Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32332d3233203d3e20323636313239.roa
File:                     34352e3136352e35342e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier:          qXdcIijU6+hHCILxIMgvvBIW0W47Bk+zNL/rJ16vqxU=
Subject key identifier:   2C:6B:FD:73:E5:4A:F7:CB:14:0C:9E:32:1F:A1:A8:11:4F:B6:5E:34
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       7063244CD61E99AED3310611021E11E32E9FF7D7
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32332d3233203d3e20323636313239.roa
Signing time:             Thu 03 Jul 2025 16:06:54 +0000
ROA not before:           Thu 03 Jul 2025 16:01:54 +0000
ROA not after:            Thu 02 Jul 2026 16:06:54 +0000
asID:                     266129
IP address blocks:        45.165.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 19:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:63:24:4c:d6:1e:99:ae:d3:31:06:11:02:1e:11:e3:2e:9f:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Jul  3 16:01:54 2025 GMT
            Not After : Jul  2 16:06:54 2026 GMT
        Subject: CN=2C6BFD73E54AF7CB140C9E321FA1A8114FB65E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:c5:30:99:fe:47:d5:1e:a4:56:bf:6c:ec:
                    cf:1f:bd:0d:7a:fa:79:d7:39:e7:0d:3e:00:d9:25:
                    26:85:d4:0f:14:f7:43:1a:0e:44:a1:53:68:83:33:
                    de:6c:5d:2b:db:e5:30:c8:34:72:d7:46:df:0a:37:
                    fb:2b:5b:99:07:40:73:6c:b0:13:14:17:9f:a5:17:
                    40:d7:dd:8b:19:cc:33:64:f2:d0:a8:ee:c3:8c:90:
                    d9:11:3c:93:01:6b:d8:fd:66:d9:e4:3b:d1:4f:a5:
                    3e:6e:a6:19:f5:5a:de:ad:dc:76:cf:a7:b8:4e:32:
                    e5:54:a5:af:6b:80:90:91:c8:bf:31:37:b9:9b:26:
                    dd:9e:a3:d9:bd:2d:09:5d:8d:a2:af:5d:e9:8e:7a:
                    d0:36:54:29:76:e0:6e:f2:66:3f:a8:b8:6e:31:9f:
                    da:be:44:65:a7:98:16:cf:1b:4d:7b:bf:b6:2e:bf:
                    7a:da:8d:d9:c8:7d:f8:34:a2:fb:fb:2f:6c:b8:1f:
                    da:af:48:a3:fb:66:d2:82:9c:bb:df:4a:d2:b3:9f:
                    d9:6c:25:c7:ac:f5:ff:79:b2:12:f8:83:f1:33:39:
                    53:18:02:ec:fc:b6:6e:47:5e:f5:6d:41:9d:7d:6a:
                    3f:96:8e:28:6a:86:f9:dd:d8:96:9b:ef:f1:2d:97:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6B:FD:73:E5:4A:F7:CB:14:0C:9E:32:1F:A1:A8:11:4F:B6:5E:34
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e3136352e35342e302f32332d3233203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:94:f0:df:83:0e:cd:47:5c:e2:e0:04:c0:53:73:5e:6b:ef:
         c5:00:27:32:90:53:ef:f5:2c:a8:e3:e8:07:13:d8:43:21:4e:
         ed:23:0f:07:38:f5:a9:79:4c:97:8f:0c:d8:80:8b:db:7f:41:
         69:61:7d:a1:fd:0b:d5:5b:19:3f:5d:a7:cb:0a:18:a0:37:68:
         79:0e:24:bf:ab:44:81:eb:8e:1c:60:ab:51:03:69:ee:de:d6:
         c9:b3:1c:a0:cc:75:24:79:1a:8f:aa:c3:51:fe:95:b1:bd:d8:
         44:e6:23:cb:a6:18:21:26:5c:1d:86:37:b1:4a:63:b1:58:1b:
         6f:a4:32:69:cc:54:20:59:9d:db:9d:17:bd:60:56:73:c0:1c:
         53:11:65:02:fd:70:6b:8b:44:8e:da:d2:ca:81:b2:e5:df:ed:
         d3:0c:ba:1e:33:d0:4e:b2:4a:b7:3d:be:4b:f7:b8:e6:0c:65:
         fe:63:cb:56:a5:be:ac:3f:a8:f5:e8:34:59:dd:79:31:8a:f7:
         b2:55:a8:ae:92:8a:a1:dd:97:a1:11:f4:29:93:37:f2:9c:a8:
         b9:38:d1:23:5e:56:f9:1d:cb:f7:49:34:51:11:17:24:07:d8:
         83:a5:0c:ef:22:24:ae:5f:6a:4e:23:b8:30:d9:9c:5a:8a:11:
         ce:7c:7d:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcGMkTNYema7TMQYRAh4R4y6f99cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNTA3MDMxNjAxNTRaFw0yNjA3MDIxNjA2NTRaMDMxMTAvBgNV
BAMTKDJDNkJGRDczRTU0QUY3Q0IxNDBDOUUzMjFGQTFBODExNEZCNjVFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UcUwmf5H1R6kVr9s7M8fvQ16
+nnXOecNPgDZJSaF1A8U90MaDkShU2iDM95sXSvb5TDINHLXRt8KN/srW5kHQHNs
sBMUF5+lF0DX3YsZzDNk8tCo7sOMkNkRPJMBa9j9ZtnkO9FPpT5uphn1Wt6t3HbP
p7hOMuVUpa9rgJCRyL8xN7mbJt2eo9m9LQldjaKvXemOetA2VCl24G7yZj+ouG4x
n9q+RGWnmBbPG017v7Yuv3rajdnIffg0ovv7L2y4H9qvSKP7ZtKCnLvfStKzn9ls
Jces9f95shL4g/EzOVMYAuz8tm5HXvVtQZ19aj+Wjihqhvnd2Jab7/Etl21fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULGv9c+VK98sUDJ4yH6GoEU+2XjQwHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzQzNTJlMzEzNjM1MmUzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2
MzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaU2MA0GCSqGSIb3DQEBCwUAA4IBAQBVlPDfgw7N
R1zi4ATAU3Nea+/FACcykFPv9Syo4+gHE9hDIU7tIw8HOPWpeUyXjwzYgIvbf0Fp
YX2h/QvVWxk/XafLChigN2h5DiS/q0SB644cYKtRA2nu3tbJsxygzHUkeRqPqsNR
/pWxvdhE5iPLphghJlwdhjexSmOxWBtvpDJpzFQgWZ3bnRe9YFZzwBxTEWUC/XBr
i0SO2tLKgbLl3+3TDLoeM9BOskq3Pb5L97jmDGX+Y8tWpb6sP6j16DRZ3Xkxivey
Vaiukoqh3ZehEfQpkzfynKi5ONEjXlb5Hcv3STRRERckB9iDpQzvIiSuX2pOI7gw
2ZxaihHOfH24
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:43:27 2025 by rpki-client