Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36332e302f32342d3234203d3e20323639313730.roa
File:                     34352e3138312e36332e302f32342d3234203d3e20323639313730.roa (raw, json)
Hash identifier:          AbId8ST2mc685olQVHsKVLlX+OYE7IVqpF7eDxTXeIY=
Subject key identifier:   7C:1C:3C:BB:ED:0E:DA:55:78:C0:F6:F4:0A:4E:DC:E1:C3:B7:CB:AB
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       4DBC93CEF051004CCB9B0FDE7A03C90CF058CFE0
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36332e302f32342d3234203d3e20323639313730.roa
Signing time:             Tue 02 Sep 2025 10:30:06 +0000
ROA not before:           Tue 02 Sep 2025 10:25:06 +0000
ROA not after:            Tue 01 Sep 2026 10:30:06 +0000
asID:                     269170
IP address blocks:        45.181.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bc:93:ce:f0:51:00:4c:cb:9b:0f:de:7a:03:c9:0c:f0:58:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Sep  2 10:25:06 2025 GMT
            Not After : Sep  1 10:30:06 2026 GMT
        Subject: CN=7C1C3CBBED0EDA5578C0F6F40A4EDCE1C3B7CBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:33:99:21:77:b2:36:6a:11:1b:58:c9:7a:
                    b0:25:c0:6a:cb:82:b8:59:bf:d3:e9:0a:25:8e:17:
                    ef:26:f5:3f:ae:17:ba:50:07:fd:57:55:5e:9c:69:
                    b4:5a:8f:14:3b:67:ed:98:6b:ec:7f:c5:ce:e1:08:
                    2b:46:cb:26:8c:45:f6:a0:91:85:d5:32:8a:03:b1:
                    08:8d:17:a1:13:73:46:c1:e0:ae:e0:da:f1:a8:de:
                    4b:1b:63:7b:7e:68:8f:ce:99:a9:34:f9:54:94:30:
                    61:63:65:92:3e:bf:a0:40:70:09:32:24:7e:62:1e:
                    e7:11:e1:ff:bb:6d:f8:f8:a7:69:37:07:e0:06:7b:
                    29:f8:58:cb:7d:6c:4c:a5:1e:a3:de:c3:69:f6:b4:
                    7c:56:ed:74:70:60:0a:d8:e0:7a:79:c9:df:7a:5b:
                    a8:85:dd:32:83:d3:6f:13:6d:90:4d:5b:59:87:dd:
                    fa:ae:76:f8:dd:d3:d5:6b:c0:02:9f:cd:79:2b:c1:
                    be:ad:bb:36:e3:18:f8:5c:30:34:07:be:41:b2:70:
                    51:9a:c0:b7:95:fe:e7:03:b5:b3:81:06:b1:1f:bd:
                    ee:92:be:93:1d:d0:f9:a7:9f:65:0b:88:dc:e6:f4:
                    c0:1d:2c:22:f5:69:a8:86:c9:cd:20:57:24:77:43:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1C:3C:BB:ED:0E:DA:55:78:C0:F6:F4:0A:4E:DC:E1:C3:B7:CB:AB
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36332e302f32342d3234203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:82:40:f4:51:b4:77:5f:f1:77:58:4a:71:4b:70:e8:f2:
         49:89:8a:ec:0f:4a:77:39:31:82:25:da:66:ac:0a:ea:bf:f9:
