Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File:                     34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier:          YdarR+QaZ9yj1i7HuzBXmedG2+MATOll3jGHoyY0qa8=
Subject key identifier:   C9:D5:E8:2F:12:8B:77:8C:09:02:78:71:3C:67:71:3C:7E:91:41:4D
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       5FC0142B7D385D9FADA05B66E2E4E0D48FCC6453
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:18 +0000
ROA not before:           Fri 12 Sep 2025 18:27:18 +0000
ROA not after:            Fri 11 Sep 2026 18:32:18 +0000
asID:                     268746
IP address blocks:        45.171.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c0:14:2b:7d:38:5d:9f:ad:a0:5b:66:e2:e4:e0:d4:8f:cc:64:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:18 2025 GMT
            Not After : Sep 11 18:32:18 2026 GMT
        Subject: CN=C9D5E82F128B778C090278713C67713C7E91414D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:33:2d:33:60:5d:1e:fd:d7:a2:7b:fb:01:
                    73:20:c1:11:a2:f4:5c:53:d1:8d:78:02:1c:a4:5a:
                    0f:88:58:36:43:5a:9f:51:1a:52:1a:ab:fc:62:46:
                    df:b5:dc:65:01:32:d3:a7:4c:ea:51:00:da:0a:a8:
                    e0:b8:04:5c:ba:e0:98:79:b5:65:30:8e:5b:84:16:
                    ec:cb:b1:27:cb:c1:59:71:65:fd:a2:51:54:74:55:
                    04:9f:71:be:74:27:91:2c:ad:73:7d:3f:d6:ff:be:
                    45:d6:1f:67:27:dd:72:07:6b:3c:d6:a4:98:e8:fa:
                    7a:62:6c:01:dd:17:10:ca:6d:f6:2f:6c:a5:60:43:
                    72:c8:3d:62:5f:c8:9b:b4:ac:d6:c0:10:68:fb:91:
                    60:eb:02:27:8f:2b:6f:19:13:80:3a:e7:35:34:90:
                    12:21:43:b7:43:37:4e:d7:a8:e3:d7:93:c6:7a:40:
                    5a:75:62:8f:3f:8b:ba:31:fa:a5:87:f2:39:93:26:
                    d3:e2:df:af:be:77:44:63:30:ed:34:ce:31:16:0d:
                    88:3d:c3:27:be:8e:ed:3d:59:11:0d:48:a2:73:23:
                    7d:61:21:21:7f:19:03:79:68:a1:4b:65:a0:3a:14:
                    8c:c4:a8:5d:65:9f:3d:84:6d:3c:8e:f8:d9:2f:37:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:E8:2F:12:8B:77:8C:09:02:78:71:3C:67:71:3C:7E:91:41:4D
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:e6:aa:e2:59:45:1d:57:f2:8c:06:ee:ca:55:c8:65:d0:
         cc:e4:7b:8f:20:33:c5:e3:e8:23:e6:ab:44:eb:55:92:74:62:
         5b:ae:f9:da:e6:00:19:e3:62:6e:4c:90:85:fc:43:f1:4d:bb:
         7f:5f:76:91:8e:f2:b4:b3:fd:cc:9d:e4:a7:d2:04:6c:e3:46:
         89:41:99:0f:6b:16:82:c3:b5:42:79:06:5d:88:1d:94:0e:87:
         64:df:3e:2d:ec:43:42:5a:cb:3c:72:af:eb:5b:9b:58:cf:9a:
         c4:23:e6:58:8b:8d:f9:05:1e:19:fe:d7:d4:14:c7:59:cf:70:
         e0:21:aa:60:e0:1a:f7:49:5b:3e:2f:35:99:3b:87:7a:34:89:
         e0:25:35:87:0f:a0:e9:cc:60:cf:45:68:68:89:ff:aa:da:07:
         52:09:2f:b5:46:06:41:fb:02:ab:54:8e:e4:b5:46:ad:6e:bf:
         81:ab:37:ff:3f:4a:56:a9:27:91:53:ac:cd:7b:97:61:ac:1f:
         00:5c:8f:06:df:96:47:ec:be:0b:35:4b:b8:76:3a:64:b3:88:
         a2:55:fa:1c:2e:42:01:a3:c8:b2:90:b5:3b:a3:3a:31:63:33:
         16:e8:c5:13:ad:00:04:05:46:83:07:00:d7:b2:c1:9a:89:81:
         a4:f2:86:96
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUX8AUK304XZ+toFtm4uTg1I/MZFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEzMjE2MTY1MUI5RjlFNUU1OEY0REM5NkQ3NTE3RjBE
ODAyM0QyMTAeFw0yNTA5MTIxODI3MThaFw0yNjA5MTExODMyMThaMDMxMTAvBgNV
BAMTKEM5RDVFODJGMTI4Qjc3OEMwOTAyNzg3MTNDNjc3MTNDN0U5MTQxNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqczMtM2BdHv3Xonv7AXMgwRGi
9FxT0Y14AhykWg+IWDZDWp9RGlIaq/xiRt+13GUBMtOnTOpRANoKqOC4BFy64Jh5
tWUwjluEFuzLsSfLwVlxZf2iUVR0VQSfcb50J5EsrXN9P9b/vkXWH2cn3XIHazzW
pJjo+npibAHdFxDKbfYvbKVgQ3LIPWJfyJu0rNbAEGj7kWDrAiePK28ZE4A65zU0
kBIhQ7dDN07XqOPXk8Z6QFp1Yo8/i7ox+qWH8jmTJtPi36++d0RjMO00zjEWDYg9
wye+ju09WRENSKJzI31hISF/GQN5aKFLZaA6FIzEqF1lnz2EbTyO+NkvN6oFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUydXoLxKLd4wJAnhxPGdxPH6RQU0wHwYDVR0j
BBgwFoAU2jIWFlG5+eXlj03JbXUX8NgCPSEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvREEzMjE2MTY1MUI5RjlFNUU1OEY0REM5NkQ3NTE3RjBEODAyM0QyMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EQTMyMTYxNjUxQjlGOUU1RTU4
RjREQzk2RDc1MTdGMEQ4MDIzRDIxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzQz
NTJlMzEzNzMxMmUzMjMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEtq+QwDQYJKoZIhvcNAQELBQADggEBAKNV5qriWUUd
V/KMBu7KVchl0Mzke48gM8Xj6CPmq0TrVZJ0Yluu+drmABnjYm5MkIX8Q/FNu39f
dpGO8rSz/cyd5KfSBGzjRolBmQ9rFoLDtUJ5Bl2IHZQOh2TfPi3sQ0Jayzxyr+tb
m1jPmsQj5liLjfkFHhn+19QUx1nPcOAhqmDgGvdJWz4vNZk7h3o0ieAlNYcPoOnM
YM9FaGiJ/6raB1IJL7VGBkH7AqtUjuS1Rq1uv4GrN/8/SlapJ5FTrM17l2GsHwBc
jwbflkfsvgs1S7h2OmSziKJV+hwuQgGjyLKQtTujOjFjMxboxROtAAQFRoMHANey
wZqJgaTyhpY=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:58:05 2025 by rpki-client