Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32342d3234203d3e20323639353839.roa
File:                     34352e3138372e38342e302f32342d3234203d3e20323639353839.roa (raw, json)
Hash identifier:          vyC+dRjp6SLtoeWq1opPCcoZb+WZb1J7qk4qdcZUHeY=
Subject key identifier:   F6:69:3F:06:4B:47:E1:FD:FB:34:88:F5:94:49:9C:73:43:D3:29:5C
Certificate issuer:       /CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
Certificate serial:       2F7D2025A2BA18F934B271FBD3FF8976B28A741C
Authority key identifier: 26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32342d3234203d3e20323639353839.roa
Signing time:             Tue 06 May 2025 14:58:32 +0000
ROA not before:           Tue 06 May 2025 14:53:32 +0000
ROA not after:            Tue 05 May 2026 14:58:32 +0000
asID:                     269589
IP address blocks:        45.187.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl
                          rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:20:25:a2:ba:18:f9:34:b2:71:fb:d3:ff:89:76:b2:8a:74:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
        Validity
            Not Before: May  6 14:53:32 2025 GMT
            Not After : May  5 14:58:32 2026 GMT
        Subject: CN=F6693F064B47E1FDFB3488F594499C7343D3295C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:ee:04:98:e6:34:3c:27:2f:19:20:f3:5b:
                    9f:bd:b3:7d:a3:40:83:c5:52:69:49:5a:3c:3b:ce:
                    5a:d9:7a:bc:1e:e5:ff:0f:0b:cf:3e:c3:d4:73:4e:
                    04:57:87:11:56:35:6c:c1:a9:42:e0:ab:28:08:4b:
                    70:c9:68:b7:13:20:86:15:74:15:ff:d8:e9:24:64:
                    cd:59:d0:c4:ba:d5:55:56:d1:12:53:d1:6b:61:a9:
                    20:4e:95:a3:a5:5e:6b:43:78:43:f4:9a:d7:0c:fa:
                    b7:eb:27:22:19:3c:de:e7:35:be:bd:dc:b7:6a:44:
                    50:dc:cc:af:84:c2:80:46:51:85:2a:34:16:bc:ba:
                    a7:03:01:91:b1:1e:e1:1a:2d:b4:64:5c:27:71:b7:
                    4b:a5:fa:1b:ae:37:02:ef:5b:47:f1:9b:7e:ac:18:
                    df:04:68:e5:9c:fc:0b:b5:0c:e8:43:fd:2b:6d:d4:
                    24:67:74:8d:f4:88:32:20:43:ee:87:56:83:d0:66:
                    90:3e:01:2e:6d:6a:87:bf:88:35:60:58:1b:8d:1e:
                    be:f1:73:b6:36:16:97:e2:0a:81:6d:3e:6f:2b:b8:
                    fc:e5:eb:57:5e:e8:f1:52:e0:83:6c:6a:02:19:76:
                    17:d2:63:54:39:ae:f4:14:7f:e2:5a:01:6f:36:3c:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:3F:06:4B:47:E1:FD:FB:34:88:F5:94:49:9C:73:43:D3:29:5C
            X509v3 Authority Key Identifier:
                keyid:26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/34352e3138372e38342e302f32342d3234203d3e20323639353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:20:90:87:bd:45:90:66:ac:a9:7c:3e:57:47:d7:00:5e:88:
         56:30:27:66:58:f5:55:4a:1e:af:37:02:73:3f:88:89:a7:04:
         08:17:3a:36:03:4b:ff:89:e8:1b:7a:d1:04:c1:7a:54:ea:76:
         af:6f:57:d2:69:4f:84:e8:6f:e3:39:bd:91:a6:8c:75:92:0e:
         a2:8a:26:f9:61:11:d7:76:e1:18:01:1e:0d:d0:b4:9a:e4:3f:
         c6:86:e6:93:64:6a:3c:9e:9c:4b:94:53:eb:53:9d:0a:10:d3:
         ea:f4:eb:9b:be:6a:99:52:ac:1c:d6:d0:5b:f7:e2:bc:f6:33:
         0a:c3:15:01:19:d6:19:73:60:be:a9:85:fa:72:88:5b:72:df:
         75:a1:9b:82:f4:de:12:05:00:af:38:cc:59:18:74:b1:72:8d:
         18:c6:9f:f9:ce:d8:c5:13:3e:4d:bb:a7:40:f5:f2:71:bf:24:
         88:b1:a3:ef:ec:09:42:b7:45:9f:f5:00:a8:a7:ce:3a:4c:53:
         ed:f8:f4:5e:ed:45:04:59:64:84:cf:24:f5:e6:1a:fa:43:85:
         04:61:87:88:0b:aa:77:11:11:2e:48:2c:23:ab:8d:fc:76:c5:
         bb:ec:32:c3:6a:11:95:4c:8e:db:7d:74:20:50:57:82:df:ad:
         96:5c:df:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL30gJaK6GPk0snH70/+JdrKKdBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZFOURCQjM3NUE0MjlGMjUxOEI3NDMzRUE0MDAwQ0E1
NzdFOUFDMzAeFw0yNTA1MDYxNDUzMzJaFw0yNjA1MDUxNDU4MzJaMDMxMTAvBgNV
BAMTKEY2NjkzRjA2NEI0N0UxRkRGQjM0ODhGNTk0NDk5QzczNDNEMzI5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXke4EmOY0PCcvGSDzW5+9s32j
QIPFUmlJWjw7zlrZerwe5f8PC88+w9RzTgRXhxFWNWzBqULgqygIS3DJaLcTIIYV
dBX/2OkkZM1Z0MS61VVW0RJT0WthqSBOlaOlXmtDeEP0mtcM+rfrJyIZPN7nNb69
3LdqRFDczK+EwoBGUYUqNBa8uqcDAZGxHuEaLbRkXCdxt0ul+huuNwLvW0fxm36s
GN8EaOWc/Au1DOhD/Stt1CRndI30iDIgQ+6HVoPQZpA+AS5taoe/iDVgWBuNHr7x
c7Y2FpfiCoFtPm8ruPzl61de6PFS4INsagIZdhfSY1Q5rvQUf+JaAW82PFm1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9mk/BktH4f37NIj1lEmcc0PTKVwwHwYDVR0j
BBgwFoAUJunbs3WkKfJRi3Qz6kAAyld+msMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFJENFhmYTVVcG94amZ1OTd0N0J2aHRuUWZBZWtXYUM1bUduMWtHNHRi
SnQvMC8yNkU5REJCMzc1QTQyOUYyNTE4Qjc0MzNFQTQwMDBDQTU3N0U5QUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2RTlEQkIzNzVBNDI5RjI1
MThCNzQzM0VBNDAwMENBNTc3RTlBQzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RSRDRYZmE1VXBveGpmdTk3dDdCdmh0blFmQWVrV2FDNW1HbjFrRzR0Ykp0LzAv
MzQzNTJlMzEzODM3MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbtUMA0GCSqGSIb3DQEBCwUAA4IBAQBZIJCHvUWQ
ZqypfD5XR9cAXohWMCdmWPVVSh6vNwJzP4iJpwQIFzo2A0v/iegbetEEwXpU6nav
b1fSaU+E6G/jOb2Rpox1kg6iiib5YRHXduEYAR4N0LSa5D/GhuaTZGo8npxLlFPr
U50KENPq9OubvmqZUqwc1tBb9+K89jMKwxUBGdYZc2C+qYX6cohbct91oZuC9N4S
BQCvOMxZGHSxco0Yxp/5ztjFEz5Nu6dA9fJxvySIsaPv7AlCt0Wf9QCop846TFPt
+PRe7UUEWWSEzyT15hr6Q4UEYYeIC6p3EREuSCwjq438dsW77DLDahGVTI7bfXQg
UFeC362WXN+g
-----END CERTIFICATE-----
Generated at Wed May 14 00:17:09 2025 by rpki-client