Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa
File:                     34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa (raw, json)
Hash identifier:          7KMD+vzhVd6GMXmtsjWHi0Yj6A8CwK+V72bs2GQH+/c=
Subject key identifier:   8D:C1:94:74:4F:03:39:04:EF:37:27:78:D3:59:BA:52:6C:D0:5A:0E
Certificate issuer:       /CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
Certificate serial:       7488F06E363E6C59A69951E839F3B72680665152
Authority key identifier: 5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa
Signing time:             Tue 01 Jul 2025 18:25:27 +0000
ROA not before:           Tue 01 Jul 2025 18:20:27 +0000
ROA not after:            Tue 30 Jun 2026 18:25:27 +0000
asID:                     267666
IP address blocks:        45.224.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl
                          rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 18:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:88:f0:6e:36:3e:6c:59:a6:99:51:e8:39:f3:b7:26:80:66:51:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA6E53A684BE6ED5DC8EF282338D067320E1881
        Validity
            Not Before: Jul  1 18:20:27 2025 GMT
            Not After : Jun 30 18:25:27 2026 GMT
        Subject: CN=8DC194744F033904EF372778D359BA526CD05A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:5d:65:9b:09:de:b6:e0:d3:3e:74:6a:63:
                    c5:fc:70:e8:6a:54:04:d7:a7:9c:93:d2:c9:e3:46:
                    ac:81:23:16:e4:24:2f:1d:67:ad:b5:db:a6:e5:86:
                    c0:b1:dd:87:f3:bc:35:3e:08:8b:88:5a:87:d4:d6:
                    c5:09:f0:94:e8:55:18:f1:76:c5:75:53:85:6b:81:
                    bc:eb:a9:8d:23:0e:7f:4f:e1:5b:c3:47:29:05:d9:
                    71:8b:17:ae:0a:88:5c:0d:a9:39:81:32:a6:35:a4:
                    a6:0c:65:d4:29:e1:70:14:6f:ba:fc:1e:ab:dc:7c:
                    cd:cb:b4:5a:06:b3:db:03:40:4e:f8:19:4c:86:04:
                    e8:e0:ec:28:d2:46:86:50:73:d8:9e:a6:92:25:ad:
                    4d:3d:1d:d8:e6:4a:c1:2e:b3:88:96:05:3c:2a:ef:
                    d9:7b:86:9f:ce:28:2a:8a:5d:c0:6c:99:00:0d:a1:
                    f6:22:dd:77:4c:74:f4:21:3c:18:6b:5d:d9:b9:98:
                    f4:b7:eb:e1:dc:e9:60:4c:7e:fb:20:5c:72:84:80:
                    ff:5c:8b:f8:04:97:5a:5a:b9:20:45:8d:7f:2a:40:
                    f4:f2:04:b9:4f:2d:5e:cc:5a:65:1e:43:e9:7e:72:
                    6e:3e:f6:93:32:73:5b:c7:00:a6:6b:ab:64:e1:eb:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:94:74:4F:03:39:04:EF:37:27:78:D3:59:BA:52:6C:D0:5A:0E
            X509v3 Authority Key Identifier:
