Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34392e302f32342d3234203d3e20323733363531.roa
File:                     34352e3138362e34392e302f32342d3234203d3e20323733363531.roa (raw, json)
Hash identifier:          RwiLvBXgKHO4Teid9NPcDoeJOy4iHJrh3i0Ciady18s=
Subject key identifier:   4A:59:D5:D6:BD:03:2D:49:28:53:E4:FC:69:F5:3D:83:65:01:CD:74
Certificate issuer:       /CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
Certificate serial:       7DB18EB686981FB0C63117DE63B56231E5F2CF65
Authority key identifier: FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34392e302f32342d3234203d3e20323733363531.roa
Signing time:             Tue 01 Apr 2025 13:21:28 +0000
ROA not before:           Tue 01 Apr 2025 13:16:28 +0000
ROA not after:            Tue 31 Mar 2026 13:21:28 +0000
asID:                     273651
IP address blocks:        45.186.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl
                          rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 12:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b1:8e:b6:86:98:1f:b0:c6:31:17:de:63:b5:62:31:e5:f2:cf:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD031BA6F0B6769270F067331FFFBCE55D6792E9
        Validity
            Not Before: Apr  1 13:16:28 2025 GMT
            Not After : Mar 31 13:21:28 2026 GMT
        Subject: CN=4A59D5D6BD032D492853E4FC69F53D836501CD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:3e:e2:3f:ee:1c:93:ed:de:ea:39:b3:91:
                    b2:15:58:27:c4:a1:d7:e0:2d:7c:f4:11:e6:8f:2c:
                    27:a3:13:34:ec:1c:47:bf:0e:08:a0:21:0e:72:01:
                    86:6d:20:e2:db:45:ca:12:5b:01:a9:b4:e0:6f:c8:
                    2a:60:c6:71:a6:c9:3f:9c:a2:e7:61:8b:2f:05:45:
                    30:24:1b:80:cd:c5:6b:fe:8d:20:4d:27:37:c0:c3:
                    6f:30:d0:e9:a6:87:ea:5e:a4:0e:6b:50:f8:d6:20:
                    cf:b1:5e:6f:94:9f:f8:32:72:bc:a5:98:ac:5f:26:
                    17:f2:2d:bc:b7:07:3f:61:88:4f:29:a8:46:58:8c:
                    e7:65:3b:bb:9b:e3:bc:c9:e8:3a:3c:af:c3:8e:37:
                    fd:1f:60:9f:4a:54:d2:ce:25:c0:0e:4c:15:99:66:
                    c2:1f:78:3c:ef:53:44:ce:1c:86:c6:75:73:a4:de:
                    f0:6d:75:90:71:73:30:f1:51:52:c0:67:81:f8:52:
                    14:e4:59:6a:38:69:e3:93:ef:16:fe:5d:f6:d9:1c:
                    a5:ce:5b:a6:ac:7d:d9:62:2f:bb:f3:a6:b4:0e:39:
                    3e:09:21:3d:90:dc:61:8c:e8:95:66:3e:fd:8c:4f:
                    09:48:d3:17:a1:b0:16:d2:63:0b:12:31:46:a8:79:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:59:D5:D6:BD:03:2D:49:28:53:E4:FC:69:F5:3D:83:65:01:CD:74
            X509v3 Authority Key Identifier:
                keyid:FD:03:1B:A6:F0:B6:76:92:70:F0:67:33:1F:FF:BC:E5:5D:67:92:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/FD031BA6F0B6769270F067331FFFBCE55D6792E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD031BA6F0B6769270F067331FFFBCE55D6792E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJg9nKV8UopoHkQG35pJNXALK4VoFWvAPTXPztKkwbP/0/34352e3138362e34392e302f32342d3234203d3e20323733363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:71:4c:42:cb:28:a9:a3:fd:4b:3e:52:0e:05:82:11:86:16:
         e9:c4:07:5c:f1:c3:aa:59:4e:13:22:b5:dd:7d:02:6f:dd:a9:
         17:4e:e3:b1:f1:ea:9f:a5:2c:9a:c3:e9:86:99:25:5f:01:1c:
         38:13:44:6d:aa:44:1f:e9:26:f5:f8:15:d9:00:03:22:c7:bb:
         e4:d8:75:40:7b:06:a1:2c:87:ca:3f:24:f2:8b:90:5f:bd:da:
         0a:23:d6:ef:ad:de:93:78:08:e7:a0:a7:b2:33:22:00:ba:a0:
         53:0c:6a:a4:f2:cc:30:0e:92:2d:4d:17:9a:5c:30:41:90:c2:
         9d:86:73:4b:05:4a:cf:97:e9:75:da:1e:bd:b9:bf:2a:3f:fc:
         b7:d0:81:74:d5:fe:2f:e3:9d:c1:af:6a:74:0f:28:dc:44:2a:
         ac:38:7d:48:2c:86:f5:54:fc:fa:88:72:cf:20:48:2f:97:41:
         49:2b:b9:76:e3:6a:bc:ef:33:75:c5:a2:9e:e2:35:6b:a8:54:
         c2:45:bf:74:9b:df:88:14:e2:c8:e9:cb:36:2d:c4:75:33:7e:
         a6:8e:00:98:39:e8:b9:1f:1f:da:01:ed:da:a6:04:82:79:80:
         aa:a1:bd:d0:9a:95:29:79:99:cc:9a:c6:bd:83:98:b3:42:7b:
         56:42:1c:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfbGOtoaYH7DGMRfeY7ViMeXyz2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQwMzFCQTZGMEI2NzY5MjcwRjA2NzMzMUZGRkJDRTU1
RDY3OTJFOTAeFw0yNTA0MDExMzE2MjhaFw0yNjAzMzExMzIxMjhaMDMxMTAvBgNV
BAMTKDRBNTlENUQ2QkQwMzJENDkyODUzRTRGQzY5RjUzRDgzNjUwMUNENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHj7iP+4ck+3e6jmzkbIVWCfE
odfgLXz0EeaPLCejEzTsHEe/DgigIQ5yAYZtIOLbRcoSWwGptOBvyCpgxnGmyT+c
oudhiy8FRTAkG4DNxWv+jSBNJzfAw28w0Ommh+pepA5rUPjWIM+xXm+Un/gycryl
mKxfJhfyLby3Bz9hiE8pqEZYjOdlO7ub47zJ6Do8r8OON/0fYJ9KVNLOJcAOTBWZ
ZsIfeDzvU0TOHIbGdXOk3vBtdZBxczDxUVLAZ4H4UhTkWWo4aeOT7xb+XfbZHKXO
W6asfdliL7vzprQOOT4JIT2Q3GGM6JVmPv2MTwlI0xehsBbSYwsSMUaoeaH7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSlnV1r0DLUkoU+T8afU9g2UBzXQwHwYDVR0j
BBgwFoAU/QMbpvC2dpJw8GczH/+85V1nkukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKZzluS1Y4VW9wb0hrUUczNXBKTlhBTEs0Vm9GV3ZBUFRYUHp0S2t3
YlAvMC9GRDAzMUJBNkYwQjY3NjkyNzBGMDY3MzMxRkZGQkNFNTVENjc5MkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEMDMxQkE2RjBCNjc2OTI3
MEYwNjczMzFGRkZCQ0U1NUQ2NzkyRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHSmc5bktWOFVvcG9Ia1FHMzVwSk5YQUxLNFZvRld2QVBUWFB6dEtrd2JQLzAv
MzQzNTJlMzEzODM2MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMz
MzYzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALboxMA0GCSqGSIb3DQEBCwUAA4IBAQAEcUxCyyip
o/1LPlIOBYIRhhbpxAdc8cOqWU4TIrXdfQJv3akXTuOx8eqfpSyaw+mGmSVfARw4
E0RtqkQf6Sb1+BXZAAMix7vk2HVAewahLIfKPyTyi5BfvdoKI9bvrd6TeAjnoKey
MyIAuqBTDGqk8swwDpItTReaXDBBkMKdhnNLBUrPl+l12h69ub8qP/y30IF01f4v
453Br2p0DyjcRCqsOH1ILIb1VPz6iHLPIEgvl0FJK7l242q87zN1xaKe4jVrqFTC
Rb90m9+IFOLI6cs2LcR1M36mjgCYOei5Hx/aAe3apgSCeYCqob3QmpUpeZnMmsa9
g5izQntWQhyT
-----END CERTIFICATE-----
Generated at Sat May 3 06:00:13 2025 by rpki-client