Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3332203d3e20323639353239.roa
File:                     34352e3138382e3138302e302f32322d3332203d3e20323639353239.roa (raw, json)
Hash identifier:          0V/eBJROTKFRgZdAjCyAX+i9YwB6v5TyJwpKiqX4fYE=
Subject key identifier:   C9:81:7A:53:30:10:14:5D:D0:28:06:0D:71:3D:DF:04:AB:56:F6:B4
Certificate issuer:       /CN=763D0357BB7465EB4E0ACBD045B661FAB2B9939C
Certificate serial:       34AE7B39B070CF43211A9C5A4766BDBDCF97F877
Authority key identifier: 76:3D:03:57:BB:74:65:EB:4E:0A:CB:D0:45:B6:61:FA:B2:B9:93:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3332203d3e20323639353239.roa
Signing time:             Wed 07 May 2025 15:15:12 +0000
ROA not before:           Wed 07 May 2025 15:10:12 +0000
ROA not after:            Wed 06 May 2026 15:15:12 +0000
asID:                     269529
IP address blocks:        45.188.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.crl
                          rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:7b:39:b0:70:cf:43:21:1a:9c:5a:47:66:bd:bd:cf:97:f8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763D0357BB7465EB4E0ACBD045B661FAB2B9939C
        Validity
            Not Before: May  7 15:10:12 2025 GMT
            Not After : May  6 15:15:12 2026 GMT
        Subject: CN=C9817A533010145DD028060D713DDF04AB56F6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:2e:96:0f:c7:b0:9e:ee:9d:9b:c9:80:70:
                    8b:bc:76:da:c9:00:92:1f:90:ea:c2:1d:1f:c8:c7:
                    20:60:c1:eb:4d:7d:68:7a:ca:f9:5f:ee:5b:61:d6:
                    cc:ab:0d:c1:70:10:bd:93:40:9b:f6:7f:d0:4d:e6:
                    e7:db:e4:30:44:57:b9:50:3d:f7:00:7f:6a:16:45:
                    69:c6:81:bb:35:51:9d:ba:55:71:77:e0:76:d9:d4:
                    b5:6a:03:a5:9d:94:64:cf:84:b5:42:48:80:d2:d3:
                    dd:05:1f:a5:1d:1c:76:90:69:63:8b:9b:39:6c:f8:
                    da:cb:8a:3c:53:7b:99:f1:94:2d:d3:80:e2:5a:13:
                    b0:2c:de:67:76:15:d8:7f:6d:63:5a:4d:74:4c:5d:
                    e3:f6:b7:e2:64:2d:a6:02:a9:78:52:52:03:7c:84:
                    1e:ee:8e:af:a1:38:23:be:c4:6f:4a:7c:0b:c6:7d:
                    8f:ca:be:a6:2d:c3:ea:cb:25:a4:3e:eb:31:ef:4a:
                    54:26:20:5c:52:f0:15:df:ff:aa:27:c2:28:5c:24:
                    93:1b:9c:e8:e4:fe:bf:85:55:dd:1b:95:59:a7:5f:
                    e7:04:56:aa:2e:f3:53:ca:cd:fb:59:6c:65:5c:0f:
                    d5:c3:86:e8:dd:45:46:9d:b9:2a:e3:6f:50:c0:8a:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:7A:53:30:10:14:5D:D0:28:06:0D:71:3D:DF:04:AB:56:F6:B4
            X509v3 Authority Key Identifier:
                keyid:76:3D:03:57:BB:74:65:EB:4E:0A:CB:D0:45:B6:61:FA:B2:B9:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/763D0357BB7465EB4E0ACBD045B661FAB2B9939C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138302e302f32322d3332203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:01:87:d1:e2:80:f3:69:51:af:13:e6:00:d2:23:e0:32:
         26:77:e6:94:bc:7e:72:70:8b:29:32:7a:5c:1a:1f:3a:65:3b:
         8f:68:d8:0d:b5:63:27:17:6c:07:65:c9:36:7b:c9:b9:dd:8d:
         d0:9d:1c:a1:c1:83:ba:3f:de:0e:08:71:41:89:ee:64:82:17:
         0e:bb:5d:a6:a3:db:8e:b8:b8:4e:81:15:f4:94:8f:3f:ce:e8:
         f1:de:54:e6:bc:39:f5:ab:da:b5:17:17:4c:4b:b7:69:45:52:
         47:73:e8:91:60:c7:af:d5:64:dc:d2:27:f7:f7:1a:c4:ec:3c:
         8a:1e:14:ac:9c:ef:09:49:ac:49:a6:dc:71:f3:d6:bd:33:e6:
         e7:96:7c:7a:e6:a2:15:eb:9f:86:30:7a:64:61:bc:19:d6:24:
         88:9f:c9:9a:36:54:ef:95:1d:8e:0e:b7:34:2c:02:3e:51:7d:
         14:44:21:c9:fb:da:b4:83:b5:fd:a2:9e:a5:ca:93:b1:8b:d1:
         fe:ba:8f:85:1c:b5:5b:0c:61:83:aa:48:53:1f:d6:b1:7f:62:
         fd:5e:2f:95:0e:ea:9f:6d:b2:34:bb:ee:c6:7e:78:65:0b:b6:
         f2:0d:51:b3:02:af:85:49:d2:74:bc:e1:15:84:2c:31:2a:a1:
         99:70:70:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNK57ObBwz0MhGpxaR2a9vc+X+HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYzRDAzNTdCQjc0NjVFQjRFMEFDQkQwNDVCNjYxRkFC
MkI5OTM5QzAeFw0yNTA1MDcxNTEwMTJaFw0yNjA1MDYxNTE1MTJaMDMxMTAvBgNV
BAMTKEM5ODE3QTUzMzAxMDE0NUREMDI4MDYwRDcxM0RERjA0QUI1NkY2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFi6WD8ewnu6dm8mAcIu8dtrJ
AJIfkOrCHR/IxyBgwetNfWh6yvlf7lth1syrDcFwEL2TQJv2f9BN5ufb5DBEV7lQ
PfcAf2oWRWnGgbs1UZ26VXF34HbZ1LVqA6WdlGTPhLVCSIDS090FH6UdHHaQaWOL
mzls+NrLijxTe5nxlC3TgOJaE7As3md2Fdh/bWNaTXRMXeP2t+JkLaYCqXhSUgN8
hB7ujq+hOCO+xG9KfAvGfY/KvqYtw+rLJaQ+6zHvSlQmIFxS8BXf/6onwihcJJMb
nOjk/r+FVd0blVmnX+cEVqou81PKzftZbGVcD9XDhujdRUaduSrjb1DAipEXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyYF6UzAQFF3QKAYNcT3fBKtW9rQwHwYDVR0j
BBgwFoAUdj0DV7t0ZetOCsvQRbZh+rK5k5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRn
alEvMC83NjNEMDM1N0JCNzQ2NUVCNEUwQUNCRDA0NUI2NjFGQUIyQjk5MzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2M0QwMzU3QkI3NDY1RUI0
RTBBQ0JEMDQ1QjY2MUZBQjJCOTkzOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTQVM4dHpmWjFUQm1BcVM0dXozUFBoUTFhTkpjNHVtcnhrWmt5MUFUZ2pRLzAv
MzQzNTJlMzEzODM4MmUzMTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvLQwDQYJKoZIhvcNAQELBQADggEBAE98AYfR
4oDzaVGvE+YA0iPgMiZ35pS8fnJwiykyelwaHzplO49o2A21YycXbAdlyTZ7ybnd
jdCdHKHBg7o/3g4IcUGJ7mSCFw67Xaaj2464uE6BFfSUjz/O6PHeVOa8OfWr2rUX
F0xLt2lFUkdz6JFgx6/VZNzSJ/f3GsTsPIoeFKyc7wlJrEmm3HHz1r0z5ueWfHrm
ohXrn4YwemRhvBnWJIifyZo2VO+VHY4OtzQsAj5RfRREIcn72rSDtf2inqXKk7GL
0f66j4UctVsMYYOqSFMf1rF/Yv1eL5UO6p9tsjS77sZ+eGULtvINUbMCr4VJ0nS8
4RWELDEqoZlwcMk=
-----END CERTIFICATE-----
Generated at Thu May 15 11:47:52 2025 by rpki-client