Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/34352e362e3230342e302f32322d3234203d3e20323636323436.roa
File:                     34352e362e3230342e302f32322d3234203d3e20323636323436.roa (raw, json)
Hash identifier:          e7e5Nq1ygpYqxCp2QRXvW7DpCH5+va7+bax0mHc+GUY=
Subject key identifier:   92:30:B7:6D:77:A2:20:20:7F:4C:31:B6:2B:9F:B9:61:C9:B3:37:44
Certificate issuer:       /CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
Certificate serial:       1C6D0357A05DD8DEAF63F87FDC2A9C2E12A1AD23
Authority key identifier: E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/34352e362e3230342e302f32322d3234203d3e20323636323436.roa
Signing time:             Thu 07 Aug 2025 15:11:59 +0000
ROA not before:           Thu 07 Aug 2025 15:06:59 +0000
ROA not after:            Thu 06 Aug 2026 15:11:59 +0000
asID:                     266246
IP address blocks:        45.6.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6d:03:57:a0:5d:d8:de:af:63:f8:7f:dc:2a:9c:2e:12:a1:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D2287A592D8B7C6149FCA020C2BE650D327DBC
        Validity
            Not Before: Aug  7 15:06:59 2025 GMT
            Not After : Aug  6 15:11:59 2026 GMT
        Subject: CN=9230B76D77A220207F4C31B62B9FB961C9B33744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:62:20:09:68:25:18:c5:ad:55:6a:91:79:
                    e7:8d:96:cc:ea:48:30:e9:9e:39:23:11:06:94:0f:
                    29:0a:3f:6e:78:ec:9c:46:fc:59:8b:d7:dc:b3:70:
                    5b:e0:91:45:29:18:1d:ef:12:74:0d:99:11:45:c4:
                    06:f1:94:d5:e9:3d:c1:a0:85:97:f6:73:62:ab:aa:
                    ce:44:93:32:4f:05:ee:fb:52:b9:df:ee:03:b3:ff:
                    5e:2f:15:82:f5:c3:f2:a2:23:26:d3:37:25:f2:59:
                    30:69:11:8c:6e:91:1f:81:8c:7a:44:55:f4:37:83:
                    c0:12:ad:90:7c:62:11:1d:f1:d1:46:73:ca:49:b0:
                    67:14:09:97:58:28:c6:f3:de:11:97:00:b9:30:89:
                    e2:74:de:f6:c3:3d:a6:79:0a:24:4f:bc:59:4a:b2:
                    48:6a:34:a1:1e:47:a7:ac:2c:ee:8c:20:50:46:b2:
                    f8:fd:08:46:f7:20:d9:0e:88:cb:88:cb:e1:48:8c:
                    2e:d3:19:c9:55:7c:7d:69:a7:5a:d4:9f:5d:7c:8d:
                    64:ca:73:3a:a2:fb:d7:e8:60:e3:ea:d1:b3:bc:20:
                    a2:03:57:77:82:10:47:12:db:45:cb:ac:a4:86:da:
                    4f:e0:68:97:4c:db:a6:5b:73:37:58:b7:da:4e:d0:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:30:B7:6D:77:A2:20:20:7F:4C:31:B6:2B:9F:B9:61:C9:B3:37:44
            X509v3 Authority Key Identifier:
