Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
File:                     34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (raw, json)
Hash identifier:          bGr3SBrwfOq9Bnr5LMqwgPkngYQ36P1GMMKbKSBYw+k=
Subject key identifier:   AF:A0:55:0A:DC:6A:7A:1E:D9:62:2F:51:33:46:B9:8F:30:7B:78:CE
Certificate issuer:       /CN=37A7B05DD113579E49AB5A4264BA69375A97E6CC
Certificate serial:       2F489AA150FA4D2317F0488FCDFAD772F92A65EA
Authority key identifier: 37:A7:B0:5D:D1:13:57:9E:49:AB:5A:42:64:BA:69:37:5A:97:E6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
Signing time:             Sat 01 Nov 2025 14:33:21 +0000
ROA not before:           Sat 01 Nov 2025 14:28:21 +0000
ROA not after:            Sat 31 Oct 2026 14:33:21 +0000
asID:                     268465
IP address blocks:        45.161.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.crl
                          rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:48:9a:a1:50:fa:4d:23:17:f0:48:8f:cd:fa:d7:72:f9:2a:65:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37A7B05DD113579E49AB5A4264BA69375A97E6CC
        Validity
            Not Before: Nov  1 14:28:21 2025 GMT
            Not After : Oct 31 14:33:21 2026 GMT
        Subject: CN=AFA0550ADC6A7A1ED9622F513346B98F307B78CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:30:43:f3:25:9b:10:f8:13:ae:39:32:1c:
                    03:0d:70:ef:7f:e8:a7:64:79:75:5e:16:a3:80:cb:
                    58:15:04:53:c6:36:65:6e:da:76:ad:f2:a6:31:c0:
                    57:31:59:a3:78:a6:1b:52:9e:0c:bc:90:d0:32:12:
                    2e:a3:bb:82:d5:a5:f1:19:95:25:cc:62:43:05:cd:
                    8c:c1:d1:73:d5:fa:4a:2e:7c:7f:3c:cd:28:42:fb:
                    0c:2d:51:26:6f:ab:f8:d1:39:55:04:f1:e5:e2:29:
                    b8:bb:c5:c4:24:dc:c7:25:a8:c2:9c:85:50:3f:1f:
                    3f:33:ca:f4:ca:aa:ed:ad:1a:4a:0c:7c:1f:0c:74:
                    25:33:bf:6a:08:08:7d:29:8b:b5:92:25:0a:c1:b3:
                    e0:e0:df:7a:03:ad:a5:cb:1e:00:fd:5a:90:8e:36:
                    85:24:41:83:68:52:08:d4:df:1e:c7:02:36:d9:a7:
                    51:f6:4b:05:9e:5a:9d:2b:20:c6:ee:73:e2:75:c2:
                    0e:3c:b2:1c:b4:cf:64:04:9a:1f:96:7f:57:45:a2:
                    a6:79:5b:4e:9b:91:a2:2f:7c:f8:39:df:89:77:2f:
                    25:44:6a:dd:7f:03:fc:2f:a0:49:a9:b9:b3:b8:4c:
                    03:80:0c:7b:ad:2f:61:d9:87:eb:5d:b9:37:b3:fe:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A0:55:0A:DC:6A:7A:1E:D9:62:2F:51:33:46:B9:8F:30:7B:78:CE
            X509v3 Authority Key Identifier:
                keyid:37:A7:B0:5D:D1:13:57:9E:49:AB:5A:42:64:BA:69:37:5A:97:E6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/37A7B05DD113579E49AB5A4264BA69375A97E6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37A7B05DD113579E49AB5A4264BA69375A97E6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:b6:fe:98:54:e9:08:ab:68:35:57:f7:67:67:2d:19:6c:
