Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa
File:                     34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa (raw, json)
Hash identifier:          FvWmITQ8RemY4i4QO5Cy/WeYmWvU4PgTXnv7ANkNIac=
Subject key identifier:   C0:46:BA:44:66:44:35:EC:A9:54:20:34:32:EF:7E:68:41:A9:22:A7
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       679608A20E3F307FEC95D19F0EA2E6E51B33F283
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268137
IP address blocks:        45.169.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 20:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:08:a2:0e:3f:30:7f:ec:95:d1:9f:0e:a2:e6:e5:1b:33:f2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=C046BA44664435ECA954203432EF7E6841A922A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:be:58:87:ca:a3:b1:e3:9a:bb:c1:28:8b:
                    5f:41:98:bb:b1:b9:37:65:2b:47:b2:3b:9f:0c:03:
                    7e:73:48:a9:fc:55:db:36:13:3a:8f:ca:a8:c4:57:
                    7c:c1:08:3d:81:3f:6a:72:c8:46:1d:7a:34:24:ff:
                    98:3c:9c:0f:a8:7f:ef:2d:40:82:e3:d9:ff:ff:b3:
                    fb:30:4c:ee:90:ed:ea:3e:1f:ae:70:68:c8:d3:a2:
                    2f:14:fd:fb:cd:10:f0:75:ab:64:58:0f:29:01:21:
                    36:35:5a:1c:a8:a6:b8:5c:a3:f2:7b:47:27:74:6f:
                    dd:f0:77:3d:92:10:b2:c4:cd:28:32:e3:f4:5d:06:
                    89:89:90:38:c8:7e:6e:fc:7e:09:be:60:f6:a8:d0:
                    73:0a:ed:7f:48:76:02:5f:a4:3b:ec:f9:0c:93:ca:
                    65:0e:e9:33:58:2b:85:20:b5:8b:a9:aa:21:4f:85:
                    bb:c0:67:ca:83:d0:cb:7c:9f:61:12:f6:82:89:1f:
                    2c:23:0c:41:cb:7f:f0:02:a9:16:4c:5f:b6:86:e2:
                    79:a8:a9:38:19:21:c8:aa:2c:1d:3d:ff:5d:6a:7c:
                    80:bd:fb:ad:d0:6c:0e:c4:48:80:2b:e8:73:27:42:
                    02:53:15:02:af:41:8b:cd:a2:b9:c5:04:26:f8:07:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:46:BA:44:66:44:35:EC:A9:54:20:34:32:EF:7E:68:41:A9:22:A7
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/34352e3136392e3230302e302f32322d3232203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:d1:3a:0b:ef:d5:ea:52:75:21:38:4f:95:ac:44:eb:55:
         dc:d9:d3:a0:ec:b3:fc:39:84:a8:36:78:72:4e:fd:da:10:a3:
         1d:40:93:09:f7:59:88:f3:b2:c9:89:af:b3:d4:b8:f3:1c:02:
         a9:39:1a:78:48:b1:c0:de:3f:b6:31:01:40:c7:d8:ad:d7:17:
         f4:62:b9:57:43:68:d6:6c:79:0e:90:bd:89:b3:b3:8e:1a:68:
         6f:d8:6b:ee:ad:0c:74:7f:c7:39:de:2f:04:1f:d8:d3:79:74:
         ce:c0:80:de:65:dc:1d:ca:a2:22:ec:da:18:21:73:12:03:92:
         2e:92:e5:7c:e8:97:e3:80:f3:b7:62:47:90:7e:9e:39:00:6b:
         50:ae:8f:28:1e:57:10:dc:c8:8c:90:c5:53:0b:01:7c:f8:e5:
         3e:11:f7:de:6a:d1:af:3c:f0:07:bf:4a:24:8f:b5:3f:14:36:
         87:f4:5b:c9:ab:95:d6:2c:8f:83:d3:ec:09:11:c1:67:af:f8:
         d8:5c:df:9a:62:8b:3b:3b:bd:aa:3e:c1:66:6f:9d:da:a7:06:
         0d:ed:8d:75:88:6d:e7:bf:46:9d:b5:2c:69:9c:89:61:c7:68:
         23:e0:3e:df:34:59:db:3f:54:cb:b5:3f:85:73:1f:ef:2e:ea:
         c2:3d:31:28
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUZ5YIog4/MH/sldGfDqLm5Rsz8oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKEMwNDZCQTQ0NjY0NDM1RUNBOTU0MjAzNDMyRUY3RTY4NDFBOTIyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJL5Yh8qjseOau8Eoi19BmLux
uTdlK0eyO58MA35zSKn8Vds2EzqPyqjEV3zBCD2BP2pyyEYdejQk/5g8nA+of+8t
QILj2f//s/swTO6Q7eo+H65waMjToi8U/fvNEPB1q2RYDykBITY1Whyoprhco/J7
Ryd0b93wdz2SELLEzSgy4/RdBomJkDjIfm78fgm+YPao0HMK7X9IdgJfpDvs+QyT
ymUO6TNYK4UgtYupqiFPhbvAZ8qD0Mt8n2ES9oKJHywjDEHLf/ACqRZMX7aG4nmo
qTgZIciqLB09/11qfIC9+63QbA7ESIAr6HMnQgJTFQKvQYvNornFBCb4B7DlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUwEa6RGZENeypVCA0Mu9+aEGpIqcwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
dVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgyLzEvMzQz
NTJlMzEzNjM5MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2Mzgz
MTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItqcgwDQYJKoZIhvcNAQELBQADggEBAIFt0ToL79Xq
UnUhOE+VrETrVdzZ06Dss/w5hKg2eHJO/doQox1Akwn3WYjzssmJr7PUuPMcAqk5
GnhIscDeP7YxAUDH2K3XF/RiuVdDaNZseQ6QvYmzs44aaG/Ya+6tDHR/xzneLwQf
2NN5dM7AgN5l3B3KoiLs2hghcxIDki6S5Xzol+OA87diR5B+njkAa1CujygeVxDc
yIyQxVMLAXz45T4R995q0a888Ae/SiSPtT8UNof0W8mrldYsj4PT7AkRwWev+Nhc
35piizs7vao+wWZvndqnBg3tjXWIbee/Rp21LGmciWHHaCPgPt80Wds/VMu1P4Vz
H+8u6sI9MSg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:49 2025 by rpki-client on console.sobornost.net