Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
File:                     34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier:          tsTOOw+DoYDK0cNObqGQVCSP2Hb8GauhXjZmSdmjggA=
Subject key identifier:   EE:8C:6B:70:61:2D:F8:CA:B2:5A:6C:92:FA:FA:1F:E0:34:75:60:60
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       523F5495102D5CAC0C5EDE6E6257F778C2E5D4F0
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:37 +0000
ROA not before:           Mon 05 May 2025 20:53:37 +0000
ROA not after:            Mon 04 May 2026 20:58:37 +0000
asID:                     268440
IP address blocks:        45.161.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 21:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:54:95:10:2d:5c:ac:0c:5e:de:6e:62:57:f7:78:c2:e5:d4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:37 2025 GMT
            Not After : May  4 20:58:37 2026 GMT
        Subject: CN=EE8C6B70612DF8CAB25A6C92FAFA1FE034756060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:5e:3e:6d:fa:53:3e:85:7c:6d:5b:9f:8a:
                    57:98:0d:4e:ec:cd:cb:f7:d8:44:69:5b:27:d2:95:
                    0f:82:a3:3e:fc:c6:d7:70:ba:e8:dc:5e:90:65:d2:
                    35:c0:d0:1a:66:f9:81:46:d2:cb:46:4c:51:d4:e0:
                    45:ce:b9:f7:f3:f6:45:e1:1d:44:0e:72:e6:69:a3:
                    58:cd:ed:b5:df:3b:06:92:48:cc:0d:f1:6a:63:31:
                    1c:e5:77:b8:b3:a6:57:f1:7a:ec:38:61:65:e7:74:
                    eb:10:62:31:15:69:af:0a:99:1b:69:cb:1c:c5:a4:
                    8a:d2:5f:89:70:cd:bf:66:5c:e2:6b:55:5f:bc:1a:
                    2c:20:6a:e2:76:dc:0c:e5:f7:0a:d8:5f:f8:41:ec:
                    24:85:44:bd:7b:f8:8c:17:97:92:8b:e4:b4:c4:ba:
                    e2:68:e5:4b:d7:55:72:40:19:f9:e1:d5:f4:47:0a:
                    19:89:1c:cd:50:6b:e2:20:4b:05:f1:38:29:d4:90:
                    9a:9c:64:56:e4:cd:fd:21:f7:28:7d:de:37:fa:03:
                    1e:1d:ce:f4:1d:ed:96:53:aa:75:73:67:68:67:12:
                    27:ad:27:d8:f1:62:55:5c:17:66:c0:10:33:c5:1a:
                    0b:59:61:54:44:c0:1c:41:b3:a8:04:27:31:68:6c:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:6B:70:61:2D:F8:CA:B2:5A:6C:92:FA:FA:1F:E0:34:75:60:60
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:8d:82:8e:21:e8:71:66:21:4a:c7:16:75:6e:8c:52:b2:
         53:0f:2f:4b:c8:28:09:ec:d9:b4:93:e2:4e:fb:fa:cd:20:a4:
         3b:e3:7a:04:79:39:39:93:04:25:84:13:83:7a:ad:b3:2e:bb:
         30:fd:d9:2d:48:ce:2c:e8:7b:2e:e6:95:02:7c:f4:58:ab:a6:
         70:e4:63:d4:66:c1:6c:77:0d:99:32:7c:f3:ea:34:d3:05:a4:
         b9:36:71:fb:a5:0f:85:47:30:8a:c4:5f:5e:8b:07:47:32:68:
         3d:03:49:46:9e:08:28:64:27:e7:46:49:f5:1e:f1:0d:2b:90:
         50:80:d1:fe:87:20:71:74:1b:e5:19:ab:fe:3a:2f:34:85:4f:
         41:95:e0:ae:01:d6:7e:9c:fe:47:57:df:2e:94:13:da:b7:d5:
         1d:5c:83:18:cc:b5:65:f2:8a:40:2e:19:45:52:4d:fe:07:70:
         25:d9:e1:fe:fe:97:6a:cb:c5:17:5f:06:06:74:bf:90:54:1e:
         62:f1:48:65:80:6f:68:4f:18:ff:13:0e:ff:dd:cc:97:76:f9:
         d9:79:37:39:63:1f:7a:b2:61:3c:47:3c:5d:03:5e:53:2d:15:
         f5:52:a1:5f:b4:2b:c7:32:5d:6c:d9:6a:4c:4e:6b:03:6a:71:
         d1:39:0a:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUj9UlRAtXKwMXt5uYlf3eMLl1PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VDMUQ2MDIwQTU2NjQ4RTREODA1NzlFREU2QTlBRTY0
RUQxQURDQTAeFw0yNTA1MDUyMDUzMzdaFw0yNjA1MDQyMDU4MzdaMDMxMTAvBgNV
BAMTKEVFOEM2QjcwNjEyREY4Q0FCMjVBNkM5MkZBRkExRkUwMzQ3NTYwNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1F4+bfpTPoV8bVufileYDU7s
zcv32ERpWyfSlQ+Coz78xtdwuujcXpBl0jXA0Bpm+YFG0stGTFHU4EXOuffz9kXh
HUQOcuZpo1jN7bXfOwaSSMwN8WpjMRzld7izplfxeuw4YWXndOsQYjEVaa8KmRtp
yxzFpIrSX4lwzb9mXOJrVV+8GiwgauJ23Azl9wrYX/hB7CSFRL17+IwXl5KL5LTE
uuJo5UvXVXJAGfnh1fRHChmJHM1Qa+IgSwXxOCnUkJqcZFbkzf0h9yh93jf6Ax4d
zvQd7ZZTqnVzZ2hnEietJ9jxYlVcF2bAEDPFGgtZYVREwBxBs6gEJzFobBR9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7oxrcGEt+MqyWmyS+vof4DR1YGAwHwYDVR0j
BBgwFoAUPsHWAgpWZI5NgFee3mqa5k7RrcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMC8zRUMxRDYwMjBBNTY2NDhFNEQ4MDU3OUVERTZBOUFFNjRFRDFBRENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFQzFENjAyMEE1NjY0OEU0
RDgwNTc5RURFNkE5QUU2NEVEMUFEQ0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzAv
MzQzNTJlMzEzNjMxMmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaEUMA0GCSqGSIb3DQEBCwUAA4IBAQCKoI2CjiHo
cWYhSscWdW6MUrJTDy9LyCgJ7Nm0k+JO+/rNIKQ743oEeTk5kwQlhBODeq2zLrsw
/dktSM4s6Hsu5pUCfPRYq6Zw5GPUZsFsdw2ZMnzz6jTTBaS5NnH7pQ+FRzCKxF9e
iwdHMmg9A0lGnggoZCfnRkn1HvENK5BQgNH+hyBxdBvlGav+Oi80hU9BleCuAdZ+
nP5HV98ulBPat9UdXIMYzLVl8opALhlFUk3+B3Al2eH+/pdqy8UXXwYGdL+QVB5i
8UhlgG9oTxj/Ew7/3cyXdvnZeTc5Yx96smE8RzxdA15TLRX1UqFftCvHMl1s2WpM
TmsDanHROQoK
-----END CERTIFICATE-----
Generated at Thu May 15 11:05:01 2025 by rpki-client