Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/34352e37312e3130302e302f32322d3234203d3e20323637363037.roa
File:                     34352e37312e3130302e302f32322d3234203d3e20323637363037.roa (raw, json)
Hash identifier:          T7KlYjl3P+fg8RjO0v3mxvUaw+s7RYDBlfDkfJQ8LLw=
Subject key identifier:   82:3F:1D:CC:94:E8:FC:F7:69:4A:65:29:9C:9E:11:B5:12:6E:4E:BF
Certificate issuer:       /CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
Certificate serial:       2EF0F7DE58FC59FAE4AD284CC7E74991085A3D08
Authority key identifier: C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/34352e37312e3130302e302f32322d3234203d3e20323637363037.roa
Signing time:             Tue 10 Jun 2025 18:39:26 +0000
ROA not before:           Tue 10 Jun 2025 18:34:26 +0000
ROA not after:            Tue 09 Jun 2026 18:39:26 +0000
asID:                     267607
IP address blocks:        45.71.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl
                          rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 22:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f0:f7:de:58:fc:59:fa:e4:ad:28:4c:c7:e7:49:91:08:5a:3d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
        Validity
            Not Before: Jun 10 18:34:26 2025 GMT
            Not After : Jun  9 18:39:26 2026 GMT
        Subject: CN=823F1DCC94E8FCF7694A65299C9E11B5126E4EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:ac:79:cd:fb:a2:15:07:58:5f:b8:67:c7:
                    73:f6:74:41:89:69:26:f8:85:a1:69:40:67:6e:d3:
                    54:b0:c0:74:0c:5b:ec:d2:26:c6:2e:21:d9:10:63:
                    b2:ae:bc:19:aa:95:8f:2e:c9:99:03:e3:86:33:55:
                    b2:d6:76:e2:0d:f0:fc:cc:2e:25:59:c3:6a:e5:ba:
                    5b:fa:2d:8c:5b:76:db:82:92:2c:a4:0d:d0:65:93:
                    6e:b7:b0:fa:c4:cf:84:cf:5e:50:c3:bf:af:bc:36:
                    b2:1a:66:54:cc:62:ca:d8:0a:04:6f:68:ac:b9:09:
                    98:8b:22:26:10:c9:96:8e:9d:4a:87:cc:c6:06:36:
                    5f:b8:d6:20:4e:51:1c:cc:31:e9:67:ec:3c:a1:7c:
                    2e:d2:91:90:eb:b2:d8:4d:6b:e6:56:78:a1:12:e0:
                    b3:2b:0f:9e:84:51:17:20:5c:0b:a0:a3:90:f3:cc:
                    e1:db:76:ab:e4:22:c5:fd:9b:26:ad:42:01:98:7b:
                    c0:f6:d9:72:46:12:de:65:47:1f:13:95:13:81:c9:
                    03:a6:dc:5c:51:c3:64:43:16:af:1b:ba:f4:89:9f:
                    ba:e2:04:34:27:c8:da:4c:0f:f8:48:f9:a7:11:09:
                    32:07:61:4d:5f:21:8a:8e:f6:ab:a5:4d:78:54:e1:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:1D:CC:94:E8:FC:F7:69:4A:65:29:9C:9E:11:B5:12:6E:4E:BF
            X509v3 Authority Key Identifier:
