Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
File:                     34352e3136322e34302e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          Y1kHT6iUSVhdFkW3LyAsWJDo6EXjp4PXBcpfsZR+B+4=
Subject key identifier:   61:DA:A8:A1:EF:A7:D2:A5:C4:04:01:CB:EB:72:F4:AC:31:B4:93:85
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       2B156CF3186CBF7D98C415DC92728A2D393839D0
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        45.162.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:6c:f3:18:6c:bf:7d:98:c4:15:dc:92:72:8a:2d:39:38:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=61DAA8A1EFA7D2A5C40401CBEB72F4AC31B49385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:3e:38:06:49:fc:99:80:e1:63:db:3a:49:
                    e5:5a:c1:f1:5d:48:4d:ac:15:9e:96:01:63:67:e0:
                    3b:6e:75:63:c1:31:88:79:dc:bf:1d:91:03:c9:24:
                    96:2f:b2:de:6d:44:ca:51:cc:48:61:ec:ee:b2:9e:
                    9e:f8:2a:dc:e8:41:fd:4d:c7:4c:ea:63:f3:48:11:
                    ab:17:5e:1d:7a:ed:b4:38:5c:52:40:79:c7:be:d2:
                    aa:13:da:d2:7f:44:e6:ef:94:d5:7d:a6:d5:e4:84:
                    c5:71:c5:11:54:64:3b:3b:26:0d:d7:61:e9:5a:bd:
                    3c:a1:49:bd:8c:ad:46:74:9b:c6:0e:aa:e1:42:45:
                    f0:3f:b8:f6:92:4e:72:51:99:42:b6:cc:5e:73:00:
                    ec:4f:1e:6a:6f:b6:c3:1d:08:e1:39:27:16:43:09:
                    21:03:21:27:38:7b:b6:e4:d5:bf:c5:1f:cf:cc:7d:
                    d6:a0:0d:79:62:36:f5:a1:01:a9:a3:ea:b4:1d:b0:
                    51:33:22:42:f4:f0:cc:26:ac:4c:42:df:b3:93:2c:
                    c7:06:ec:0a:c9:0c:04:a8:ae:2e:a4:53:16:60:5f:
                    76:cb:a8:ff:65:95:87:f4:d9:43:3a:98:47:39:d1:
                    1f:13:50:36:9e:45:c9:b6:49:ab:44:df:3d:95:5a:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DA:A8:A1:EF:A7:D2:A5:C4:04:01:CB:EB:72:F4:AC:31:B4:93:85
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:cb:c6:c9:bd:84:ef:ac:26:70:08:85:82:98:e3:9f:aa:
         69:2e:7f:f1:77:20:38:75:1a:d5:8f:61:3d:a3:40:b0:0c:2e:
         3d:6a:04:5d:dc:2d:e8:2b:fd:11:a2:e0:1e:a8:32:7c:2f:b4:
         6d:e6:d4:b9:66:16:53:1b:ea:45:95:be:e5:dd:82:5f:42:27:
         5f:08:06:24:67:67:ca:0f:5d:88:a0:06:44:92:9a:8b:ac:ee:
         c1:29:7f:4c:ea:70:64:2e:e8:43:68:f4:59:9e:39:de:0d:9c:
         33:23:45:e2:a9:8c:9f:79:ca:77:28:22:b8:52:c5:8c:fa:3b:
         11:d1:31:33:67:99:d3:42:b6:99:41:a9:68:e5:20:aa:67:f3:
         0d:b8:0d:e7:6f:f9:45:a5:c9:c5:f2:ec:68:83:97:da:1c:fa:
         4a:d0:d7:7a:1a:97:02:46:1c:75:69:1b:be:59:09:9b:b8:c9:
         4d:29:33:48:1e:3d:41:fe:cf:e5:80:e5:f7:44:5c:2f:b7:d8:
         0f:6b:c0:22:e1:c6:c7:03:0b:e2:44:53:f0:8e:52:aa:82:2a:
         ac:8f:4a:a1:ef:92:32:ae:9f:6a:33:e4:b7:04:8b:26:5f:bf:
         b1:63:e7:ae:c9:c9:a3:b2:dc:37:5a:8e:8e:c1:b7:db:dd:72:
         96:ae:b1:37
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKxVs8xhsv32YxBXcknKKLTk4OdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNTA4MjExNTAzMjhaFw0yNjA4MjAxNTA4MjhaMDMxMTAvBgNV
BAMTKDYxREFBOEExRUZBN0QyQTVDNDA0MDFDQkVCNzJGNEFDMzFCNDkzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjz44Bkn8mYDhY9s6SeVawfFd
SE2sFZ6WAWNn4DtudWPBMYh53L8dkQPJJJYvst5tRMpRzEhh7O6ynp74KtzoQf1N
x0zqY/NIEasXXh167bQ4XFJAece+0qoT2tJ/RObvlNV9ptXkhMVxxRFUZDs7Jg3X
YelavTyhSb2MrUZ0m8YOquFCRfA/uPaSTnJRmUK2zF5zAOxPHmpvtsMdCOE5JxZD
CSEDISc4e7bk1b/FH8/MfdagDXliNvWhAamj6rQdsFEzIkL08MwmrExC37OTLMcG
7ArJDASori6kUxZgX3bLqP9llYf02UM6mEc50R8TUDaeRcm2SatE3z2VWne1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYdqooe+n0qXEBAHL63L0rDG0k4UwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzQzNTJlMzEzNjMyMmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2iKDANBgkqhkiG9w0BAQsFAAOCAQEAMcjLxsm9hO+s
JnAIhYKY45+qaS5/8XcgOHUa1Y9hPaNAsAwuPWoEXdwt6Cv9EaLgHqgyfC+0bebU
uWYWUxvqRZW+5d2CX0InXwgGJGdnyg9diKAGRJKai6zuwSl/TOpwZC7oQ2j0WZ45
3g2cMyNF4qmMn3nKdygiuFLFjPo7EdExM2eZ00K2mUGpaOUgqmfzDbgN52/5RaXJ
xfLsaIOX2hz6StDXehqXAkYcdWkbvlkJm7jJTSkzSB49Qf7P5YDl90RcL7fYD2vA
IuHGxwML4kRT8I5SqoIqrI9Koe+SMq6fajPktwSLJl+/sWPnrsnJo7LcN1qOjsG3
291ylq6xNw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:38:34 2025 by rpki-client