Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3234203d3e20323637393336.roa
File:                     34352e3136362e35322e302f32322d3234203d3e20323637393336.roa (raw, json)
Hash identifier:          Sp12wAoLxAkWvSLG5COk7Ya9OXVKfHTtBo6SSWv7I+k=
Subject key identifier:   FF:CF:18:01:0F:BD:29:FB:6B:F5:F6:1D:C5:EE:DA:2C:33:83:58:40
Certificate issuer:       /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial:       3A0739B0640C86A898A325082EBCF99DC27ECDD3
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3234203d3e20323637393336.roa
Signing time:             Wed 18 Jun 2025 14:18:51 +0000
ROA not before:           Wed 18 Jun 2025 14:13:51 +0000
ROA not after:            Wed 17 Jun 2026 14:18:51 +0000
asID:                     267936
IP address blocks:        45.166.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl
                          rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:39:b0:64:0c:86:a8:98:a3:25:08:2e:bc:f9:9d:c2:7e:cd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Validity
            Not Before: Jun 18 14:13:51 2025 GMT
            Not After : Jun 17 14:18:51 2026 GMT
        Subject: CN=FFCF18010FBD29FB6BF5F61DC5EEDA2C33835840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:77:b3:10:aa:3c:3d:78:85:b4:65:59:7b:
                    3b:3e:e1:da:2f:62:e6:2a:7a:62:c0:af:f1:51:0c:
                    4b:28:20:68:f2:13:f7:26:4a:03:76:da:0e:2d:c2:
                    96:40:ac:3a:41:f7:d5:ff:07:86:72:ec:25:eb:ee:
                    2a:c3:7e:11:60:13:4e:76:35:c4:6d:4f:28:c5:7c:
                    45:42:a1:f6:8d:6d:52:3e:93:69:fa:d0:35:1d:3c:
                    ee:78:91:05:f8:54:57:c0:c0:e8:aa:5c:48:d7:33:
                    f3:b8:c5:e4:1e:8e:5d:cc:f7:0e:10:74:3b:23:1c:
                    5d:a4:36:08:ea:9c:3b:fa:99:02:fa:67:d0:e6:0b:
                    61:d6:8d:16:64:66:47:a3:11:2c:f6:7a:46:6f:c4:
                    31:42:e4:7e:19:7f:3c:34:7b:30:f1:68:99:a0:f2:
                    58:d9:61:3c:cc:70:23:d4:0b:52:fd:06:b8:62:2f:
                    8f:60:5d:23:46:13:e4:78:a8:02:68:24:0e:4a:90:
                    de:9f:58:a3:82:87:f0:a0:da:2e:e8:20:af:f3:bb:
                    45:7c:5c:9c:88:54:92:7c:22:e6:03:e8:0d:71:62:
                    4a:e7:0b:9a:2b:5b:fb:77:d0:81:4a:39:b3:93:ac:
                    9e:4a:14:c3:4b:bc:cb:8b:7b:31:e2:34:0f:04:b3:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:18:01:0F:BD:29:FB:6B:F5:F6:1D:C5:EE:DA:2C:33:83:58:40
            X509v3 Authority Key Identifier:
                keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3234203d3e20323637393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:fd:97:1e:28:18:3c:c3:8f:6e:76:54:12:4a:db:0d:2d:
         92:fa:9e:06:a1:03:fb:72:40:bb:a4:95:da:e2:05:44:ba:ff:
         a5:6e:81:f1:6e:70:c3:32:db:ea:75:6c:0e:81:dd:f9:8d:af:
         4c:9b:cd:d5:59:26:8d:6b:c6:49:a5:c6:f5:ed:0c:36:35:28:
         a4:81:6d:08:33:c5:cb:9c:1a:f2:77:ab:d5:4c:bf:b8:ee:7e:
         68:23:6f:3b:f1:ec:d8:1a:19:73:07:32:51:a0:c7:c7:1c:65:
         20:f1:1d:2b:14:93:b5:b8:6f:c9:a2:7b:36:9d:b8:75:b5:21:
         c7:b0:21:7d:7b:71:dd:df:fa:23:ed:23:a1:13:7a:54:79:b8:
         67:42:e7:13:73:0c:c2:74:66:f1:52:13:5e:f1:6c:17:14:7f:
         c3:3e:50:77:bc:58:17:d6:40:93:17:a8:b2:69:f9:02:50:cc:
         53:a6:6f:43:93:6e:1d:b1:40:75:59:28:dc:d6:8a:1e:e1:b4:
         f3:38:52:9b:11:b7:3d:23:30:a2:d0:a6:27:62:a1:f1:53:a5:
         90:20:75:05:4e:6a:f1:47:55:2e:8e:eb:83:4a:8f:de:7e:05:
         78:46:3c:a5:65:00:ca:78:ff:7b:a2:1d:a5:59:40:cd:8f:99:
         6e:b5:e1:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOgc5sGQMhqiYoyUILrz5ncJ+zdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4
NTMyQkI1NDAeFw0yNTA2MTgxNDEzNTFaFw0yNjA2MTcxNDE4NTFaMDMxMTAvBgNV
BAMTKEZGQ0YxODAxMEZCRDI5RkI2QkY1RjYxREM1RUVEQTJDMzM4MzU4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1XezEKo8PXiFtGVZezs+4dov
YuYqemLAr/FRDEsoIGjyE/cmSgN22g4twpZArDpB99X/B4Zy7CXr7irDfhFgE052
NcRtTyjFfEVCofaNbVI+k2n60DUdPO54kQX4VFfAwOiqXEjXM/O4xeQejl3M9w4Q
dDsjHF2kNgjqnDv6mQL6Z9DmC2HWjRZkZkejESz2ekZvxDFC5H4Zfzw0ezDxaJmg
8ljZYTzMcCPUC1L9BrhiL49gXSNGE+R4qAJoJA5KkN6fWKOCh/Cg2i7oIK/zu0V8
XJyIVJJ8IuYD6A1xYkrnC5orW/t30IFKObOTrJ5KFMNLvMuLezHiNA8Es+45AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/88YAQ+9Kftr9fYdxe7aLDODWEAwHwYDVR0j
BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X
Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0
MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drV05CMkx1Tm94Q2V4aTJVWXJXNmp6a0MyVVVHRFpuV1A1eDE5MXlvV2NNLzEv
MzQzNTJlMzEzNjM2MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaY0MA0GCSqGSIb3DQEBCwUAA4IBAQAdDP2XHigY
PMOPbnZUEkrbDS2S+p4GoQP7ckC7pJXa4gVEuv+lboHxbnDDMtvqdWwOgd35ja9M
m83VWSaNa8ZJpcb17Qw2NSikgW0IM8XLnBryd6vVTL+47n5oI2878ezYGhlzBzJR
oMfHHGUg8R0rFJO1uG/Jons2nbh1tSHHsCF9e3Hd3/oj7SOhE3pUebhnQucTcwzC
dGbxUhNe8WwXFH/DPlB3vFgX1kCTF6iyafkCUMxTpm9Dk24dsUB1WSjc1ooe4bTz
OFKbEbc9IzCi0KYnYqHxU6WQIHUFTmrxR1UujuuDSo/efgV4RjylZQDKeP97oh2l
WUDNj5luteHa
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:35:04 2025 by rpki-client