Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
File:                     34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (raw, json)
Hash identifier:          OxlKLinU/LaLLFazIyBAx6PCzM8QZZ5p11lTAuRGcGQ=
Subject key identifier:   D7:C5:1E:D7:D0:02:D4:17:99:36:3E:DD:18:9C:0F:B2:7F:40:F9:1C
Certificate issuer:       /CN=25C7F81AB8123826510AD39D4507448271E2A2E2
Certificate serial:       0C090B8A88D1264E3129193AE8F075D9F3F0478D
Authority key identifier: 25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
Signing time:             Fri 12 Sep 2025 16:34:23 +0000
ROA not before:           Fri 12 Sep 2025 16:29:23 +0000
ROA not after:            Fri 11 Sep 2026 16:34:23 +0000
asID:                     267261
IP address blocks:        45.231.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl
                          rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:09:0b:8a:88:d1:26:4e:31:29:19:3a:e8:f0:75:d9:f3:f0:47:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C7F81AB8123826510AD39D4507448271E2A2E2
        Validity
            Not Before: Sep 12 16:29:23 2025 GMT
            Not After : Sep 11 16:34:23 2026 GMT
        Subject: CN=D7C51ED7D002D41799363EDD189C0FB27F40F91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:28:7a:32:ac:a1:8c:be:3d:e7:7b:de:ff:
                    9c:8c:ac:08:bc:f1:4e:ea:3a:f7:9f:fb:39:56:ca:
                    87:a4:92:c0:bc:da:d7:f0:a6:cb:22:01:ae:05:f5:
                    8d:43:6b:96:65:40:a9:be:b6:9e:61:07:1d:07:e7:
                    b9:bf:c7:23:c7:b3:0a:ef:e1:82:54:f5:e1:a0:b4:
                    e9:73:8d:95:2b:b5:ca:a5:f6:b0:68:da:a6:34:75:
                    44:76:61:c3:d7:6d:83:8d:73:e4:ac:73:75:f6:54:
                    47:29:5b:10:f1:db:a1:d3:c1:49:0f:0b:5f:9a:08:
                    98:de:31:1d:26:ef:6c:1a:6b:67:f0:6f:9b:62:6a:
                    e5:95:a3:c1:c4:29:f3:fd:10:fe:92:e8:39:74:d5:
                    30:e3:b6:fa:96:72:8d:3d:43:9a:27:6c:6c:68:43:
                    08:ee:99:d4:c9:0e:82:b6:03:fe:f7:98:79:c3:01:
                    7f:02:c8:5b:88:a9:ee:29:54:22:0c:5c:16:a6:6d:
                    1a:16:30:54:48:36:26:d5:d9:57:ec:4d:97:9c:b4:
                    c9:ca:79:9e:c0:f3:21:73:ad:45:4c:f8:fe:7a:6a:
                    f0:ec:d4:6f:e0:d7:e5:43:2d:dc:4d:04:4e:94:1c:
                    5a:c7:1a:87:ba:3c:3a:5f:b4:95:26:b2:6b:45:61:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C5:1E:D7:D0:02:D4:17:99:36:3E:DD:18:9C:0F:B2:7F:40:F9:1C
            X509v3 Authority Key Identifier:
                keyid:25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:82:05:0a:51:03:2f:bd:ad:6e:32:c0:93:9b:34:35:af:24:
