Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa
File:                     34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa (raw, json)
Hash identifier:          YR29Zxabm8A5qZCvIfksaCr53yb2s6BfjgttsOawScU=
Subject key identifier:   D7:7C:65:F3:C7:15:4C:C4:75:57:C1:15:16:F0:D2:F3:42:B1:21:6F
Certificate issuer:       /CN=25E8B473764AD2BD5079162C0353342232397DC5
Certificate serial:       65A038191EBC3B730BB39761E78C5096A622D7E7
Authority key identifier: 25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa
Signing time:             Wed 26 Aug 2026 16:57:05 +0000
ROA not before:           Wed 26 Aug 2026 16:52:05 +0000
ROA not after:            Wed 25 Aug 2027 16:57:05 +0000
asID:                     273400
IP address blocks:        45.172.174.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl
                          rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a0:38:19:1e:bc:3b:73:0b:b3:97:61:e7:8c:50:96:a6:22:d7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25E8B473764AD2BD5079162C0353342232397DC5
        Validity
            Not Before: Aug 26 16:52:05 2026 GMT
            Not After : Aug 25 16:57:05 2027 GMT
        Subject: CN=D77C65F3C7154CC47557C11516F0D2F342B1216F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:5c:7a:b0:0d:55:d8:3e:b1:db:25:68:b3:
                    80:dc:80:88:d0:09:77:78:bc:41:3a:08:d0:f9:41:
                    28:93:d0:dd:8d:6a:40:16:cf:00:84:9b:c8:2a:55:
                    04:14:49:b8:f0:14:2f:8c:ed:8e:42:59:2d:6c:83:
                    73:41:fa:99:7f:e1:83:76:f6:22:20:98:22:f9:1f:
                    f5:c0:c8:2d:88:e0:29:d7:06:6a:13:c8:36:b3:47:
                    50:c5:6f:84:9e:f6:f5:42:12:e5:f9:09:5b:0b:cc:
                    be:4a:80:11:de:d7:3e:1e:55:15:09:c8:6f:4e:75:
                    2b:00:1c:7f:d6:95:45:25:d9:ce:b9:7c:a0:32:3f:
                    56:ec:24:e1:5b:7d:14:50:fe:6c:d9:8e:5b:6c:ba:
                    40:1c:ea:82:bd:a7:9d:9b:31:97:34:a3:ac:5f:ab:
                    89:90:dd:90:42:21:46:74:d8:1c:28:26:a6:f6:15:
                    92:f0:85:79:ed:45:3e:94:d3:64:a0:fe:77:db:a6:
                    f8:44:ba:ff:cc:d2:31:03:6b:a9:60:30:69:60:f9:
                    b7:9b:3f:06:23:62:eb:4f:fc:9f:58:90:39:1f:80:
                    be:40:d7:53:d3:d3:01:34:cf:c7:f2:e9:f4:09:bf:
                    4f:20:28:02:5b:99:9c:72:aa:4c:ad:12:ec:b1:dc:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:65:F3:C7:15:4C:C4:75:57:C1:15:16:F0:D2:F3:42:B1:21:6F
            X509v3 Authority Key Identifier:
                keyid:25:E8:B4:73:76:4A:D2:BD:50:79:16:2C:03:53:34:22:32:39:7D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/25E8B473764AD2BD5079162C0353342232397DC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E8B473764AD2BD5079162C0353342232397DC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:c6:85:27:6b:65:e0:44:0a:8a:8b:66:bb:66:f9:81:d2:0f:
         d2:4b:4b:cc:f2:64:94:8a:b7:37:2b:8c:17:d6:3c:8b:9b:53:
         db:14:5e:01:e4:e3:42:44:32:27:ae:25:31:ed:f8:dd:8f:17:
         79:33:8d:79:c6:51:51:59:2e:56:d3:c4:d0:63:a1:67:8c:83:
         3d:77:60:00:45:2c:aa:79:71:60:e6:5c:78:52:4c:5f:51:ed:
         ec:f6:97:0c:76:0f:2d:7a:b3:10:62:88:fc:d2:13:94:c8:dd:
         b5:10:bb:43:8a:0c:ff:ab:10:55:fc:7c:12:af:c0:a2:15:3b:
         6d:35:7d:d5:d3:d2:05:d0:cf:68:23:1c:52:43:a1:74:4f:7b:
         dc:6c:e7:01:e2:99:35:f3:ed:5b:61:95:6d:9d:a7:bc:14:8e:
         00:c1:e0:e1:5e:64:94:ca:90:67:5f:15:4e:97:24:7c:61:ab:
         45:05:48:93:41:91:30:a1:48:a3:9a:c5:e8:d0:80:d0:92:1f:
         09:9b:7f:66:73:b5:74:16:e0:e7:c4:6d:d5:eb:e6:2a:b2:10:
         5c:f8:49:0d:79:8d:7b:d2:b9:33:62:dd:42:92:40:f8:1f:81:
         34:05:9e:5d:b9:51:7b:70:89:ca:b7:9a:ea:01:78:80:ca:3d:
         f2:8b:cb:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZaA4GR68O3MLs5dh54xQlqYi1+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFOEI0NzM3NjRBRDJCRDUwNzkxNjJDMDM1MzM0MjIz
MjM5N0RDNTAeFw0yNjA4MjYxNjUyMDVaFw0yNzA4MjUxNjU3MDVaMDMxMTAvBgNV
BAMTKEQ3N0M2NUYzQzcxNTRDQzQ3NTU3QzExNTE2RjBEMkYzNDJCMTIxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPlx6sA1V2D6x2yVos4DcgIjQ
CXd4vEE6CND5QSiT0N2NakAWzwCEm8gqVQQUSbjwFC+M7Y5CWS1sg3NB+pl/4YN2
9iIgmCL5H/XAyC2I4CnXBmoTyDazR1DFb4Se9vVCEuX5CVsLzL5KgBHe1z4eVRUJ
yG9OdSsAHH/WlUUl2c65fKAyP1bsJOFbfRRQ/mzZjltsukAc6oK9p52bMZc0o6xf
q4mQ3ZBCIUZ02BwoJqb2FZLwhXntRT6U02Sg/nfbpvhEuv/M0jEDa6lgMGlg+beb
PwYjYutP/J9YkDkfgL5A11PT0wE0z8fy6fQJv08gKAJbmZxyqkytEuyx3DE1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU13xl88cVTMR1V8EVFvDS80KxIW8wHwYDVR0j
BBgwFoAUJei0c3ZK0r1QeRYsA1M0IjI5fcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JkN21tS2oxTnRMVkNhUUFMeFVzRUZDaHl1QkxvZ2RpcmhRcTNqR0tR
cTEvMC8yNUU4QjQ3Mzc2NEFEMkJENTA3OTE2MkMwMzUzMzQyMjMyMzk3REM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RThCNDczNzY0QUQyQkQ1
MDc5MTYyQzAzNTMzNDIyMzIzOTdEQzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiZDdtbUtqMU50TFZDYVFBTHhVc0VGQ2h5dUJMb2dkaXJoUXEzakdLUXExLzAv
MzQzNTJlMzEzNzMyMmUzMTM3MzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3
MzMzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtrK4wDQYJKoZIhvcNAQELBQADggEBAG7GhSdr
ZeBECoqLZrtm+YHSD9JLS8zyZJSKtzcrjBfWPIubU9sUXgHk40JEMieuJTHt+N2P
F3kzjXnGUVFZLlbTxNBjoWeMgz13YABFLKp5cWDmXHhSTF9R7ez2lwx2Dy16sxBi
iPzSE5TI3bUQu0OKDP+rEFX8fBKvwKIVO201fdXT0gXQz2gjHFJDoXRPe9xs5wHi
mTXz7VthlW2dp7wUjgDB4OFeZJTKkGdfFU6XJHxhq0UFSJNBkTChSKOaxejQgNCS
Hwmbf2ZztXQW4OfEbdXr5iqyEFz4SQ15jXvSuTNi3UKSQPgfgTQFnl25UXtwicq3
muoBeIDKPfKLy2Y=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:25:36 2026 by rpki-client