Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa
File:                     34352e362e33362e302f32332d3233203d3e20323636313532.roa (raw, json)
Hash identifier:          DcLcUB3PsxjFHQNhBLDm6fV5qlz5AO2addw4xDxH1zk=
Subject key identifier:   2E:60:38:41:FD:16:34:2C:34:F2:AD:7D:E6:E7:BB:6C:77:32:F7:9F
Certificate issuer:       /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial:       3A88C45DE609BC975FFB06960496160055C464FB
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa
Signing time:             Mon 08 Sep 2025 11:42:19 +0000
ROA not before:           Mon 08 Sep 2025 11:37:19 +0000
ROA not after:            Mon 07 Sep 2026 11:42:19 +0000
asID:                     266152
IP address blocks:        45.6.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
                          rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 16:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:88:c4:5d:e6:09:bc:97:5f:fb:06:96:04:96:16:00:55:c4:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
        Validity
            Not Before: Sep  8 11:37:19 2025 GMT
            Not After : Sep  7 11:42:19 2026 GMT
        Subject: CN=2E603841FD16342C34F2AD7DE6E7BB6C7732F79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:53:68:82:ac:c8:82:2a:d5:9b:f7:b8:7f:
                    a9:ce:26:41:47:39:5a:d8:65:80:9f:3c:3a:09:71:
                    e5:4f:f8:5e:09:f7:60:0c:4b:0b:24:c1:8e:20:61:
                    77:61:b1:6c:e0:02:a0:d9:db:dc:34:a6:76:b8:6f:
                    a1:e8:4f:88:a7:83:f7:f1:77:75:eb:b1:cb:91:66:
                    b3:6f:d3:0b:52:36:29:1f:4b:13:5d:ff:22:52:3e:
                    d9:ae:87:17:db:31:75:5d:e8:3d:11:a0:5e:27:30:
                    e0:f0:8b:02:22:54:d0:c2:2f:45:4c:a8:75:c4:d7:
                    ad:41:40:95:c9:7b:72:ea:f6:2e:ce:5e:60:1d:e9:
                    30:6b:bd:b3:2b:c8:e7:6d:34:08:33:42:12:8f:db:
                    1d:9c:08:3b:e2:0a:23:4c:f5:6f:7f:3e:e7:a4:44:
                    3b:cf:d4:ed:97:cb:bd:b3:a6:a2:0c:64:61:7e:70:
                    75:12:83:bc:67:09:f6:8a:d9:63:05:d2:ba:51:15:
                    f3:e7:9c:e1:92:8c:37:73:2f:4e:9e:13:c8:cd:d2:
                    42:24:2f:49:83:54:87:7a:9b:0d:77:80:94:e8:07:
                    d2:32:98:49:48:c9:5a:70:40:b4:be:55:6e:29:44:
                    5b:02:d3:30:25:c9:20:db:66:42:d4:8a:1f:39:2f:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:38:41:FD:16:34:2C:34:F2:AD:7D:E6:E7:BB:6C:77:32:F7:9F
            X509v3 Authority Key Identifier:
                keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33362e302f32332d3233203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:8f:5d:59:8b:03:ba:0f:b2:88:4d:56:e8:fe:87:e2:20:6b:
