Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38372e302f32342d3234203d3e20323633323932.roa
File:                     34352e3136362e38372e302f32342d3234203d3e20323633323932.roa (raw, json)
Hash identifier:          4KfyPZtw1a+tb+MauFjSOHCn+rzSrETB+XxGKWtBX1M=
Subject key identifier:   CD:D9:95:80:C8:F8:DB:10:FD:1A:E9:E8:05:72:78:75:3D:E0:0E:F0
Certificate issuer:       /CN=11E1019D6E7D72E9421F53039B1444A69155D242
Certificate serial:       6A018CDBB7CE1003FF10920403886F6B7BD07E44
Authority key identifier: 11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38372e302f32342d3234203d3e20323633323932.roa
Signing time:             Mon 16 Jun 2025 19:59:16 +0000
ROA not before:           Mon 16 Jun 2025 19:54:16 +0000
ROA not after:            Mon 15 Jun 2026 19:59:16 +0000
asID:                     263292
IP address blocks:        45.166.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl
                          rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:8c:db:b7:ce:10:03:ff:10:92:04:03:88:6f:6b:7b:d0:7e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1019D6E7D72E9421F53039B1444A69155D242
        Validity
            Not Before: Jun 16 19:54:16 2025 GMT
            Not After : Jun 15 19:59:16 2026 GMT
        Subject: CN=CDD99580C8F8DB10FD1AE9E8057278753DE00EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:2f:7f:bb:ce:f3:01:37:3b:6a:9d:cf:16:
                    7e:d7:2d:5f:9a:3a:19:ff:e3:63:2c:e1:e4:5e:98:
                    89:ea:66:af:f7:64:ee:e9:a2:60:29:52:b0:03:f3:
                    6f:d1:d5:68:50:f0:13:68:3e:e3:47:e7:f0:98:45:
                    69:31:20:e4:44:45:b5:bb:5f:4f:ba:65:57:1e:13:
                    bc:f9:37:0a:2f:d7:0c:e3:51:c1:55:0f:9f:3d:c1:
                    b7:de:13:bd:cb:19:6c:93:90:02:94:4b:74:a2:6b:
                    53:4a:47:24:5c:cf:8b:85:d8:61:1c:75:b8:96:db:
                    99:2d:cf:0d:74:47:90:ca:c9:b8:02:0e:3a:04:ca:
                    d2:b3:01:80:11:b7:a1:04:94:9f:f3:44:a4:a7:95:
                    b9:b5:29:8f:4f:fd:04:76:7b:0c:5c:45:b9:bc:7b:
                    f5:13:ef:2f:a7:d2:09:db:03:a4:79:09:ea:b5:4c:
                    91:6f:72:ce:fa:c3:fa:66:7e:2f:7a:93:46:89:ac:
                    a7:09:55:b2:f8:1f:8c:68:3e:1a:7c:b1:1a:9d:b6:
                    af:7e:6e:65:2d:e6:80:2e:fe:c6:fa:00:01:00:29:
                    96:bf:4c:6d:5d:b4:1b:af:29:cf:74:1a:d1:e2:9a:
                    d0:e5:0e:44:a2:d5:8a:41:68:9f:25:3b:3d:f1:b5:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:95:80:C8:F8:DB:10:FD:1A:E9:E8:05:72:78:75:3D:E0:0E:F0
            X509v3 Authority Key Identifier:
                keyid:11:E1:01:9D:6E:7D:72:E9:42:1F:53:03:9B:14:44:A6:91:55:D2:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/11E1019D6E7D72E9421F53039B1444A69155D242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11E1019D6E7D72E9421F53039B1444A69155D242.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/34352e3136362e38372e302f32342d3234203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:e8:ee:b9:14:6f:fb:c1:d4:57:c5:f1:93:ce:b6:f5:59:
         ea:1e:ff:cb:63:83:52:e8:a2:2e:ab:f2:8d:6f:0a:4a:09:6d:
         21:e0:7f:92:a1:1b:8c:6e:32:2d:a8:4d:81:4e:65:0c:56:d5:
         a5:b8:3c:84:86:f6:9c:5b:f6:7d:0c:e6:cc:d9:6e:56:6e:17:
         ba:1c:6c:31:9f:52:54:6d:e7:d6:2c:2a:36:14:2c:4a:4f:6d:
         40:e2:64:c2:37:0c:63:32:ca:0c:85:56:d9:d3:6c:13:bd:c4:
         00:aa:ab:5e:73:58:d1:97:64:d6:26:6a:ab:48:8d:54:c3:a3:
         69:93:4c:2c:4e:3a:4c:89:0d:35:6f:21:3d:54:9f:df:84:87:
         4c:c4:14:4a:9c:3b:42:4d:b6:8c:7c:14:23:a2:07:68:1b:15:
         31:3e:10:e3:ac:25:54:e8:7e:72:4d:68:03:ff:10:00:9f:b9:
         21:a9:6e:d5:7a:3d:54:b8:5e:18:d6:86:ef:5c:5a:10:4d:ff:
         59:87:04:f9:04:1c:0f:63:23:25:19:59:87:a1:e2:8d:8a:f1:
         2c:9d:4b:0f:e8:e7:bb:22:6b:2f:47:0b:38:df:e0:bc:ca:30:
         26:0c:b8:54:e0:1a:c9:b5:63:ca:95:fb:ea:03:c7:36:df:79:
         b9:06:4f:00
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUagGM27fOEAP/EJIEA4hva3vQfkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5
MTU1RDI0MjAeFw0yNTA2MTYxOTU0MTZaFw0yNjA2MTUxOTU5MTZaMDMxMTAvBgNV
BAMTKENERDk5NTgwQzhGOERCMTBGRDFBRTlFODA1NzI3ODc1M0RFMDBFRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKy9/u87zATc7ap3PFn7XLV+a
Ohn/42Ms4eRemInqZq/3ZO7pomApUrAD82/R1WhQ8BNoPuNH5/CYRWkxIORERbW7
X0+6ZVceE7z5Nwov1wzjUcFVD589wbfeE73LGWyTkAKUS3Sia1NKRyRcz4uF2GEc
dbiW25ktzw10R5DKybgCDjoEytKzAYARt6EElJ/zRKSnlbm1KY9P/QR2ewxcRbm8
e/UT7y+n0gnbA6R5Ceq1TJFvcs76w/pmfi96k0aJrKcJVbL4H4xoPhp8sRqdtq9+
bmUt5oAu/sb6AAEAKZa/TG1dtBuvKc90GtHimtDlDkSi1YpBaJ8lOz3xtQ4lAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUzdmVgMj42xD9GunoBXJ4dT3gDvAwHwYDVR0j
BBgwFoAUEeEBnW59culCH1MDmxREppFV0kIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvMTFFMTAxOUQ2RTdENzJFOTQyMUY1MzAzOUIxNDQ0QTY5MTU1RDI0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xMUUxMDE5RDZFN0Q3MkU5NDIx
RjUzMDM5QjE0NDRBNjkxNTVEMjQyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzQz
NTJlMzEzNjM2MmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzIz
OTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALaZXMA0GCSqGSIb3DQEBCwUAA4IBAQCc+ujuuRRv+8HU
V8Xxk8629VnqHv/LY4NS6KIuq/KNbwpKCW0h4H+SoRuMbjItqE2BTmUMVtWluDyE
hvacW/Z9DObM2W5Wbhe6HGwxn1JUbefWLCo2FCxKT21A4mTCNwxjMsoMhVbZ02wT
vcQAqqtec1jRl2TWJmqrSI1Uw6Npk0wsTjpMiQ01byE9VJ/fhIdMxBRKnDtCTbaM
fBQjogdoGxUxPhDjrCVU6H5yTWgD/xAAn7khqW7Vej1UuF4Y1obvXFoQTf9ZhwT5
BBwPYyMlGVmHoeKNivEsnUsP6Oe7ImsvRws43+C8yjAmDLhU4BrJtWPKlfvqA8c2
33m5Bk8A
-----END CERTIFICATE-----
Generated at Thu Jun 19 22:43:56 2025 by rpki-client