Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135332e302f32342d3234203d3e20323731373031.roa
File:                     34352e3136342e3135332e302f32342d3234203d3e20323731373031.roa (raw, json)
Hash identifier:          MBOcHyFKmC08TjyhKBppEGcOui4fRv4Ym6TiJCdveMg=
Subject key identifier:   9D:4E:E9:51:37:56:10:EF:78:C3:7D:87:21:CF:BF:18:D9:E7:CD:F4
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       02AC577617D39AEE24D064CBE19D3C6A2559A94D
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135332e302f32342d3234203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:24 +0000
ROA not before:           Tue 13 May 2025 13:55:24 +0000
ROA not after:            Tue 12 May 2026 14:00:24 +0000
asID:                     271701
IP address blocks:        45.164.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ac:57:76:17:d3:9a:ee:24:d0:64:cb:e1:9d:3c:6a:25:59:a9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:24 2025 GMT
            Not After : May 12 14:00:24 2026 GMT
        Subject: CN=9D4EE951375610EF78C37D8721CFBF18D9E7CDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:6f:53:5e:e0:aa:f6:99:0c:e9:74:3a:4a:
                    49:8d:a3:e9:65:4b:e9:01:bc:93:68:da:57:4f:ff:
                    75:20:01:70:c5:72:9e:70:05:f2:69:3c:3a:5b:56:
                    8e:78:e8:85:19:2e:ba:38:06:1f:03:cd:c9:ed:16:
                    26:bd:46:22:0c:28:7c:83:c1:3d:7b:cd:77:21:21:
                    7f:6d:64:6f:f2:37:bb:b6:e4:40:e7:9a:62:31:34:
                    21:0f:ba:71:18:4f:94:89:a7:21:6f:16:4d:ef:d5:
                    c0:58:68:aa:c0:0c:c2:9c:6b:c5:6d:9c:3b:fc:26:
                    1b:73:77:78:fb:e3:5d:b7:a6:ea:8a:d6:75:d3:3e:
                    84:cc:b0:28:98:d3:bf:fe:2a:68:ab:95:6b:6e:84:
                    5c:d3:31:c8:dd:5d:19:cd:c3:2a:81:0f:bf:92:60:
                    65:7d:d5:45:5a:2b:4b:c2:95:5e:b3:a1:74:05:c5:
                    ac:0b:cc:3d:5b:46:06:2e:fc:87:12:8a:f7:f0:d6:
                    c2:40:d7:fc:e7:f3:1b:60:80:2d:ab:4f:82:7c:13:
                    1b:40:38:0e:f9:0e:62:83:b2:68:9b:69:5b:ba:5a:
                    2d:04:96:e4:fc:ac:95:eb:d4:eb:09:7c:ac:09:7f:
                    e3:63:b7:69:60:76:8e:47:62:39:9e:dc:0b:e4:7a:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:E9:51:37:56:10:EF:78:C3:7D:87:21:CF:BF:18:D9:E7:CD:F4
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/34352e3136342e3135332e302f32342d3234203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:3c:8f:7a:ae:81:61:3c:08:4b:f5:21:2a:8a:94:b8:06:
         30:81:8e:61:fa:70:d8:d2:7a:39:73:a0:98:fb:34:d9:8d:14:
         ca:e8:f1:9e:73:06:94:e1:dd:ed:e2:ec:b9:26:ed:92:43:dd:
         b8:17:dc:1e:4b:f5:f3:3f:8e:87:b9:36:c5:02:3d:b7:c9:50:
         2d:07:08:22:1a:f5:ae:c3:d5:21:77:fa:93:ec:8a:ad:71:57:
         91:64:04:bb:e6:be:03:06:54:59:42:58:b7:81:96:5b:49:ac:
         68:38:1d:c1:db:6d:c0:8c:15:e0:31:65:04:52:a9:2a:5a:46:
         72:18:ce:fa:5f:e1:74:a1:87:fd:41:a5:97:c0:52:ac:70:e5:
         7f:a5:a6:d9:ba:95:2e:f2:17:93:2e:0f:ca:e2:67:c1:29:cc:
         d8:29:e3:c3:38:91:0c:a7:b4:1f:30:b2:23:3b:ca:26:17:b5:
         00:f0:b3:2f:3e:cf:18:6d:f5:bd:22:85:e8:a8:a0:7d:cd:dc:
         7f:e4:f4:13:7e:b7:90:58:c7:16:3d:b7:31:4f:d8:52:54:af:
         4d:26:91:cd:1a:dd:cb:8c:b3:f2:15:32:dc:11:09:6e:8a:20:
         f8:72:b1:59:10:8b:f2:ca:43:a4:5e:1c:4b:db:7f:93:93:12:
         65:93:e5:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAqxXdhfTmu4k0GTL4Z08aiVZqU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU1NjM3NzJGQTVGN0YwMkU0NkIxMEQ0Mjk1MjA5NjQ1
MkIwMkY3RTAeFw0yNTA1MTMxMzU1MjRaFw0yNjA1MTIxNDAwMjRaMDMxMTAvBgNV
BAMTKDlENEVFOTUxMzc1NjEwRUY3OEMzN0Q4NzIxQ0ZCRjE4RDlFN0NERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiy29TXuCq9pkM6XQ6SkmNo+ll
S+kBvJNo2ldP/3UgAXDFcp5wBfJpPDpbVo546IUZLro4Bh8DzcntFia9RiIMKHyD
wT17zXchIX9tZG/yN7u25EDnmmIxNCEPunEYT5SJpyFvFk3v1cBYaKrADMKca8Vt
nDv8Jhtzd3j74123puqK1nXTPoTMsCiY07/+KmirlWtuhFzTMcjdXRnNwyqBD7+S
YGV91UVaK0vClV6zoXQFxawLzD1bRgYu/IcSivfw1sJA1/zn8xtggC2rT4J8ExtA
OA75DmKDsmibaVu6Wi0EluT8rJXr1OsJfKwJf+Njt2lgdo5HYjme3AvketzRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnU7pUTdWEO94w32HIc+/GNnnzfQwHwYDVR0j
BBgwFoAUBVY3cvpffwLkaxDUKVIJZFKwL34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEc5M3FYek1xQkRwdHY2bmNLRmNVYnVySFNvZTFpSDhDOFNybkJYTERw
MkEvMC8wNTU2Mzc3MkZBNUY3RjAyRTQ2QjEwRDQyOTUyMDk2NDUyQjAyRjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1NTYzNzcyRkE1RjdGMDJF
NDZCMTBENDI5NTIwOTY0NTJCMDJGN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHOTNxWHpNcUJEcHR2Nm5jS0ZjVWJ1ckhTb2UxaUg4QzhTcm5CWExEcDJBLzAv
MzQzNTJlMzEzNjM0MmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpJkwDQYJKoZIhvcNAQELBQADggEBADAsPI96
roFhPAhL9SEqipS4BjCBjmH6cNjSejlzoJj7NNmNFMro8Z5zBpTh3e3i7Lkm7ZJD
3bgX3B5L9fM/joe5NsUCPbfJUC0HCCIa9a7D1SF3+pPsiq1xV5FkBLvmvgMGVFlC
WLeBlltJrGg4HcHbbcCMFeAxZQRSqSpaRnIYzvpf4XShh/1BpZfAUqxw5X+lptm6
lS7yF5MuD8riZ8EpzNgp48M4kQyntB8wsiM7yiYXtQDwsy8+zxht9b0iheiooH3N
3H/k9BN+t5BYxxY9tzFP2FJUr00mkc0a3cuMs/IVMtwRCW6KIPhysVkQi/LKQ6Re
HEvbf5OTEmWT5cA=
-----END CERTIFICATE-----
Generated at Wed May 14 09:15:25 2025 by rpki-client