Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32332e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          qlJCBsC4gyEX+/bGy9Db5eySkdW8MtQfSDLz7zJxxlA=
Subject key identifier:   85:8D:F6:DF:9E:4C:73:A8:BA:C9:8D:E1:79:F0:CE:7A:38:90:21:CB
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       7BB0A26B4F974AC74D5E08F8E29FE17C172A8261
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa
Signing time:             Mon 09 Jun 2025 18:25:55 +0000
ROA not before:           Mon 09 Jun 2025 18:20:55 +0000
ROA not after:            Mon 08 Jun 2026 18:25:55 +0000
asID:                     269015
IP address blocks:        45.178.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 07:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b0:a2:6b:4f:97:4a:c7:4d:5e:08:f8:e2:9f:e1:7c:17:2a:82:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jun  9 18:20:55 2025 GMT
            Not After : Jun  8 18:25:55 2026 GMT
        Subject: CN=858DF6DF9E4C73A8BAC98DE179F0CE7A389021CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:a4:82:9e:46:7d:7e:b5:31:90:d4:51:35:
                    de:ad:20:56:19:1f:80:18:83:6a:03:4d:13:8c:e7:
                    3a:ec:ba:a0:93:f5:6f:f3:f4:5f:01:80:f8:98:1e:
                    80:5b:87:f8:db:dd:d7:a8:60:c7:89:58:71:3b:aa:
                    83:a7:86:18:21:65:d8:80:5c:d4:99:90:cb:75:25:
                    df:72:a2:51:29:3e:5e:a7:55:1c:84:f6:7f:62:fc:
                    e4:d7:6c:fe:93:0d:02:a8:ec:b3:9a:68:6b:c0:a5:
                    42:3a:01:79:1c:23:c1:7e:a4:39:9f:62:10:dd:79:
                    03:b4:99:48:30:dd:c4:86:4c:67:d5:5f:06:7a:8e:
                    a8:53:af:0b:77:37:85:c7:2d:13:5a:f3:fa:e6:e3:
                    68:e7:73:57:7d:79:e1:7f:a5:8b:ce:d2:f9:27:22:
                    96:db:a4:91:c1:e0:74:1d:43:12:41:af:86:12:a2:
                    70:42:aa:d2:f0:fc:fe:62:ce:b8:a9:3f:94:ab:41:
                    aa:17:ec:d3:bb:37:f8:6a:3a:d0:0c:ed:d4:6c:44:
                    b2:bc:49:9a:ef:fe:b5:b4:5f:0d:df:36:3b:9a:e7:
                    46:ac:a2:95:28:c5:5b:59:e0:97:31:bd:e7:f3:53:
                    e5:f1:0c:eb:2b:22:1a:e5:a0:f9:bf:5f:c1:f5:64:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:F6:DF:9E:4C:73:A8:BA:C9:8D:E1:79:F0:CE:7A:38:90:21:CB
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/34352e3137382e32332e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:27:f3:ce:e6:ba:00:ca:72:37:fb:f4:8d:f8:56:3c:cc:70:
         44:d2:83:53:8e:47:35:87:71:35:9b:06:82:95:51:67:39:7e:
         6d:67:b9:89:f2:63:4d:52:e3:88:dd:fc:3f:cd:b2:f8:ed:c1:
         3e:3b:95:02:22:e8:72:cf:5e:09:5c:1e:1e:db:a7:f1:c4:e9:
         74:dc:12:09:3b:62:61:ae:ed:6d:bd:78:6a:08:54:8b:7b:b1:
         03:6e:15:15:13:e3:5b:a7:c2:be:2c:1a:df:23:8c:66:cf:f2:
         2a:56:2f:c0:18:f9:a7:69:e9:f2:c7:6d:9c:25:98:41:a6:65:
         22:c0:cc:9c:25:c8:99:c4:e1:91:1a:43:76:56:24:11:12:02:
         b2:ce:ca:8b:c4:51:1d:12:73:3f:9a:79:bb:28:cc:ed:da:6b:
         0d:de:bd:7f:a5:9e:d9:14:44:61:b2:b0:c6:42:e6:30:06:1a:
         44:63:3f:d1:9e:dd:87:c0:16:60:61:af:f2:c4:bf:0e:b7:c7:
         3b:94:ef:f7:2d:f5:db:c8:7b:87:35:ca:37:1e:a3:9e:ca:5c:
         73:9a:a6:ac:fc:81:71:5f:85:21:97:17:42:dd:2d:81:6a:28:
         20:fb:05:aa:95:bf:40:cb:7b:cf:d6:6c:b0:21:f7:1e:37:d1:
         32:7d:d4:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe7Cia0+XSsdNXgj44p/hfBcqgmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE
QUUwNDdEODAeFw0yNTA2MDkxODIwNTVaFw0yNjA2MDgxODI1NTVaMDMxMTAvBgNV
BAMTKDg1OERGNkRGOUU0QzczQThCQUM5OERFMTc5RjBDRTdBMzg5MDIxQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtuqSCnkZ9frUxkNRRNd6tIFYZ
H4AYg2oDTROM5zrsuqCT9W/z9F8BgPiYHoBbh/jb3deoYMeJWHE7qoOnhhghZdiA
XNSZkMt1Jd9yolEpPl6nVRyE9n9i/OTXbP6TDQKo7LOaaGvApUI6AXkcI8F+pDmf
YhDdeQO0mUgw3cSGTGfVXwZ6jqhTrwt3N4XHLRNa8/rm42jnc1d9eeF/pYvO0vkn
IpbbpJHB4HQdQxJBr4YSonBCqtLw/P5izripP5SrQaoX7NO7N/hqOtAM7dRsRLK8
SZrv/rW0Xw3fNjua50asopUoxVtZ4JcxvefzU+XxDOsrIhrloPm/X8H1ZMnfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhY32355Mc6i6yY3hefDOejiQIcswHwYDVR0j
BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky
Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzIv
MzQzNTJlMzEzNzM4MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbIXMA0GCSqGSIb3DQEBCwUAA4IBAQCFJ/PO5roA
ynI3+/SN+FY8zHBE0oNTjkc1h3E1mwaClVFnOX5tZ7mJ8mNNUuOI3fw/zbL47cE+
O5UCIuhyz14JXB4e26fxxOl03BIJO2Jhru1tvXhqCFSLe7EDbhUVE+Nbp8K+LBrf
I4xmz/IqVi/AGPmnaenyx22cJZhBpmUiwMycJciZxOGRGkN2ViQREgKyzsqLxFEd
EnM/mnm7KMzt2msN3r1/pZ7ZFERhsrDGQuYwBhpEYz/Rnt2HwBZgYa/yxL8Ot8c7
lO/3LfXbyHuHNco3HqOeylxzmqas/IFxX4UhlxdC3S2Baigg+wWqlb9Ay3vP1myw
IfceN9EyfdR3
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:05:18 2025 by rpki-client