Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa
File:                     34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (raw, json)
Hash identifier:          /pI9TLhqurlKnJpo1vlGhbC1YrRrAMWE2ACtRSbFuRo=
Subject key identifier:   10:B1:4E:36:7D:FD:E8:0A:D2:B8:C3:71:27:5F:A5:4F:65:2B:48:09
Certificate issuer:       /CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
Certificate serial:       11020255011DF485634003A3B107DE97041C8C6F
Authority key identifier: BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa
Signing time:             Thu 31 Jul 2025 13:09:44 +0000
ROA not before:           Thu 31 Jul 2025 13:04:44 +0000
ROA not after:            Thu 30 Jul 2026 13:09:44 +0000
asID:                     269044
IP address blocks:        45.178.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 14:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:02:02:55:01:1d:f4:85:63:40:03:a3:b1:07:de:97:04:1c:8c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542
        Validity
            Not Before: Jul 31 13:04:44 2025 GMT
            Not After : Jul 30 13:09:44 2026 GMT
        Subject: CN=10B14E367DFDE80AD2B8C371275FA54F652B4809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:05:8b:27:2d:2b:6e:d2:14:f9:00:20:aa:
                    e1:22:57:1c:0a:02:d2:c3:1b:e0:fb:0c:95:04:5f:
                    41:39:15:2b:42:a2:1d:44:88:8b:9f:eb:6b:81:34:
                    87:6b:8e:d7:ad:94:62:47:ba:f6:81:e0:c4:93:c7:
                    2b:dc:97:ca:d7:7b:da:65:2e:3a:f6:6f:d8:d8:36:
                    dc:91:17:bb:8b:52:36:fe:f9:c6:f7:8f:a1:8e:85:
                    d4:aa:2d:bd:d9:81:a5:0b:a7:b0:d8:cd:9f:24:5e:
                    90:c3:04:45:b4:42:58:77:9f:22:f2:92:90:7e:98:
                    79:f8:9b:93:f2:6d:29:ca:8d:2c:5a:8f:95:0f:da:
                    53:90:68:56:50:c4:8b:30:89:ea:d8:b3:65:75:82:
                    30:70:88:2d:86:96:80:d9:75:0f:4d:18:b7:9f:49:
                    58:95:1d:93:ca:8f:b9:ac:20:81:5b:ac:2b:36:d8:
                    c5:d0:bc:be:e9:ac:79:23:2c:c8:d9:cb:c2:20:77:
                    0a:83:5c:a2:0a:de:84:68:75:79:a4:1c:e2:a3:bf:
                    c6:e8:34:30:72:f0:a1:95:40:12:83:8a:45:dc:da:
                    04:f2:4b:59:8c:41:7d:f5:08:ac:b2:84:8e:b0:8a:
                    0c:06:ab:5e:33:ad:33:2f:0d:56:fa:c1:90:1a:47:
                    95:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:4E:36:7D:FD:E8:0A:D2:B8:C3:71:27:5F:A5:4F:65:2B:48:09
            X509v3 Authority Key Identifier:
                keyid:BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:69:49:62:e8:7a:ad:ad:0d:ab:b3:25:27:cd:ed:35:d1:
         c3:c1:49:5c:03:b3:bc:e7:0b:e8:7b:34:8e:21:86:10:8e:7e:
         f3:4c:32:24:8d:ec:45:5a:c1:5a:ab:22:a2:88:d3:a3:90:a1:
         f9:be:78:ec:b6:5c:ab:7e:fe:e6:c5:66:d4:3d:b9:ae:39:9f:
         6b:9c:8e:c2:f3:e7:23:c5:5c:3b:0d:3a:89:5e:00:e8:53:96:
         bb:97:3c:f6:1e:15:ba:eb:c6:27:24:68:c2:89:5d:80:43:e2:
         f7:75:8f:2a:90:40:8f:21:a5:a5:de:23:b6:c6:c7:ca:eb:54:
         8c:f2:0c:ea:31:29:7b:b8:d1:a1:07:9f:3d:42:38:23:ea:3c:
         36:6f:71:8d:aa:f9:fe:aa:1e:c2:49:14:bb:a2:e4:4f:bb:87:
         27:43:cf:9a:a1:0f:1f:83:fe:b4:03:02:78:e9:a3:95:59:a4:
         9d:45:bc:62:90:28:f9:93:9f:d7:cd:75:59:c6:5a:b7:02:89:
         8f:19:61:a0:41:a8:a3:be:3a:90:cf:97:cc:59:3f:41:22:c9:
         91:31:be:1b:91:db:c1:ad:16:0a:3b:14:59:f7:a8:1b:69:36:
         76:e0:0e:6c:08:fe:d8:6a:a2:10:9a:56:d2:b3:77:7e:10:2a:
         48:28:61:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEQICVQEd9IVjQAOjsQfelwQcjG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEzQUIwODFEMjk1RTVBNEYzMEQ2Q0MxMTM5RUEwMUMx
MDc1RDU0MjAeFw0yNTA3MzExMzA0NDRaFw0yNjA3MzAxMzA5NDRaMDMxMTAvBgNV
BAMTKDEwQjE0RTM2N0RGREU4MEFEMkI4QzM3MTI3NUZBNTRGNjUyQjQ4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNAWLJy0rbtIU+QAgquEiVxwK
AtLDG+D7DJUEX0E5FStCoh1EiIuf62uBNIdrjtetlGJHuvaB4MSTxyvcl8rXe9pl
Ljr2b9jYNtyRF7uLUjb++cb3j6GOhdSqLb3ZgaULp7DYzZ8kXpDDBEW0Qlh3nyLy
kpB+mHn4m5PybSnKjSxaj5UP2lOQaFZQxIswierYs2V1gjBwiC2GloDZdQ9NGLef
SViVHZPKj7msIIFbrCs22MXQvL7prHkjLMjZy8IgdwqDXKIK3oRodXmkHOKjv8bo
NDBy8KGVQBKDikXc2gTyS1mMQX31CKyyhI6wigwGq14zrTMvDVb6wZAaR5VzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUELFONn396ArSuMNxJ1+lT2UrSAkwHwYDVR0j
BBgwFoAUujqwgdKV5aTzDWzBE56gHBB11UIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2
ZGgvMC9CQTNBQjA4MUQyOTVFNUE0RjMwRDZDQzExMzlFQTAxQzEwNzVENTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0FCMDgxRDI5NUU1QTRG
MzBENkNDMTEzOUVBMDFDMTA3NUQ1NDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4NXFGdVdqZUppNjFxdEF6eDJzWVdVUFU5eUdNeHpLWkdYVzF0SHFqNmRoLzAv
MzQzNTJlMzEzNzM4MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsugwDQYJKoZIhvcNAQELBQADggEBAGG9aUli
6HqtrQ2rsyUnze010cPBSVwDs7znC+h7NI4hhhCOfvNMMiSN7EVawVqrIqKI06OQ
ofm+eOy2XKt+/ubFZtQ9ua45n2ucjsLz5yPFXDsNOoleAOhTlruXPPYeFbrrxick
aMKJXYBD4vd1jyqQQI8hpaXeI7bGx8rrVIzyDOoxKXu40aEHnz1COCPqPDZvcY2q
+f6qHsJJFLui5E+7hydDz5qhDx+D/rQDAnjpo5VZpJ1FvGKQKPmTn9fNdVnGWrcC
iY8ZYaBBqKO+OpDPl8xZP0EiyZExvhuR28GtFgo7FFn3qBtpNnbgDmwI/thqohCa
VtKzd34QKkgoYSg=
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:18 2025 by rpki-client