Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
File:                     34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier:          YMF1WGUqO/koid6qkm4eWU5+384jv5Woh3UeAEtElo0=
Subject key identifier:   45:E3:F4:2B:64:5C:9F:D8:D8:49:C1:B9:13:AD:F6:1D:74:41:D7:D9
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       779F81994B5A9BD47ECC361F7540EC4EC8D6FF9C
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:26 +0000
ROA not before:           Tue 03 Jun 2025 16:31:26 +0000
ROA not after:            Tue 02 Jun 2026 16:36:26 +0000
asID:                     268131
IP address blocks:        45.169.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 11:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9f:81:99:4b:5a:9b:d4:7e:cc:36:1f:75:40:ec:4e:c8:d6:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:26 2025 GMT
            Not After : Jun  2 16:36:26 2026 GMT
        Subject: CN=45E3F42B645C9FD8D849C1B913ADF61D7441D7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:db:c4:f9:0b:2c:8a:10:2d:34:39:fe:f1:
                    1c:9c:c5:f9:cb:78:fa:93:fc:ef:c5:1d:b8:ce:20:
                    66:a7:d7:8b:13:82:ef:20:b2:f3:18:bd:02:77:96:
                    b5:0c:95:99:79:99:09:13:d6:29:19:3c:1f:eb:92:
                    21:51:d1:d2:5e:e4:c7:b9:af:9d:e9:e5:01:b6:5e:
                    06:aa:8b:cc:4d:e0:a1:a6:df:08:b1:7c:72:69:07:
                    76:17:3e:b8:70:d7:87:32:46:bf:54:76:fa:24:56:
                    c7:64:73:20:0c:44:44:e6:b8:84:67:07:12:71:ec:
                    98:4d:c1:4c:45:1d:52:28:23:2f:8b:78:4f:5e:4d:
                    d7:4a:bc:d4:7a:da:22:51:fe:d9:23:e0:5e:de:de:
                    88:f0:19:39:2c:ff:cf:d9:e5:22:ac:1a:54:0a:22:
                    8b:41:c8:e0:7b:f7:b5:20:09:89:48:e7:ac:f4:31:
                    2d:82:e5:da:56:52:db:ec:4b:d8:ad:de:6c:31:30:
                    73:5c:60:71:e4:c7:4f:d4:d1:f1:46:f9:e2:5e:59:
                    8b:26:21:48:84:f0:7f:8c:96:37:e7:46:0a:5a:79:
                    e4:4e:ec:44:65:85:9b:fa:3c:0e:11:91:d8:3a:b2:
                    75:37:5b:76:f5:2e:ab:af:07:2f:b2:93:d0:52:25:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:F4:2B:64:5C:9F:D8:D8:49:C1:B9:13:AD:F6:1D:74:41:D7:D9
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:fe:3c:a8:ed:66:a0:a0:6a:f0:ff:69:db:ca:62:5f:96:
         f7:03:50:91:da:e4:33:09:f3:74:78:5f:70:e4:6f:22:e9:d4:
         17:19:5d:e2:29:c0:01:1b:9f:78:1b:40:db:29:d6:6e:ec:8b:
         c4:eb:16:85:e2:7e:60:0a:93:39:75:67:ba:66:d6:cf:e9:d3:
         14:97:e4:36:74:c2:57:2d:1f:fa:6f:e1:cb:20:58:1e:e6:fe:
         a2:9c:31:8f:1d:7d:53:2b:b4:22:c1:ea:54:19:11:55:56:1f:
         17:4c:4e:fc:30:38:5e:db:78:ef:29:db:9f:d6:fa:02:ff:a4:
         61:83:ab:e0:38:88:49:8f:b9:1c:16:59:78:06:58:82:56:a0:
         2e:45:2d:f4:2a:64:c0:ce:c5:30:af:7a:18:c8:7e:15:db:52:
         33:e9:fd:3e:fa:20:8e:61:3f:18:30:ca:39:ad:51:bc:d4:ec:
         45:4b:60:12:d8:49:49:be:0a:46:52:dc:53:ec:a9:31:05:bb:
         50:3f:ca:9e:4a:00:a8:12:85:ba:9a:a8:a2:71:f7:ed:4b:80:
         cd:f5:4f:dd:a6:f6:4f:53:08:92:0f:eb:b7:f5:fa:a9:ba:b8:
         f3:5b:0b:f9:7f:52:8e:d7:68:a4:d2:f8:0b:bb:9e:24:a6:c1:
         b8:71:e5:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd5+BmUtam9R+zDYfdUDsTsjW/5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNTA2MDMxNjMxMjZaFw0yNjA2MDIxNjM2MjZaMDMxMTAvBgNV
BAMTKDQ1RTNGNDJCNjQ1QzlGRDhEODQ5QzFCOTEzQURGNjFENzQ0MUQ3RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHtvE+QssihAtNDn+8RycxfnL
ePqT/O/FHbjOIGan14sTgu8gsvMYvQJ3lrUMlZl5mQkT1ikZPB/rkiFR0dJe5Me5
r53p5QG2Xgaqi8xN4KGm3wixfHJpB3YXPrhw14cyRr9UdvokVsdkcyAMRETmuIRn
BxJx7JhNwUxFHVIoIy+LeE9eTddKvNR62iJR/tkj4F7e3ojwGTks/8/Z5SKsGlQK
IotByOB797UgCYlI56z0MS2C5dpWUtvsS9it3mwxMHNcYHHkx0/U0fFG+eJeWYsm
IUiE8H+MljfnRgpaeeRO7ERlhZv6PA4Rkdg6snU3W3b1LquvBy+yk9BSJWDRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUReP0K2Rcn9jYScG5E632HXRB19kwHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv
MzQzNTJlMzEzNjM5MmUzMTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqb8wDQYJKoZIhvcNAQELBQADggEBABCn/jyo
7WagoGrw/2nbymJflvcDUJHa5DMJ83R4X3DkbyLp1BcZXeIpwAEbn3gbQNsp1m7s
i8TrFoXifmAKkzl1Z7pm1s/p0xSX5DZ0wlctH/pv4csgWB7m/qKcMY8dfVMrtCLB
6lQZEVVWHxdMTvwwOF7beO8p25/W+gL/pGGDq+A4iEmPuRwWWXgGWIJWoC5FLfQq
ZMDOxTCvehjIfhXbUjPp/T76II5hPxgwyjmtUbzU7EVLYBLYSUm+CkZS3FPsqTEF
u1A/yp5KAKgShbqaqKJx9+1LgM31T92m9k9TCJIP67f1+qm6uPNbC/l/Uo7XaKTS
+Au7niSmwbhx5Yg=
-----END CERTIFICATE-----
Generated at Fri Jun 20 14:12:34 2025 by rpki-client