Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130372e302f32342d3234203d3e20323639373034.roa
File:                     34352e3139312e3130372e302f32342d3234203d3e20323639373034.roa (raw, json)
Hash identifier:          2xbvG38h57/iTAW85fxjZZIaG4f8qkzgn2HWkuFxuzg=
Subject key identifier:   A7:B9:C6:C1:3A:88:73:4F:47:90:25:52:C8:38:9D:4A:66:99:17:83
Certificate issuer:       /CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
Certificate serial:       4D9688334B0BE27EF3B5D8B8E26F0C926402D9F2
Authority key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130372e302f32342d3234203d3e20323639373034.roa
Signing time:             Wed 30 Jul 2025 15:40:59 +0000
ROA not before:           Wed 30 Jul 2025 15:35:59 +0000
ROA not after:            Wed 29 Jul 2026 15:40:59 +0000
asID:                     269704
IP address blocks:        45.191.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:96:88:33:4b:0b:e2:7e:f3:b5:d8:b8:e2:6f:0c:92:64:02:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
        Validity
            Not Before: Jul 30 15:35:59 2025 GMT
            Not After : Jul 29 15:40:59 2026 GMT
        Subject: CN=A7B9C6C13A88734F47902552C8389D4A66991783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:8a:95:1b:5b:ff:29:bf:73:f7:d7:76:4e:
                    52:23:7e:c5:30:dc:70:ad:a9:9c:38:fc:04:23:62:
                    43:e4:55:d1:4b:cf:ae:89:f4:a3:11:47:36:60:c9:
                    cb:74:9e:04:d7:2e:99:18:04:73:17:e7:84:8a:fb:
                    7a:71:f9:b6:92:51:bd:04:e2:48:2f:17:55:61:f1:
                    c2:10:9c:d9:8a:83:d0:f1:ed:01:f6:05:33:54:21:
                    33:80:81:80:cc:b9:36:61:50:35:33:67:dd:70:db:
                    c3:51:5f:55:f4:31:a8:86:c2:f0:8a:d5:38:3f:cc:
                    57:a5:76:58:35:f8:b6:2c:75:b4:d4:0d:f3:8b:f1:
                    21:aa:be:1c:e4:e5:fc:5d:03:5a:cd:cd:0b:9f:1a:
                    74:79:01:40:99:3b:20:b2:10:88:91:49:cb:48:95:
                    df:5c:d7:fc:00:6c:1a:e8:7c:b6:17:5a:f4:3b:2c:
                    10:0f:9a:9b:ed:63:56:92:4f:17:f9:aa:76:71:d8:
                    4a:39:db:b1:62:88:af:62:39:39:1c:de:d6:ac:6c:
                    76:24:6d:f0:f2:b0:b6:be:47:16:75:ad:95:99:2f:
                    a0:08:26:ad:f6:ce:66:3b:c2:40:83:78:a8:d6:ea:
                    24:22:89:93:53:63:3c:f5:b7:c4:36:8f:82:91:ea:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:C6:C1:3A:88:73:4F:47:90:25:52:C8:38:9D:4A:66:99:17:83
            X509v3 Authority Key Identifier:
                keyid:C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130372e302f32342d3234203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:04:8f:93:ae:90:06:b1:21:31:43:a1:6e:12:e5:dd:70:
         d7:5e:65:7c:8a:d5:58:79:c2:90:c7:93:f5:6f:b0:63:e4:77:
         e1:bf:72:11:70:af:5a:17:93:08:4d:98:8c:fa:65:0f:64:de:
         c7:4e:cf:40:35:5b:de:4e:fc:43:ab:cd:61:aa:de:36:de:58:
         4c:67:75:37:78:65:33:b7:10:16:a6:31:5b:1a:79:01:1d:27:
         a7:21:aa:fc:e9:b6:fc:24:66:b5:03:8d:2b:9a:46:a7:6e:b0:
         fb:40:57:4a:16:1c:44:20:d1:95:14:2c:fc:3b:26:94:4f:91:
         a9:12:c6:59:72:b6:d5:8b:b4:63:18:8e:80:39:06:c7:c9:15:
         34:e4:02:b7:e2:87:e9:70:fb:aa:03:e5:da:83:a7:2b:33:22:
         2a:ed:45:66:2b:38:22:20:53:c1:0b:1e:8e:e7:56:09:bd:7e:
         1b:ca:61:16:25:18:49:50:cb:98:3a:d6:0d:e5:1c:c2:07:4c:
         30:5a:2e:08:d2:82:29:1a:65:ac:94:74:4b:3f:7d:93:0d:34:
         09:75:4b:c7:2f:63:e6:6b:62:e1:59:bc:42:18:03:d8:59:0c:
         7a:e6:e9:e4:3b:08:36:2d:aa:66:f2:64:86:5b:c3:9d:92:a1:
         b4:13:99:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTZaIM0sL4n7ztdi44m8MkmQC2fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDODZDNDdGQzM5RTgwOEY4Q0Y1QzAwQzYyRDU3RDgw
ODU4QzczODAeFw0yNTA3MzAxNTM1NTlaFw0yNjA3MjkxNTQwNTlaMDMxMTAvBgNV
BAMTKEE3QjlDNkMxM0E4ODczNEY0NzkwMjU1MkM4Mzg5RDRBNjY5OTE3ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GIqVG1v/Kb9z99d2TlIjfsUw
3HCtqZw4/AQjYkPkVdFLz66J9KMRRzZgyct0ngTXLpkYBHMX54SK+3px+baSUb0E
4kgvF1Vh8cIQnNmKg9Dx7QH2BTNUITOAgYDMuTZhUDUzZ91w28NRX1X0MaiGwvCK
1Tg/zFeldlg1+LYsdbTUDfOL8SGqvhzk5fxdA1rNzQufGnR5AUCZOyCyEIiRSctI
ld9c1/wAbBrofLYXWvQ7LBAPmpvtY1aSTxf5qnZx2Eo527FiiK9iOTkc3tasbHYk
bfDysLa+RxZ1rZWZL6AIJq32zmY7wkCDeKjW6iQiiZNTYzz1t8Q2j4KR6n/JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp7nGwTqIc09HkCVSyDidSmaZF4MwHwYDVR0j
BBgwFoAUwshsR/w56Aj4z1wAxi1X2AhYxzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1pyaWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZ
Y0EvMC9DMkM4NkM0N0ZDMzlFODA4RjhDRjVDMDBDNjJENTdEODA4NThDNzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQzg2QzQ3RkMzOUU4MDhG
OENGNUMwMEM2MkQ1N0Q4MDg1OEM3MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNacmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzAv
MzQzNTJlMzEzOTMxMmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtv2swDQYJKoZIhvcNAQELBQADggEBACUbBI+T
rpAGsSExQ6FuEuXdcNdeZXyK1Vh5wpDHk/VvsGPkd+G/chFwr1oXkwhNmIz6ZQ9k
3sdOz0A1W95O/EOrzWGq3jbeWExndTd4ZTO3EBamMVsaeQEdJ6chqvzptvwkZrUD
jSuaRqdusPtAV0oWHEQg0ZUULPw7JpRPkakSxllyttWLtGMYjoA5BsfJFTTkArfi
h+lw+6oD5dqDpyszIirtRWYrOCIgU8ELHo7nVgm9fhvKYRYlGElQy5g61g3lHMIH
TDBaLgjSgikaZayUdEs/fZMNNAl1S8cvY+ZrYuFZvEIYA9hZDHrm6eQ7CDYtqmby
ZIZbw52SobQTmcM=
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:17 2025 by rpki-client