Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          rGs/T0CiwhLo9QXl1eaH7TO7pH1XaIlpBS+Sz0slUOw=
Subject key identifier:   99:CA:53:3C:D2:8D:C5:AA:BD:15:C0:DB:3D:3F:83:F1:6D:19:74:47
Certificate issuer:       /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial:       3AEDCD7EA2FD2F768814BA452DA379B56FDC8405
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 19 Aug 2025 20:06:22 +0000
ROA not before:           Tue 19 Aug 2025 20:01:22 +0000
ROA not after:            Tue 18 Aug 2026 20:06:22 +0000
asID:                     262503
IP address blocks:        45.181.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ed:cd:7e:a2:fd:2f:76:88:14:ba:45:2d:a3:79:b5:6f:dc:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
        Validity
            Not Before: Aug 19 20:01:22 2025 GMT
            Not After : Aug 18 20:06:22 2026 GMT
        Subject: CN=99CA533CD28DC5AABD15C0DB3D3F83F16D197447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:b7:c0:df:6e:a3:da:c8:ab:33:ae:0d:ed:
                    fb:27:25:1e:84:0e:d4:6e:1c:a9:da:da:e9:5e:81:
                    2b:e1:f8:56:4b:34:3b:81:38:9f:c9:72:5d:2e:b3:
                    5f:8c:98:e7:c3:67:b0:74:3d:9b:54:71:50:df:a9:
                    23:ff:65:7a:a4:1d:69:cf:62:52:93:c9:c5:ee:8a:
                    0d:f0:c0:47:50:cf:aa:7a:b0:f0:f1:1a:ff:fb:cf:
                    ef:cd:04:91:61:50:c6:61:8a:d2:d9:aa:59:5e:02:
                    42:a6:60:81:dd:7e:24:13:f1:8f:e9:3a:ff:65:67:
                    0a:43:88:33:8a:12:29:55:71:01:cc:c2:04:52:48:
                    6e:b9:6b:0c:7f:7b:01:74:03:30:4e:0e:f3:82:9d:
                    7d:f2:36:54:1e:f1:5a:25:32:31:39:f3:49:74:3a:
                    2e:bb:35:bb:e6:35:55:8a:18:41:49:5f:6f:5e:49:
                    d8:5e:d6:ed:c3:4a:b1:4a:09:99:7a:03:ac:2e:bf:
                    ce:8e:d6:16:eb:5a:8a:cd:56:d4:8b:db:35:95:a3:
                    5c:b1:6e:15:76:48:d1:05:00:82:8b:ad:ca:3b:77:
                    69:64:46:82:36:b4:a3:ae:46:f5:10:55:0d:ec:f5:
                    34:89:23:e0:d4:6b:c8:39:15:ef:d0:d1:56:b0:88:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CA:53:3C:D2:8D:C5:AA:BD:15:C0:DB:3D:3F:83:F1:6D:19:74:47
            X509v3 Authority Key Identifier:
                keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:de:88:f0:6c:be:6c:28:6f:e7:0a:bb:79:0a:14:ab:3f:
         b3:15:1e:ea:d5:ba:70:6d:d4:c9:af:91:1a:4c:e7:c6:3b:ca:
         d1:85:40:e4:ed:7b:f9:35:28:e1:0a:f1:08:c6:0b:50:ca:4b:
         7a:9a:90:45:14:04:d7:10:13:fe:9a:52:9a:91:aa:11:2c:77:
         44:1e:6e:f7:54:d7:e9:3e:97:87:32:0d:85:2f:1b:ab:a9:a2:
         c2:33:57:85:66:59:14:b5:21:50:3b:5a:e1:41:bd:31:57:82:
         cc:8b:4a:c3:27:d8:b1:04:6f:6b:c2:a5:87:01:e1:55:b3:1b:
         d0:2d:88:a0:b6:b2:b6:7c:db:75:bd:4e:9d:8a:e3:66:00:5f:
         6b:b5:76:ab:b8:82:21:39:52:3d:e9:82:7b:0f:b1:6a:23:74:
         2b:9f:dd:79:c9:bf:df:10:16:e6:a1:dd:e5:4c:92:6f:07:06:
         52:32:0d:a0:f0:b4:1b:55:06:8d:e6:b8:b4:0d:a6:b3:03:a0:
         ed:55:1d:73:c3:67:cc:21:ff:1c:96:44:c3:16:7c:1d:c9:fa:
         c9:52:a3:65:b1:ee:19:2a:44:66:e4:9c:3d:51:69:50:4c:e1:
         41:b6:19:84:7f:54:2f:e7:4f:07:64:7b:c5:eb:be:87:f6:d9:
         a5:fa:82:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOu3NfqL9L3aIFLpFLaN5tW/chAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzQjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4
NTkxQzdCNjAeFw0yNTA4MTkyMDAxMjJaFw0yNjA4MTgyMDA2MjJaMDMxMTAvBgNV
BAMTKDk5Q0E1MzNDRDI4REM1QUFCRDE1QzBEQjNEM0Y4M0YxNkQxOTc0NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKbfA326j2sirM64N7fsnJR6E
DtRuHKna2ulegSvh+FZLNDuBOJ/Jcl0us1+MmOfDZ7B0PZtUcVDfqSP/ZXqkHWnP
YlKTycXuig3wwEdQz6p6sPDxGv/7z+/NBJFhUMZhitLZqlleAkKmYIHdfiQT8Y/p
Ov9lZwpDiDOKEilVcQHMwgRSSG65awx/ewF0AzBODvOCnX3yNlQe8VolMjE580l0
Oi67NbvmNVWKGEFJX29eSdhe1u3DSrFKCZl6A6wuv86O1hbrWorNVtSL2zWVo1yx
bhV2SNEFAIKLrco7d2lkRoI2tKOuRvUQVQ3s9TSJI+DUa8g5Fe/Q0VawiHzHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmcpTPNKNxaq9FcDbPT+D8W0ZdEcwHwYDVR0j
BBgwFoAUEjsD1GZg3umzLicSNC609IWRx7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8xMjNCMDNENDY2NjBERUU5QjMyRTI3MTIzNDJFQjRGNDg1OTFDN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyM0IwM0Q0NjY2MERFRTlC
MzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzQzNTJlMzEzODMxMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtteYwDQYJKoZIhvcNAQELBQADggEBAK/S3ojw
bL5sKG/nCrt5ChSrP7MVHurVunBt1MmvkRpM58Y7ytGFQOTte/k1KOEK8QjGC1DK
S3qakEUUBNcQE/6aUpqRqhEsd0QebvdU1+k+l4cyDYUvG6uposIzV4VmWRS1IVA7
WuFBvTFXgsyLSsMn2LEEb2vCpYcB4VWzG9AtiKC2srZ823W9Tp2K42YAX2u1dqu4
giE5Uj3pgnsPsWojdCuf3XnJv98QFuah3eVMkm8HBlIyDaDwtBtVBo3muLQNprMD
oO1VHXPDZ8wh/xyWRMMWfB3J+slSo2Wx7hkqRGbknD1RaVBM4UG2GYR/VC/nTwdk
e8Xrvof22aX6gjU=
-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:50 2025 by rpki-client