         ee:fc:ea:af:a8:21:e3:fd:e8:ef:ff:ee:d9:d2:9b:28:00:95:
         c2:9a:48:4b:60:fa:07:87:5b:1f:c1:2d:be:27:4f:48:67:33:
         d2:c1:84:5e:59:83:2a:5b:78:c7:8a:d3:5f:02:8b:ff:33:4a:
         8f:71:6e:de:18:cd:88:fb:54:6d:81:cd:7e:b8:67:04:24:1c:
         a3:0e:06:0d:b2:02:9f:aa:ce:b6:62:1b:c5:e2:fa:57:d9:6c:
         62:14:72:f5:a8:8a:be:b2:3c:ef:04:2e:92:cc:76:6c:39:f3:
         5f:d0:cc:b7:a6:9c:fe:63:71:a9:65:4b:84:62:f1:57:21:ba:
         42:d2:81:78:8c:89:88:9b:63:61:ac:1e:32:f8:d7:e0:09:47:
         90:f8:3c:95:06:ec:c3:ba:1a:6a:e5:9e:07:03:3a:e0:58:87:
         25:35:34:59:03:b2:93:bf:33:aa:d8:ec:24:e9:d0:79:b6:44:
         29:d8:86:bf:04:82:b1:2d:e9:c6:cb:1c:b6:48:b4:92:a7:51:
         68:d1:14:96:d4:50:20:7d:97:74:91:dd:da:fe:cc:0e:fc:bc:
         d9:4e:85:88:df:2c:70:27:40:99:28:e4:f3:4d:ea:f6:e5:f4:
         40:13:f7:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL0iaoVD6TSMX8EiPzfrXcvkqZeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdBN0IwNUREMTEzNTc5RTQ5QUI1QTQyNjRCQTY5Mzc1
QTk3RTZDQzAeFw0yNTExMDExNDI4MjFaFw0yNjEwMzExNDMzMjFaMDMxMTAvBgNV
BAMTKEFGQTA1NTBBREM2QTdBMUVEOTYyMkY1MTMzNDZCOThGMzA3Qjc4Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUTBD8yWbEPgTrjkyHAMNcO9/
6KdkeXVeFqOAy1gVBFPGNmVu2nat8qYxwFcxWaN4phtSngy8kNAyEi6ju4LVpfEZ
lSXMYkMFzYzB0XPV+koufH88zShC+wwtUSZvq/jROVUE8eXiKbi7xcQk3MclqMKc
hVA/Hz8zyvTKqu2tGkoMfB8MdCUzv2oICH0pi7WSJQrBs+Dg33oDraXLHgD9WpCO
NoUkQYNoUgjU3x7HAjbZp1H2SwWeWp0rIMbuc+J1wg48shy0z2QEmh+Wf1dFoqZ5
W06bkaIvfPg534l3LyVEat1/A/wvoEmpubO4TAOADHutL2HZh+tduTez/g/VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr6BVCtxqeh7ZYi9RM0a5jzB7eM4wHwYDVR0j
BBgwFoAUN6ewXdETV55Jq1pCZLppN1qX5swwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhqTnVkUGZDdUJMd1VzNFlLUFJYMjVuN05xR1d6akZYZFpjd3doaVo4
ZXYvMC8zN0E3QjA1REQxMTM1NzlFNDlBQjVBNDI2NEJBNjkzNzVBOTdFNkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3QTdCMDVERDExMzU3OUU0
OUFCNUE0MjY0QkE2OTM3NUE5N0U2Q0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIak51ZFBmQ3VCTHdVczRZS1BSWDI1bjdOcUdXempGWGRaY3d3aGlaOGV2LzAv
MzQzNTJlMzEzNjMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoXwwDQYJKoZIhvcNAQELBQADggEBAD65tv6Y
VOkIq2g1V/dnZy0ZbO786q+oIeP96O//7tnSmygAlcKaSEtg+geHWx/BLb4nT0hn
M9LBhF5ZgypbeMeK018Ci/8zSo9xbt4YzYj7VG2BzX64ZwQkHKMOBg2yAp+qzrZi
G8Xi+lfZbGIUcvWoir6yPO8ELpLMdmw581/QzLemnP5jcallS4Ri8VchukLSgXiM
iYibY2GsHjL41+AJR5D4PJUG7MO6GmrlngcDOuBYhyU1NFkDspO/M6rY7CTp0Hm2
RCnYhr8EgrEt6cbLHLZItJKnUWjRFJbUUCB9l3SR3dr+zA78vNlOhYjfLHAnQJko
5PNN6vbl9EAT9wo=
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:26 2025 by rpki-client