Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/34352e3139302e35362e302f32322d3332203d3e20323639363238.roa
File:                     34352e3139302e35362e302f32322d3332203d3e20323639363238.roa (raw, json)
Hash identifier:          s41Lq/ER+8htmHEpQiQtAD4wA5zOsGS0Ex+5q9TNMPY=
Subject key identifier:   D1:B2:71:89:99:A4:C5:00:2A:A5:02:66:77:FB:0A:38:27:76:42:8F
Certificate issuer:       /CN=6F09A078C883B22B659811B1730A4367F983222E
Certificate serial:       486B9335B50B5FF6A861B3BC22D28E5D7EDE4673
Authority key identifier: 6F:09:A0:78:C8:83:B2:2B:65:98:11:B1:73:0A:43:67:F9:83:22:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/34352e3139302e35362e302f32322d3332203d3e20323639363238.roa
Signing time:             Sat 12 Jul 2025 03:55:48 +0000
ROA not before:           Sat 12 Jul 2025 03:50:48 +0000
ROA not after:            Sat 11 Jul 2026 03:55:48 +0000
asID:                     269628
IP address blocks:        45.190.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.crl
                          rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 18:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6b:93:35:b5:0b:5f:f6:a8:61:b3:bc:22:d2:8e:5d:7e:de:46:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F09A078C883B22B659811B1730A4367F983222E
        Validity
            Not Before: Jul 12 03:50:48 2025 GMT
            Not After : Jul 11 03:55:48 2026 GMT
        Subject: CN=D1B2718999A4C5002AA5026677FB0A382776428F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:6a:d5:08:60:f5:22:80:21:35:fe:62:11:
                    9c:68:6f:93:0a:f0:9f:d1:e6:14:9f:c1:6b:c6:1d:
                    1d:96:bb:77:ed:c3:35:aa:43:eb:4c:b0:13:fe:af:
                    21:b1:69:7d:b3:3c:30:9d:e9:4e:a5:c8:91:63:ab:
                    05:fd:21:43:30:51:c7:29:78:9b:49:27:25:b6:bb:
                    88:d8:94:aa:21:45:e1:43:3b:ae:8d:26:de:b6:de:
                    29:8d:25:b0:3d:6c:be:ba:57:45:df:19:46:f1:f4:
                    b3:75:b7:b4:f0:a2:a9:43:c7:f6:d0:73:9d:cb:58:
                    87:40:ff:ed:74:5a:e1:3f:7d:3b:6f:87:49:b8:ab:
                    43:b7:f0:5c:b2:0a:62:bb:e8:dd:13:fa:3e:0e:00:
                    4c:01:a7:17:57:6d:a7:47:3b:50:ac:da:25:e0:9d:
                    5c:4d:5a:7c:e3:04:bd:58:e9:db:c2:2e:77:1c:16:
                    68:a8:4b:2b:bb:d2:e7:43:4a:3e:c7:49:5f:1a:ed:
                    38:b3:59:e4:a3:ef:11:d1:cf:b5:33:09:95:d6:bf:
                    c0:7b:5b:76:42:25:c8:0f:0c:c3:18:9b:b9:9e:ad:
                    0e:ea:ef:c2:3b:42:3e:df:71:96:45:a6:44:dd:6e:
                    ef:5f:79:39:6d:76:b6:63:79:51:01:c8:c7:b2:1a:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B2:71:89:99:A4:C5:00:2A:A5:02:66:77:FB:0A:38:27:76:42:8F
            X509v3 Authority Key Identifier:
