Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
File:                     34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa (raw, json)
Hash identifier:          jG8QPgG+2bQ/I1BY9Tkaw2+lA6EXVGWn77w1jfqwfSM=
Subject key identifier:   D0:D1:B5:3A:92:83:0E:42:3C:7B:E5:2A:78:99:50:F3:F2:12:D4:65
Certificate issuer:       /CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
Certificate serial:       0C29FFB527DFC27261F0B040BC299C614B56652B
Authority key identifier: DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa
Signing time:             Sat 10 May 2025 20:20:27 +0000
ROA not before:           Sat 10 May 2025 20:15:27 +0000
ROA not after:            Sat 09 May 2026 20:20:27 +0000
asID:                     267961
IP address blocks:        45.165.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl
                          rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 22:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:29:ff:b5:27:df:c2:72:61:f0:b0:40:bc:29:9c:61:4b:56:65:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB20EFFC604C0A0B4EA1164B7FD7670E251B3675
        Validity
            Not Before: May 10 20:15:27 2025 GMT
            Not After : May  9 20:20:27 2026 GMT
        Subject: CN=D0D1B53A92830E423C7BE52A789950F3F212D465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:c6:3c:e1:30:cd:ea:11:2f:6c:20:ec:6d:
                    c0:08:5f:79:bf:1d:36:7b:19:55:82:41:00:09:58:
                    e4:21:a1:10:b9:47:2a:ce:d1:7b:23:bf:c4:0b:8a:
                    c3:d4:b2:ba:21:f0:46:9e:42:c4:d5:ce:57:e1:f0:
                    6e:07:ee:40:dc:a1:35:bc:33:9f:83:8b:08:f0:b7:
                    a5:6d:0a:3d:7e:5e:e6:99:63:5e:e6:5a:66:67:f5:
                    84:5d:90:e1:01:70:b0:c7:76:f5:58:fb:73:ae:e2:
                    4d:07:9e:50:19:83:d1:4b:87:80:fb:04:a7:e8:99:
                    00:72:bc:03:1b:bc:31:11:b7:68:01:7b:ab:11:d3:
                    08:46:84:68:5f:37:61:01:35:bb:db:52:cf:d9:61:
                    bf:bc:dc:8e:3b:67:2b:0d:20:ed:e6:dc:46:6a:8b:
                    ee:a1:4b:71:61:4e:9e:70:4c:bb:cb:16:49:f1:37:
                    e1:99:68:20:ad:4a:b0:fe:25:45:ee:43:60:63:aa:
                    9d:d8:e0:59:6b:ba:4a:fe:54:15:11:d1:8a:48:60:
                    0f:bd:e2:1a:e5:09:d2:55:f3:97:a9:d6:2d:e1:77:
                    a3:6f:5f:d3:55:6c:39:41:7e:61:21:94:d5:c8:7a:
                    58:fb:cc:6e:59:2b:a3:ac:10:36:a4:50:9a:8b:61:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D1:B5:3A:92:83:0E:42:3C:7B:E5:2A:78:99:50:F3:F2:12:D4:65
            X509v3 Authority Key Identifier:
