Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          MuNsF/M7HGG1/B/fkw19YyRxVSatS9fGoH594VbdEmY=
Subject key identifier:   54:25:79:E5:63:96:79:E0:D5:86:3E:13:16:9B:FD:04:F4:2C:9B:9D
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       3B18235F2ACDB87A494F65C520613E6F52D70AAD
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:03 +0000
ROA not before:           Fri 16 May 2025 13:00:03 +0000
ROA not after:            Fri 15 May 2026 13:05:03 +0000
asID:                     268296
IP address blocks:        45.237.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 04:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:18:23:5f:2a:cd:b8:7a:49:4f:65:c5:20:61:3e:6f:52:d7:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:03 2025 GMT
            Not After : May 15 13:05:03 2026 GMT
        Subject: CN=542579E5639679E0D5863E13169BFD04F42C9B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a7:ee:75:a1:fd:84:c0:67:78:c8:5a:fd:63:
                    e3:df:29:c7:d2:a7:a0:0f:0c:cd:1b:75:81:ed:69:
                    58:8e:c2:e5:3f:eb:30:d1:15:08:07:c9:f1:9c:cd:
                    a7:92:0c:98:83:41:59:ad:f0:01:7d:a7:12:a8:9a:
                    50:2d:ff:7d:c7:48:b6:e6:76:5b:1a:69:f7:99:9d:
                    49:3c:0c:60:7c:04:82:4b:de:ac:89:ed:0e:91:43:
                    bb:c0:fd:fa:9b:d0:d4:3d:de:a0:86:16:43:0d:ea:
                    aa:95:38:e0:5e:8e:2c:1d:7c:ce:a0:18:61:a4:4e:
                    db:7c:33:f8:65:b2:61:27:36:d7:85:ad:a9:4b:c9:
                    c1:40:ff:f0:4b:de:f2:61:a2:a6:9e:8b:e1:3e:d8:
                    a9:84:fb:c2:d5:18:a0:33:4a:58:f9:c4:d6:fa:8a:
                    3e:7d:df:b4:a5:60:60:5a:7d:6d:67:70:9f:eb:de:
                    88:b0:30:ce:6a:9c:2a:ad:11:f8:2d:59:c3:7a:e0:
                    ca:a8:ef:09:ce:f5:07:bb:21:f4:09:a0:cf:4b:a3:
                    5d:d0:fa:5f:f1:54:cf:3f:8a:47:6b:6c:c3:ee:89:
                    9b:10:01:3b:9e:cb:14:e8:8a:2e:ff:17:5a:d5:0a:
                    d6:a6:46:4d:b2:3b:12:24:24:56:ce:b2:19:7e:74:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:79:E5:63:96:79:E0:D5:86:3E:13:16:9B:FD:04:F4:2C:9B:9D
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:6a:2c:83:1e:b4:a0:ba:b4:35:2a:0d:65:57:86:58:03:
         cc:1b:25:09:8f:47:15:ff:01:15:da:97:c8:d7:51:2d:b2:f2:
         3f:90:c2:6c:bf:66:d8:1e:96:8a:b1:0b:28:b4:7a:e2:77:93:
         0c:bc:6a:5e:5b:0d:12:21:8e:77:21:e5:0d:ca:85:a6:c4:c8:
         40:40:28:c8:ad:79:17:08:6f:72:38:c0:23:88:73:ef:5f:e4:
         b2:0d:4e:13:1a:4d:68:64:42:d4:cf:00:17:7a:8e:57:46:3d:
         2a:f4:34:92:65:91:7e:46:5a:18:53:f3:71:58:3c:b0:e4:87:
         fc:6c:69:92:88:25:4f:8a:96:39:19:09:c1:46:ad:59:1f:4e:
         ed:36:1f:cd:5d:5b:75:d9:08:9e:67:87:e9:43:8c:6e:cf:4f:
         31:35:3e:48:0e:7b:4c:ae:54:e2:1f:49:cb:07:e4:74:12:c5:
         3d:9a:f2:9a:96:eb:c0:f7:d5:8a:46:d0:56:1e:2c:07:b9:c0:
         3a:57:23:22:fc:18:19:e6:b6:32:1d:76:4f:b2:cd:f7:89:17:
         c8:6b:79:55:3c:bf:f5:a0:16:76:d5:e1:47:5a:11:47:4a:da:
         f6:80:19:39:c9:54:56:42:41:88:af:39:e3:c2:76:f6:a6:c0:
         c6:a6:13:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOxgjXyrNuHpJT2XFIGE+b1LXCq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhERUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlE
Q0NCNDM3QzAeFw0yNTA1MTYxMzAwMDNaFw0yNjA1MTUxMzA1MDNaMDMxMTAvBgNV
BAMTKDU0MjU3OUU1NjM5Njc5RTBENTg2M0UxMzE2OUJGRDA0RjQyQzlCOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxp+51of2EwGd4yFr9Y+PfKcfS
p6APDM0bdYHtaViOwuU/6zDRFQgHyfGczaeSDJiDQVmt8AF9pxKomlAt/33HSLbm
dlsaafeZnUk8DGB8BIJL3qyJ7Q6RQ7vA/fqb0NQ93qCGFkMN6qqVOOBejiwdfM6g
GGGkTtt8M/hlsmEnNteFralLycFA//BL3vJhoqaei+E+2KmE+8LVGKAzSlj5xNb6
ij5937SlYGBafW1ncJ/r3oiwMM5qnCqtEfgtWcN64Mqo7wnO9Qe7IfQJoM9Lo13Q
+l/xVM8/ikdrbMPuiZsQATueyxToii7/F1rVCtamRk2yOxIkJFbOshl+dAxRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVCV55WOWeeDVhj4TFpv9BPQsm50wHwYDVR0j
BBgwFoAUeN7IwEJInxrmj5yKHYwNKdzLQ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC83OERFQzhDMDQyNDg5RjFBRTY4RjlDOEExRDhDMEQyOURDQ0I0MzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4REVDOEMwNDI0ODlGMUFF
NjhGOUM4QTFEOEMwRDI5RENDQjQzN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7fQwDQYJKoZIhvcNAQELBQADggEBAI88aiyD
HrSgurQ1Kg1lV4ZYA8wbJQmPRxX/ARXal8jXUS2y8j+Qwmy/ZtgeloqxCyi0euJ3
kwy8al5bDRIhjnch5Q3KhabEyEBAKMiteRcIb3I4wCOIc+9f5LINThMaTWhkQtTP
ABd6jldGPSr0NJJlkX5GWhhT83FYPLDkh/xsaZKIJU+KljkZCcFGrVkfTu02H81d
W3XZCJ5nh+lDjG7PTzE1PkgOe0yuVOIfScsH5HQSxT2a8pqW68D31YpG0FYeLAe5
wDpXIyL8GBnmtjIddk+yzfeJF8hreVU8v/WgFnbV4UdaEUdK2vaAGTnJVFZCQYiv
OePCdvamwMamE1A=
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:21:13 2025 by rpki-client