                keyid:6F:09:A0:78:C8:83:B2:2B:65:98:11:B1:73:0A:43:67:F9:83:22:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/34352e3139302e35362e302f32322d3332203d3e20323639363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:61:01:83:62:36:e4:56:b7:a8:d6:c7:16:5a:9e:ea:04:9c:
         0a:2f:bd:9b:30:39:dc:61:95:ed:b5:57:f3:e4:be:6a:52:30:
         04:68:35:c1:73:2a:3d:a8:6f:4e:17:37:99:13:9a:fc:f6:d1:
         65:ac:f1:8f:30:a2:4c:87:79:e8:19:8e:bd:45:4e:99:b0:0d:
         d3:73:59:70:e4:63:c1:3e:02:5f:75:59:5b:2e:42:14:73:f6:
         1e:28:dd:4a:d8:c4:39:2b:73:b9:a3:d0:04:f3:7b:2b:4c:b1:
         e0:14:e6:6d:26:c1:04:7c:a6:92:0e:ce:1f:9b:ea:e7:6f:93:
         58:df:25:c0:16:e7:8a:16:47:83:a2:64:9f:72:6d:90:8d:bb:
         a5:89:9d:e8:2f:99:96:3a:75:d9:27:fa:1f:eb:dc:0b:00:f7:
         3f:6f:21:44:a3:5f:ea:4b:3d:55:09:28:d3:3c:cf:ac:6b:ff:
         c1:5b:4b:24:18:50:18:e3:e2:a4:c7:98:68:93:a4:47:1b:3c:
         5d:03:c6:8e:77:ca:44:15:25:13:07:43:8a:c1:c5:94:90:f7:
         d5:b7:aa:ce:74:67:a3:ee:14:68:e9:9c:37:0b:de:5d:66:87:
         a7:74:9e:57:9e:f6:45:d7:a1:5c:5c:c7:3c:34:48:29:a8:0a:
         10:e8:e1:6f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSGuTNbULX/aoYbO8ItKOXX7eRnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYwOUEwNzhDODgzQjIyQjY1OTgxMUIxNzMwQTQzNjdG
OTgzMjIyRTAeFw0yNTA3MTIwMzUwNDhaFw0yNjA3MTEwMzU1NDhaMDMxMTAvBgNV
BAMTKEQxQjI3MTg5OTlBNEM1MDAyQUE1MDI2Njc3RkIwQTM4Mjc3NjQyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCev2rVCGD1IoAhNf5iEZxob5MK
8J/R5hSfwWvGHR2Wu3ftwzWqQ+tMsBP+ryGxaX2zPDCd6U6lyJFjqwX9IUMwUccp
eJtJJyW2u4jYlKohReFDO66NJt623imNJbA9bL66V0XfGUbx9LN1t7TwoqlDx/bQ
c53LWIdA/+10WuE/fTtvh0m4q0O38FyyCmK76N0T+j4OAEwBpxdXbadHO1Cs2iXg
nVxNWnzjBL1Y6dvCLnccFmioSyu70udDSj7HSV8a7TizWeSj7xHRz7UzCZXWv8B7
W3ZCJcgPDMMYm7merQ7q78I7Qj7fcZZFpkTdbu9feTltdrZjeVEByMeyGiFRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0bJxiZmkxQAqpQJmd/sKOCd2Qo8wHwYDVR0j
BBgwFoAUbwmgeMiDsitlmBGxcwpDZ/mDIi4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZDRlh0V3NZYUNVMTNWbUFiQk1Yd2t2b01MQzljUHlrNHNIWThwdkF2
UnMvMC82RjA5QTA3OEM4ODNCMjJCNjU5ODExQjE3MzBBNDM2N0Y5ODMyMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMDlBMDc4Qzg4M0IyMkI2
NTk4MTFCMTczMEE0MzY3Rjk4MzIyMkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWQ0ZYdFdzWWFDVTEzVm1BYkJNWHdrdm9NTEM5Y1B5azRzSFk4cHZBdlJzLzAv
MzQzNTJlMzEzOTMwMmUzNTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb44MA0GCSqGSIb3DQEBCwUAA4IBAQBAYQGDYjbk
Vreo1scWWp7qBJwKL72bMDncYZXttVfz5L5qUjAEaDXBcyo9qG9OFzeZE5r89tFl
rPGPMKJMh3noGY69RU6ZsA3Tc1lw5GPBPgJfdVlbLkIUc/YeKN1K2MQ5K3O5o9AE
83srTLHgFOZtJsEEfKaSDs4fm+rnb5NY3yXAFueKFkeDomSfcm2QjbuliZ3oL5mW
OnXZJ/of69wLAPc/byFEo1/qSz1VCSjTPM+sa//BW0skGFAY4+Kkx5hok6RHGzxd
A8aOd8pEFSUTB0OKwcWUkPfVt6rOdGej7hRo6Zw3C95dZoendJ5XnvZF16FcXMc8
NEgpqAoQ6OFv
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:35 2025 by rpki-client