         e9:6f:62:c5:94:14:a2:4f:c5:a0:b7:33:25:3f:2f:e8:5a:ef:
         18:1b:b1:91:e5:4c:bc:7b:0c:87:9d:17:61:8c:a8:c4:1a:78:
         aa:08:ca:f7:b9:33:c4:0d:1b:a9:4e:b7:15:87:e2:6d:74:ae:
         cf:0d:25:f3:39:f0:ce:47:8c:e8:6a:d9:a5:5a:ee:a4:38:27:
         24:23:39:07:04:29:4f:2f:94:2e:c5:87:f2:6c:64:0b:4f:2e:
         0d:ec:1a:0b:2d:30:6b:00:e2:e1:e9:93:c4:59:30:3b:6f:2a:
         dc:8a:88:23:aa:14:d3:06:29:95:15:a0:84:b5:bc:df:e8:8c:
         5b:cf:2c:f6:cd:b1:f2:69:d2:d5:e0:45:8b:8d:f7:0c:b4:35:
         e4:98:b9:b5:0c:8f:0f:49:96:d0:41:ee:e4:3f:d6:b4:2a:33:
         bc:4c:20:10:c2:c9:06:01:66:ad:94:01:60:c3:b9:34:0e:ef:
         12:d9:6a:2a:5b:08:a3:b5:64:16:26:6d:9a:27:35:51:99:2b:
         ed:0d:54:15:1e:6d:f7:dc:99:a0:38:6b:c6:0d:6b:9a:77:ee:
         ab:99:bd:97
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTbyTzvBRAEzLmw/eegPJDPBYz+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1ODBGQkM5MDU5MDkyNjZDMzMxRERBNjQxNkMxODAw
NkEyNDc1MDAeFw0yNTA5MDIxMDI1MDZaFw0yNjA5MDExMDMwMDZaMDMxMTAvBgNV
BAMTKDdDMUMzQ0JCRUQwRURBNTU3OEMwRjZGNDBBNEVEQ0UxQzNCN0NCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUzOZIXeyNmoRG1jJerAlwGrL
grhZv9PpCiWOF+8m9T+uF7pQB/1XVV6cabRajxQ7Z+2Ya+x/xc7hCCtGyyaMRfag
kYXVMooDsQiNF6ETc0bB4K7g2vGo3ksbY3t+aI/Omak0+VSUMGFjZZI+v6BAcAky
JH5iHucR4f+7bfj4p2k3B+AGeyn4WMt9bEylHqPew2n2tHxW7XRwYArY4Hp5yd96
W6iF3TKD028TbZBNW1mH3fqudvjd09VrwAKfzXkrwb6tuzbjGPhcMDQHvkGycFGa
wLeV/ucDtbOBBrEfve6SvpMd0Pmnn2ULiNzm9MAdLCL1aaiGyc0gVyR3Q1oRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfBw8u+0O2lV4wPb0Ck7c4cO3y6swHwYDVR0j
BBgwFoAUPVgPvJBZCSZsMx3aZBbBgAaiR1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFhoU25icnJvTURwTlRmUVMxdVV6UUNZTXZweFpNcnFDQU56REo0QmdO
anYvMC8zRDU4MEZCQzkwNTkwOTI2NkMzMzFEREE2NDE2QzE4MDA2QTI0NzUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTgwRkJDOTA1OTA5MjY2
QzMzMUREQTY0MTZDMTgwMDZBMjQ3NTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhYaFNuYnJyb01EcE5UZlFTMXVVelFDWU12cHhaTXJxQ0FOekRKNEJnTmp2LzAv
MzQzNTJlMzEzODMxMmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbU/MA0GCSqGSIb3DQEBCwUAA4IBAQBjo4JA9FG0
d1/xd1hKcUtw6PJJiYrsD0p3OTGCJdpmrArqv/npb2LFlBSiT8WgtzMlPy/oWu8Y
G7GR5Uy8ewyHnRdhjKjEGniqCMr3uTPEDRupTrcVh+JtdK7PDSXzOfDOR4zoatml
Wu6kOCckIzkHBClPL5QuxYfybGQLTy4N7BoLLTBrAOLh6ZPEWTA7byrciogjqhTT
BimVFaCEtbzf6Ixbzyz2zbHyadLV4EWLjfcMtDXkmLm1DI8PSZbQQe7kP9a0KjO8
TCAQwskGAWatlAFgw7k0Du8S2WoqWwijtWQWJm2aJzVRmSvtDVQVHm333JmgOGvG
DWuad+6rmb2X
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:20:33 2025 by rpki-client