Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230332e302f32342d3234203d3e20323638343733.roa
File:                     34352e3136312e3230332e302f32342d3234203d3e20323638343733.roa (raw, json)
Hash identifier:          21XoPK5fEXCrCAELn+aO/qOe8W0/CNGW76NPqAq5WA8=
Subject key identifier:   2A:46:1A:CE:97:12:C9:83:25:80:F5:F2:B8:09:1D:A0:49:BE:5F:93
Certificate issuer:       /CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
Certificate serial:       5F4577E577E999604485BC87352DFC984C427E4C
Authority key identifier: 05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230332e302f32342d3234203d3e20323638343733.roa
Signing time:             Sat 14 Jun 2025 15:46:29 +0000
ROA not before:           Sat 14 Jun 2025 15:41:29 +0000
ROA not after:            Sat 13 Jun 2026 15:46:29 +0000
asID:                     268473
IP address blocks:        45.161.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl
                          rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:45:77:e5:77:e9:99:60:44:85:bc:87:35:2d:fc:98:4c:42:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05FB6CA33F44105459E5CD46044BB5DAF10E178E
        Validity
            Not Before: Jun 14 15:41:29 2025 GMT
            Not After : Jun 13 15:46:29 2026 GMT
        Subject: CN=2A461ACE9712C9832580F5F2B8091DA049BE5F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:20:28:0c:76:51:f0:ac:67:ba:04:d7:03:
                    d4:c0:50:2d:b3:33:8e:63:c7:81:87:a3:d4:74:dd:
                    16:f7:8b:83:ed:ac:e2:73:47:53:a1:16:71:72:ce:
                    b3:a5:fa:1b:86:89:f1:9f:c3:cc:37:c3:77:05:74:
                    99:e9:1e:38:dd:56:bc:62:cc:02:ce:99:a1:ce:20:
                    ce:d5:27:f6:ac:fc:bc:c9:b5:93:87:40:e0:dc:85:
                    f5:7a:0b:20:61:bd:26:27:9d:97:c6:ca:30:0c:28:
                    ae:23:74:42:e3:1d:8e:a2:be:62:d5:82:78:37:48:
                    de:ad:aa:4e:4a:eb:d8:fa:6a:f3:ca:d7:43:5c:79:
                    f6:38:4d:e6:d3:e8:ee:93:04:d5:52:4a:68:74:8c:
                    cd:dc:da:98:7c:d3:e0:52:65:48:ab:90:2f:b4:84:
                    c0:a5:1d:7e:c0:59:cd:38:59:1f:72:1b:65:d7:5c:
                    3c:fe:18:6a:7f:e0:83:11:02:6b:c1:6f:02:bb:01:
                    42:51:13:f6:e7:90:ab:1d:94:e7:91:85:ef:d5:37:
                    8a:89:1f:13:fd:ba:20:46:89:36:ac:76:07:c6:84:
                    5b:49:83:c1:ce:b1:88:c7:68:2a:20:68:27:92:87:
                    00:81:8c:f1:9a:cf:83:ba:7b:0f:7b:1a:33:7e:42:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:1A:CE:97:12:C9:83:25:80:F5:F2:B8:09:1D:A0:49:BE:5F:93
            X509v3 Authority Key Identifier:
                keyid:05:FB:6C:A3:3F:44:10:54:59:E5:CD:46:04:4B:B5:DA:F1:0E:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/05FB6CA33F44105459E5CD46044BB5DAF10E178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05FB6CA33F44105459E5CD46044BB5DAF10E178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230332e302f32342d3234203d3e20323638343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:87:23:4e:e9:c0:4b:1a:b0:78:76:3f:18:9b:13:7f:23:
         9e:d8:8c:88:07:1b:be:21:b3:17:c3:37:de:04:ca:50:4f:35:
         ec:9b:3f:96:77:e1:73:60:d5:a6:3b:f5:85:e0:f8:91:3c:60:
         b2:df:82:72:f7:79:40:c5:be:7e:07:2c:fc:e8:e5:8f:7d:a8:
         93:a2:9f:04:2f:f9:17:db:bb:80:11:c7:29:39:81:36:92:8e:
         4c:bc:59:dc:32:a5:62:bd:cd:91:8e:9f:6b:76:4c:d3:09:47:
         00:f0:8a:89:43:4d:c5:47:3b:be:bd:72:82:4d:f1:43:5d:54:
         14:bf:0c:93:88:b8:2a:bb:a1:d9:da:68:7a:cc:f9:cc:72:5e:
         3e:98:14:6a:0a:cf:74:e4:e5:4c:27:d1:2d:ea:19:13:49:ee:
         69:2b:e0:7a:a2:92:7f:21:87:a9:90:28:18:07:86:ff:6b:14:
         0f:0a:f0:47:f9:23:25:ce:55:4f:47:54:03:52:05:c4:13:8c:
         4e:a8:e4:2b:5d:8a:44:d7:97:05:3d:ab:e9:13:d1:15:ef:a8:
         c3:54:38:b1:1f:fd:65:aa:56:89:a0:32:5b:6d:88:72:65:63:
         01:ce:6e:18:27:32:1e:c8:8a:eb:8a:b7:f9:0f:5a:33:96:25:
         16:60:b2:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX0V35XfpmWBEhbyHNS38mExCfkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVGQjZDQTMzRjQ0MTA1NDU5RTVDRDQ2MDQ0QkI1REFG
MTBFMTc4RTAeFw0yNTA2MTQxNTQxMjlaFw0yNjA2MTMxNTQ2MjlaMDMxMTAvBgNV
BAMTKDJBNDYxQUNFOTcxMkM5ODMyNTgwRjVGMkI4MDkxREEwNDlCRTVGOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvyAoDHZR8KxnugTXA9TAUC2z
M45jx4GHo9R03Rb3i4PtrOJzR1OhFnFyzrOl+huGifGfw8w3w3cFdJnpHjjdVrxi
zALOmaHOIM7VJ/as/LzJtZOHQODchfV6CyBhvSYnnZfGyjAMKK4jdELjHY6ivmLV
gng3SN6tqk5K69j6avPK10NcefY4TebT6O6TBNVSSmh0jM3c2ph80+BSZUirkC+0
hMClHX7AWc04WR9yG2XXXDz+GGp/4IMRAmvBbwK7AUJRE/bnkKsdlOeRhe/VN4qJ
HxP9uiBGiTasdgfGhFtJg8HOsYjHaCogaCeShwCBjPGaz4O6ew97GjN+QgwdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKkYazpcSyYMlgPXyuAkdoEm+X5MwHwYDVR0j
BBgwFoAUBftsoz9EEFRZ5c1GBEu12vEOF44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjkxckJMbW02ZVRqUEp2aVhWbUI2cXFnaDdTRmR4Z2ZaTXFtYkZGR3g0
TUcvMC8wNUZCNkNBMzNGNDQxMDU0NTlFNUNENDYwNDRCQjVEQUYxMEUxNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RkI2Q0EzM0Y0NDEwNTQ1
OUU1Q0Q0NjA0NEJCNURBRjEwRTE3OEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5MXJCTG1tNmVUalBKdmlYVm1CNnFxZ2g3U0ZkeGdmWk1xbWJGRkd4NE1HLzAv
MzQzNTJlMzEzNjMxMmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtocswDQYJKoZIhvcNAQELBQADggEBAEbOhyNO
6cBLGrB4dj8YmxN/I57YjIgHG74hsxfDN94EylBPNeybP5Z34XNg1aY79YXg+JE8
YLLfgnL3eUDFvn4HLPzo5Y99qJOinwQv+Rfbu4ARxyk5gTaSjky8WdwypWK9zZGO
n2t2TNMJRwDwiolDTcVHO769coJN8UNdVBS/DJOIuCq7odnaaHrM+cxyXj6YFGoK
z3Tk5Uwn0S3qGRNJ7mkr4Hqikn8hh6mQKBgHhv9rFA8K8Ef5IyXOVU9HVANSBcQT
jE6o5CtdikTXlwU9q+kT0RXvqMNUOLEf/WWqVomgMlttiHJlYwHObhgnMh7IiuuK
t/kPWjOWJRZgspQ=
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:02:09 2025 by rpki-client