                keyid:E4:D2:28:7A:59:2D:8B:7C:61:49:FC:A0:20:C2:BE:65:0D:32:7D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D2287A592D8B7C6149FCA020C2BE650D327DBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/34352e362e3230342e302f32322d3234203d3e20323636323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:80:30:b0:06:04:9b:d1:4e:55:78:e0:33:cc:22:64:9d:
         c5:d0:2a:84:70:b4:ca:9a:39:2a:ec:48:01:84:49:bd:ab:5f:
         2b:e7:e8:60:68:50:cd:6b:4f:2d:b4:bd:05:39:dd:7e:a5:b7:
         5a:d2:2f:31:b6:a9:c1:a6:94:13:b7:d7:17:ad:64:49:c2:00:
         37:12:5c:4f:e1:d7:ce:85:dd:f1:23:bc:55:ce:e7:89:97:9f:
         72:79:e1:30:7f:40:78:b9:17:48:6e:d6:c0:07:b4:4f:e5:e0:
         30:b5:4c:c2:96:4d:19:11:93:f3:c7:28:5a:fa:ec:64:12:85:
         bb:8b:fa:0e:7a:7d:58:60:d7:01:e0:cf:f5:bc:fb:db:92:36:
         4d:d9:2a:27:29:cf:c2:ad:8d:dd:3b:0a:28:09:c6:3d:40:27:
         e0:24:c8:1d:52:c6:2e:19:d6:1e:c5:36:83:47:e1:0c:e0:f7:
         c5:1a:35:b0:61:da:17:54:d4:df:81:57:bf:09:7f:a6:1f:30:
         12:7d:bc:14:ae:c6:04:d2:23:c7:26:c4:e7:b9:05:e0:cb:f9:
         4b:6c:9d:fc:ae:cd:7c:3e:49:4b:28:01:f6:98:f2:e5:7a:7a:
         d9:1b:8b:7b:8f:20:25:3d:20:73:88:54:b0:f4:38:c3:23:aa:
         20:9d:73:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHG0DV6Bd2N6vY/h/3CqcLhKhrSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTREMjI4N0E1OTJEOEI3QzYxNDlGQ0EwMjBDMkJFNjUw
RDMyN0RCQzAeFw0yNTA4MDcxNTA2NTlaFw0yNjA4MDYxNTExNTlaMDMxMTAvBgNV
BAMTKDkyMzBCNzZENzdBMjIwMjA3RjRDMzFCNjJCOUZCOTYxQzlCMzM3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL72IgCWglGMWtVWqReeeNlszq
SDDpnjkjEQaUDykKP2547JxG/FmL19yzcFvgkUUpGB3vEnQNmRFFxAbxlNXpPcGg
hZf2c2Krqs5EkzJPBe77Urnf7gOz/14vFYL1w/KiIybTNyXyWTBpEYxukR+BjHpE
VfQ3g8ASrZB8YhEd8dFGc8pJsGcUCZdYKMbz3hGXALkwieJ03vbDPaZ5CiRPvFlK
skhqNKEeR6esLO6MIFBGsvj9CEb3INkOiMuIy+FIjC7TGclVfH1pp1rUn118jWTK
czqi+9foYOPq0bO8IKIDV3eCEEcS20XLrKSG2k/gaJdM26ZbczdYt9pO0E8zAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkjC3bXeiICB/TDG2K5+5YcmzN0QwHwYDVR0j
BBgwFoAU5NIoelkti3xhSfygIMK+ZQ0yfbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC9FNEQyMjg3QTU5MkQ4QjdDNjE0OUZDQTAyMEMyQkU2NTBEMzI3REJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDIyODdBNTkyRDhCN0M2
MTQ5RkNBMDIwQzJCRTY1MEQzMjdEQkMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzQzNTJlMzYyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMy
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0GzDANBgkqhkiG9w0BAQsFAAOCAQEAS6iAMLAGBJvR
TlV44DPMImSdxdAqhHC0ypo5KuxIAYRJvatfK+foYGhQzWtPLbS9BTndfqW3WtIv
MbapwaaUE7fXF61kScIANxJcT+HXzoXd8SO8Vc7niZefcnnhMH9AeLkXSG7WwAe0
T+XgMLVMwpZNGRGT88coWvrsZBKFu4v6Dnp9WGDXAeDP9bz725I2TdkqJynPwq2N
3TsKKAnGPUAn4CTIHVLGLhnWHsU2g0fhDOD3xRo1sGHaF1TU34FXvwl/ph8wEn28
FK7GBNIjxybE57kF4Mv5S2yd/K7NfD5JSygB9pjy5Xp62RuLe48gJT0gc4hUsPQ4
wyOqIJ1zUw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:51 2025 by rpki-client