Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa
File:                     34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (raw, json)
Hash identifier:          gWzg9YpbqycEBcqFyDV9C2c1ifzIdZhpIdaqvGl1vpE=
Subject key identifier:   8C:04:3F:8C:B9:6D:7E:F6:C7:7F:D8:73:94:22:07:C1:27:C0:9D:E0
Certificate issuer:       /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial:       2EBF182098B20A5E9CD88EEE411E27DB2750C9CF
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa
Signing time:             Thu 04 Sep 2025 14:00:28 +0000
ROA not before:           Thu 04 Sep 2025 13:55:28 +0000
ROA not after:            Thu 03 Sep 2026 14:00:28 +0000
asID:                     268907
IP address blocks:        45.175.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
                          rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bf:18:20:98:b2:0a:5e:9c:d8:8e:ee:41:1e:27:db:27:50:c9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
        Validity
            Not Before: Sep  4 13:55:28 2025 GMT
            Not After : Sep  3 14:00:28 2026 GMT
        Subject: CN=8C043F8CB96D7EF6C77FD873942207C127C09DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:22:6d:9c:c6:42:e7:0e:ff:06:d9:3b:f6:
                    c7:45:60:1e:4f:42:ac:0a:84:6f:44:85:75:e7:90:
                    fd:4d:80:3b:00:81:c5:05:f9:c2:92:a4:11:3b:de:
                    82:91:a4:58:36:4e:25:79:b9:fc:38:43:29:35:de:
                    54:c8:10:ca:9b:c8:4d:2f:5e:1b:01:6e:be:bc:70:
                    9a:d4:e7:3d:c4:d2:9c:cc:f8:c2:64:58:9a:2a:2c:
                    3e:f4:a8:94:e7:12:74:fe:28:b6:50:89:84:4f:85:
                    94:3f:10:01:ed:09:d6:6b:45:76:09:f5:6e:9d:78:
                    1a:91:2b:2f:d2:a2:bc:45:df:f4:48:2b:82:27:c1:
                    03:73:34:47:da:5a:d5:d2:27:1f:41:74:3d:99:80:
                    70:f0:ce:2c:eb:a9:ec:4e:07:e2:0b:2b:1c:a0:a3:
                    0d:0e:08:6b:6b:49:37:23:10:a0:6e:45:24:58:cf:
                    c5:21:4e:ef:93:e7:d7:cd:56:cc:6f:ec:4a:40:af:
                    6b:01:36:f5:cf:42:68:18:e5:36:5b:c7:b1:8e:b4:
                    22:60:0f:a7:82:5b:be:42:ec:0f:34:9f:10:f0:2f:
                    02:3b:25:75:8d:a8:a0:77:85:10:64:e6:df:1d:69:
                    93:43:f8:8f:fe:fa:41:78:9b:af:1d:c9:4d:38:48:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:3F:8C:B9:6D:7E:F6:C7:7F:D8:73:94:22:07:C1:27:C0:9D:E0
            X509v3 Authority Key Identifier:
                keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:e5:b3:8b:b2:aa:b3:43:c2:59:b7:83:fa:b9:94:be:ba:
         ef:f7:68:61:a5:93:06:f1:5c:70:ac:67:ee:89:b4:24:3b:d2:
         5e:0d:59:de:f6:a8:d3:73:32:44:86:bd:a7:9e:eb:be:cc:a6:
         1d:ac:e1:5e:c4:90:29:ff:e3:9b:28:05:c9:3a:de:00:72:c2:
         ea:66:eb:90:1f:8c:f9:98:b7:ac:fa:1a:a5:9d:35:3d:f1:4b:
         56:6d:ea:45:b1:c4:e5:57:b6:2c:6e:7b:44:e0:1c:6a:bf:79:
         d3:1d:f2:fe:44:79:e1:f6:3d:86:1a:7e:76:9f:f2:f7:97:18:
         7a:c9:b6:55:ff:52:de:c8:38:8a:43:53:8d:5b:e0:d1:7c:0b:
         3a:90:63:ac:25:24:68:ab:b4:34:75:2e:e9:3d:a5:79:c4:9f:
         21:fa:9c:33:bd:99:df:e8:16:9a:ac:27:bc:06:81:91:5c:57:
         f7:60:7f:fb:cc:e2:00:ae:50:bf:3f:1a:8f:80:63:0f:a9:87:
         a8:97:37:99:65:07:47:6e:aa:f9:46:b2:9e:07:27:c0:f3:95:
         56:9f:4b:99:d6:7c:35:aa:df:03:e9:81:fe:5d:61:06:53:b8:
         a3:19:ee:dc:21:ce:cb:35:c5:94:79:12:7d:d0:d7:4b:6c:7d:
         23:1e:5b:0b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULr8YIJiyCl6c2I7uQR4n2ydQyc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M4RjA3Njg1Rjc5MzIxMUNFM0Q1OEU4QUU0MEUzMzM1
RDAxQUM2NTAeFw0yNTA5MDQxMzU1MjhaFw0yNjA5MDMxNDAwMjhaMDMxMTAvBgNV
BAMTKDhDMDQzRjhDQjk2RDdFRjZDNzdGRDg3Mzk0MjIwN0MxMjdDMDlERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWCJtnMZC5w7/Btk79sdFYB5P
QqwKhG9EhXXnkP1NgDsAgcUF+cKSpBE73oKRpFg2TiV5ufw4Qyk13lTIEMqbyE0v
XhsBbr68cJrU5z3E0pzM+MJkWJoqLD70qJTnEnT+KLZQiYRPhZQ/EAHtCdZrRXYJ
9W6deBqRKy/SorxF3/RIK4InwQNzNEfaWtXSJx9BdD2ZgHDwzizrqexOB+ILKxyg
ow0OCGtrSTcjEKBuRSRYz8UhTu+T59fNVsxv7EpAr2sBNvXPQmgY5TZbx7GOtCJg
D6eCW75C7A80nxDwLwI7JXWNqKB3hRBk5t8daZND+I/++kF4m68dyU04SPbDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjAQ/jLltfvbHf9hzlCIHwSfAneAwHwYDVR0j
BBgwFoAUPI8HaF95MhHOPVjorkDjM10BrGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRjaUNUbnFUcTNic2F0REIyVVhSS1ZFUWtzeUxLWkVhWjhrUXNRc2pN
NkIvMC8zQzhGMDc2ODVGNzkzMjExQ0UzRDU4RThBRTQwRTMzMzVEMDFBQzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEYwNzY4NUY3OTMyMTFD
RTNENThFOEFFNDBFMzMzNUQwMUFDNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Y2lDVG5xVHEzYnNhdERCMlVYUktWRVFrc3lMS1pFYVo4a1FzUXNqTTZCLzAv
MzQzNTJlMzEzNzM1MmUzOTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa9gMA0GCSqGSIb3DQEBCwUAA4IBAQBsmuWzi7Kq
s0PCWbeD+rmUvrrv92hhpZMG8VxwrGfuibQkO9JeDVne9qjTczJEhr2nnuu+zKYd
rOFexJAp/+ObKAXJOt4AcsLqZuuQH4z5mLes+hqlnTU98UtWbepFscTlV7YsbntE
4Bxqv3nTHfL+RHnh9j2GGn52n/L3lxh6ybZV/1LeyDiKQ1ONW+DRfAs6kGOsJSRo
q7Q0dS7pPaV5xJ8h+pwzvZnf6BaarCe8BoGRXFf3YH/7zOIArlC/PxqPgGMPqYeo
lzeZZQdHbqr5RrKeByfA85VWn0uZ1nw1qt8D6YH+XWEGU7ijGe7cIc7LNcWUeRJ9
0NdLbH0jHlsL
-----END CERTIFICATE-----
Generated at Thu Sep 18 08:55:25 2025 by rpki-client