Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          04lDsYjTGBIRk/x+cDIEMRqrOAzLX941R8DW4+Qsow0=
Subject key identifier:   01:0E:30:9A:61:8B:15:40:29:BF:B9:E6:BF:E7:7E:17:E9:0C:B7:EB
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       3F6794B92E577962FCB5581533EB8993A2327587
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:31 +0000
ROA not before:           Tue 29 Apr 2025 17:40:31 +0000
ROA not after:            Tue 28 Apr 2026 17:45:31 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 03:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:94:b9:2e:57:79:62:fc:b5:58:15:33:eb:89:93:a2:32:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:31 2025 GMT
            Not After : Apr 28 17:45:31 2026 GMT
        Subject: CN=010E309A618B154029BFB9E6BFE77E17E90CB7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:61:b0:10:a0:de:1a:b4:96:31:aa:33:0a:
                    72:49:1c:7d:86:9c:c5:c1:a2:c5:63:d9:e5:bc:b3:
                    0b:5d:af:a2:21:fb:6b:3a:62:c6:dd:d9:29:0f:5c:
                    5f:0a:c1:00:a3:24:02:68:08:db:2a:90:12:2d:fc:
                    72:b1:8a:76:f2:e7:59:e8:17:2c:a1:d9:46:90:1c:
                    40:c3:5c:6a:d1:25:0d:3f:c7:cb:88:38:1b:db:47:
                    64:d7:85:1d:d2:8c:fb:a5:5e:87:e2:ca:67:f3:3b:
                    00:d1:ae:67:f2:06:6d:d9:1c:e9:31:17:a7:f5:8b:
                    52:99:d4:a4:b6:7b:e6:47:f8:8b:9c:56:b9:f2:ae:
                    37:ed:fa:47:c6:73:d9:c1:bb:e4:d7:23:e7:c6:68:
                    cc:db:94:54:da:9b:f4:7f:78:24:18:1e:ac:17:6b:
                    68:85:73:95:0d:eb:3d:f3:db:c2:13:5b:a6:c9:fe:
                    92:61:9e:0e:6e:04:d4:b3:9c:ca:e9:36:1f:27:b7:
                    2d:ee:22:3b:5b:89:93:10:1d:89:dd:7e:d5:a4:67:
                    c3:14:11:e5:2d:94:0e:10:64:05:a0:2f:e8:44:fc:
                    46:f6:c5:3a:43:53:42:1e:46:8b:0d:40:d6:3a:5c:
                    d8:a6:39:b3:a6:32:2a:19:9e:c5:7a:d1:8c:13:92:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0E:30:9A:61:8B:15:40:29:BF:B9:E6:BF:E7:7E:17:E9:0C:B7:EB
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:62:bb:05:8b:29:c6:db:97:be:e8:37:20:42:d9:cd:8e:a6:
         ab:48:85:d1:c9:67:3b:4b:22:e9:58:de:92:07:d0:89:60:b4:
         71:cb:ec:5e:a2:bc:56:b0:4f:06:0a:a4:96:7c:06:85:9b:21:
         4d:38:6a:e6:eb:af:77:d0:89:5a:14:03:57:ca:d0:fc:fc:f3:
         d2:6a:47:7a:73:39:1d:a3:19:4f:6a:7b:85:e1:48:1e:d7:c0:
         9d:31:15:0e:b9:5b:b9:d1:4b:c7:3c:21:f9:0d:20:63:07:91:
         b1:06:80:c4:82:17:0f:97:da:c9:db:05:c7:eb:9e:7b:44:3c:
         cc:c4:9a:03:10:a8:14:af:df:6b:90:cc:9f:77:ca:d5:5a:a7:
         a7:e9:86:a9:15:39:95:f3:b1:42:4b:7d:ce:c9:47:15:e3:18:
         e1:9a:f6:11:a3:03:75:5f:e1:b5:da:fc:6c:33:01:2c:f5:8f:
         db:d8:ae:7a:4b:5d:f5:94:c8:23:eb:9d:c8:b5:38:d7:5e:f5:
         6c:da:db:b5:2a:d3:66:89:2c:8d:55:0e:09:3e:97:37:ab:15:
         3a:b6:6b:e5:37:94:dc:1d:3e:02:f5:55:90:ff:b9:b4:98:34:
         5e:02:07:e4:3b:6b:1e:79:2e:f7:42:ae:16:b6:c1:af:85:c8:
         38:70:ca:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP2eUuS5XeWL8tVgVM+uJk6IydYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBOUQzNjM1RjNERUNEM0RCMjc3QUM2N0RDNkE2QUJE
MkU4M0RFQjAeFw0yNTA0MjkxNzQwMzFaFw0yNjA0MjgxNzQ1MzFaMDMxMTAvBgNV
BAMTKDAxMEUzMDlBNjE4QjE1NDAyOUJGQjlFNkJGRTc3RTE3RTkwQ0I3RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7GGwEKDeGrSWMaozCnJJHH2G
nMXBosVj2eW8swtdr6Ih+2s6Ysbd2SkPXF8KwQCjJAJoCNsqkBIt/HKxinby51no
Fyyh2UaQHEDDXGrRJQ0/x8uIOBvbR2TXhR3SjPulXofiymfzOwDRrmfyBm3ZHOkx
F6f1i1KZ1KS2e+ZH+IucVrnyrjft+kfGc9nBu+TXI+fGaMzblFTam/R/eCQYHqwX
a2iFc5UN6z3z28ITW6bJ/pJhng5uBNSznMrpNh8nty3uIjtbiZMQHYndftWkZ8MU
EeUtlA4QZAWgL+hE/Eb2xTpDU0IeRosNQNY6XNimObOmMioZnsV60YwTktpvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAQ4wmmGLFUApv7nmv+d+F+kMt+swHwYDVR0j
BBgwFoAU1anTY1897NPbJ3rGfcamq9LoPeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC9ENUE5RDM2MzVGM0RFQ0QzREIyNzdBQzY3REM2QTZBQkQyRTgzREVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1QTlEMzYzNUYzREVDRDNE
QjI3N0FDNjdEQzZBNkFCRDJFODNERUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzQzNTJlMzIzMjM3MmUzMTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt46kwDQYJKoZIhvcNAQELBQADggEBAMpiuwWL
Kcbbl77oNyBC2c2OpqtIhdHJZztLIulY3pIH0IlgtHHL7F6ivFawTwYKpJZ8BoWb
IU04aubrr3fQiVoUA1fK0Pz889JqR3pzOR2jGU9qe4XhSB7XwJ0xFQ65W7nRS8c8
IfkNIGMHkbEGgMSCFw+X2snbBcfrnntEPMzEmgMQqBSv32uQzJ93ytVap6fphqkV
OZXzsUJLfc7JRxXjGOGa9hGjA3Vf4bXa/GwzASz1j9vYrnpLXfWUyCPrnci1ONde
9Wza27Uq02aJLI1VDgk+lzerFTq2a+U3lNwdPgL1VZD/ubSYNF4CB+Q7ax55LvdC
rha2wa+FyDhwypE=
-----END CERTIFICATE-----
Generated at Mon May 5 07:00:11 2025 by rpki-client