Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35342e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          BN3xzBlRUWFPryh+s4J8rHVHY1GnCa4MvsOiWXy8jxI=
Subject key identifier:   60:D4:0E:56:6A:2F:DC:26:E4:0A:A5:FA:AF:2C:67:AA:E6:C0:A0:30
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       2A5A8EE59C5F3BEC920A16A56FCEBACE2565D960
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:08 +0000
ROA not before:           Thu 19 Jun 2025 13:08:08 +0000
ROA not after:            Thu 18 Jun 2026 13:13:08 +0000
asID:                     269411
IP address blocks:        45.186.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5a:8e:e5:9c:5f:3b:ec:92:0a:16:a5:6f:ce:ba:ce:25:65:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:08 2025 GMT
            Not After : Jun 18 13:13:08 2026 GMT
        Subject: CN=60D40E566A2FDC26E40AA5FAAF2C67AAE6C0A030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:61:1d:a6:11:5b:c6:3e:b4:59:bc:21:0d:
                    0a:a8:f2:a3:86:33:73:3f:79:a6:73:34:fe:c8:48:
                    61:72:9c:f1:5c:e0:31:0b:fd:cc:49:e3:5b:71:30:
                    07:80:7c:5c:bc:a9:3e:5a:99:39:7d:46:ac:32:eb:
                    52:dc:95:3f:b8:9c:6b:15:62:17:80:c4:2e:7c:e1:
                    e8:3b:03:e6:09:36:35:52:cb:fe:71:93:ce:4d:d7:
                    8c:07:62:d3:b6:5d:7f:f4:ec:a6:2a:f8:1d:c3:4d:
                    34:7a:d4:4a:b1:e7:c4:3a:d7:2d:d0:64:72:77:49:
                    d5:a4:59:5e:5c:de:28:1d:9c:68:14:c1:02:a9:93:
                    64:d3:cc:7b:75:3b:29:b3:7a:36:d9:ff:19:e7:e5:
                    c1:49:8c:36:5d:fb:b9:59:85:20:2d:1d:0e:ef:ac:
                    ba:6c:13:93:ad:0d:88:38:ae:de:d1:1d:28:1c:21:
                    8e:3f:e8:37:74:a0:30:7e:f9:c5:c2:a2:38:bf:76:
                    5d:2b:b5:1d:e7:f7:05:8d:76:14:df:34:d0:b7:12:
                    dd:9b:d6:37:f8:e2:3b:d4:d1:2a:91:d7:46:24:6f:
                    9c:0b:79:f3:11:54:71:6a:e5:1a:38:23:20:07:3d:
                    dd:33:21:c8:2d:8c:54:d7:bf:4b:e4:3c:fc:7c:2b:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:0E:56:6A:2F:DC:26:E4:0A:A5:FA:AF:2C:67:AA:E6:C0:A0:30
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:90:ba:e8:d1:dc:59:ac:9d:ac:8a:a1:bc:33:32:b6:1f:
         61:12:8d:d9:2c:0a:f8:08:a9:7a:73:0d:c4:46:9a:a4:f0:f4:
         ef:ac:f7:5d:e4:22:80:1d:04:7c:65:11:f0:db:42:98:d2:e0:
         69:0c:51:a6:a9:7a:4a:a5:87:b5:79:a3:f5:e8:b9:c6:98:b2:
         7f:09:75:9c:07:14:e2:19:97:bd:14:55:96:cb:9a:a9:79:da:
         98:ef:d5:53:6b:12:ed:bc:55:ee:96:91:34:8e:52:0c:6a:54:
         7a:f9:24:3c:21:87:cb:5e:5b:f5:f3:f1:a8:98:0c:24:21:96:
         66:36:e2:5d:2d:68:68:52:d0:d7:44:39:d1:00:33:25:37:12:
         13:50:a0:6d:dd:b3:de:3c:78:8e:96:53:e2:89:f8:7e:53:2b:
         82:f2:e7:df:c5:7c:2d:39:9b:83:0d:13:59:8c:e6:2f:a9:77:
         cf:ad:1f:40:4f:25:46:31:6f:07:73:62:c4:47:6c:21:96:09:
         23:6e:bc:53:6b:8a:ea:8b:f6:4d:d1:de:33:32:dd:06:8f:99:
         f7:5f:9c:fc:20:3b:e6:ea:31:25:f7:e9:d3:7b:9d:7c:58:a7:
         46:75:1b:c7:97:ec:16:bd:65:80:1f:54:00:ec:6f:4f:c4:58:
         66:d0:b9:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKlqO5ZxfO+ySChalb866ziVl2WAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEMENCNjcyNDU1RTI1MjVDQTU4NUI5REI3M0Q0MjBB
RTAxMUQ4RDAeFw0yNTA2MTkxMzA4MDhaFw0yNjA2MTgxMzEzMDhaMDMxMTAvBgNV
BAMTKDYwRDQwRTU2NkEyRkRDMjZFNDBBQTVGQUFGMkM2N0FBRTZDMEEwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG32EdphFbxj60WbwhDQqo8qOG
M3M/eaZzNP7ISGFynPFc4DEL/cxJ41txMAeAfFy8qT5amTl9Rqwy61LclT+4nGsV
YheAxC584eg7A+YJNjVSy/5xk85N14wHYtO2XX/07KYq+B3DTTR61Eqx58Q61y3Q
ZHJ3SdWkWV5c3igdnGgUwQKpk2TTzHt1OymzejbZ/xnn5cFJjDZd+7lZhSAtHQ7v
rLpsE5OtDYg4rt7RHSgcIY4/6Dd0oDB++cXCoji/dl0rtR3n9wWNdhTfNNC3Et2b
1jf44jvU0SqR10Ykb5wLefMRVHFq5Ro4IyAHPd0zIcgtjFTXv0vkPPx8KwUxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYNQOVmov3CbkCqX6ryxnqubAoDAwHwYDVR0j
BBgwFoAUkdDLZyRV4lJcpYW523PUIK4BHY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC85MUQwQ0I2NzI0NTVFMjUyNUNBNTg1QjlEQjczRDQyMEFFMDExRDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDBDQjY3MjQ1NUUyNTI1
Q0E1ODVCOURCNzNENDIwQUUwMTFEOEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzQzNTJlMzEzODM2MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbo2MA0GCSqGSIb3DQEBCwUAA4IBAQBkvJC66NHc
WaydrIqhvDMyth9hEo3ZLAr4CKl6cw3ERpqk8PTvrPdd5CKAHQR8ZRHw20KY0uBp
DFGmqXpKpYe1eaP16LnGmLJ/CXWcBxTiGZe9FFWWy5qpedqY79VTaxLtvFXulpE0
jlIMalR6+SQ8IYfLXlv18/GomAwkIZZmNuJdLWhoUtDXRDnRADMlNxITUKBt3bPe
PHiOllPiifh+UyuC8uffxXwtOZuDDRNZjOYvqXfPrR9ATyVGMW8Hc2LER2whlgkj
brxTa4rqi/ZN0d4zMt0Gj5n3X5z8IDvm6jEl9+nTe518WKdGdRvHl+wWvWWAH1QA
7G9PxFhm0LnU
-----END CERTIFICATE-----
Generated at Fri Jun 20 23:43:14 2025 by rpki-client