Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233322e302f32322d3332203d3e20323638373431.roa
File:                     34352e3137312e3233322e302f32322d3332203d3e20323638373431.roa (raw, json)
Hash identifier:          Wk0uLRtnztFlsKNUKTQSiDJU4FR2n8DjnoRZD6PIDHI=
Subject key identifier:   7E:6D:E3:70:11:54:28:E2:41:A6:A5:A1:68:2B:F2:C2:74:CE:93:C4
Certificate issuer:       /CN=022C6BC9D920C76FFF1626D62C2F1215EF5616BF
Certificate serial:       4FDC3CA7A677685E8DC341DEE26011E179A9685C
Authority key identifier: 02:2C:6B:C9:D9:20:C7:6F:FF:16:26:D6:2C:2F:12:15:EF:56:16:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233322e302f32322d3332203d3e20323638373431.roa
Signing time:             Sat 01 Nov 2025 16:38:09 +0000
ROA not before:           Sat 01 Nov 2025 16:33:09 +0000
ROA not after:            Sat 31 Oct 2026 16:38:09 +0000
asID:                     268741
IP address blocks:        45.171.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.crl
                          rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:dc:3c:a7:a6:77:68:5e:8d:c3:41:de:e2:60:11:e1:79:a9:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022C6BC9D920C76FFF1626D62C2F1215EF5616BF
        Validity
            Not Before: Nov  1 16:33:09 2025 GMT
            Not After : Oct 31 16:38:09 2026 GMT
        Subject: CN=7E6DE370115428E241A6A5A1682BF2C274CE93C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:6c:36:31:d2:dd:15:42:12:dd:41:90:f7:
                    e2:a8:af:7e:6b:c2:48:23:b0:90:02:59:88:0d:14:
                    b4:61:fa:ff:0e:e1:bf:f9:39:37:81:a5:e9:84:ad:
                    31:fc:6f:1e:48:4d:7d:83:74:76:fa:cd:18:3d:0b:
                    52:9f:b7:18:6e:ff:11:c1:02:a9:74:bd:5c:df:8b:
                    84:81:71:59:44:0b:a2:69:a2:79:83:ae:17:80:77:
                    26:ed:26:cf:0d:f1:2d:6c:72:7d:19:31:9e:f8:7d:
                    82:4a:ae:b2:6e:2b:b3:be:b9:a2:2d:ae:9c:6a:6e:
                    dc:bb:cf:ea:29:39:36:31:86:a3:72:7d:dc:92:40:
                    8f:2e:a0:86:e0:42:88:14:a8:fd:49:e9:02:a4:3b:
                    f3:02:b3:32:ec:9f:16:5a:26:64:7a:e2:63:e2:61:
                    0b:fe:af:4d:6a:32:7d:c6:ec:c1:1f:0b:a8:38:f0:
                    6b:63:f7:ca:09:d5:d9:24:05:0a:cb:cc:f1:bb:a3:
                    aa:33:f2:34:6a:19:dc:fa:4e:b0:0d:87:9d:b8:e6:
                    67:93:89:22:2d:ca:7e:53:27:08:a5:95:ee:4c:04:
                    f2:65:2e:66:79:60:64:73:1d:f2:71:1f:b8:aa:92:
                    2d:32:73:9b:1b:a2:c9:a0:75:5d:84:2b:e9:6e:ca:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:E3:70:11:54:28:E2:41:A6:A5:A1:68:2B:F2:C2:74:CE:93:C4
            X509v3 Authority Key Identifier:
                keyid:02:2C:6B:C9:D9:20:C7:6F:FF:16:26:D6:2C:2F:12:15:EF:56:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022C6BC9D920C76FFF1626D62C2F1215EF5616BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233322e302f32322d3332203d3e20323638373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:56:e0:6c:5e:c4:b6:bc:03:2b:ce:8c:88:dd:ed:b5:53:19:
         31:70:8c:c5:a2:89:38:19:ef:b9:67:7f:1d:5e:10:82:38:97:
         5c:7b:dd:5c:0c:ec:b4:cc:2a:76:c5:3b:47:f1:c6:e7:bf:61:
         91:1b:bc:db:46:67:33:a9:92:d3:4c:b1:c3:0e:e3:40:35:1e:
         5a:91:7a:b2:46:c9:04:d0:d0:a2:18:8d:99:fb:3d:ef:e1:f5:
         d6:77:85:fa:e2:be:7a:73:52:cb:f8:7f:68:00:0b:6f:4e:27:
         0c:a1:06:13:28:c5:ec:57:b1:8e:9a:79:7d:aa:dc:d8:7b:52:
         1c:dd:a0:54:57:74:e1:9a:9a:7f:c9:b7:34:11:9e:b8:ce:7f:
         9d:cc:f2:23:bb:99:8b:a5:1d:21:0d:af:1f:e9:34:55:ca:cd:
         28:6a:59:57:f2:27:a5:b6:1e:1f:29:4c:0c:02:ea:49:aa:d0:
         c1:e7:e5:45:3c:eb:b4:7c:b3:73:22:6e:b8:12:7f:54:03:91:
         57:a0:ad:15:00:a2:26:d0:8a:20:15:2a:fa:83:b8:21:69:27:
         2f:a3:26:a3:0d:8f:f1:e7:a4:5c:26:30:8f:bf:4a:7b:02:d5:
         b7:82:cb:be:79:6d:fe:43:b1:d2:49:9f:3c:4f:ce:97:32:ad:
         f3:f9:63:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT9w8p6Z3aF6Nw0He4mAR4XmpaFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIyQzZCQzlEOTIwQzc2RkZGMTYyNkQ2MkMyRjEyMTVF
RjU2MTZCRjAeFw0yNTExMDExNjMzMDlaFw0yNjEwMzExNjM4MDlaMDMxMTAvBgNV
BAMTKDdFNkRFMzcwMTE1NDI4RTI0MUE2QTVBMTY4MkJGMkMyNzRDRTkzQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHVmw2MdLdFUIS3UGQ9+Kor35r
wkgjsJACWYgNFLRh+v8O4b/5OTeBpemErTH8bx5ITX2DdHb6zRg9C1Kftxhu/xHB
Aql0vVzfi4SBcVlEC6JponmDrheAdybtJs8N8S1scn0ZMZ74fYJKrrJuK7O+uaIt
rpxqbty7z+opOTYxhqNyfdySQI8uoIbgQogUqP1J6QKkO/MCszLsnxZaJmR64mPi
YQv+r01qMn3G7MEfC6g48Gtj98oJ1dkkBQrLzPG7o6oz8jRqGdz6TrANh5245meT
iSItyn5TJwille5MBPJlLmZ5YGRzHfJxH7iqki0yc5sbosmgdV2EK+luysPfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfm3jcBFUKOJBpqWhaCvywnTOk8QwHwYDVR0j
BBgwFoAUAixrydkgx2//FibWLC8SFe9WFr8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjdtUTFkWFJKaGNrUmg4UkdVeHNxbXl4b3F1UjJIY0tQc1E3OVVMeXAx
RzMvMC8wMjJDNkJDOUQ5MjBDNzZGRkYxNjI2RDYyQzJGMTIxNUVGNTYxNkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyMkM2QkM5RDkyMEM3NkZG
RjE2MjZENjJDMkYxMjE1RUY1NjE2QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI3bVExZFhSSmhja1JoOFJHVXhzcW15eG9xdVIySGNLUHNRNzlVTHlwMUczLzAv
MzQzNTJlMzEzNzMxMmUzMjMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItq+gwDQYJKoZIhvcNAQELBQADggEBACZW4Gxe
xLa8AyvOjIjd7bVTGTFwjMWiiTgZ77lnfx1eEII4l1x73VwM7LTMKnbFO0fxxue/
YZEbvNtGZzOpktNMscMO40A1HlqRerJGyQTQ0KIYjZn7Pe/h9dZ3hfrivnpzUsv4
f2gAC29OJwyhBhMoxexXsY6aeX2q3Nh7UhzdoFRXdOGamn/JtzQRnrjOf53M8iO7
mYulHSENrx/pNFXKzShqWVfyJ6W2Hh8pTAwC6kmq0MHn5UU867R8s3MibrgSf1QD
kVegrRUAoibQiiAVKvqDuCFpJy+jJqMNj/HnpFwmMI+/SnsC1beCy755bf5DsdJJ
nzxPzpcyrfP5Y4A=
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:03 2025 by rpki-client