Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35322e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          s7QXeX2vq8O5spZaWQpOWd0FB4fwiDOt/mIE//O0u84=
Subject key identifier:   3B:E0:D4:4B:7E:4E:1B:0A:9F:7E:E3:7B:D0:EC:03:9A:BB:E6:19:76
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       47F236D6EC875B4FD0F271BC52768309A314A162
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 17:02:28 +0000
ROA not before:           Wed 30 Jul 2025 16:57:28 +0000
ROA not after:            Wed 29 Jul 2026 17:02:28 +0000
asID:                     269285
IP address blocks:        45.182.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f2:36:d6:ec:87:5b:4f:d0:f2:71:bc:52:76:83:09:a3:14:a1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 16:57:28 2025 GMT
            Not After : Jul 29 17:02:28 2026 GMT
        Subject: CN=3BE0D44B7E4E1B0A9F7EE37BD0EC039ABBE61976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:5b:8e:4e:11:96:b0:83:d9:a5:55:4e:8e:
                    87:9e:9a:a0:7b:3c:a4:47:62:9f:07:5c:8f:35:5a:
                    28:7a:c2:ab:c5:dc:3a:40:57:11:9b:23:f5:6e:71:
                    3b:0a:8a:6b:b4:8e:b4:0c:73:eb:84:ec:6e:7f:6f:
                    93:53:61:be:60:d3:69:81:5d:de:21:04:a9:bb:d9:
                    10:e8:df:a0:55:a6:02:e7:aa:e4:5b:5b:ef:ca:1f:
                    65:32:a5:4f:c2:d2:f4:98:8f:0c:3c:52:ad:0a:51:
                    06:98:29:7a:78:9c:c7:83:67:3e:84:33:a9:ce:95:
                    f6:0d:11:62:28:80:44:70:d6:78:15:b1:86:87:aa:
                    dc:56:7a:41:49:9f:42:ea:94:9d:68:4e:37:2e:d2:
                    ce:c6:9b:c7:17:9e:df:91:ec:36:4d:ee:b0:48:1b:
                    8e:65:c9:0a:c0:5d:f4:31:bc:99:aa:96:c9:d7:c9:
                    9a:84:0d:24:61:a4:5b:fd:35:39:33:c3:54:a8:d0:
                    f7:20:a2:c2:da:a5:8b:36:6c:f0:ae:46:82:6f:83:
                    71:7c:52:de:fc:92:17:12:6b:ad:b5:b0:31:9c:2b:
                    02:a2:51:98:72:16:fb:c9:73:df:5d:6d:12:0d:80:
                    10:98:ca:91:3a:38:ea:27:4b:7c:4c:08:12:c6:34:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E0:D4:4B:7E:4E:1B:0A:9F:7E:E3:7B:D0:EC:03:9A:BB:E6:19:76
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35322e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:63:b8:f4:29:f7:df:25:5e:38:25:4b:9b:2d:5b:1f:15:53:
         73:35:77:78:8c:9d:87:02:ad:fc:05:2c:49:9d:3e:3e:51:a0:
         13:27:b7:eb:33:b9:6f:80:e9:ed:0c:92:cd:b8:9f:c6:dd:d5:
         47:e7:c2:87:ef:4e:f1:91:bb:f8:84:04:cd:b7:84:83:79:59:
         6b:ec:96:1e:22:5d:1a:de:5f:dc:6d:74:f1:a9:ce:ba:55:6b:
         9a:8c:7d:b4:b2:c6:03:d1:05:22:3f:36:cd:b9:41:13:01:83:
         06:e3:a7:f0:51:9d:e5:99:ba:be:15:3e:1c:32:ca:c7:23:ea:
         14:28:db:d1:9c:6c:94:82:57:a7:fa:61:62:2f:a8:98:b7:b4:
         7c:3b:5a:87:5a:47:4a:81:38:4e:60:aa:17:ce:3a:07:d2:79:
         46:4b:bb:e4:ae:7f:9f:f7:17:24:55:7e:ef:f1:1a:78:08:c5:
         20:4d:ff:4e:ea:8c:68:8d:a2:84:94:08:a9:80:ff:cf:49:e5:
         3c:ed:a7:59:a1:5c:c8:7c:7d:3a:1b:19:bc:c7:fa:34:8b:44:
         d8:a8:ac:74:fb:a8:c9:77:0c:ae:43:ff:58:a3:c7:b3:ab:08:
         62:1b:29:77:fd:02:5d:29:d7:79:da:64:9c:9b:b8:56:2c:59:
         93:9e:4d:79
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR/I21uyHW0/Q8nG8UnaDCaMUoWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNTA3MzAxNjU3MjhaFw0yNjA3MjkxNzAyMjhaMDMxMTAvBgNV
BAMTKDNCRTBENDRCN0U0RTFCMEE5RjdFRTM3QkQwRUMwMzlBQkJFNjE5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEa1uOThGWsIPZpVVOjoeemqB7
PKRHYp8HXI81Wih6wqvF3DpAVxGbI/VucTsKimu0jrQMc+uE7G5/b5NTYb5g02mB
Xd4hBKm72RDo36BVpgLnquRbW+/KH2UypU/C0vSYjww8Uq0KUQaYKXp4nMeDZz6E
M6nOlfYNEWIogERw1ngVsYaHqtxWekFJn0LqlJ1oTjcu0s7Gm8cXnt+R7DZN7rBI
G45lyQrAXfQxvJmqlsnXyZqEDSRhpFv9NTkzw1So0PcgosLapYs2bPCuRoJvg3F8
Ut78khcSa621sDGcKwKiUZhyFvvJc99dbRINgBCYypE6OOonS3xMCBLGNFBdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO+DUS35OGwqffuN70OwDmrvmGXYwHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzQzNTJlMzEzODMyMmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY0MA0GCSqGSIb3DQEBCwUAA4IBAQBWY7j0Kfff
JV44JUubLVsfFVNzNXd4jJ2HAq38BSxJnT4+UaATJ7frM7lvgOntDJLNuJ/G3dVH
58KH707xkbv4hATNt4SDeVlr7JYeIl0a3l/cbXTxqc66VWuajH20ssYD0QUiPzbN
uUETAYMG46fwUZ3lmbq+FT4cMsrHI+oUKNvRnGyUglen+mFiL6iYt7R8O1qHWkdK
gThOYKoXzjoH0nlGS7vkrn+f9xckVX7v8Rp4CMUgTf9O6oxojaKElAipgP/PSeU8
7adZoVzIfH06Gxm8x/o0i0TYqKx0+6jJdwyuQ/9Yo8ezqwhiGyl3/QJdKdd52mSc
m7hWLFmTnk15
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:12 2025 by rpki-client