Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
File:                     34352e3136322e32332e302f32342d3234203d3e20323638353038.roa (raw, json)
Hash identifier:          rJnDJOsZVCyYd1KRG2hQg+1x0T9vqZrMKKBQ0wdHjCo=
Subject key identifier:   6B:20:47:94:E7:44:59:2F:D4:0E:34:E4:32:2B:BD:F3:D5:66:3D:14
Certificate issuer:       /CN=308F5079B6A88655068375FAD482AC65E66A6F15
Certificate serial:       443DAAA8148C1B0C894A231EE6541E5433CECCC1
Authority key identifier: 30:8F:50:79:B6:A8:86:55:06:83:75:FA:D4:82:AC:65:E6:6A:6F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308F5079B6A88655068375FAD482AC65E66A6F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa
Signing time:             Thu 11 Sep 2025 22:44:17 +0000
ROA not before:           Thu 11 Sep 2025 22:39:17 +0000
ROA not after:            Thu 10 Sep 2026 22:44:17 +0000
asID:                     268508
IP address blocks:        45.162.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/308F5079B6A88655068375FAD482AC65E66A6F15.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/308F5079B6A88655068375FAD482AC65E66A6F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308F5079B6A88655068375FAD482AC65E66A6F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3d:aa:a8:14:8c:1b:0c:89:4a:23:1e:e6:54:1e:54:33:ce:cc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308F5079B6A88655068375FAD482AC65E66A6F15
        Validity
            Not Before: Sep 11 22:39:17 2025 GMT
            Not After : Sep 10 22:44:17 2026 GMT
        Subject: CN=6B204794E744592FD40E34E4322BBDF3D5663D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:7c:8d:16:1b:54:dc:4e:6a:dc:82:c4:ba:
                    67:06:42:24:35:c5:80:1d:77:c1:7c:68:ee:13:62:
                    01:9d:6b:b4:05:e4:47:83:cf:9f:0f:a8:56:02:92:
                    12:b7:7d:dd:eb:e8:05:17:41:b3:df:fc:e7:7c:6c:
                    eb:09:a5:5e:b0:41:d0:03:67:2f:ff:21:43:af:2b:
                    36:b4:23:96:a9:68:40:48:2d:2a:4e:af:d9:84:07:
                    d7:0f:aa:a0:81:96:c4:1f:c1:b2:b9:54:1f:11:0b:
                    72:0e:8b:35:c5:c2:ac:37:ba:6c:9c:d3:59:97:07:
                    fb:8d:a1:63:73:dc:c6:ba:c1:1a:b8:1f:56:2c:13:
                    48:7b:04:7b:7f:82:09:c1:71:0a:7b:b0:87:d7:87:
                    e3:63:c7:e2:06:8d:94:f9:36:80:62:23:71:02:56:
                    b8:04:85:4f:56:0c:6a:4d:87:9a:f8:79:d4:95:6e:
                    be:c2:bc:02:44:74:2a:ff:17:74:a1:f8:7d:9a:24:
                    e2:11:db:3d:7c:cf:f7:7a:e6:15:3d:f5:8c:5e:23:
                    75:c4:67:a2:b8:aa:1a:44:20:51:da:b5:d9:25:d7:
                    dc:57:c1:ad:a5:38:bc:8b:6f:3d:64:4a:2f:e4:f7:
                    3f:59:08:32:ff:78:9e:5c:c3:ae:81:c8:19:a9:02:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:47:94:E7:44:59:2F:D4:0E:34:E4:32:2B:BD:F3:D5:66:3D:14
            X509v3 Authority Key Identifier:
                keyid:30:8F:50:79:B6:A8:86:55:06:83:75:FA:D4:82:AC:65:E6:6A:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/308F5079B6A88655068375FAD482AC65E66A6F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/308F5079B6A88655068375FAD482AC65E66A6F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/34352e3136322e32332e302f32342d3234203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:88:da:38:0a:37:33:74:0c:02:0c:60:29:23:cb:51:d9:
         08:15:d0:7a:d6:9d:8c:0a:03:30:d9:28:17:48:32:87:e1:8c:
         33:b0:71:7f:62:4b:ad:ff:98:7b:ee:f1:f5:a5:3f:94:2e:2b:
         e4:3c:84:bb:bd:77:82:04:2d:33:bc:49:66:63:20:66:4d:51:
         48:82:c0:1b:bf:b2:48:48:95:66:f1:d4:01:5d:93:26:09:24:
         13:dc:0c:50:3e:fc:11:37:f3:a4:1e:d1:1a:ca:31:ae:ad:92:
         f2:e3:1e:85:11:ff:57:9a:4b:56:89:fb:2d:87:f6:61:61:3b:
         a3:79:68:01:a7:ea:25:fb:8b:8a:8e:de:b5:8e:fe:bc:cb:61:
         c6:05:54:8b:a2:0f:76:db:1a:84:fb:64:be:30:10:43:51:d6:
         59:be:73:5d:e9:6f:c2:ca:15:ed:a3:72:59:78:96:39:62:e5:
         2c:d6:aa:7a:32:c1:7a:44:b5:4d:8c:f7:98:d1:95:aa:d6:1e:
         a8:fb:58:46:68:74:0f:a1:e0:ae:fd:c9:a2:4d:8e:c8:a4:cd:
         dc:78:d4:96:12:a2:90:69:09:d6:fb:17:64:db:77:10:19:a2:
         93:ba:62:d8:7a:31:1b:9b:86:fe:02:77:49:80:f4:f2:d8:56:
         8d:da:34:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURD2qqBSMGwyJSiMe5lQeVDPOzMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4RjUwNzlCNkE4ODY1NTA2ODM3NUZBRDQ4MkFDNjVF
NjZBNkYxNTAeFw0yNTA5MTEyMjM5MTdaFw0yNjA5MTAyMjQ0MTdaMDMxMTAvBgNV
BAMTKDZCMjA0Nzk0RTc0NDU5MkZENDBFMzRFNDMyMkJCREYzRDU2NjNEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAXyNFhtU3E5q3ILEumcGQiQ1
xYAdd8F8aO4TYgGda7QF5EeDz58PqFYCkhK3fd3r6AUXQbPf/Od8bOsJpV6wQdAD
Zy//IUOvKza0I5apaEBILSpOr9mEB9cPqqCBlsQfwbK5VB8RC3IOizXFwqw3umyc
01mXB/uNoWNz3Ma6wRq4H1YsE0h7BHt/ggnBcQp7sIfXh+Njx+IGjZT5NoBiI3EC
VrgEhU9WDGpNh5r4edSVbr7CvAJEdCr/F3Sh+H2aJOIR2z18z/d65hU99YxeI3XE
Z6K4qhpEIFHatdkl19xXwa2lOLyLbz1kSi/k9z9ZCDL/eJ5cw66ByBmpAiPnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUayBHlOdEWS/UDjTkMiu989VmPRQwHwYDVR0j
BBgwFoAUMI9QebaohlUGg3X61IKsZeZqbxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENoc2NhRFNGNWlvYVRyUzlzUTV0eHVWdHNiMlpjVlFhcEZ5akgydGtl
MVYvMC8zMDhGNTA3OUI2QTg4NjU1MDY4Mzc1RkFENDgyQUM2NUU2NkE2RjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwOEY1MDc5QjZBODg2NTUw
NjgzNzVGQUQ0ODJBQzY1RTY2QTZGMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDaHNjYURTRjVpb2FUclM5c1E1dHh1VnRzYjJaY1ZRYXBGeWpIMnRrZTFWLzAv
MzQzNTJlMzEzNjMyMmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaIXMA0GCSqGSIb3DQEBCwUAA4IBAQA8K4jaOAo3
M3QMAgxgKSPLUdkIFdB61p2MCgMw2SgXSDKH4YwzsHF/Ykut/5h77vH1pT+ULivk
PIS7vXeCBC0zvElmYyBmTVFIgsAbv7JISJVm8dQBXZMmCSQT3AxQPvwRN/OkHtEa
yjGurZLy4x6FEf9XmktWifsth/ZhYTujeWgBp+ol+4uKjt61jv68y2HGBVSLog92
2xqE+2S+MBBDUdZZvnNd6W/CyhXto3JZeJY5YuUs1qp6MsF6RLVNjPeY0ZWq1h6o
+1hGaHQPoeCu/cmiTY7IpM3ceNSWEqKQaQnW+xdk23cQGaKTumLYejEbm4b+AndJ
gPTy2FaN2jSZ
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:23:16 2025 by rpki-client