                keyid:C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/34352e37312e3130302e302f32322d3234203d3e20323637363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:5b:6f:6b:6d:6f:df:1d:af:76:ad:4f:9a:f8:43:10:4f:31:
         b5:8b:41:c7:dc:f0:38:8a:b8:6a:8e:a6:03:7d:5c:01:3b:da:
         76:41:61:46:0d:f7:77:94:b8:c5:3c:94:67:da:2c:ad:93:eb:
         8f:c2:f9:54:1c:40:eb:1b:fb:5e:c8:d4:63:fb:dd:08:c4:8a:
         0f:be:dd:32:d4:a0:51:60:ec:a4:75:08:e7:18:5e:21:7f:0b:
         da:fb:bb:9b:b2:ff:23:6b:45:d5:c9:06:5a:b0:68:e1:5c:2a:
         32:b2:48:58:e4:c2:e3:4f:da:ca:0d:d0:a8:56:0e:e5:cc:fe:
         4c:55:bf:29:0f:ba:8c:03:22:54:38:a3:70:13:dc:09:ba:6c:
         28:da:17:61:ee:6b:4b:11:98:ab:8a:93:2d:1e:88:f7:94:8b:
         85:a6:42:32:33:57:8e:b0:37:aa:25:58:23:70:a0:3f:1e:c9:
         06:c1:b9:83:2d:80:47:f8:ee:7e:9e:c6:8f:b1:0f:f6:ae:9f:
         3f:50:11:91:3a:02:d9:0d:99:68:76:e8:a4:bf:ec:f1:f0:48:
         8e:cd:43:29:8a:58:90:e2:ae:78:83:fb:ef:d9:ff:85:e0:57:
         f4:0d:78:44:3d:c4:84:84:3a:70:24:ea:34:51:22:bd:6e:c2:
         50:71:91:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULvD33lj8WfrkrShMx+dJkQhaPQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0MTBFNkM4RUY1RTQ5RUU4OTRBRUJBOUFDMTYyRDBD
MkJCQUFBNzAeFw0yNTA2MTAxODM0MjZaFw0yNjA2MDkxODM5MjZaMDMxMTAvBgNV
BAMTKDgyM0YxRENDOTRFOEZDRjc2OTRBNjUyOTlDOUUxMUI1MTI2RTRFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq86x5zfuiFQdYX7hnx3P2dEGJ
aSb4haFpQGdu01SwwHQMW+zSJsYuIdkQY7KuvBmqlY8uyZkD44YzVbLWduIN8PzM
LiVZw2rlulv6LYxbdtuCkiykDdBlk263sPrEz4TPXlDDv6+8NrIaZlTMYsrYCgRv
aKy5CZiLIiYQyZaOnUqHzMYGNl+41iBOURzMMeln7DyhfC7SkZDrsthNa+ZWeKES
4LMrD56EURcgXAugo5DzzOHbdqvkIsX9myatQgGYe8D22XJGEt5lRx8TlROByQOm
3FxRw2RDFq8buvSJn7riBDQnyNpMD/hI+acRCTIHYU1fIYqO9qulTXhU4YE1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgj8dzJTo/PdpSmUpnJ4RtRJuTr8wHwYDVR0j
BBgwFoAUxkEObI715J7olK66msFi0MK7qqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGF5cDhzWGI4TTFNTkhGZUZLV3hRTWhaOUhKVGJYWDl0S1ZwZ1poeWV6
UkEvMC9DNjQxMEU2QzhFRjVFNDlFRTg5NEFFQkE5QUMxNjJEMEMyQkJBQUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NDEwRTZDOEVGNUU0OUVF
ODk0QUVCQTlBQzE2MkQwQzJCQkFBQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hheXA4c1hiOE0xTU5IRmVGS1d4UU1oWjlISlRiWFg5dEtWcGdaaHllelJBLzAv
MzQzNTJlMzczMTJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUdkMA0GCSqGSIb3DQEBCwUAA4IBAQC/W29rbW/f
Ha92rU+a+EMQTzG1i0HH3PA4irhqjqYDfVwBO9p2QWFGDfd3lLjFPJRn2iytk+uP
wvlUHEDrG/teyNRj+90IxIoPvt0y1KBRYOykdQjnGF4hfwva+7ubsv8ja0XVyQZa
sGjhXCoyskhY5MLjT9rKDdCoVg7lzP5MVb8pD7qMAyJUOKNwE9wJumwo2hdh7mtL
EZiripMtHoj3lIuFpkIyM1eOsDeqJVgjcKA/HskGwbmDLYBH+O5+nsaPsQ/2rp8/
UBGROgLZDZloduikv+zx8EiOzUMpiliQ4q54g/vv2f+F4Ff0DXhEPcSEhDpwJOo0
USK9bsJQcZHs
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:07:53 2025 by rpki-client