Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          9AMYTx4Me84Q/E4u1szP5iz5b9JcWi4sEou66Jn3k18=
Subject key identifier:   F5:5D:A4:78:80:36:61:37:C1:B5:6D:23:53:8F:8D:34:89:46:94:84
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       6B7D159B4D3DA76C1C0A7EE165AB24F54A1723B1
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:23 +0000
ROA not before:           Tue 19 Aug 2025 20:01:23 +0000
ROA not after:            Tue 18 Aug 2026 20:06:23 +0000
asID:                     262503
IP address blocks:        45.181.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7d:15:9b:4d:3d:a7:6c:1c:0a:7e:e1:65:ab:24:f5:4a:17:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:23 2025 GMT
            Not After : Aug 18 20:06:23 2026 GMT
        Subject: CN=F55DA47880366137C1B56D23538F8D3489469484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:5e:b3:40:bb:25:32:e9:25:48:3b:25:08:
                    c8:94:49:77:3f:3f:7a:03:20:13:7c:cc:6f:2c:6e:
                    7b:bf:dd:ba:0d:69:96:1c:68:d4:3e:d9:8a:9f:a9:
                    8a:cb:2e:b7:1e:9e:a6:be:fa:e1:8f:02:08:33:c5:
                    84:b5:1e:bc:f6:06:12:80:81:a7:e2:e5:2d:68:a4:
                    f7:8d:f9:7b:4d:7d:26:83:13:64:60:b5:30:d2:a0:
                    eb:7f:32:93:86:6f:48:5f:96:59:d0:06:47:11:1b:
                    e9:24:de:30:f3:50:10:65:e5:3a:df:14:9a:77:89:
                    c4:82:3a:0d:bc:39:56:73:3f:c9:59:8c:eb:21:46:
                    be:0c:24:38:eb:51:35:65:7b:7b:50:51:a9:85:b0:
                    7d:b7:e5:b6:cf:3e:6e:e5:da:83:3f:ac:e9:eb:ba:
                    d0:bf:28:ad:16:1e:69:5b:b9:ba:34:22:4e:82:8e:
                    d3:11:1d:e4:33:bd:d4:0d:30:98:00:ec:91:29:99:
                    42:37:fd:9e:56:a7:70:a1:9c:99:e4:eb:58:b2:0c:
                    1a:c9:04:aa:ac:d0:0c:f3:63:8a:a2:44:e6:ff:21:
                    b7:21:86:d3:e9:3a:9b:65:36:06:23:47:8b:95:43:
                    c0:11:3a:36:86:35:7e:08:b3:45:05:ef:1a:ce:3f:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:A4:78:80:36:61:37:C1:B5:6D:23:53:8F:8D:34:89:46:94:84
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:5e:18:e5:48:0a:73:90:51:a6:2d:c2:6a:a3:33:ee:92:
         ef:81:37:7a:f6:a5:26:2d:c4:91:b0:1a:79:cc:27:24:40:12:
         74:6d:d9:ea:1a:c7:e6:a1:dd:99:39:b6:23:dc:6f:ec:da:27:
         3b:ca:92:ac:e6:bc:76:a7:a4:18:f8:cc:0d:b8:a4:a8:52:d1:
         33:71:4c:3f:cf:44:0b:14:96:6d:26:27:30:01:7c:2f:4e:0b:
         d8:d2:e8:9e:01:5e:59:7c:c3:29:d9:d6:2b:fa:91:a2:bc:c7:
         af:20:d8:97:09:ed:b8:97:fa:b7:f6:83:0d:81:8c:76:30:66:
         e1:45:f9:9a:01:67:9f:cd:e7:fe:fe:ae:00:37:40:7d:89:44:
         47:f4:fe:7a:4f:1f:a2:e4:49:2c:3b:71:33:36:24:52:0a:ea:
         b9:bd:ef:55:0b:84:17:6a:58:9d:e3:c3:c5:91:c2:e6:d8:a7:
         1f:14:05:40:21:40:97:43:11:57:f0:71:dc:e5:ce:f7:40:c4:
         ef:4a:aa:82:90:80:8a:a4:61:fc:76:61:e3:be:51:02:94:ba:
         9e:ee:e1:90:fc:95:e8:ed:80:ff:b0:02:20:b1:e1:66:47:d5:
         bb:55:a5:31:39:7d:4f:37:fa:ae:b3:31:8a:e8:f7:e8:52:c1:
         fa:6d:23:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa30Vm009p2wcCn7hZask9UoXI7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzQjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4
NTkxQzdCNjAeFw0yNTA4MTkyMDAxMjNaFw0yNjA4MTgyMDA2MjNaMDMxMTAvBgNV
BAMTKEY1NURBNDc4ODAzNjYxMzdDMUI1NkQyMzUzOEY4RDM0ODk0Njk0ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0s16zQLslMuklSDslCMiUSXc/
P3oDIBN8zG8sbnu/3boNaZYcaNQ+2YqfqYrLLrcenqa++uGPAggzxYS1Hrz2BhKA
gafi5S1opPeN+XtNfSaDE2RgtTDSoOt/MpOGb0hfllnQBkcRG+kk3jDzUBBl5Trf
FJp3icSCOg28OVZzP8lZjOshRr4MJDjrUTVle3tQUamFsH235bbPPm7l2oM/rOnr
utC/KK0WHmlbubo0Ik6CjtMRHeQzvdQNMJgA7JEpmUI3/Z5Wp3ChnJnk61iyDBrJ
BKqs0AzzY4qiROb/IbchhtPpOptlNgYjR4uVQ8AROjaGNX4Is0UF7xrOP2kLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9V2keIA2YTfBtW0jU4+NNIlGlIQwHwYDVR0j
BBgwFoAUEjsD1GZg3umzLicSNC609IWRx7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8xMjNCMDNENDY2NjBERUU5QjMyRTI3MTIzNDJFQjRGNDg1OTFDN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyM0IwM0Q0NjY2MERFRTlC
MzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzQzNTJlMzEzODMxMmUzMjMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtteQwDQYJKoZIhvcNAQELBQADggEBAKIxXhjl
SApzkFGmLcJqozPuku+BN3r2pSYtxJGwGnnMJyRAEnRt2eoax+ah3Zk5tiPcb+za
JzvKkqzmvHanpBj4zA24pKhS0TNxTD/PRAsUlm0mJzABfC9OC9jS6J4BXll8wynZ
1iv6kaK8x68g2JcJ7biX+rf2gw2BjHYwZuFF+ZoBZ5/N5/7+rgA3QH2JREf0/npP
H6LkSSw7cTM2JFIK6rm971ULhBdqWJ3jw8WRwubYpx8UBUAhQJdDEVfwcdzlzvdA
xO9KqoKQgIqkYfx2YeO+UQKUup7u4ZD8lejtgP+wAiCx4WZH1btVpTE5fU83+q6z
MYro9+hSwfptIzE=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:23:15 2025 by rpki-client