         4a:03:aa:84:39:80:50:9d:ac:81:72:83:f3:98:9e:78:c6:a3:
         4c:b8:98:8f:c2:7a:26:0e:0d:11:74:db:af:94:a5:fe:64:0e:
         03:dd:63:3c:a8:e1:aa:14:9c:04:b1:40:69:d0:ae:46:40:16:
         68:dd:3c:56:f4:25:72:c7:19:d8:3e:35:5c:72:03:cf:87:35:
         c6:99:14:48:d7:2d:8b:9c:b8:ca:36:3b:09:7d:47:14:f6:6f:
         52:e9:59:dc:6a:c4:d5:c3:a2:c2:5e:31:9c:d7:56:fe:2d:3f:
         26:1c:d8:30:65:cd:97:2a:8a:7e:8d:28:1f:4f:ad:b3:33:8d:
         08:c7:56:c9:f2:c4:3f:48:85:d1:33:91:67:b0:8f:ed:45:f5:
         b6:20:eb:51:8c:7d:15:fb:2c:27:6d:3d:24:4a:3f:4f:15:7c:
         29:61:3a:32:a9:96:4f:eb:d9:f0:5b:4b:17:67:11:3e:1f:79:
         1b:78:0d:ce:65:d6:64:6a:9b:f6:64:50:d3:9e:f0:99:d6:28:
         07:88:cb:08:d8:2b:e0:6f:29:59:0e:ea:c5:28:c7:b6:b6:39:
         68:49:ac:90:62:07:c2:b5:38:79:ac:bf:e9:7d:b4:f4:55:71:
         2a:9c:7e:8b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOojEXeYJvJdf+waWBJYWAFXEZPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxRjBFRjlCNjg3OUY1OTgxRjAyNzk3MTFFREEzQzk0
MEI2NUNDOTAeFw0yNTA5MDgxMTM3MTlaFw0yNjA5MDcxMTQyMTlaMDMxMTAvBgNV
BAMTKDJFNjAzODQxRkQxNjM0MkMzNEYyQUQ3REU2RTdCQjZDNzczMkY3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKd1NogqzIgirVm/e4f6nOJkFH
OVrYZYCfPDoJceVP+F4J92AMSwskwY4gYXdhsWzgAqDZ29w0pna4b6HoT4ing/fx
d3XrscuRZrNv0wtSNikfSxNd/yJSPtmuhxfbMXVd6D0RoF4nMODwiwIiVNDCL0VM
qHXE161BQJXJe3Lq9i7OXmAd6TBrvbMryOdtNAgzQhKP2x2cCDviCiNM9W9/Puek
RDvP1O2Xy72zpqIMZGF+cHUSg7xnCfaK2WMF0rpRFfPnnOGSjDdzL06eE8jN0kIk
L0mDVId6mw13gJToB9IymElIyVpwQLS+VW4pRFsC0zAlySDbZkLUih85L3MxAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQULmA4Qf0WNCw08q195ue7bHcy958wHwYDVR0j
BBgwFoAUDR8O+baHn1mB8CeXEe2jyUC2XMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZY
RmYvMi8wRDFGMEVGOUI2ODc5RjU5ODFGMDI3OTcxMUVEQTNDOTQwQjY1Q0M5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEMUYwRUY5QjY4NzlGNTk4
MUYwMjc5NzExRURBM0M5NDBCNjVDQzkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYQ3NIbUpHNGF0YU5IWG5TM1hDWE1oam52R0xHQWdaRmhpUXVHd0JWWEZmLzIv
MzQzNTJlMzYyZTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzYzMTM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEtBiQwDQYJKoZIhvcNAQELBQADggEBAEuPXVmLA7oPsohN
Vuj+h+Iga0oDqoQ5gFCdrIFyg/OYnnjGo0y4mI/CeiYODRF026+Upf5kDgPdYzyo
4aoUnASxQGnQrkZAFmjdPFb0JXLHGdg+NVxyA8+HNcaZFEjXLYucuMo2Owl9RxT2
b1LpWdxqxNXDosJeMZzXVv4tPyYc2DBlzZcqin6NKB9PrbMzjQjHVsnyxD9IhdEz
kWewj+1F9bYg61GMfRX7LCdtPSRKP08VfClhOjKplk/r2fBbSxdnET4feRt4Dc5l
1mRqm/ZkUNOe8JnWKAeIywjYK+BvKVkO6sUox7a2OWhJrJBiB8K1OHmsv+l9tPRV
cSqcfos=
-----END CERTIFICATE-----
Generated at Fri Sep 19 19:20:08 2025 by rpki-client