Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/34352e3138392e3231322e302f32322d3234203d3e20323639363134.roa
File:                     34352e3138392e3231322e302f32322d3234203d3e20323639363134.roa (raw, json)
Hash identifier:          grUBinqTTr8Nk4CgSwBf2CqqzI74FZjnYKkcYJGGEgQ=
Subject key identifier:   31:25:C9:4A:A3:11:4C:BF:94:E7:7D:3C:9A:17:2E:80:0E:FB:E7:08
Certificate issuer:       /CN=762B7ED75B87942021F3428553C319CDFF715C84
Certificate serial:       224FBAF7BCC5A5D175E9E0CD82DAF077CB7B570C
Authority key identifier: 76:2B:7E:D7:5B:87:94:20:21:F3:42:85:53:C3:19:CD:FF:71:5C:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/34352e3138392e3231322e302f32322d3234203d3e20323639363134.roa
Signing time:             Fri 04 Jul 2025 17:50:57 +0000
ROA not before:           Fri 04 Jul 2025 17:45:57 +0000
ROA not after:            Fri 03 Jul 2026 17:50:57 +0000
asID:                     269614
IP address blocks:        45.189.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.crl
                          rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 15:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4f:ba:f7:bc:c5:a5:d1:75:e9:e0:cd:82:da:f0:77:cb:7b:57:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762B7ED75B87942021F3428553C319CDFF715C84
        Validity
            Not Before: Jul  4 17:45:57 2025 GMT
            Not After : Jul  3 17:50:57 2026 GMT
        Subject: CN=3125C94AA3114CBF94E77D3C9A172E800EFBE708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:d3:73:c0:f7:33:39:b2:47:2a:fc:34:71:
                    55:b0:99:ce:87:09:ae:b6:3a:68:37:5a:ae:64:c5:
                    97:05:e9:b4:fd:02:a1:21:04:8c:12:5a:be:18:9a:
                    95:e9:aa:3e:1c:3c:b7:3b:6f:60:5a:e6:49:44:0e:
                    0d:ed:b1:14:32:6b:7b:f8:83:48:2c:c6:2e:3a:e2:
                    ce:94:2b:d3:0d:2b:00:c9:69:d0:9d:ca:60:27:44:
                    b1:3c:37:9f:08:e9:bd:ee:89:b8:17:cf:3c:84:0e:
                    5f:4d:a8:5f:28:2b:2b:70:04:1a:b4:d7:ad:0b:e5:
                    65:c5:c8:b4:89:30:96:36:01:1a:b2:84:95:37:42:
                    29:df:84:cd:7b:04:2a:cb:9e:ce:cc:6c:82:99:39:
                    7c:c7:e0:c1:bd:9f:aa:77:2c:b7:5c:da:ae:82:0f:
                    f9:99:5d:b3:86:3e:db:e8:c2:d7:a2:88:30:4a:8f:
                    ce:fc:9a:2b:2e:b0:a1:27:ea:d3:7b:4d:ee:de:4a:
                    51:e3:ab:6c:ba:3b:1f:55:09:1a:8f:5c:ba:51:b9:
                    1a:88:07:67:f7:33:ad:c4:8b:74:06:ed:8d:c5:1f:
                    12:7d:41:14:d7:26:9d:2c:bb:d2:42:f3:c4:67:04:
                    11:42:1d:8c:96:75:7c:88:8f:ac:10:6a:e4:b2:b2:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:25:C9:4A:A3:11:4C:BF:94:E7:7D:3C:9A:17:2E:80:0E:FB:E7:08
            X509v3 Authority Key Identifier:
                keyid:76:2B:7E:D7:5B:87:94:20:21:F3:42:85:53:C3:19:CD:FF:71:5C:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/762B7ED75B87942021F3428553C319CDFF715C84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/762B7ED75B87942021F3428553C319CDFF715C84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVW1eBoQyVnH9T4iKYqKDmm7eZvs7CPiPV95WwzH98P/0/34352e3138392e3231322e302f32322d3234203d3e20323639363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:f4:ce:2f:13:83:ca:10:19:16:48:28:75:7f:c9:6a:6e:
         f3:b2:1b:11:01:65:40:a8:8c:2f:97:35:4d:f9:d0:a9:f4:57:
         d3:4a:4b:61:b7:fa:e0:2f:c0:cd:ca:99:c0:7a:ec:0d:6b:13:
         a4:c2:6c:45:7e:83:3a:96:7f:4a:90:ed:9f:5e:de:e6:4d:bc:
         bc:63:37:71:48:9a:11:9e:d9:97:3d:4c:ca:be:77:cb:75:55:
         6e:5a:5c:d6:63:95:9d:b0:80:1e:66:e8:f1:13:cf:25:31:ae:
         86:d4:48:08:fd:d5:f3:40:37:f1:14:e0:a3:5f:b4:8b:76:9e:
         a9:91:74:15:53:f5:ea:f7:df:a9:1d:f1:63:97:d4:e4:31:1e:
         1e:52:4b:ef:24:8a:9c:d4:d5:27:36:30:6e:83:6a:03:eb:ed:
         e5:9a:39:94:ae:fc:cb:46:a7:9a:e5:c6:86:22:1e:78:c1:38:
         31:f2:a3:df:e1:86:a0:a8:e5:25:94:a2:67:66:5d:68:ed:19:
         6c:c9:14:1f:59:ce:0e:aa:17:0b:3f:44:6f:c0:3a:4b:9f:fc:
         ea:95:41:02:6b:59:20:d9:98:dc:0d:30:10:eb:cb:a1:96:0d:
         de:24:b5:a9:c2:18:c7:72:60:59:51:0c:7d:1a:63:e6:64:48:
         91:2f:bb:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIk+697zFpdF16eDNgtrwd8t7VwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYyQjdFRDc1Qjg3OTQyMDIxRjM0Mjg1NTNDMzE5Q0RG
RjcxNUM4NDAeFw0yNTA3MDQxNzQ1NTdaFw0yNjA3MDMxNzUwNTdaMDMxMTAvBgNV
BAMTKDMxMjVDOTRBQTMxMTRDQkY5NEU3N0QzQzlBMTcyRTgwMEVGQkU3MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREdNzwPczObJHKvw0cVWwmc6H
Ca62Omg3Wq5kxZcF6bT9AqEhBIwSWr4YmpXpqj4cPLc7b2Ba5klEDg3tsRQya3v4
g0gsxi464s6UK9MNKwDJadCdymAnRLE8N58I6b3uibgXzzyEDl9NqF8oKytwBBq0
160L5WXFyLSJMJY2ARqyhJU3QinfhM17BCrLns7MbIKZOXzH4MG9n6p3LLdc2q6C
D/mZXbOGPtvowteiiDBKj878misusKEn6tN7Te7eSlHjq2y6Ox9VCRqPXLpRuRqI
B2f3M63Ei3QG7Y3FHxJ9QRTXJp0su9JC88RnBBFCHYyWdXyIj6wQauSysuCXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMSXJSqMRTL+U5308mhcugA775wgwHwYDVR0j
BBgwFoAUdit+11uHlCAh80KFU8MZzf9xXIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlRWVzFlQm9ReVZuSDlUNGlLWXFLRG1tN2VadnM3Q1BpUFY5NVd3ekg5
OFAvMC83NjJCN0VENzVCODc5NDIwMjFGMzQyODU1M0MzMTlDREZGNzE1Qzg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2MkI3RUQ3NUI4Nzk0MjAy
MUYzNDI4NTUzQzMxOUNERkY3MTVDODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUVlcxZUJvUXlWbkg5VDRpS1lxS0RtbTdlWnZzN0NQaVBWOTVXd3pIOThQLzAv
MzQzNTJlMzEzODM5MmUzMjMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvdQwDQYJKoZIhvcNAQELBQADggEBAKI49M4v
E4PKEBkWSCh1f8lqbvOyGxEBZUCojC+XNU350Kn0V9NKS2G3+uAvwM3KmcB67A1r
E6TCbEV+gzqWf0qQ7Z9e3uZNvLxjN3FImhGe2Zc9TMq+d8t1VW5aXNZjlZ2wgB5m
6PETzyUxrobUSAj91fNAN/EU4KNftIt2nqmRdBVT9er336kd8WOX1OQxHh5SS+8k
ipzU1Sc2MG6DagPr7eWaOZSu/MtGp5rlxoYiHnjBODHyo9/hhqCo5SWUomdmXWjt
GWzJFB9Zzg6qFws/RG/AOkuf/OqVQQJrWSDZmNwNMBDry6GWDd4ktanCGMdyYFlR
DH0aY+ZkSJEvu+Q=
-----END CERTIFICATE-----
Generated at Sun Jul 6 00:41:44 2025 by rpki-client