Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa
File:                     34352e3137342e3133322e302f32322d3332203d3e203238333239.roa (raw, json)
Hash identifier:          3dlKMJWUiMm/GYo6ZhedwUuMfau7LF9ya9M521TnCu4=
Subject key identifier:   F2:7D:3C:AE:E0:3F:65:B5:DC:93:8A:FD:6A:5C:37:C5:C6:C7:04:F2
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       6E759101FB569851A19BA18C7081B1AD7C88A5F5
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa
Signing time:             Thu 28 Aug 2025 14:55:28 +0000
ROA not before:           Thu 28 Aug 2025 14:50:28 +0000
ROA not after:            Thu 27 Aug 2026 14:55:28 +0000
asID:                     28329
IP address blocks:        45.174.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:75:91:01:fb:56:98:51:a1:9b:a1:8c:70:81:b1:ad:7c:88:a5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:28 2025 GMT
            Not After : Aug 27 14:55:28 2026 GMT
        Subject: CN=F27D3CAEE03F65B5DC938AFD6A5C37C5C6C704F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:f6:82:4f:b1:6e:a8:da:f5:b1:6a:91:04:
                    e1:51:7a:0f:87:6a:8a:2d:24:24:f0:bb:5b:9b:dd:
                    e8:eb:6a:33:78:36:f3:e3:32:95:9a:12:4b:0f:3a:
                    c2:be:4e:cf:22:b6:b3:88:2d:0a:c8:74:af:bc:8a:
                    6d:0d:4b:af:f0:45:2f:a6:d0:6e:49:d5:b0:9b:e8:
                    1e:8d:88:21:99:d6:65:7a:50:92:28:94:ab:33:b6:
                    85:f9:56:1e:37:bd:79:56:78:70:5c:31:f6:5e:2c:
                    d6:0a:0c:0b:a5:dd:96:f4:5a:aa:00:2a:3e:4e:b0:
                    2f:72:4c:9d:64:37:65:24:d4:c8:78:5a:1c:f6:a5:
                    6e:34:36:ae:4b:f3:c0:39:1f:b4:c0:62:38:98:a5:
                    5f:31:56:02:b2:32:96:10:1b:83:69:26:36:12:6f:
                    22:5e:a3:98:de:8b:98:6c:6e:8c:5c:2d:cc:86:f2:
                    cb:fd:68:97:1c:5f:c3:37:1a:49:59:f4:89:7c:c0:
                    c7:14:10:ec:3b:df:1f:fc:e1:ef:93:72:35:a5:e5:
                    73:75:ba:8e:16:85:db:a1:b3:cd:ff:00:96:4c:70:
                    66:72:5c:a5:ec:7e:71:df:4d:ca:67:d9:f5:fd:bc:
                    f1:e9:46:58:a5:45:9a:50:6b:4f:c8:d7:8b:eb:76:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:3C:AE:E0:3F:65:B5:DC:93:8A:FD:6A:5C:37:C5:C6:C7:04:F2
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/34352e3137342e3133322e302f32322d3332203d3e203238333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:3c:5d:ce:32:c5:a1:f7:3a:43:ff:7e:81:31:62:cf:43:
         8f:0d:17:e4:d1:c2:58:70:49:20:7c:7a:fe:37:e7:7d:77:96:
         16:64:82:05:ec:dc:5f:e4:92:ce:cf:39:ec:26:a8:66:d6:dd:
         0c:d6:8e:75:47:a3:25:2c:55:17:b8:ee:91:54:48:80:e0:58:
         0c:b1:2c:aa:aa:6d:4b:9a:46:44:ac:3d:9c:04:81:59:88:12:
         ea:6a:8c:62:95:53:ef:60:a1:d1:9f:d7:3b:ef:e7:e3:73:4e:
         64:e1:09:11:9b:46:94:3e:e0:6d:1a:6d:35:f8:74:d0:9b:f3:
         c5:69:fe:c8:4d:d3:77:46:3c:e6:72:7d:7f:d9:33:6f:b7:37:
         a5:51:47:ac:da:31:55:37:55:4a:2c:cb:88:de:25:c7:c6:7a:
         a4:94:a1:13:56:59:b4:c2:e0:3c:56:1c:fe:26:bb:a2:03:52:
         4b:64:7b:00:44:c7:60:e6:56:47:82:0b:58:48:f5:42:59:c6:
         19:7d:28:8d:54:03:b9:c0:5f:40:50:66:e6:97:f1:1e:ce:2e:
         a4:be:40:79:5d:91:fc:89:25:d1:91:ec:ac:2d:c3:6f:c2:5c:
         f6:79:3f:e5:74:e8:13:78:a4:4f:ec:e0:96:5c:ef:91:6c:c7:
         31:ba:e9:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbnWRAftWmFGhm6GMcIGxrXyIpfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0OUY5MDNGODk2NDM3MkYyN0U2MEZFQzRDMDNFREVD
MEI0N0EyQzAeFw0yNTA4MjgxNDUwMjhaFw0yNjA4MjcxNDU1MjhaMDMxMTAvBgNV
BAMTKEYyN0QzQ0FFRTAzRjY1QjVEQzkzOEFGRDZBNUMzN0M1QzZDNzA0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsfaCT7FuqNr1sWqRBOFReg+H
aootJCTwu1ub3ejrajN4NvPjMpWaEksPOsK+Ts8itrOILQrIdK+8im0NS6/wRS+m
0G5J1bCb6B6NiCGZ1mV6UJIolKsztoX5Vh43vXlWeHBcMfZeLNYKDAul3Zb0WqoA
Kj5OsC9yTJ1kN2Uk1Mh4Whz2pW40Nq5L88A5H7TAYjiYpV8xVgKyMpYQG4NpJjYS
byJeo5jei5hsboxcLcyG8sv9aJccX8M3GklZ9Il8wMcUEOw73x/84e+TcjWl5XN1
uo4Whduhs83/AJZMcGZyXKXsfnHfTcpn2fX9vPHpRlilRZpQa0/I14vrdgjXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8n08ruA/ZbXck4r9alw3xcbHBPIwHwYDVR0j
BBgwFoAU+Un5A/iWQ3LyfmD+xMA+3sC0eiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMS9GOTQ5RjkwM0Y4OTY0MzcyRjI3RTYwRkVDNEMwM0VERUMwQjQ3QTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NDlGOTAzRjg5NjQzNzJG
MjdFNjBGRUM0QzAzRURFQzBCNDdBMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzEv
MzQzNTJlMzEzNzM0MmUzMTMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa6EMA0GCSqGSIb3DQEBCwUAA4IBAQBovTxdzjLF
ofc6Q/9+gTFiz0OPDRfk0cJYcEkgfHr+N+d9d5YWZIIF7Nxf5JLOzznsJqhm1t0M
1o51R6MlLFUXuO6RVEiA4FgMsSyqqm1LmkZErD2cBIFZiBLqaoxilVPvYKHRn9c7
7+fjc05k4QkRm0aUPuBtGm01+HTQm/PFaf7ITdN3Rjzmcn1/2TNvtzelUUes2jFV
N1VKLMuI3iXHxnqklKETVlm0wuA8Vhz+JruiA1JLZHsARMdg5lZHggtYSPVCWcYZ
fSiNVAO5wF9AUGbml/Eezi6kvkB5XZH8iSXRkeysLcNvwlz2eT/ldOgTeKRP7OCW
XO+RbMcxuukp
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:13:43 2025 by rpki-client