Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (raw, json)
Hash identifier:          d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=
Subject key identifier:   C7:81:CD:D0:BC:C4:F2:27:E6:E3:2A:FA:B0:FA:08:57:F2:0B:A6:D7
Certificate issuer:       /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
Certificate serial:       378CC071C79F6C1627B0B4C9858C116DF00B42DD
Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
Signing time:             Wed 05 Mar 2025 19:00:26 +0000
ROA not before:           Wed 05 Mar 2025 18:55:26 +0000
ROA not after:            Wed 04 Mar 2026 19:00:26 +0000
asID:                     267251
IP address blocks:        45.232.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl
                          rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:c0:71:c7:9f:6c:16:27:b0:b4:c9:85:8c:11:6d:f0:0b:42:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF
        Validity
            Not Before: Mar  5 18:55:26 2025 GMT
            Not After : Mar  4 19:00:26 2026 GMT
        Subject: CN=C781CDD0BCC4F227E6E32AFAB0FA0857F20BA6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ab:1a:f4:bf:4c:b8:d5:75:0f:02:18:21:fb:
                    11:f3:69:53:8b:7a:2c:f2:9a:fb:10:d5:75:88:a1:
                    5e:5f:57:e8:d3:fd:b4:64:57:ea:8c:77:b4:81:f7:
                    d1:65:f2:56:95:d7:c4:3e:a2:a7:8c:c6:07:34:17:
                    a0:c8:5c:0f:db:89:a6:cf:5c:5e:78:e2:dc:47:8e:
                    ac:dc:2a:d5:a2:35:2e:28:0f:45:49:60:51:d2:bc:
                    e6:68:0b:4e:7b:b2:4f:91:bf:5c:50:ab:50:d4:85:
                    35:65:97:84:43:08:b5:50:94:b5:95:b3:80:fe:d7:
                    cc:a8:81:22:cf:7e:2c:b9:e1:27:3b:d4:df:77:51:
                    7d:76:82:df:37:9c:f9:6e:ac:4a:b8:98:8f:b8:fb:
                    a0:80:5f:8b:af:f9:45:00:a6:8d:7d:91:50:e5:34:
                    e4:2b:05:41:f3:67:58:6b:b6:67:43:04:69:97:93:
                    ff:c0:4d:2d:30:55:26:a7:ec:0b:39:94:30:e5:b1:
                    a4:ea:8d:b1:cf:eb:2b:20:90:8c:dd:57:71:06:9e:
                    63:b6:ab:ff:c5:c5:83:93:da:b5:f6:14:30:08:df:
                    c9:8f:07:82:2d:79:10:0a:f3:ca:1b:45:6c:5a:27:
                    d6:7a:29:50:38:6b:43:a7:d3:ce:e3:6f:5d:09:40:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:CD:D0:BC:C4:F2:27:E6:E3:2A:FA:B0:FA:08:57:F2:0B:A6:D7
            X509v3 Authority Key Identifier:
                keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:cb:a2:30:f6:38:e1:44:87:88:2d:bd:8d:48:79:e1:a5:
         1e:05:10:f5:b8:a5:cd:d7:93:d2:1e:df:63:55:b4:61:33:cf:
         b2:b2:0b:0b:27:98:62:c9:4f:3c:69:02:95:e0:30:b2:15:e0:
         88:fb:ad:09:06:9b:0c:8b:48:d0:01:65:85:c5:12:c8:b3:e7:
         4a:93:14:2b:50:21:9c:0c:5b:0b:49:76:6b:4f:29:c5:bc:9c:
         86:94:86:de:2d:06:29:e5:67:b7:34:63:bd:c1:0b:07:40:64:
         ec:eb:ff:71:eb:2c:cb:4c:46:24:c3:ad:bd:44:9b:ad:93:8b:
         61:43:3a:f0:91:c0:dc:38:97:8a:8c:bb:40:04:17:b2:dd:01:
         ed:76:75:87:ca:fa:57:43:ef:92:d1:be:25:41:64:46:23:51:
         55:a7:fe:2a:43:59:d5:9e:cd:a3:1f:69:ef:d7:b7:2e:d1:85:
         a3:c3:4b:72:60:c2:f3:ed:05:54:15:96:72:33:8e:1b:a5:13:
         ad:9c:12:13:4b:d2:17:0d:6f:6e:de:2a:af:30:35:2d:fe:26:
         9e:5b:cd:9a:26:15:90:2a:9f:ca:9b:f8:06:7d:a6:03:6a:8a:
         19:09:b9:e9:f6:34:e2:23:59:b9:a2:a8:7d:1a:2d:77:4b:4d:
         6b:16:84:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN4zAccefbBYnsLTJhYwRbfALQt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx
QTJGRjRFRjAeFw0yNTAzMDUxODU1MjZaFw0yNjAzMDQxOTAwMjZaMDMxMTAvBgNV
BAMTKEM3ODFDREQwQkNDNEYyMjdFNkUzMkFGQUIwRkEwODU3RjIwQkE2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3qxr0v0y41XUPAhgh+xHzaVOL
eizymvsQ1XWIoV5fV+jT/bRkV+qMd7SB99Fl8laV18Q+oqeMxgc0F6DIXA/biabP
XF544txHjqzcKtWiNS4oD0VJYFHSvOZoC057sk+Rv1xQq1DUhTVll4RDCLVQlLWV
s4D+18yogSLPfiy54Sc71N93UX12gt83nPlurEq4mI+4+6CAX4uv+UUApo19kVDl
NOQrBUHzZ1hrtmdDBGmXk//ATS0wVSan7As5lDDlsaTqjbHP6ysgkIzdV3EGnmO2
q//FxYOT2rX2FDAI38mPB4IteRAK88obRWxaJ9Z6KVA4a0On087jb10JQM+jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx4HN0LzE8ifm4yr6sPoIV/ILptcwHwYDVR0j
BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy
a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG
QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWZ0VKTW1HZUp2SlBSWEhIbWdIVm02R2M4ZVJaWlNmV2tBdmh2VFFMMmtvLzEv
MzQzNTJlMzIzMzMyMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLehIMA0GCSqGSIb3DQEBCwUAA4IBAQBamsuiMPY4
4USHiC29jUh54aUeBRD1uKXN15PSHt9jVbRhM8+ysgsLJ5hiyU88aQKV4DCyFeCI
+60JBpsMi0jQAWWFxRLIs+dKkxQrUCGcDFsLSXZrTynFvJyGlIbeLQYp5We3NGO9
wQsHQGTs6/9x6yzLTEYkw629RJutk4thQzrwkcDcOJeKjLtABBey3QHtdnWHyvpX
Q++S0b4lQWRGI1FVp/4qQ1nVns2jH2nv17cu0YWjw0tyYMLz7QVUFZZyM44bpROt
nBITS9IXDW9u3iqvMDUt/iaeW82aJhWQKp/Km/gGfaYDaooZCbnp9jTiI1m5oqh9
Gi13S01rFoR7
-----END CERTIFICATE-----
Generated at Sun May 11 12:34:31 2025 by rpki-client