Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3233382e36382e302f32322d3234203d3e203238313538.roa
File:                     34352e3233382e36382e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          wvw2a/HDEgp3Dtf7xhrdvhSyRRY6uJr8txIuqmLi4Wg=
Subject key identifier:   67:9F:B0:5D:52:3A:14:D2:A6:9F:08:C8:FD:5A:F6:A7:DE:92:71:CF
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       66135FC6F67681E2BAD4243A31593A777F68E4
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3233382e36382e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     28158
IP address blocks:        45.238.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:13:5f:c6:f6:76:81:e2:ba:d4:24:3a:31:59:3a:77:7f:68:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=679FB05D523A14D2A69F08C8FD5AF6A7DE9271CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:3a:81:e3:13:0c:93:c1:4f:4a:ad:f7:6b:
                    fc:e9:be:bb:d4:1f:23:f4:df:59:50:d2:d4:34:6a:
                    12:9c:c7:bc:d1:74:31:fa:bd:bd:80:2a:44:70:04:
                    2b:11:62:df:92:3e:14:9b:bc:ac:d3:0c:6e:3d:62:
                    31:e5:59:95:8e:ec:da:18:cc:79:ab:76:eb:b9:64:
                    0a:95:82:02:a9:a7:bd:41:47:f3:9c:05:2f:33:28:
                    c3:33:bd:73:68:30:38:a3:a2:2a:9e:2b:f4:04:03:
                    b8:51:6b:3f:c6:7c:6e:f1:ac:f8:0c:34:dd:57:51:
                    b5:d5:2d:de:14:f2:d9:c1:f5:da:a5:a7:4d:ab:e5:
                    8b:a4:09:59:d9:96:a5:1e:4b:26:38:e4:d9:db:63:
                    60:12:0b:12:c6:8e:ab:5b:e6:80:de:29:80:42:40:
                    ce:4a:92:18:de:a3:db:ff:b7:70:23:8e:62:4e:84:
                    68:7e:44:45:27:04:b0:07:06:5d:00:82:e1:63:4e:
                    54:71:51:dc:ee:0f:00:7c:c1:e3:23:ff:23:36:92:
                    fd:d9:16:08:8d:51:13:6d:8d:40:c7:7f:51:67:84:
                    66:f3:ac:cb:72:30:f8:8c:34:ef:d2:7e:52:a3:ec:
                    4d:32:20:24:b1:bd:a2:4d:30:99:e9:ad:37:e3:55:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9F:B0:5D:52:3A:14:D2:A6:9F:08:C8:FD:5A:F6:A7:DE:92:71:CF
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3233382e36382e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:5e:a3:4b:84:72:ee:5a:f7:ed:41:c0:ef:3a:29:32:6a:
         de:70:2c:ed:72:84:3a:04:0b:aa:1c:d1:4c:5e:e9:61:f2:62:
         ed:af:81:b7:d0:21:e5:6a:a8:b9:66:b2:b2:c5:be:28:af:00:
         aa:e1:34:4a:27:f1:0a:1c:ab:3a:90:70:24:1f:1c:62:5e:95:
         66:69:02:eb:1f:97:06:77:fe:64:be:10:db:96:74:bf:40:06:
         c6:af:b2:85:2e:59:e4:0d:b9:5f:98:11:99:99:10:b3:06:fa:
         1a:cf:80:ac:49:c1:42:86:b5:0d:83:e0:58:5f:db:9c:97:0b:
         61:28:e8:42:8a:3d:4d:10:15:83:57:24:71:66:24:9f:57:61:
         72:2d:f3:90:e1:15:ff:5e:ab:28:aa:a7:b1:89:2a:e1:b6:0c:
         84:84:dd:f4:6e:e7:14:ce:9d:8e:e7:1b:96:3f:d0:e9:7e:87:
         f8:4b:39:4a:a9:5c:e8:de:51:87:fe:46:42:54:c2:38:f3:83:
         05:a3:62:8c:c5:75:cc:5a:5e:6c:65:a1:16:e8:89:0b:6b:a9:
         15:6c:2e:58:3a:ca:7a:d5:91:a5:cc:00:7c:91:a3:33:5b:92:
         42:82:98:30:d1:9e:ae:be:80:2b:6a:00:ad:de:5c:40:92:cd:
         cc:dc:ad:52
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgITZhNfxvZ2geK61CQ6MVk6d39o5DANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZC
MDE4NUZFMB4XDTI1MDgyMTE1MDMyOFoXDTI2MDgyMDE1MDgyOFowMzExMC8GA1UE
AxMoNjc5RkIwNUQ1MjNBMTREMkE2OUYwOEM4RkQ1QUY2QTdERTkyNzFDRjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANB1OoHjEwyTwU9Krfdr/Om+u9Qf
I/TfWVDS1DRqEpzHvNF0Mfq9vYAqRHAEKxFi35I+FJu8rNMMbj1iMeVZlY7s2hjM
eat267lkCpWCAqmnvUFH85wFLzMowzO9c2gwOKOiKp4r9AQDuFFrP8Z8bvGs+Aw0
3VdRtdUt3hTy2cH12qWnTavli6QJWdmWpR5LJjjk2dtjYBILEsaOq1vmgN4pgEJA
zkqSGN6j2/+3cCOOYk6EaH5ERScEsAcGXQCC4WNOVHFR3O4PAHzB4yP/IzaS/dkW
CI1RE22NQMd/UWeEZvOsy3Iw+Iw079J+UqPsTTIgJLG9ok0wmemtN+NVcF8CAwEA
AaOCAk0wggJJMB0GA1UdDgQWBBRnn7BdUjoU0qafCMj9Wvan3pJxzzAfBgNVHSME
GDAWgBS0XRqK902UsOCxNWc2yLya+wGF/jAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN3p3eGJDMkFocmNYdm9DZTZNRW9NREpDZ0ZlUmdnZ2JMWjg0VWhQQ210
ay8wL0I0NUQxQThBRjc0RDk0QjBFMEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQjQ1RDFBOEFGNzREOTRCMEUw
QjEzNTY3MzZDOEJDOUFGQjAxODVGRS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGX
BggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Qzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENtdGsvMC8z
NDM1MmUzMjMzMzgyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzEz
NTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLe5EMA0GCSqGSIb3DQEBCwUAA4IBAQANi16jS4Ry7lr3
7UHA7zopMmrecCztcoQ6BAuqHNFMXulh8mLtr4G30CHlaqi5ZrKyxb4orwCq4TRK
J/EKHKs6kHAkHxxiXpVmaQLrH5cGd/5kvhDblnS/QAbGr7KFLlnkDblfmBGZmRCz
Bvoaz4CsScFChrUNg+BYX9uclwthKOhCij1NEBWDVyRxZiSfV2FyLfOQ4RX/Xqso
qqexiSrhtgyEhN30bucUzp2O5xuWP9Dpfof4SzlKqVzo3lGH/kZCVMI484MFo2KM
xXXMWl5sZaEW6IkLa6kVbC5YOsp61ZGlzAB8kaMzW5JCgpgw0Z6uvoAragCt3lxA
ks3M3K1S
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:13:28 2025 by rpki-client