Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
File:                     34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa (raw, json)
Hash identifier:          6c3GdWcjKCcupf3f4vwcEM7/1n5r6TvUI5+yFIQGlag=
Subject key identifier:   43:F7:12:35:1E:40:D1:41:01:C2:69:1E:8C:6C:DB:0C:80:B4:59:6D
Certificate issuer:       /CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
Certificate serial:       413901D7007CDE44FDB9871E6491B067DFD811F1
Authority key identifier: F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa
Signing time:             Mon 23 Jun 2025 12:04:13 +0000
ROA not before:           Mon 23 Jun 2025 11:59:13 +0000
ROA not after:            Mon 22 Jun 2026 12:04:13 +0000
asID:                     268298
IP address blocks:        45.237.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl
                          rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 17:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:01:d7:00:7c:de:44:fd:b9:87:1e:64:91:b0:67:df:d8:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4295DF9D903508C9752EE48D417C2E0F09072B9
        Validity
            Not Before: Jun 23 11:59:13 2025 GMT
            Not After : Jun 22 12:04:13 2026 GMT
        Subject: CN=43F712351E40D14101C2691E8C6CDB0C80B4596D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:fb:06:35:a2:3a:f1:ec:e4:13:9d:1d:93:
                    4e:fc:12:e9:98:bb:82:cc:82:ac:73:86:01:4a:b7:
                    98:54:cf:3d:a8:b4:c0:8c:81:96:07:e5:42:60:4f:
                    42:01:ce:bf:97:40:d3:ac:32:e6:ab:33:eb:a1:b4:
                    7b:6a:21:99:48:50:18:fd:64:f7:ab:24:6d:02:ab:
                    b1:8e:40:7c:1f:55:c2:35:d0:64:0c:47:b9:98:40:
                    21:2f:24:db:5d:4d:68:50:eb:d9:1e:48:ec:2f:f7:
                    95:41:76:d4:6b:ff:69:64:ec:42:a2:f2:1e:b7:f2:
                    4d:45:a2:2f:3e:49:de:2d:25:21:a0:c7:f9:47:39:
                    98:f1:2e:4b:98:58:35:b3:8e:5b:da:40:19:de:52:
                    6c:fe:7d:d9:bb:0f:25:e1:bd:ec:28:04:8c:24:54:
                    9a:b1:71:52:2c:68:c5:73:a1:73:89:ce:e4:1c:cf:
                    13:56:cf:cd:5d:c7:99:da:22:a7:b3:2d:0c:1b:46:
                    00:0d:88:3c:a5:51:78:a7:d5:d6:9c:84:f5:84:b3:
                    ad:30:7a:83:e6:a1:13:b0:5b:be:ca:31:a4:47:cb:
                    76:b4:0d:b5:f1:9f:4e:06:ba:46:82:72:2c:7c:bc:
                    62:70:6b:66:33:f9:c3:d2:4d:f8:c1:ee:48:56:40:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F7:12:35:1E:40:D1:41:01:C2:69:1E:8C:6C:DB:0C:80:B4:59:6D
            X509v3 Authority Key Identifier:
                keyid:F4:29:5D:F9:D9:03:50:8C:97:52:EE:48:D4:17:C2:E0:F0:90:72:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/F4295DF9D903508C9752EE48D417C2E0F09072B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4295DF9D903508C9752EE48D417C2E0F09072B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VMipLvPLj58GJQi4c7HdqZJyWSkmuhBsnGNNcui43mE/0/34352e3233372e3230382e302f32322d3332203d3e20323638323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:d4:db:28:51:c4:83:37:c0:e3:18:32:0e:32:3c:17:f3:
         53:48:37:09:6b:57:1e:fd:73:05:92:88:78:69:56:02:28:34:
         20:41:ce:10:c7:8f:11:de:7d:da:f1:3f:3d:bb:23:a1:6f:d3:
         c8:cf:62:37:29:73:8e:e7:5f:bd:85:58:c4:bf:6c:58:79:1c:
         d1:47:08:3b:cc:d2:9f:35:bf:d2:58:46:57:63:0c:4f:ba:02:
         bd:c6:c7:74:ae:2b:02:ad:98:c9:5a:98:a8:11:aa:ba:40:b0:
         d8:68:95:00:d2:bc:a5:d4:22:bc:e0:83:f0:ad:00:b2:eb:3d:
         38:93:43:c9:3b:28:61:2d:fd:7b:f1:7b:df:30:ca:4a:36:5b:
         ed:5a:79:b8:94:39:58:c9:2d:0f:2c:63:a8:b6:e7:75:07:86:
         bd:50:f5:8a:ca:c8:7c:72:ce:a6:82:08:bd:07:e3:d7:a2:53:
         34:f6:43:91:25:20:a2:1e:4d:d3:47:5d:00:84:9e:0f:5d:6e:
         e5:bc:c8:1f:01:d0:16:8e:62:13:bd:95:be:aa:3d:98:16:d6:
         ee:0f:dc:21:be:0f:03:48:0f:d7:45:0d:43:71:60:1d:86:e5:
         ce:8b:1f:69:92:c8:a9:43:ea:34:bf:ad:3e:a7:64:16:a7:80:
         fa:31:05:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQTkB1wB83kT9uYceZJGwZ9/YEfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyOTVERjlEOTAzNTA4Qzk3NTJFRTQ4RDQxN0MyRTBG
MDkwNzJCOTAeFw0yNTA2MjMxMTU5MTNaFw0yNjA2MjIxMjA0MTNaMDMxMTAvBgNV
BAMTKDQzRjcxMjM1MUU0MEQxNDEwMUMyNjkxRThDNkNEQjBDODBCNDU5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWfsGNaI68ezkE50dk078EumY
u4LMgqxzhgFKt5hUzz2otMCMgZYH5UJgT0IBzr+XQNOsMuarM+uhtHtqIZlIUBj9
ZPerJG0Cq7GOQHwfVcI10GQMR7mYQCEvJNtdTWhQ69keSOwv95VBdtRr/2lk7EKi
8h638k1Foi8+Sd4tJSGgx/lHOZjxLkuYWDWzjlvaQBneUmz+fdm7DyXhvewoBIwk
VJqxcVIsaMVzoXOJzuQczxNWz81dx5naIqezLQwbRgANiDylUXin1dachPWEs60w
eoPmoROwW77KMaRHy3a0DbXxn04GukaCcix8vGJwa2Yz+cPSTfjB7khWQOmJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ/cSNR5A0UEBwmkejGzbDIC0WW0wHwYDVR0j
BBgwFoAU9Cld+dkDUIyXUu5I1BfC4PCQcrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZNaXBMdlBMajU4R0pRaTRjN0hkcVpKeVdTa211aEJzbkdOTmN1aTQz
bUUvMC9GNDI5NURGOUQ5MDM1MDhDOTc1MkVFNDhENDE3QzJFMEYwOTA3MkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Mjk1REY5RDkwMzUwOEM5
NzUyRUU0OEQ0MTdDMkUwRjA5MDcyQjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWTWlwTHZQTGo1OEdKUWk0YzdIZHFaSnlXU2ttdWhCc25HTk5jdWk0M21FLzAv
MzQzNTJlMzIzMzM3MmUzMjMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7dAwDQYJKoZIhvcNAQELBQADggEBAE7e1Nso
UcSDN8DjGDIOMjwX81NINwlrVx79cwWSiHhpVgIoNCBBzhDHjxHefdrxPz27I6Fv
08jPYjcpc47nX72FWMS/bFh5HNFHCDvM0p81v9JYRldjDE+6Ar3Gx3SuKwKtmMla
mKgRqrpAsNholQDSvKXUIrzgg/CtALLrPTiTQ8k7KGEt/Xvxe98wyko2W+1aebiU
OVjJLQ8sY6i253UHhr1Q9YrKyHxyzqaCCL0H49eiUzT2Q5ElIKIeTdNHXQCEng9d
buW8yB8B0BaOYhO9lb6qPZgW1u4P3CG+DwNID9dFDUNxYB2G5c6LH2mSyKlD6jS/
rT6nZBangPoxBT4=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:42:26 2025 by rpki-client