Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132362e302f32342d3234203d3e20323638373131.roa
File:                     34352e3137312e3132362e302f32342d3234203d3e20323638373131.roa (raw, json)
Hash identifier:          UOblSQTHxF6OT2Ki4sIWijQw8IfaNiPaubIpwqmjCk4=
Subject key identifier:   B3:FE:17:25:83:B1:0C:CF:16:3F:23:C2:12:20:92:76:95:9E:8B:6F
Certificate issuer:       /CN=C25265AD4C15AD12F33FD243385F457064C66247
Certificate serial:       57AC6834CA398E7BC0AA0920219CC5A7C29DE8C9
Authority key identifier: C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132362e302f32342d3234203d3e20323638373131.roa
Signing time:             Thu 11 Sep 2025 12:46:24 +0000
ROA not before:           Thu 11 Sep 2025 12:41:24 +0000
ROA not after:            Thu 10 Sep 2026 12:46:24 +0000
asID:                     268711
IP address blocks:        45.171.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:68:34:ca:39:8e:7b:c0:aa:09:20:21:9c:c5:a7:c2:9d:e8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25265AD4C15AD12F33FD243385F457064C66247
        Validity
            Not Before: Sep 11 12:41:24 2025 GMT
            Not After : Sep 10 12:46:24 2026 GMT
        Subject: CN=B3FE172583B10CCF163F23C212209276959E8B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:2b:bc:5d:54:d7:0c:0c:28:b2:86:34:de:
                    92:65:49:13:c1:ac:2a:67:56:75:c1:07:76:33:ec:
                    25:dc:f4:df:50:66:f2:1c:b6:a4:5a:ea:33:85:8b:
                    d2:83:07:67:96:3f:4b:98:00:53:4a:73:98:b0:fa:
                    6e:69:35:5d:af:23:1e:75:64:fa:9a:10:65:8b:0a:
                    03:c1:67:1e:58:9e:0e:ce:d6:87:7d:4a:ea:9b:ec:
                    fc:b7:5b:e2:98:98:9b:1f:08:1b:75:95:25:b2:2a:
                    49:5b:e8:5d:23:23:cd:cc:6c:d5:34:08:43:1c:df:
                    65:b6:19:46:c3:18:05:bb:4a:78:ec:35:58:d2:88:
                    75:a5:b0:46:a9:9f:70:45:00:08:28:39:72:2d:88:
                    80:47:be:6f:86:5a:56:98:29:9d:a7:d3:82:42:2c:
                    d9:b3:35:08:1c:d0:b8:f4:4c:6d:fd:b3:cd:8f:6a:
                    b1:6e:42:db:f2:ad:21:d7:2e:fc:38:d4:31:bb:9c:
                    84:94:17:75:30:06:7a:d2:5f:63:be:9c:83:61:14:
                    a0:9e:d1:24:32:61:c1:18:1f:1a:94:89:d6:63:ce:
                    6d:82:fb:58:76:44:8a:f3:f8:09:dd:f7:f3:cb:12:
                    a6:72:cb:38:ea:43:99:3f:f9:12:37:91:cd:61:40:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:17:25:83:B1:0C:CF:16:3F:23:C2:12:20:92:76:95:9E:8B:6F
            X509v3 Authority Key Identifier:
                keyid:C2:52:65:AD:4C:15:AD:12:F3:3F:D2:43:38:5F:45:70:64:C6:62:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/C25265AD4C15AD12F33FD243385F457064C66247.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C25265AD4C15AD12F33FD243385F457064C66247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132362e302f32342d3234203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:4d:ac:0c:ab:d1:74:8d:d9:f8:ae:48:dd:e3:1f:82:f2:
         ea:cd:71:27:5c:ff:9d:70:5e:61:4a:bb:97:65:84:59:a7:a1:
         08:59:ff:b5:09:2a:6b:86:4d:18:f7:e8:a1:65:78:68:ed:f7:
         fb:c2:f6:a8:40:56:23:cc:e6:45:2c:3d:51:34:e1:ba:0b:78:
         66:15:68:29:12:a6:a3:02:b1:ca:b8:b7:46:6d:e5:78:ae:c1:
         e2:8f:b8:5a:a1:a0:dc:03:c1:01:92:c2:ee:1f:e6:1c:dd:5e:
         e4:d2:40:82:fa:10:01:94:73:35:f4:64:f8:0f:b2:29:d8:c1:
         11:87:fe:b6:64:ba:ae:d7:d7:c3:36:4d:49:14:cc:8e:68:10:
         74:09:00:ce:f1:c8:de:d9:66:34:38:49:1b:c8:92:0e:0e:85:
         b5:9c:a8:d1:82:84:6e:42:53:b7:44:14:80:8b:2e:91:b7:82:
         69:c6:90:7b:c3:27:a9:6a:1e:b8:0a:17:a1:5b:4d:4a:44:49:
         1f:fe:ec:2b:af:95:bf:9b:d3:19:67:d2:75:32:e5:d0:e6:6b:
         e4:98:67:d2:6e:6b:79:3d:57:18:b3:13:1b:18:3a:c0:61:2a:
         ad:36:38:38:59:fd:91:c6:55:a6:99:bb:02:b0:b0:fd:ac:76:
         0a:bc:b4:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV6xoNMo5jnvAqgkgIZzFp8Kd6MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1MjY1QUQ0QzE1QUQxMkYzM0ZEMjQzMzg1RjQ1NzA2
NEM2NjI0NzAeFw0yNTA5MTExMjQxMjRaFw0yNjA5MTAxMjQ2MjRaMDMxMTAvBgNV
BAMTKEIzRkUxNzI1ODNCMTBDQ0YxNjNGMjNDMjEyMjA5Mjc2OTU5RThCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1NSu8XVTXDAwosoY03pJlSRPB
rCpnVnXBB3Yz7CXc9N9QZvIctqRa6jOFi9KDB2eWP0uYAFNKc5iw+m5pNV2vIx51
ZPqaEGWLCgPBZx5Yng7O1od9Suqb7Py3W+KYmJsfCBt1lSWyKklb6F0jI83MbNU0
CEMc32W2GUbDGAW7SnjsNVjSiHWlsEapn3BFAAgoOXItiIBHvm+GWlaYKZ2n04JC
LNmzNQgc0Lj0TG39s82ParFuQtvyrSHXLvw41DG7nISUF3UwBnrSX2O+nINhFKCe
0SQyYcEYHxqUidZjzm2C+1h2RIrz+And9/PLEqZyyzjqQ5k/+RI3kc1hQLiRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs/4XJYOxDM8WPyPCEiCSdpWei28wHwYDVR0j
BBgwFoAUwlJlrUwVrRLzP9JDOF9FcGTGYkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRD
RWEvMC9DMjUyNjVBRDRDMTVBRDEyRjMzRkQyNDMzODVGNDU3MDY0QzY2MjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyNTI2NUFENEMxNUFEMTJG
MzNGRDI0MzM4NUY0NTcwNjRDNjYyNDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAv
MzQzNTJlMzEzNzMxMmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq34wDQYJKoZIhvcNAQELBQADggEBAFI9TawM
q9F0jdn4rkjd4x+C8urNcSdc/51wXmFKu5dlhFmnoQhZ/7UJKmuGTRj36KFleGjt
9/vC9qhAViPM5kUsPVE04boLeGYVaCkSpqMCscq4t0Zt5XiuweKPuFqhoNwDwQGS
wu4f5hzdXuTSQIL6EAGUczX0ZPgPsinYwRGH/rZkuq7X18M2TUkUzI5oEHQJAM7x
yN7ZZjQ4SRvIkg4OhbWcqNGChG5CU7dEFICLLpG3gmnGkHvDJ6lqHrgKF6FbTUpE
SR/+7Cuvlb+b0xln0nUy5dDma+SYZ9Jua3k9VxizExsYOsBhKq02ODhZ/ZHGVaaZ
uwKwsP2sdgq8tOY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:37 2025 by rpki-client