Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/34352e3233312e362e302f32332d3332203d3e20323637323434.roa
File:                     34352e3233312e362e302f32332d3332203d3e20323637323434.roa (raw, json)
Hash identifier:          r5uHWMzGYtYj3ZYC4yBUl5JyWdJjp/iKuCmycPpm7Rc=
Subject key identifier:   B6:B2:D0:45:12:8B:8E:FC:01:85:4D:94:C9:4D:4A:B0:A7:07:1E:80
Certificate issuer:       /CN=92C5B24C56BAFFF7BC9DC04440347A5CE545E780
Certificate serial:       45BD59329F734A0ED2FC1FA2C3BB2DB253D7948A
Authority key identifier: 92:C5:B2:4C:56:BA:FF:F7:BC:9D:C0:44:40:34:7A:5C:E5:45:E7:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/34352e3233312e362e302f32332d3332203d3e20323637323434.roa
Signing time:             Fri 25 Jul 2025 16:23:20 +0000
ROA not before:           Fri 25 Jul 2025 16:18:20 +0000
ROA not after:            Fri 24 Jul 2026 16:23:20 +0000
asID:                     267244
IP address blocks:        45.231.6.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.crl
                          rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 09:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bd:59:32:9f:73:4a:0e:d2:fc:1f:a2:c3:bb:2d:b2:53:d7:94:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C5B24C56BAFFF7BC9DC04440347A5CE545E780
        Validity
            Not Before: Jul 25 16:18:20 2025 GMT
            Not After : Jul 24 16:23:20 2026 GMT
        Subject: CN=B6B2D045128B8EFC01854D94C94D4AB0A7071E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:81:ef:e4:db:96:d8:3b:07:d4:66:9a:96:
                    28:95:09:c6:c5:07:97:bf:66:e6:25:86:51:a9:c7:
                    82:0c:2e:ff:02:e7:9b:dc:39:aa:57:2e:ba:4a:51:
                    a6:2a:48:81:ab:de:43:34:0a:fc:a4:6c:6d:51:eb:
                    10:27:fe:13:fe:81:17:d8:5c:6e:dd:66:ef:db:20:
                    03:95:d2:12:e2:13:ad:b3:13:f6:6a:1c:ba:5e:a0:
                    3f:06:be:f7:54:fb:7e:f5:57:de:71:05:79:bf:43:
                    f9:4c:fc:5c:a2:15:f2:94:d4:5f:7a:54:25:5c:1e:
                    0e:bf:cc:fe:b5:36:49:3f:8c:25:37:94:0b:05:3c:
                    c6:10:f8:4f:fb:71:b1:b6:22:f1:df:2c:88:1f:0e:
                    ee:ad:2f:36:12:c4:9e:bd:96:2a:63:20:ad:2d:b5:
                    fe:ed:b8:60:70:b4:35:e7:01:8e:f3:b9:11:9a:35:
                    37:20:8c:49:9b:f5:30:e0:10:21:f4:63:c9:a0:f7:
                    30:0e:a4:6b:d7:58:7e:23:5c:79:d0:24:f7:6d:d0:
                    5f:4a:07:71:ad:7b:e9:3a:4c:12:e1:c0:4f:aa:87:
                    1e:37:95:b1:59:51:19:dc:88:40:c9:84:99:e2:e8:
                    7f:91:21:77:dd:fe:58:43:a3:4b:24:b1:75:0a:36:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B2:D0:45:12:8B:8E:FC:01:85:4D:94:C9:4D:4A:B0:A7:07:1E:80
            X509v3 Authority Key Identifier:
