:59:0c:9b:3c:99:af:56:04:e4:0e:65:8d:
                    88:d4:d2:3c:e9:d0:b9:b8:d3:6a:c2:b9:60:d3:9e:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:CC:7B:E4:7E:CB:ED:AF:A6:40:9E:3A:24:EE:01:6A:9B:F9:FA
            X509v3 Authority Key Identifier:
                keyid:D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/34352e3233302e38372e302f32342d3234203d3e20323731363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:cc:09:31:e8:ec:6b:14:a3:1b:73:36:3e:86:5d:c0:a1:
         5d:d3:65:7d:6a:d7:e8:00:05:61:0f:39:c1:43:87:ec:a8:d2:
         f5:58:3a:44:e3:a0:dd:8f:3f:a7:22:70:7b:47:35:72:77:d5:
         a3:dd:c9:ec:46:b9:7a:35:82:c0:b3:f0:35:1e:c3:fc:c5:de:
         a5:79:c2:61:75:35:c5:33:3e:8a:a3:a2:84:d9:70:ab:a8:8c:
         da:ec:11:5e:aa:6f:61:03:ad:6c:45:9f:98:8d:46:21:23:01:
         e3:f1:58:03:73:96:fd:81:c0:56:11:c0:2c:33:f0:e8:04:9a:
         9b:b3:ad:22:57:7b:b7:a1:d9:09:e2:87:e5:f0:e6:33:72:1f:
         ce:02:88:6f:b1:35:b7:46:7d:0d:04:e9:72:9d:fd:23:ee:7e:
         53:bb:97:d1:15:f8:5e:84:c9:1b:df:53:3d:b0:5a:b5:bf:7c:
         e2:e8:14:28:54:e8:7c:d4:9c:83:47:30:e3:5d:7f:08:58:21:
         87:fe:63:2b:6b:36:42:a9:ad:70:e9:6e:8c:1f:3e:da:25:e4:
         f3:b1:a3:3e:8f:c4:49:97:ec:9c:2f:12:6f:18:18:9f:c1:f0:
         42:d5:24:ae:d2:91:e4:21:f6:eb:34:a4:f9:98:fc:bc:48:f4:
         5a:94:23:c0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUSxrVEm5PdZ9Ig9vfGbJglDQCygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFDRDE5RjYyQzQyQkQyQkY1MzM4RTgyMEY2OUU4QTM0
RTM4QjZBNjAeFw0yNTA2MTcxNjIyNTRaFw0yNjA2MTYxNjI3NTRaMDMxMTAvBgNV
BAMTKDMwMDFDQzdCRTQ3RUNCRURBRkE2NDA5RTNBMjRFRTAxNkE5QkY5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdZLcmjNM43Kv+a79bEAoHMGq
9bEPG6IhV7yRJndCgTYgLLpyUYLMVeK9DHDhB9FROokUl1dWBCKU00yADwmB4UdP
0GMcPRZ29JlT1eRJ7aNoLg+ajhZ2WT6CdWiazdUCDgVhvwTX4CAvre0lgTMDKy9z
dBj7IxNwW8RDEtZNTfrU15EYc6lAN7moBD7HXRzq8czRVbeKSLMAbGtZmdGB2r0Z
a3Tt/bPtcV5jp5XWetxjKUxg2qoEb7LkuBf6A06Q/Urh/2IWvO9bYyCfgXQz1xfE
LtBF5S4Rfj3NYyZssoBlllkMmzyZr1YE5A5ljYjU0jzp0Lm402rCuWDTntcRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUMAHMe+R+y+2vpkCeOiTuAWqb+fowHwYDVR0j
BBgwFoAU0c0Z9ixCvSv1M46CD2noo044tqYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94cTU5Ymd0aGtiYzJTdHFoRzNRREtrWlpTTjdCZ0hDQ1J3Q1BiWHFVd1V1
LzAvRDFDRDE5RjYyQzQyQkQyQkY1MzM4RTgyMEY2OUU4QTM0RTM4QjZBNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUNEMTlGNjJDNDJCRDJCRjUz
MzhFODIwRjY5RThBMzRFMzhCNkE2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
cTU5Ymd0aGtiYzJTdHFoRzNRREtrWlpTTjdCZ0hDQ1J3Q1BiWHFVd1V1LzAvMzQz
NTJlMzIzMzMwMmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzYz
ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALeZXMA0GCSqGSIb3DQEBCwUAA4IBAQBGb8wJMejsaxSj
G3M2PoZdwKFd02V9atfoAAVhDznBQ4fsqNL1WDpE46Ddjz+nInB7RzVyd9Wj3cns
Rrl6NYLAs/A1HsP8xd6lecJhdTXFMz6Ko6KE2XCrqIza7BFeqm9hA61sRZ+YjUYh
IwHj8VgDc5b9gcBWEcAsM/DoBJqbs60iV3u3odkJ4ofl8OYzch/OAohvsTW3Rn0N
BOlynf0j7n5Tu5fRFfhehMkb31M9sFq1v3zi6BQoVOh81JyDRzDjXX8IWCGH/mMr
azZCqa1w6W6MHz7aJeTzsaM+j8RJl+ycLxJvGBifwfBC1SSu0pHkIfbrNKT5mPy8
SPRalCPA
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:17:29 2025 by rpki-client