Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File:                     34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier:          BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=
Subject key identifier:   42:A0:87:E1:FA:E7:43:AB:86:F7:75:65:2E:76:7F:69:4F:FA:B6:1C
Certificate issuer:       /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
Certificate serial:       7E43ED243C651CF6FCDA851CC92273EB6F628857
Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time:             Wed 04 Jun 2025 14:55:30 +0000
ROA not before:           Wed 04 Jun 2025 14:50:30 +0000
ROA not after:            Wed 03 Jun 2026 14:55:30 +0000
asID:                     268063
IP address blocks:        45.168.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl
                          rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 05:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:43:ed:24:3c:65:1c:f6:fc:da:85:1c:c9:22:73:eb:6f:62:88:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
        Validity
            Not Before: Jun  4 14:50:30 2025 GMT
            Not After : Jun  3 14:55:30 2026 GMT
        Subject: CN=42A087E1FAE743AB86F775652E767F694FFAB61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:74:e0:67:e6:c3:eb:7e:a5:e2:34:8c:c2:
                    77:03:7e:8f:96:cf:c3:33:21:07:78:60:31:04:23:
                    6a:42:e0:59:d9:b3:e3:27:b2:07:7e:b5:88:38:b9:
                    b9:30:0b:d9:d2:ea:d4:75:3a:3e:36:7f:0a:ec:d4:
                    30:09:42:7d:f9:bd:d4:7d:2e:89:ca:11:44:6e:f3:
                    5e:7e:a7:9b:e4:11:47:58:c9:f2:49:60:76:43:e3:
                    73:bf:4b:dc:e0:84:75:19:b9:22:32:c4:9e:86:9b:
                    c0:24:14:b5:5c:b0:e5:08:7b:4d:08:55:7a:d3:bc:
                    9b:c2:b2:53:50:37:e1:c7:71:b0:64:3b:13:c8:3a:
                    bc:72:8c:07:4e:fa:87:fd:d1:f4:54:89:b0:b1:cf:
                    91:38:0d:f8:40:af:22:56:b0:58:5f:dc:92:71:73:
                    5c:ef:af:5d:9b:1d:3b:e8:eb:82:ed:a5:81:a8:0e:
                    6a:01:40:28:21:3a:76:5d:5c:77:15:b9:9b:3b:63:
                    bf:73:9b:2c:21:9c:11:af:e6:27:c3:54:3b:9c:17:
                    e1:82:9d:6f:e0:55:ab:79:3c:4c:23:eb:0d:9f:9c:
                    b7:9d:2b:0b:c7:1d:9f:e0:9a:f2:f2:ea:5a:ab:b6:
                    56:d9:1f:aa:e2:f3:b1:a5:0a:d9:71:95:19:c4:fd:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:87:E1:FA:E7:43:AB:86:F7:75:65:2E:76:7F:69:4F:FA:B6:1C
            X509v3 Authority Key Identifier:
                keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:c2:ba:55:f4:e1:05:99:84:56:0c:c2:40:fe:b1:53:0a:ec:
         c1:67:e1:05:22:3e:76:5f:a2:b3:b7:09:0b:a3:42:f7:c6:21:
         88:24:2e:3c:48:95:f4:76:ec:88:91:2a:48:e3:f6:43:22:8c:
         55:7b:62:ca:c2:a9:94:8b:cc:77:87:e2:ed:7e:0f:85:ca:c1:
         3b:6a:0a:d9:5d:d2:05:2f:90:d4:01:dc:5d:11:28:87:a0:0e:
         a9:e4:ca:15:9e:ce:bc:39:74:0f:a2:11:1f:56:82:0d:86:ce:
         07:1b:c2:49:e6:2e:eb:c0:a1:12:74:ba:e6:f2:6c:11:20:56:
         5d:37:39:01:68:b7:86:8f:b4:aa:1a:43:e5:ff:28:23:63:7e:
         84:a3:39:ee:2a:09:3d:a7:2f:af:b6:80:f6:09:a3:86:63:17:
         31:1f:3f:d6:5b:06:f8:d5:a9:28:91:ee:f6:ef:8c:a4:2f:c4:
         d7:53:88:e5:52:a6:a4:d8:d2:01:17:de:ca:cc:1d:46:b0:ca:
         6f:75:92:b5:50:f3:4a:01:fd:dc:e3:4b:00:42:fa:f1:44:26:
         71:42:05:7b:42:d0:d9:7f:4f:40:5c:a8:31:50:1e:61:b3:99:
         45:59:34:d7:54:4d:d6:06:dc:7d:2f:bf:63:25:4e:b7:a2:3a:
         bf:45:8f:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfkPtJDxlHPb82oUcySJz629iiFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2MzAyMUI1ODkwMDVEOEQ2QUNCQTlENkVFQzlGNkI0
QkI0MTkwMTAeFw0yNTA2MDQxNDUwMzBaFw0yNjA2MDMxNDU1MzBaMDMxMTAvBgNV
BAMTKDQyQTA4N0UxRkFFNzQzQUI4NkY3NzU2NTJFNzY3RjY5NEZGQUI2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYnTgZ+bD636l4jSMwncDfo+W
z8MzIQd4YDEEI2pC4FnZs+Mnsgd+tYg4ubkwC9nS6tR1Oj42fwrs1DAJQn35vdR9
LonKEURu815+p5vkEUdYyfJJYHZD43O/S9zghHUZuSIyxJ6Gm8AkFLVcsOUIe00I
VXrTvJvCslNQN+HHcbBkOxPIOrxyjAdO+of90fRUibCxz5E4DfhAryJWsFhf3JJx
c1zvr12bHTvo64LtpYGoDmoBQCghOnZdXHcVuZs7Y79zmywhnBGv5ifDVDucF+GC
nW/gVat5PEwj6w2fnLedKwvHHZ/gmvLy6lqrtlbZH6ri87GlCtlxlRnE/cX3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQqCH4frnQ6uG93VlLnZ/aU/6thwwHwYDVR0j
BBgwFoAUhmMCG1iQBdjWrLqdbuyfa0u0GQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR
UEovMC84NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2NjMwMjFCNTg5MDA1RDhE
NkFDQkE5RDZFRUM5RjZCNEJCNDE5MDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM3R3FlUURhZlNoWVlUbVZYR1FXY3pMcTlDSFl0TVRhalpUa1JzWmdoUVBKLzAv
MzQzNTJlMzEzNjM4MmUzMTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqH0wDQYJKoZIhvcNAQELBQADggEBANbCulX0
4QWZhFYMwkD+sVMK7MFn4QUiPnZforO3CQujQvfGIYgkLjxIlfR27IiRKkjj9kMi
jFV7YsrCqZSLzHeH4u1+D4XKwTtqCtld0gUvkNQB3F0RKIegDqnkyhWezrw5dA+i
ER9Wgg2GzgcbwknmLuvAoRJ0uubybBEgVl03OQFot4aPtKoaQ+X/KCNjfoSjOe4q
CT2nL6+2gPYJo4ZjFzEfP9ZbBvjVqSiR7vbvjKQvxNdTiOVSpqTY0gEX3srMHUaw
ym91krVQ80oB/dzjSwBC+vFEJnFCBXtC0Nl/T0BcqDFQHmGzmUVZNNdUTdYG3H0v
v2MlTreiOr9Fj7g=
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:00:35 2025 by rpki-client