Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa
File:                     34352e3138342e38382e302f32322d3332203d3e20323730323535.roa (raw, json)
Hash identifier:          W2d9nViifDXoiwgYaQjxlDd8CjXN7yHuOph574xl6Bw=
Subject key identifier:   63:1E:14:F5:45:29:B2:85:6F:BD:C1:15:DC:DA:16:AE:10:D4:CB:00
Certificate issuer:       /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
Certificate serial:       2C1EF26F7E656102E71DDF48417E24FBA37870FE
Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa
Signing time:             Tue 12 Aug 2025 12:40:18 +0000
ROA not before:           Tue 12 Aug 2025 12:35:18 +0000
ROA not after:            Tue 11 Aug 2026 12:40:18 +0000
asID:                     270255
IP address blocks:        45.184.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl
                          rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:f2:6f:7e:65:61:02:e7:1d:df:48:41:7e:24:fb:a3:78:70:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
        Validity
            Not Before: Aug 12 12:35:18 2025 GMT
            Not After : Aug 11 12:40:18 2026 GMT
        Subject: CN=631E14F54529B2856FBDC115DCDA16AE10D4CB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:67:da:49:71:ae:a6:4e:c6:7a:1d:fc:a4:
                    30:63:29:27:63:f5:03:a8:89:f1:dd:4e:ce:dd:0d:
                    45:8c:49:cd:94:90:4a:7a:d9:a8:06:fa:68:1c:7a:
                    1d:59:d8:73:a7:a7:84:85:30:dd:94:ff:58:02:06:
                    a5:be:02:ea:b3:28:29:10:32:a3:31:fc:91:96:cf:
                    b9:2f:ba:f3:15:3a:ac:a3:e9:b0:28:24:64:29:21:
                    d5:1c:80:8e:1a:1c:28:71:61:76:ca:f1:c3:04:12:
                    79:25:2d:56:65:66:58:0a:96:4f:0a:64:06:9c:b4:
                    cd:0e:99:b2:47:3e:25:d5:2f:ec:61:ea:eb:89:4c:
                    30:ad:b6:38:39:34:9d:ba:88:cc:ed:45:e7:65:0b:
                    cc:28:8b:fd:97:c2:99:54:03:b4:72:28:23:e7:3f:
                    ab:e6:f4:d1:33:e4:7a:4d:40:a0:df:d1:91:5e:87:
                    b4:76:b3:ad:5a:30:a2:20:93:e0:07:7c:97:74:17:
                    97:0c:d5:ca:7b:67:dd:41:af:5b:c8:69:89:6b:76:
                    30:ce:74:10:34:68:04:9a:e1:f4:b0:05:e8:10:9d:
                    5e:ef:32:9e:b6:46:24:cc:53:02:43:5c:e9:9c:08:
                    78:87:43:0a:42:c2:20:53:21:3b:8c:aa:5a:50:d5:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:14:F5:45:29:B2:85:6F:BD:C1:15:DC:DA:16:AE:10:D4:CB:00
            X509v3 Authority Key Identifier:
                keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:4f:d9:94:9e:0e:57:13:84:0b:56:3a:9b:c4:fc:f2:a0:
         30:2a:9b:cd:d2:b8:03:19:03:b7:b2:83:96:46:34:b3:33:f6:
         e2:63:e9:8b:b4:17:16:1f:8f:1d:65:b2:15:c8:67:e1:4f:86:
         b0:33:78:52:7e:8f:2d:67:95:39:6d:b1:d5:a2:0d:1a:99:29:
         17:9d:25:f3:7e:58:df:ef:bc:98:66:35:62:30:68:b8:98:59:
         01:38:c3:77:5a:24:74:84:e1:82:76:f9:e6:42:9e:02:e7:80:
         0d:18:e2:2c:db:e5:92:d3:07:92:da:ac:4e:34:f8:99:e6:7b:
         03:ae:99:18:f5:dd:8a:8c:d2:dc:cd:88:f9:05:a9:38:e0:cb:
         bc:c7:ef:0a:0f:9d:99:f1:e2:1a:0f:94:e5:72:74:8f:13:02:
         f4:1c:d1:b0:c9:4c:cd:fa:ef:6f:dd:67:a1:ab:e7:9c:e4:c0:
         8a:d1:80:7c:67:4f:b6:45:34:4a:55:98:a7:8c:3d:a8:b5:a2:
         64:fa:15:ee:7b:5c:7d:4d:5c:52:99:63:70:24:34:ff:90:fe:
         fe:a0:a8:4c:88:d0:ae:c0:88:c9:9e:46:88:d2:24:bc:5d:77:
         a8:e5:c7:45:26:e6:f8:00:b5:e2:99:39:7f:35:68:57:b0:19:
         06:80:fe:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULB7yb35lYQLnHd9IQX4k+6N4cP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyNzg4QkNGQTk1QkYyMjI0RTQ5Mjc4Q0RBNTE3NDdE
NjI1QkMzRjAeFw0yNTA4MTIxMjM1MThaFw0yNjA4MTExMjQwMThaMDMxMTAvBgNV
BAMTKDYzMUUxNEY1NDUyOUIyODU2RkJEQzExNURDREExNkFFMTBENENCMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfG2faSXGupk7Geh38pDBjKSdj
9QOoifHdTs7dDUWMSc2UkEp62agG+mgceh1Z2HOnp4SFMN2U/1gCBqW+AuqzKCkQ
MqMx/JGWz7kvuvMVOqyj6bAoJGQpIdUcgI4aHChxYXbK8cMEEnklLVZlZlgKlk8K
ZAactM0OmbJHPiXVL+xh6uuJTDCttjg5NJ26iMztRedlC8woi/2XwplUA7RyKCPn
P6vm9NEz5HpNQKDf0ZFeh7R2s61aMKIgk+AHfJd0F5cM1cp7Z91Br1vIaYlrdjDO
dBA0aASa4fSwBegQnV7vMp62RiTMUwJDXOmcCHiHQwpCwiBTITuMqlpQ1SvfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYx4U9UUpsoVvvcEV3NoWrhDUywAwHwYDVR0j
BBgwFoAU+yeIvPqVvyIk5JJ4zaUXR9YlvD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdR
czMvMC9GQjI3ODhCQ0ZBOTVCRjIyMjRFNDkyNzhDREE1MTc0N0Q2MjVCQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjc4OEJDRkE5NUJGMjIy
NEU0OTI3OENEQTUxNzQ3RDYyNUJDM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFQ1Bnd2FjZFFNMnlEUWZzWU5Vc0d1R1dBekJCWHhDUGZqZFdOUlE3UXMzLzAv
MzQzNTJlMzEzODM0MmUzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzIzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbhYMA0GCSqGSIb3DQEBCwUAA4IBAQCkCk/ZlJ4O
VxOEC1Y6m8T88qAwKpvN0rgDGQO3soOWRjSzM/biY+mLtBcWH48dZbIVyGfhT4aw
M3hSfo8tZ5U5bbHVog0amSkXnSXzfljf77yYZjViMGi4mFkBOMN3WiR0hOGCdvnm
Qp4C54ANGOIs2+WS0weS2qxONPiZ5nsDrpkY9d2KjNLczYj5Bak44Mu8x+8KD52Z
8eIaD5TlcnSPEwL0HNGwyUzN+u9v3Wehq+ec5MCK0YB8Z0+2RTRKVZinjD2otaJk
+hXue1x9TVxSmWNwJDT/kP7+oKhMiNCuwIjJnkaI0iS8XXeo5cdFJub4ALXimTl/
NWhXsBkGgP58
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:40 2025 by rpki-client