                keyid:5E:A6:E5:3A:68:4B:E6:ED:5D:C8:EF:28:23:38:D0:67:32:0E:18:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/5EA6E53A684BE6ED5DC8EF282338D067320E1881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA6E53A684BE6ED5DC8EF282338D067320E1881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3234203d3e20323637363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:d7:18:4d:e1:c8:30:12:8a:da:23:ed:07:d5:95:92:b8:
         55:c7:ba:cc:92:44:e3:28:f3:cb:a8:d1:7d:6d:e9:e0:79:24:
         02:17:ab:46:31:65:11:52:83:8a:f1:7d:2e:a2:48:00:9a:a2:
         3c:e9:20:c0:4f:63:6c:29:09:23:53:55:c8:74:e7:02:0f:c5:
         b2:81:3d:23:b8:01:bb:e3:46:21:2f:2f:ad:c7:c6:0e:3f:8c:
         fc:23:c7:7a:e9:f8:32:e7:27:29:df:c8:76:7d:e3:63:5f:82:
         8b:ec:d2:25:d2:af:62:74:b1:a2:7d:81:71:94:e9:7c:d3:87:
         1e:47:aa:d8:bb:3f:06:d4:9a:81:80:17:18:60:8b:35:ac:8a:
         3c:b5:ec:58:27:10:0b:6d:2e:b4:15:08:09:aa:f9:f7:07:ac:
         16:ba:c5:5e:41:70:a8:2d:e2:8b:96:f2:91:9e:d4:94:df:ec:
         26:8c:14:b6:db:9b:a4:1e:02:67:20:af:6a:bc:bd:4c:21:4e:
         57:54:4f:6f:47:f3:9b:99:0d:c0:e2:38:27:5a:5d:bd:36:60:
         d4:2a:0f:4f:1a:93:4d:ed:af:56:79:6b:c1:50:2f:27:c8:6e:
         5b:a0:a5:7c:71:25:bc:58:a3:f3:9b:0a:52:b6:b7:21:df:9e:
         46:f0:1b:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdIjwbjY+bFmmmVHoOfO3JoBmUVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBNkU1M0E2ODRCRTZFRDVEQzhFRjI4MjMzOEQwNjcz
MjBFMTg4MTAeFw0yNTA3MDExODIwMjdaFw0yNjA2MzAxODI1MjdaMDMxMTAvBgNV
BAMTKDhEQzE5NDc0NEYwMzM5MDRFRjM3Mjc3OEQzNTlCQTUyNkNEMDVBMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP811lmwnetuDTPnRqY8X8cOhq
VATXp5yT0snjRqyBIxbkJC8dZ62126blhsCx3YfzvDU+CIuIWofU1sUJ8JToVRjx
dsV1U4VrgbzrqY0jDn9P4VvDRykF2XGLF64KiFwNqTmBMqY1pKYMZdQp4XAUb7r8
HqvcfM3LtFoGs9sDQE74GUyGBOjg7CjSRoZQc9ieppIlrU09HdjmSsEus4iWBTwq
79l7hp/OKCqKXcBsmQANofYi3XdMdPQhPBhrXdm5mPS36+Hc6WBMfvsgXHKEgP9c
i/gEl1pauSBFjX8qQPTyBLlPLV7MWmUeQ+l+cm4+9pMyc1vHAKZrq2Th6/gLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjcGUdE8DOQTvNyd401m6UmzQWg4wHwYDVR0j
BBgwFoAUXqblOmhL5u1dyO8oIzjQZzIOGIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXc2NjVBNzhTcWFKS01BRFNGUkRFWWN6bUxYOTRxeGpMQVVOamdQc3dk
ZUsvMC81RUE2RTUzQTY4NEJFNkVENURDOEVGMjgyMzM4RDA2NzMyMEUxODgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQTZFNTNBNjg0QkU2RUQ1
REM4RUYyODIzMzhEMDY3MzIwRTE4ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl3NjY1QTc4U3FhSktNQURTRlJERVljem1MWDk0cXhqTEFVTmpnUHN3ZGVLLzAv
MzQzNTJlMzIzMjM0MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4NAwDQYJKoZIhvcNAQELBQADggEBAJEu1xhN
4cgwEoraI+0H1ZWSuFXHusySROMo88uo0X1t6eB5JAIXq0YxZRFSg4rxfS6iSACa
ojzpIMBPY2wpCSNTVch05wIPxbKBPSO4AbvjRiEvL63Hxg4/jPwjx3rp+DLnJynf
yHZ942Nfgovs0iXSr2J0saJ9gXGU6XzThx5Hqti7PwbUmoGAFxhgizWsijy17Fgn
EAttLrQVCAmq+fcHrBa6xV5BcKgt4ouW8pGe1JTf7CaMFLbbm6QeAmcgr2q8vUwh
TldUT29H85uZDcDiOCdaXb02YNQqD08ak03tr1Z5a8FQLyfIblugpXxxJbxYo/Ob
ClK2tyHfnkbwG8o=
-----END CERTIFICATE-----
Generated at Wed Aug 13 07:43:38 2025 by rpki-client