Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/34352e3232372e39362e302f32322d3332203d3e20323637303639.roa
File:                     34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (raw, json)
Hash identifier:          Oe6x3bP2eXuQZN8y9R1bolys15NpRvneQDtTXeDC6nk=
Subject key identifier:   B1:FD:9E:B2:E2:9D:80:2F:23:C8:A0:CF:1F:A7:EE:B5:6A:CD:E9:C2
Certificate issuer:       /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
Certificate serial:       5BBFDC6ACB9BD9F24E40D3F39BE312948C306E53
Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/34352e3232372e39362e302f32322d3332203d3e20323637303639.roa
Signing time:             Fri 01 Aug 2025 14:52:27 +0000
ROA not before:           Fri 01 Aug 2025 14:47:27 +0000
ROA not after:            Fri 31 Jul 2026 14:52:27 +0000
asID:                     267069
IP address blocks:        45.227.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl
                          rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 04:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:dc:6a:cb:9b:d9:f2:4e:40:d3:f3:9b:e3:12:94:8c:30:6e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78
        Validity
            Not Before: Aug  1 14:47:27 2025 GMT
            Not After : Jul 31 14:52:27 2026 GMT
        Subject: CN=B1FD9EB2E29D802F23C8A0CF1FA7EEB56ACDE9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2c:5b:48:e1:99:1f:61:09:3f:df:26:04:10:
                    2c:46:d3:0b:b1:c7:3f:95:98:fb:ec:4a:db:35:43:
                    ee:be:f8:a2:66:69:76:59:9b:ce:8a:ee:52:9b:10:
                    06:38:1f:d9:f2:4f:73:da:16:6e:7f:2d:bd:af:44:
                    2c:a8:59:0b:11:75:ec:f2:cd:d0:f1:c3:3b:37:fe:
                    03:8b:10:d5:e1:b5:7d:70:93:9c:11:61:26:a7:a3:
                    f2:5a:94:a2:5e:b1:c7:fc:f3:3c:d4:fd:35:8d:5c:
                    35:7f:78:74:3f:78:c3:61:df:88:34:bd:5e:06:45:
                    b6:8a:bf:61:52:55:1b:42:4a:ee:15:0c:67:eb:18:
                    c5:39:bd:ae:33:dd:c9:68:14:fc:ac:93:dc:01:64:
                    63:3e:8f:53:7c:e5:29:11:f5:3b:75:01:9f:aa:6b:
                    3c:82:fe:df:7c:3c:dd:b7:11:48:9e:a5:ee:db:15:
                    c6:1e:9d:90:de:28:67:25:76:60:55:91:4a:f6:c1:
                    e9:14:c8:5c:6d:95:01:be:99:7f:ee:67:72:20:68:
                    92:5b:c4:95:30:42:bd:b9:e2:1c:7a:e3:c2:a1:56:
                    06:df:a3:73:07:8d:1d:1f:9f:3a:81:e8:85:09:68:
                    fd:27:68:44:e6:9d:d1:c6:aa:62:35:d3:c9:b2:42:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:9E:B2:E2:9D:80:2F:23:C8:A0:CF:1F:A7:EE:B5:6A:CD:E9:C2
            X509v3 Authority Key Identifier:
                keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/34352e3232372e39362e302f32322d3332203d3e20323637303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:a9:ab:02:28:78:2f:85:13:04:73:14:87:3e:49:74:7e:
         b9:95:9d:c7:54:52:87:9a:5b:46:5e:fb:7e:ef:eb:10:74:cc:
         55:69:8d:f3:45:4c:9c:35:77:c3:4a:09:48:8e:d0:e9:60:af:
         11:81:95:7e:d4:9a:79:ce:c2:27:1f:60:6f:3c:66:b2:64:96:
         01:67:85:34:4d:f1:18:1a:61:9c:18:e7:07:6d:b5:44:9e:19:
         e0:b2:9d:89:4d:11:12:a3:75:73:f3:57:3e:ab:cb:86:16:79:
         25:79:9d:c5:21:3e:58:d1:be:43:ca:0b:44:19:51:a3:f3:bc:
         f9:ec:97:14:51:45:61:0f:9d:28:d9:02:93:42:77:1c:2f:2d:
         2f:ba:c3:13:0d:fc:a0:6d:db:76:57:63:75:9c:46:f2:7b:72:
         fa:f1:49:3e:e1:da:ea:5a:77:ec:c0:84:31:7f:6b:cc:36:18:
         82:58:ef:7e:bb:a0:5b:df:9a:5b:e7:6d:7a:de:ca:73:5b:4b:
         8f:2d:fa:e2:d8:48:6d:43:10:5e:cd:64:9b:c6:d1:55:01:98:
         e8:0a:40:02:88:63:dc:5c:36:99:d7:22:4c:ce:73:7b:89:9c:
         01:cd:31:7f:da:01:85:3a:d2:49:c0:90:22:7f:82:3c:fa:ca:
         a0:b9:d4:88
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW7/casub2fJOQNPzm+MSlIwwblMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5
RjlBMUQ3ODAeFw0yNTA4MDExNDQ3MjdaFw0yNjA3MzExNDUyMjdaMDMxMTAvBgNV
BAMTKEIxRkQ5RUIyRTI5RDgwMkYyM0M4QTBDRjFGQTdFRUI1NkFDREU5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLFtI4ZkfYQk/3yYEECxG0wux
xz+VmPvsSts1Q+6++KJmaXZZm86K7lKbEAY4H9nyT3PaFm5/Lb2vRCyoWQsRdezy
zdDxwzs3/gOLENXhtX1wk5wRYSano/JalKJescf88zzU/TWNXDV/eHQ/eMNh34g0
vV4GRbaKv2FSVRtCSu4VDGfrGMU5va4z3cloFPysk9wBZGM+j1N85SkR9Tt1AZ+q
azyC/t98PN23EUiepe7bFcYenZDeKGcldmBVkUr2wekUyFxtlQG+mX/uZ3IgaJJb
xJUwQr254hx648KhVgbfo3MHjR0fnzqB6IUJaP0naETmndHGqmI108myQiV/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsf2esuKdgC8jyKDPH6futWrN6cIwHwYDVR0j
BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw
WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1
M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDV0tiR3pyYXBCWXhuWFd3ZjV4NHF3Z1loN2V6R0dGTHM3dHU5VVBQcFllLzAv
MzQzNTJlMzIzMjM3MmUzOTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeNgMA0GCSqGSIb3DQEBCwUAA4IBAQB1+amrAih4
L4UTBHMUhz5JdH65lZ3HVFKHmltGXvt+7+sQdMxVaY3zRUycNXfDSglIjtDpYK8R
gZV+1Jp5zsInH2BvPGayZJYBZ4U0TfEYGmGcGOcHbbVEnhngsp2JTRESo3Vz81c+
q8uGFnkleZ3FIT5Y0b5DygtEGVGj87z57JcUUUVhD50o2QKTQnccLy0vusMTDfyg
bdt2V2N1nEbye3L68Uk+4drqWnfswIQxf2vMNhiCWO9+u6Bb35pb52163spzW0uP
Lfri2EhtQxBezWSbxtFVAZjoCkACiGPcXDaZ1yJMznN7iZwBzTF/2gGFOtJJwJAi
f4I8+sqgudSI
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:15 2025 by rpki-client