         08:13:41:3a:1e:23:c4:44:4d:f6:f7:bb:8b:22:15:e4:99:a1:
         01:7b:c5:f6:6c:14:a9:20:28:b7:a7:cd:87:91:f6:5b:12:44:
         1a:d7:57:69:f2:8b:1c:d5:6b:6c:d1:5b:c7:e1:fe:9e:aa:c2:
         ce:0c:7e:4a:ac:8b:40:fd:53:04:04:cf:6f:80:8f:df:b2:4c:
         75:f2:e0:e6:97:d1:19:f2:5f:f3:0a:50:50:a4:2a:ac:8c:68:
         04:fa:b0:ad:a3:f5:b7:fd:06:8b:51:40:e4:81:c4:91:29:dc:
         6d:d3:01:01:76:f1:c8:e8:6c:ff:d5:db:b4:73:b0:16:33:33:
         53:8f:ca:d5:ca:c6:40:ef:73:34:a0:6e:21:7b:f1:6b:ed:aa:
         8f:a1:76:ee:3e:09:fd:eb:c5:58:d2:11:2b:ba:2d:4a:a4:a4:
         49:cd:31:d4:6b:e6:da:44:58:cb:87:10:a4:58:db:35:46:c6:
         47:05:d8:34:54:f9:3e:d8:2b:17:b8:ea:ae:15:fc:bc:f2:1d:
         ab:62:a6:a9:7a:bb:53:c0:41:84:8a:97:1c:7f:a7:ef:81:cf:
         22:c1:a8:1e:51:b8:50:51:07:93:c7:2c:19:2b:43:77:c8:b8:
         c0:88:38:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDAkLiojRJk4xKRk66PB12fPwR40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDN0Y4MUFCODEyMzgyNjUxMEFEMzlENDUwNzQ0ODI3
MUUyQTJFMjAeFw0yNTA5MTIxNjI5MjNaFw0yNjA5MTExNjM0MjNaMDMxMTAvBgNV
BAMTKEQ3QzUxRUQ3RDAwMkQ0MTc5OTM2M0VERDE4OUMwRkIyN0Y0MEY5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTCh6MqyhjL4953ve/5yMrAi8
8U7qOvef+zlWyoekksC82tfwpssiAa4F9Y1Da5ZlQKm+tp5hBx0H57m/xyPHswrv
4YJU9eGgtOlzjZUrtcql9rBo2qY0dUR2YcPXbYONc+Ssc3X2VEcpWxDx26HTwUkP
C1+aCJjeMR0m72waa2fwb5tiauWVo8HEKfP9EP6S6Dl01TDjtvqWco09Q5onbGxo
QwjumdTJDoK2A/73mHnDAX8CyFuIqe4pVCIMXBambRoWMFRINibV2VfsTZectMnK
eZ7A8yFzrUVM+P56avDs1G/g1+VDLdxNBE6UHFrHGoe6PDpftJUmsmtFYbNFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU18Ue19AC1BeZNj7dGJwPsn9A+RwwHwYDVR0j
BBgwFoAUJcf4GrgSOCZRCtOdRQdEgnHiouIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUJtUTl3WG9jNnJxVlpxUmtnUm9ZRFVxS0Y3cjJXTWpMVWJ5QWJSYUJ5
ZUgvMC8yNUM3RjgxQUI4MTIzODI2NTEwQUQzOUQ0NTA3NDQ4MjcxRTJBMkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzdGODFBQjgxMjM4MjY1
MTBBRDM5RDQ1MDc0NDgyNzFFMkEyRTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCbVE5d1hvYzZycVZacVJrZ1JvWURVcUtGN3IyV01qTFVieUFiUmFCeWVILzAv
MzQzNTJlMzIzMzMxMmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt55gwDQYJKoZIhvcNAQELBQADggEBAGKCBQpR
Ay+9rW4ywJObNDWvJAgTQToeI8RETfb3u4siFeSZoQF7xfZsFKkgKLenzYeR9lsS
RBrXV2nyixzVa2zRW8fh/p6qws4Mfkqsi0D9UwQEz2+Aj9+yTHXy4OaX0RnyX/MK
UFCkKqyMaAT6sK2j9bf9BotRQOSBxJEp3G3TAQF28cjobP/V27RzsBYzM1OPytXK
xkDvczSgbiF78Wvtqo+hdu4+Cf3rxVjSESu6LUqkpEnNMdRr5tpEWMuHEKRY2zVG
xkcF2DRU+T7YKxe46q4V/LzyHatipql6u1PAQYSKlxx/p++BzyLBqB5RuFBRB5PH
LBkrQ3fIuMCIOFI=
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:37:01 2025 by rpki-client