Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          GNZCOkOYDcTwoP80loLlZ45g64AUN/8Dp4pvcB/dyXs=
Subject key identifier:   A1:E2:B1:4D:07:5D:E2:5B:3B:25:5E:D9:38:5A:6D:F7:8E:4D:78:18
Certificate issuer:       /CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
Certificate serial:       15CD026D2B0FE7422521577F2595DF650500A0A8
Authority key identifier: 16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 26 Aug 2025 19:22:45 +0000
ROA not before:           Tue 26 Aug 2025 19:17:45 +0000
ROA not after:            Tue 25 Aug 2026 19:22:45 +0000
asID:                     266196
IP address blocks:        45.6.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:02:6d:2b:0f:e7:42:25:21:57:7f:25:95:df:65:05:00:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
        Validity
            Not Before: Aug 26 19:17:45 2025 GMT
            Not After : Aug 25 19:22:45 2026 GMT
        Subject: CN=A1E2B14D075DE25B3B255ED9385A6DF78E4D7818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:fe:b9:1c:e6:c0:4a:72:a9:6e:be:7b:4b:
                    5e:b5:ce:85:45:81:89:f5:16:ae:7f:89:ba:da:50:
                    a3:3c:89:58:9c:29:d6:5e:3f:b9:60:e9:04:a5:f0:
                    f4:89:10:1d:2e:b2:b8:b5:7c:8a:fa:eb:59:b3:8f:
                    80:d8:5c:46:c5:95:7a:28:f5:43:53:27:e8:17:8a:
                    da:c8:7a:c7:7e:a9:95:6a:d4:8b:76:06:bf:6c:23:
                    07:a5:32:68:bd:ca:20:19:a9:2c:09:dc:80:7c:da:
                    7d:04:6e:48:4b:94:d4:36:6b:f3:44:0c:bb:a8:a5:
                    33:0c:21:92:7f:70:5f:ef:1d:4d:96:98:94:ec:d1:
                    14:61:9a:81:7e:3e:48:e8:2e:36:04:64:77:13:6d:
                    5d:3e:7d:ec:f1:b9:98:dd:fb:25:9d:00:a6:e1:83:
                    89:5d:9f:17:7d:45:c7:5a:aa:54:9c:e4:39:3c:9b:
                    0f:8b:4e:2e:c1:5c:3a:c8:d2:da:1e:cb:ad:58:a7:
                    fe:04:6a:5d:2f:19:46:51:ee:7a:35:06:a7:ce:ee:
                    32:64:04:8a:3f:33:aa:32:3a:1b:20:d4:af:4d:59:
                    0e:ce:f4:86:b6:51:31:43:5e:48:34:91:fd:9d:3d:
                    ae:fc:af:53:ce:d2:11:1c:12:ce:2b:0d:24:7c:53:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E2:B1:4D:07:5D:E2:5B:3B:25:5E:D9:38:5A:6D:F7:8E:4D:78:18
            X509v3 Authority Key Identifier:
                keyid:16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:36:c0:6a:72:bd:64:1d:5c:be:6e:4f:b5:60:23:65:f4:bc:
         04:47:4a:f8:bd:51:4d:da:aa:6a:8c:17:05:d2:36:90:f5:20:
         d4:00:db:fa:e4:29:e0:5c:29:5e:32:74:10:78:88:00:d0:bb:
         7a:b7:23:d8:12:47:34:b9:61:06:fa:5e:dd:ab:2a:de:5b:7d:
         9b:47:e8:da:64:50:28:35:94:09:87:c2:44:e1:1b:fd:a4:76:
         4e:ef:bf:f4:96:9b:2c:8b:e5:76:32:4e:18:b2:a6:30:80:8e:
         ae:38:48:02:73:19:58:83:23:54:5f:f7:d6:a1:31:36:6b:70:
         9f:4c:60:bd:aa:0d:fb:5c:7c:63:20:dd:2c:e6:44:de:b1:14:
         59:e9:4a:58:84:4f:ac:11:31:81:56:5f:12:02:e1:1c:d1:55:
         5b:7c:6b:d9:02:0b:c3:c2:f2:38:36:d3:31:5e:22:40:bf:cf:
         8c:79:f7:d0:50:1b:35:13:c7:a7:e6:73:7b:10:3b:93:97:56:
         9f:0c:48:74:99:5f:83:e9:18:8d:b5:07:82:67:17:1d:eb:1f:
         b1:b8:4f:7d:50:4f:f5:67:51:fb:3d:df:45:e0:e2:d5:06:b5:
         75:2a:5b:80:a7:fe:d3:57:89:85:f4:8e:b4:fd:47:e0:98:13:
         10:4c:14:84
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFc0CbSsP50IlIVd/JZXfZQUAoKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxOTE1MDY4MkNEQUNEMkU1REY1NTk0NjJENjNBQjU1
NURBNEU3QTAeFw0yNTA4MjYxOTE3NDVaFw0yNjA4MjUxOTIyNDVaMDMxMTAvBgNV
BAMTKEExRTJCMTREMDc1REUyNUIzQjI1NUVEOTM4NUE2REY3OEU0RDc4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46/65HObASnKpbr57S161zoVF
gYn1Fq5/ibraUKM8iVicKdZeP7lg6QSl8PSJEB0usri1fIr661mzj4DYXEbFlXoo
9UNTJ+gXitrIesd+qZVq1It2Br9sIwelMmi9yiAZqSwJ3IB82n0EbkhLlNQ2a/NE
DLuopTMMIZJ/cF/vHU2WmJTs0RRhmoF+PkjoLjYEZHcTbV0+fezxuZjd+yWdAKbh
g4ldnxd9RcdaqlSc5Dk8mw+LTi7BXDrI0toey61Yp/4Eal0vGUZR7no1BqfO7jJk
BIo/M6oyOhsg1K9NWQ7O9Ia2UTFDXkg0kf2dPa78r1PO0hEcEs4rDSR8UxqVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoeKxTQdd4ls7JV7ZOFpt945NeBgwHwYDVR0j
BBgwFoAUFhkVBoLNrNLl31WUYtY6tVXaTnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC8xNjE5MTUwNjgyQ0RBQ0QyRTVERjU1OTQ2MkQ2M0FCNTU1REE0RTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTkxNTA2ODJDREFDRDJF
NURGNTU5NDYyRDYzQUI1NTVEQTRFN0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv
MzQzNTJlMzYyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0GojANBgkqhkiG9w0BAQsFAAOCAQEAiTbAanK9ZB1c
vm5PtWAjZfS8BEdK+L1RTdqqaowXBdI2kPUg1ADb+uQp4FwpXjJ0EHiIANC7ercj
2BJHNLlhBvpe3asq3lt9m0fo2mRQKDWUCYfCROEb/aR2Tu+/9JabLIvldjJOGLKm
MICOrjhIAnMZWIMjVF/31qExNmtwn0xgvaoN+1x8YyDdLOZE3rEUWelKWIRPrBEx
gVZfEgLhHNFVW3xr2QILw8LyODbTMV4iQL/PjHn30FAbNRPHp+ZzexA7k5dWnwxI
dJlfg+kYjbUHgmcXHesfsbhPfVBP9WdR+z3fReDi1Qa1dSpbgKf+01eJhfSOtP1H
4JgTEEwUhA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:05:43 2025 by rpki-client