Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          BaklOCUX2/7AEqVb9APvliCg/IBaqKvZ41hnd72XFoE=
Subject key identifier:   80:30:D4:34:C1:9B:8D:FC:A0:49:AB:75:0C:E5:15:9E:20:50:58:60
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       6FB747137D949B534824F572EAAFDAA3FD978B41
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
Signing time:             Sat 16 Aug 2025 03:25:24 +0000
ROA not before:           Sat 16 Aug 2025 03:20:24 +0000
ROA not after:            Sat 15 Aug 2026 03:25:24 +0000
asID:                     266924
IP address blocks:        45.224.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b7:47:13:7d:94:9b:53:48:24:f5:72:ea:af:da:a3:fd:97:8b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Aug 16 03:20:24 2025 GMT
            Not After : Aug 15 03:25:24 2026 GMT
        Subject: CN=8030D434C19B8DFCA049AB750CE5159E20505860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:37:f5:f7:a3:21:fb:14:bb:8d:a7:22:c7:
                    70:e9:5b:f5:dd:4c:57:79:e7:45:23:57:6b:00:60:
                    5d:6e:1d:94:f2:23:fa:00:eb:bf:51:89:e2:de:27:
                    56:1d:f0:c6:e4:42:f7:f4:34:bf:6e:55:d4:55:a2:
                    b5:ba:79:8a:21:30:c2:3c:9f:f3:00:e6:d5:a9:58:
                    ae:d1:c8:8d:b2:e7:50:c3:02:0e:40:85:a2:cc:62:
                    27:75:c6:5c:b9:34:65:8c:c4:b0:6b:4e:5e:d7:1f:
                    bf:4e:75:87:01:ee:17:5e:bb:84:fb:dc:cf:fd:6c:
                    65:e8:ad:00:1a:dd:68:36:df:3c:4b:c7:a5:6c:60:
                    45:c5:09:0e:25:2b:5a:e9:45:f0:67:43:64:06:85:
                    b3:29:12:66:e9:75:3b:36:d9:9c:a5:dc:fd:1c:df:
                    89:ba:a0:41:cc:c1:a3:3a:6b:44:c7:90:0e:60:23:
                    10:2c:10:12:50:2f:62:d3:b5:b0:78:3e:8f:6a:29:
                    04:43:33:92:ab:2c:4f:c4:80:fa:dd:6f:76:2c:bf:
                    b8:c5:b1:9d:a8:82:6b:78:1d:d2:b9:68:02:69:64:
                    fe:94:31:47:8b:b3:1f:9d:dc:35:69:5c:aa:a7:5a:
                    e1:7f:6a:bb:3b:5b:83:c4:fa:c2:af:00:fc:61:6b:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:30:D4:34:C1:9B:8D:FC:A0:49:AB:75:0C:E5:15:9E:20:50:58:60
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:f9:5d:df:45:96:d7:f9:89:2a:a0:bf:a6:fd:58:8d:b6:
         54:55:76:db:cd:72:5f:18:5a:1f:3f:be:28:c8:cc:6c:e9:bb:
         3a:0d:92:00:e4:0d:c1:27:ea:f5:1d:19:18:81:eb:77:5c:20:
         96:67:19:7e:9f:22:9e:95:b7:cc:69:24:92:c5:6c:1c:98:ef:
         68:81:31:bc:56:24:f4:4a:a3:8b:24:0f:37:fc:32:a8:c6:e0:
         24:ce:61:aa:e9:16:86:6a:e0:1e:61:e3:49:40:a8:15:c2:75:
         71:c5:28:52:e6:26:03:da:67:39:02:73:53:34:f0:7b:fd:8a:
         68:a7:c2:9a:f8:1c:7d:17:94:1d:70:32:b8:88:a1:a3:92:14:
         75:d4:f7:ce:74:72:cf:1b:9b:9f:23:54:5a:73:1f:05:73:be:
         c8:f3:0f:8d:46:91:69:5a:cd:7b:22:5a:c3:2c:75:67:44:c2:
         db:08:38:02:46:1d:c7:37:76:c8:f3:92:c5:bf:61:ad:87:c4:
         10:00:49:dc:c2:36:e1:8f:c0:81:13:70:2e:21:d9:22:cd:a8:
         47:22:51:cb:e3:93:7b:e5:b7:65:56:28:0a:12:2a:07:9b:99:
         4e:49:c9:2c:66:23:c5:51:88:08:8f:ea:10:bf:22:e2:8c:a1:
         4a:06:8a:8c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb7dHE32Um1NIJPVy6q/ao/2Xi0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNDk2MzhGQ0MzN0VEQjkyM0M1RjJBRkY4NTQxNTVD
NzQ4NjQ4MTAeFw0yNTA4MTYwMzIwMjRaFw0yNjA4MTUwMzI1MjRaMDMxMTAvBgNV
BAMTKDgwMzBENDM0QzE5QjhERkNBMDQ5QUI3NTBDRTUxNTlFMjA1MDU4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lzf196Mh+xS7jacix3DpW/Xd
TFd550UjV2sAYF1uHZTyI/oA679RieLeJ1Yd8MbkQvf0NL9uVdRVorW6eYohMMI8
n/MA5tWpWK7RyI2y51DDAg5AhaLMYid1xly5NGWMxLBrTl7XH79OdYcB7hdeu4T7
3M/9bGXorQAa3Wg23zxLx6VsYEXFCQ4lK1rpRfBnQ2QGhbMpEmbpdTs22Zyl3P0c
34m6oEHMwaM6a0THkA5gIxAsEBJQL2LTtbB4Po9qKQRDM5KrLE/EgPrdb3Ysv7jF
sZ2ogmt4HdK5aAJpZP6UMUeLsx+d3DVpXKqnWuF/ars7W4PE+sKvAPxha/Q/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgDDUNMGbjfygSat1DOUVniBQWGAwHwYDVR0j
BBgwFoAUFhSWOPzDftuSPF8q/4VBVcdIZIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC8xNjE0OTYzOEZDQzM3RURCOTIzQzVGMkFGRjg1NDE1NUM3NDg2NDgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTQ5NjM4RkNDMzdFREI5
MjNDNUYyQUZGODU0MTU1Qzc0ODY0ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzQzNTJlMzIzMjM0MmUzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeAjMA0GCSqGSIb3DQEBCwUAA4IBAQCuKvld30WW
1/mJKqC/pv1YjbZUVXbbzXJfGFofP74oyMxs6bs6DZIA5A3BJ+r1HRkYget3XCCW
Zxl+nyKelbfMaSSSxWwcmO9ogTG8ViT0SqOLJA83/DKoxuAkzmGq6RaGauAeYeNJ
QKgVwnVxxShS5iYD2mc5AnNTNPB7/Ypop8Ka+Bx9F5QdcDK4iKGjkhR11PfOdHLP
G5ufI1Racx8Fc77I8w+NRpFpWs17IlrDLHVnRMLbCDgCRh3HN3bI85LFv2Gth8QQ
AEncwjbhj8CBE3AuIdkizahHIlHL45N75bdlVigKEioHm5lOScksZiPFUYgIj+oQ
vyLijKFKBoqM
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:33 2025 by rpki-client