                keyid:DB:20:EF:FC:60:4C:0A:0B:4E:A1:16:4B:7F:D7:67:0E:25:1B:36:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB20EFFC604C0A0B4EA1164B7FD7670E251B3675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/34352e3136352e3136332e302f32342d3234203d3e20323637393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:87:4c:9d:79:a3:83:7f:84:76:40:6a:6d:10:a6:c8:a6:0a:
         91:dd:93:9d:ec:8f:d8:d9:c9:5e:87:63:95:e5:6e:88:c1:d6:
         8c:08:de:5e:e3:10:93:fc:31:7d:87:d4:83:70:be:64:1e:e7:
         28:0e:89:c9:98:4c:b1:6f:43:40:6c:86:cb:d4:78:7a:dc:53:
         7e:fb:dc:69:13:e1:bc:79:39:d7:50:06:4f:73:e5:93:1a:a1:
         65:87:15:6d:7b:d2:a6:b3:92:fc:14:2e:ed:4c:cf:69:82:7d:
         64:77:2a:79:f0:61:1e:0c:3c:9e:ba:5c:89:0c:48:a6:43:fa:
         a7:84:aa:f0:e6:ad:48:70:ca:ec:e4:a8:de:76:35:2f:45:19:
         9c:e4:0a:92:23:5b:07:a3:7c:8b:7e:3b:ce:c3:40:f5:42:4a:
         34:1c:6e:82:b9:be:44:bf:5f:a5:35:ec:15:d7:c4:27:77:7f:
         a1:e7:fc:94:97:a6:e4:1f:98:95:fc:3a:30:4f:6c:71:d0:93:
         2a:f6:93:45:d0:9d:2b:0c:66:22:ab:9d:49:29:01:5f:8c:71:
         02:45:67:0b:03:de:2a:ea:2a:03:0a:9b:93:b8:26:8c:cf:01:
         58:6a:f7:fc:06:59:4f:f6:bb:45:89:97:d8:ee:98:b0:94:3d:
         00:ee:8b:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDCn/tSffwnJh8LBAvCmcYUtWZSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIyMEVGRkM2MDRDMEEwQjRFQTExNjRCN0ZENzY3MEUy
NTFCMzY3NTAeFw0yNTA1MTAyMDE1MjdaFw0yNjA1MDkyMDIwMjdaMDMxMTAvBgNV
BAMTKEQwRDFCNTNBOTI4MzBFNDIzQzdCRTUyQTc4OTk1MEYzRjIxMkQ0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uMY84TDN6hEvbCDsbcAIX3m/
HTZ7GVWCQQAJWOQhoRC5RyrO0Xsjv8QLisPUsroh8EaeQsTVzlfh8G4H7kDcoTW8
M5+Diwjwt6VtCj1+XuaZY17mWmZn9YRdkOEBcLDHdvVY+3Ou4k0HnlAZg9FLh4D7
BKfomQByvAMbvDERt2gBe6sR0whGhGhfN2EBNbvbUs/ZYb+83I47ZysNIO3m3EZq
i+6hS3FhTp5wTLvLFknxN+GZaCCtSrD+JUXuQ2Bjqp3Y4Flrukr+VBUR0YpIYA+9
4hrlCdJV85ep1i3hd6NvX9NVbDlBfmEhlNXIelj7zG5ZK6OsEDakUJqLYUv/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0NG1OpKDDkI8e+UqeJlQ8/IS1GUwHwYDVR0j
BBgwFoAU2yDv/GBMCgtOoRZLf9dnDiUbNnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC9EQjIwRUZGQzYwNEMwQTBCNEVBMTE2NEI3RkQ3NjcwRTI1MUIzNjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMjBFRkZDNjA0QzBBMEI0
RUExMTY0QjdGRDc2NzBFMjUxQjM2NzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzQzNTJlMzEzNjM1MmUzMTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpaMwDQYJKoZIhvcNAQELBQADggEBAEGHTJ15
o4N/hHZAam0QpsimCpHdk53sj9jZyV6HY5XlbojB1owI3l7jEJP8MX2H1INwvmQe
5ygOicmYTLFvQ0BshsvUeHrcU3773GkT4bx5OddQBk9z5ZMaoWWHFW170qazkvwU
Lu1Mz2mCfWR3KnnwYR4MPJ66XIkMSKZD+qeEqvDmrUhwyuzkqN52NS9FGZzkCpIj
WwejfIt+O87DQPVCSjQcboK5vkS/X6U17BXXxCd3f6Hn/JSXpuQfmJX8OjBPbHHQ
kyr2k0XQnSsMZiKrnUkpAV+McQJFZwsD3irqKgMKm5O4JozPAVhq9/wGWU/2u0WJ
l9jumLCUPQDui/w=
-----END CERTIFICATE-----
Generated at Sun May 11 00:51:42 2025 by rpki-client