Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          43+lZx6yNw3chQQ3rdDi6xVUZ10HWty/7VWRdAmFCbE=
Subject key identifier:   03:F6:25:A4:D7:BD:7D:1E:40:9A:50:0A:4B:A6:5D:4E:88:83:CB:1A
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       1FDDA1D72722B069F47DCEE015572DC20DB9A5E6
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 07 Jun 2025 01:56:48 +0000
ROA not before:           Sat 07 Jun 2025 01:51:48 +0000
ROA not after:            Sat 06 Jun 2026 01:56:48 +0000
asID:                     267350
IP address blocks:        45.233.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 12:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:dd:a1:d7:27:22:b0:69:f4:7d:ce:e0:15:57:2d:c2:0d:b9:a5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jun  7 01:51:48 2025 GMT
            Not After : Jun  6 01:56:48 2026 GMT
        Subject: CN=03F625A4D7BD7D1E409A500A4BA65D4E8883CB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:be:da:fe:a5:99:72:28:36:dd:b1:a1:bc:
                    fb:32:f2:93:b7:0d:7a:41:e5:ca:ec:13:34:d7:d8:
                    78:42:7b:4d:13:7a:b9:dc:34:98:98:e0:4c:ec:23:
                    d9:1c:47:65:52:e7:77:ad:af:d2:1b:db:d9:d1:ea:
                    6b:ce:dc:c9:cd:43:5d:7a:03:12:4f:dc:8b:7a:18:
                    9b:24:51:55:df:89:48:d6:09:15:7a:25:7c:8b:e5:
                    70:23:61:41:2e:2d:e2:64:48:1c:36:d9:22:3c:04:
                    3b:e1:7d:2b:70:45:40:c2:7b:18:35:29:b1:1d:3f:
                    ca:2c:66:6c:3d:65:e2:d0:f5:34:52:9b:f3:16:e1:
                    68:79:85:c0:52:15:46:d0:34:5b:12:89:23:0e:9b:
                    26:8f:75:31:02:30:77:9a:91:12:ac:9b:48:f6:1b:
                    57:8b:af:c3:25:3f:3a:5d:2d:91:83:85:98:00:24:
                    b6:1a:38:ed:72:10:67:77:87:62:31:00:bf:ba:08:
                    2d:21:f7:f5:7e:b9:d0:bb:6d:50:76:76:35:20:84:
                    fa:ad:94:fa:1f:28:00:78:89:9d:d9:22:c1:c7:77:
                    bd:e4:d9:88:a3:33:2a:a8:5c:cd:ee:88:fd:de:8d:
                    fb:f1:3d:3c:2a:4b:14:a3:f1:0c:2a:b0:ef:78:31:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:25:A4:D7:BD:7D:1E:40:9A:50:0A:4B:A6:5D:4E:88:83:CB:1A
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:97:e2:c0:54:49:2d:dd:ff:29:65:fa:0c:c6:fb:ee:f4:
         a4:81:3c:e9:72:99:8b:48:14:d8:6b:ba:0b:2c:c8:14:68:a2:
         1c:ab:cd:1e:ec:3a:7e:8f:9a:6b:9f:20:bf:0a:62:c0:d6:d4:
         57:a2:32:51:bb:98:4b:e8:51:fd:29:12:30:c4:10:23:16:56:
         c5:a6:15:6b:af:8b:83:f2:05:ec:52:61:38:73:71:dd:17:a8:
         4a:30:93:9c:15:8b:05:00:c2:57:30:a9:1d:d8:1b:66:96:27:
         38:4a:84:4b:3d:ae:a2:26:64:d4:43:3a:41:5b:10:c2:f3:f1:
         11:6d:fd:15:40:23:cb:af:b4:4e:62:e9:97:29:ff:7b:f8:52:
         3e:b4:c3:9e:e6:ef:bf:0a:b7:01:52:8c:91:3d:24:05:49:47:
         63:bb:28:a7:b4:e4:26:2a:82:65:08:10:54:34:cb:df:c7:53:
         5d:e1:b8:69:ba:48:d7:a1:e8:bc:60:03:a1:a6:bb:cc:58:6d:
         b4:42:eb:ad:d6:b1:ab:17:24:0e:8b:42:22:5d:b3:e5:59:12:
         60:1c:46:d9:dc:78:02:ad:9d:0d:73:af:de:5f:f3:f9:39:78:
         9a:ec:36:ae:30:17:a5:b3:fd:7c:98:7e:fb:83:ef:30:dc:c1:
         21:c5:27:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH92h1ycisGn0fc7gFVctwg25peYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2
QjAzREE3RjAeFw0yNTA2MDcwMTUxNDhaFw0yNjA2MDYwMTU2NDhaMDMxMTAvBgNV
BAMTKDAzRjYyNUE0RDdCRDdEMUU0MDlBNTAwQTRCQTY1RDRFODg4M0NCMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClt77a/qWZcig23bGhvPsy8pO3
DXpB5crsEzTX2HhCe00TerncNJiY4EzsI9kcR2VS53etr9Ib29nR6mvO3MnNQ116
AxJP3It6GJskUVXfiUjWCRV6JXyL5XAjYUEuLeJkSBw22SI8BDvhfStwRUDCexg1
KbEdP8osZmw9ZeLQ9TRSm/MW4Wh5hcBSFUbQNFsSiSMOmyaPdTECMHeakRKsm0j2
G1eLr8MlPzpdLZGDhZgAJLYaOO1yEGd3h2IxAL+6CC0h9/V+udC7bVB2djUghPqt
lPofKAB4iZ3ZIsHHd73k2YijMyqoXM3uiP3ejfvxPTwqSxSj8QwqsO94MWdPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA/YlpNe9fR5AmlAKS6ZdToiDyxowHwYDVR0j
BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0
MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv
MzQzNTJlMzIzMzMzMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6eYwDQYJKoZIhvcNAQELBQADggEBAGful+LA
VEkt3f8pZfoMxvvu9KSBPOlymYtIFNhrugssyBRoohyrzR7sOn6PmmufIL8KYsDW
1FeiMlG7mEvoUf0pEjDEECMWVsWmFWuvi4PyBexSYThzcd0XqEowk5wViwUAwlcw
qR3YG2aWJzhKhEs9rqImZNRDOkFbEMLz8RFt/RVAI8uvtE5i6Zcp/3v4Uj60w57m
778KtwFSjJE9JAVJR2O7KKe05CYqgmUIEFQ0y9/HU13huGm6SNeh6LxgA6Gmu8xY
bbRC663WsasXJA6LQiJds+VZEmAcRtnceAKtnQ1zr95f8/k5eJrsNq4wF6Wz/XyY
fvuD7zDcwSHFJ2E=
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:00:29 2025 by rpki-client