Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
File:                     34352e352e3230322e302f32332d3233203d3e20323636313036.roa (raw, json)
Hash identifier:          3tKw+c1C2aG4d7Zzt9Ysryaw8Yz8zt7m5i3Q2f+fcdY=
Subject key identifier:   84:65:E5:BB:8F:8B:1A:09:29:3B:41:DF:D5:98:C9:20:ED:8D:D7:48
Certificate issuer:       /CN=218CD3983D9DF04BAE16D6B05B69D93B706F9CF5
Certificate serial:       04A1E463B82720E0999949D77B5CB2FB3582E320
Authority key identifier: 21:8C:D3:98:3D:9D:F0:4B:AE:16:D6:B0:5B:69:D9:3B:70:6F:9C:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa
Signing time:             Wed 18 Jun 2025 11:13:43 +0000
ROA not before:           Wed 18 Jun 2025 11:08:43 +0000
ROA not after:            Wed 17 Jun 2026 11:13:43 +0000
asID:                     266106
IP address blocks:        45.5.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.crl
                          rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 05:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a1:e4:63:b8:27:20:e0:99:99:49:d7:7b:5c:b2:fb:35:82:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218CD3983D9DF04BAE16D6B05B69D93B706F9CF5
        Validity
            Not Before: Jun 18 11:08:43 2025 GMT
            Not After : Jun 17 11:13:43 2026 GMT
        Subject: CN=8465E5BB8F8B1A09293B41DFD598C920ED8DD748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:89:8f:4a:71:06:fb:e0:43:b5:06:af:91:
                    ce:60:4a:21:91:27:53:b4:6c:7b:d2:bc:c1:5e:18:
                    d5:92:47:52:2a:f4:fd:fd:fe:fe:bf:08:22:2b:6e:
                    09:2c:cd:5e:63:f0:93:61:5e:43:02:8b:f0:d5:ce:
                    a7:4a:2b:aa:1e:50:91:b4:44:29:a1:d1:2c:53:df:
                    da:08:36:e0:f4:de:cf:49:44:43:bd:8a:e3:72:4c:
                    93:aa:62:be:bc:67:c3:72:8a:d2:eb:04:e0:f1:0f:
                    35:bc:e2:a9:47:b3:38:2b:26:80:d3:00:bd:6b:91:
                    b4:30:7c:74:bd:b7:15:a3:03:f6:e4:55:47:b7:ad:
                    e6:55:3c:2c:2d:1e:df:d3:74:37:90:d7:5f:58:1b:
                    87:15:48:9b:84:87:d4:40:67:a6:05:29:e1:28:a0:
                    be:c9:67:e3:02:8a:f3:1e:29:78:ee:51:11:fb:78:
                    8e:ae:c1:a9:a4:51:1c:cd:bb:9d:69:70:11:87:a9:
                    6c:58:29:64:26:2f:47:ae:d8:84:c8:d9:43:46:3e:
                    1d:00:4d:bc:eb:2e:e9:17:f2:de:16:86:30:9d:ea:
                    58:f5:5b:c5:70:3a:ba:7a:30:9f:b6:4d:06:4c:54:
                    c1:9d:0c:54:dc:13:29:e7:22:b4:16:5e:5b:1f:da:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:E5:BB:8F:8B:1A:09:29:3B:41:DF:D5:98:C9:20:ED:8D:D7:48
            X509v3 Authority Key Identifier:
                keyid:21:8C:D3:98:3D:9D:F0:4B:AE:16:D6:B0:5B:69:D9:3B:70:6F:9C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/218CD3983D9DF04BAE16D6B05B69D93B706F9CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230322e302f32332d3233203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:09:21:68:ff:9d:e8:0c:df:fb:ff:27:cb:10:fb:43:53:50:
         74:4b:79:3d:26:14:5e:a8:b4:16:e5:80:45:04:71:17:ec:c7:
         7f:8d:df:25:ad:82:38:34:9c:f5:3c:6a:81:76:e6:53:0a:54:
         c1:9e:d8:3f:aa:fe:24:46:b9:89:58:4c:f5:77:d8:4b:6a:2e:
         81:c5:fd:9c:56:37:36:ea:04:5e:96:fb:7b:c2:db:21:12:8e:
         19:5a:bd:29:24:c8:b1:1c:a6:c4:19:77:7b:f7:c6:30:d0:6b:
         4f:d4:69:c6:8d:92:bd:c0:5c:5f:39:8b:83:1b:52:6f:4e:e6:
         7e:c8:90:06:c9:d4:6a:b2:bc:11:28:77:66:ed:14:66:68:15:
         3a:01:29:45:6d:dc:fc:94:8c:0e:05:b9:e6:46:42:3c:3e:a5:
         93:1d:64:f9:bd:42:96:0c:84:cb:5f:96:38:53:fd:ee:63:31:
         8f:20:51:0e:0d:19:6d:5f:8c:62:31:88:71:da:d4:a5:f8:8e:
         60:38:a6:60:fe:2c:28:a4:a5:69:ef:01:38:11:61:99:af:bc:
         dd:59:88:78:b5:b4:8b:39:84:b1:f6:7e:c3:13:55:e7:ea:a9:
         02:9c:27:85:0a:18:f7:24:51:68:8d:2f:63:f4:ca:3c:8e:0a:
         fc:f9:c5:86
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBKHkY7gnIOCZmUnXe1yy+zWC4yAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Q0QzOTgzRDlERjA0QkFFMTZENkIwNUI2OUQ5M0I3
MDZGOUNGNTAeFw0yNTA2MTgxMTA4NDNaFw0yNjA2MTcxMTEzNDNaMDMxMTAvBgNV
BAMTKDg0NjVFNUJCOEY4QjFBMDkyOTNCNDFERkQ1OThDOTIwRUQ4REQ3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOZYmPSnEG++BDtQavkc5gSiGR
J1O0bHvSvMFeGNWSR1Iq9P39/v6/CCIrbgkszV5j8JNhXkMCi/DVzqdKK6oeUJG0
RCmh0SxT39oINuD03s9JREO9iuNyTJOqYr68Z8NyitLrBODxDzW84qlHszgrJoDT
AL1rkbQwfHS9txWjA/bkVUe3reZVPCwtHt/TdDeQ119YG4cVSJuEh9RAZ6YFKeEo
oL7JZ+MCivMeKXjuURH7eI6uwamkURzNu51pcBGHqWxYKWQmL0eu2ITI2UNGPh0A
TbzrLukX8t4WhjCd6lj1W8VwOrp6MJ+2TQZMVMGdDFTcEynnIrQWXlsf2siPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhGXlu4+LGgkpO0Hf1ZjJIO2N10gwHwYDVR0j
BBgwFoAUIYzTmD2d8EuuFtawW2nZO3BvnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXUxNnJaa1ZNVHRTQ1Y2OFpRRjJENWhyMWpwTnlqOVVCZ21UYUs2ZWNZ
NXAvMC8yMThDRDM5ODNEOURGMDRCQUUxNkQ2QjA1QjY5RDkzQjcwNkY5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxOENEMzk4M0Q5REYwNEJB
RTE2RDZCMDVCNjlEOTNCNzA2RjlDRjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1MTZyWmtWTVR0U0NWNjhaUUYyRDVocjFqcE55ajlVQmdtVGFLNmVjWTVwLzAv
MzQzNTJlMzUyZTMyMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMx
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0FyjANBgkqhkiG9w0BAQsFAAOCAQEAJwkhaP+d6Azf
+/8nyxD7Q1NQdEt5PSYUXqi0FuWARQRxF+zHf43fJa2CODSc9TxqgXbmUwpUwZ7Y
P6r+JEa5iVhM9XfYS2ougcX9nFY3NuoEXpb7e8LbIRKOGVq9KSTIsRymxBl3e/fG
MNBrT9Rpxo2SvcBcXzmLgxtSb07mfsiQBsnUarK8ESh3Zu0UZmgVOgEpRW3c/JSM
DgW55kZCPD6lkx1k+b1ClgyEy1+WOFP97mMxjyBRDg0ZbV+MYjGIcdrUpfiOYDim
YP4sKKSlae8BOBFhma+83VmIeLW0izmEsfZ+wxNV5+qpApwnhQoY9yRRaI0vY/TK
PI4K/PnFhg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:56:26 2025 by rpki-client