                keyid:92:C5:B2:4C:56:BA:FF:F7:BC:9D:C0:44:40:34:7A:5C:E5:45:E7:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C5B24C56BAFFF7BC9DC04440347A5CE545E780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w6k44QuRTwbGvszKoKVcBpQDRhwKdGA6ArMG5BoJ3cp/0/34352e3233312e362e302f32332d3332203d3e20323637323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:93:ec:c2:33:78:92:7e:33:c9:33:25:24:0a:da:2c:9d:d8:
         c3:26:0c:7b:2f:66:c6:d1:bf:47:d2:bb:b9:4e:5f:c7:cf:14:
         ed:a8:57:6e:df:6c:46:c3:4c:03:7c:5f:39:56:9d:42:3f:31:
         b7:97:05:db:99:df:b4:c2:bb:3a:d5:77:79:2f:90:37:6c:26:
         ef:38:7d:f0:42:b7:00:ca:35:a8:e1:19:14:04:66:83:bd:9d:
         6d:86:31:26:7d:7a:c5:95:ec:23:7c:07:ae:fe:70:78:cf:79:
         f3:83:16:06:29:03:84:a0:a0:55:f1:d6:8c:d3:dc:69:b7:88:
         0d:70:32:6e:5f:95:de:a1:d8:9c:09:33:69:7e:71:89:a6:d4:
         46:42:d0:5a:5f:72:6b:1e:e5:fa:63:14:dc:8b:98:f7:61:2f:
         90:b2:05:21:3b:ca:12:ff:97:63:5c:cc:c2:f6:ee:e2:97:ae:
         a5:54:ed:86:76:41:ac:70:77:e8:61:93:ae:9a:9f:2e:38:0f:
         c8:e7:7c:6f:8c:c1:67:5e:c5:7d:c9:ad:ac:cb:4e:3f:1e:ab:
         8c:eb:ad:42:31:b3:19:bf:a5:81:aa:e8:0a:17:d5:3b:f9:d2:
         3a:b3:58:e0:7b:00:b4:7c:e8:72:e7:b7:9a:c4:40:d4:73:32:
         51:92:1a:0b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURb1ZMp9zSg7S/B+iw7stslPXlIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDNUIyNEM1NkJBRkZGN0JDOURDMDQ0NDAzNDdBNUNF
NTQ1RTc4MDAeFw0yNTA3MjUxNjE4MjBaFw0yNjA3MjQxNjIzMjBaMDMxMTAvBgNV
BAMTKEI2QjJEMDQ1MTI4QjhFRkMwMTg1NEQ5NEM5NEQ0QUIwQTcwNzFFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWYHv5NuW2DsH1GaaliiVCcbF
B5e/ZuYlhlGpx4IMLv8C55vcOapXLrpKUaYqSIGr3kM0CvykbG1R6xAn/hP+gRfY
XG7dZu/bIAOV0hLiE62zE/ZqHLpeoD8GvvdU+371V95xBXm/Q/lM/FyiFfKU1F96
VCVcHg6/zP61Nkk/jCU3lAsFPMYQ+E/7cbG2IvHfLIgfDu6tLzYSxJ69lipjIK0t
tf7tuGBwtDXnAY7zuRGaNTcgjEmb9TDgECH0Y8mg9zAOpGvXWH4jXHnQJPdt0F9K
B3Gte+k6TBLhwE+qhx43lbFZURnciEDJhJni6H+RIXfd/lhDo0sksXUKNn1BAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtrLQRRKLjvwBhU2UyU1KsKcHHoAwHwYDVR0j
BBgwFoAUksWyTFa6//e8ncBEQDR6XOVF54AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHc2azQ0UXVSVHdiR3ZzektvS1ZjQnBRRFJod0tkR0E2QXJNRzVCb0oz
Y3AvMC85MkM1QjI0QzU2QkFGRkY3QkM5REMwNDQ0MDM0N0E1Q0U1NDVFNzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyQzVCMjRDNTZCQUZGRjdC
QzlEQzA0NDQwMzQ3QTVDRTU0NUU3ODAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3Nms0NFF1UlR3Ykd2c3pLb0tWY0JwUURSaHdLZEdBNkFyTUc1Qm9KM2NwLzAv
MzQzNTJlMzIzMzMxMmUzNjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMyMzYzNzMy
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS3nBjANBgkqhkiG9w0BAQsFAAOCAQEAY5PswjN4kn4z
yTMlJAraLJ3YwyYMey9mxtG/R9K7uU5fx88U7ahXbt9sRsNMA3xfOVadQj8xt5cF
25nftMK7OtV3eS+QN2wm7zh98EK3AMo1qOEZFARmg72dbYYxJn16xZXsI3wHrv5w
eM9584MWBikDhKCgVfHWjNPcabeIDXAybl+V3qHYnAkzaX5xiabURkLQWl9yax7l
+mMU3IuY92EvkLIFITvKEv+XY1zMwvbu4peupVTthnZBrHB36GGTrpqfLjgPyOd8
b4zBZ17FfcmtrMtOPx6rjOutQjGzGb+lgaroChfVO/nSOrNY4HsAtHzocue3msRA
1HMyUZIaCw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:17 2025 by rpki-client