Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39352e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          SjygtQFX22/FzomoPm31DbIGuBaLegb3vlo+p8ol3kw=
Subject key identifier:   37:0D:D9:53:94:D6:06:23:9C:FB:70:A3:C6:CD:B2:4D:D5:D4:8B:65
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       31000EBF06D469E6B632F388C4830A3D4A394007
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa
Signing time:             Tue 12 Aug 2025 19:55:30 +0000
ROA not before:           Tue 12 Aug 2025 19:50:30 +0000
ROA not after:            Tue 11 Aug 2026 19:55:30 +0000
asID:                     269175
IP address blocks:        45.181.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 01:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:0e:bf:06:d4:69:e6:b6:32:f3:88:c4:83:0a:3d:4a:39:40:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Aug 12 19:50:30 2025 GMT
            Not After : Aug 11 19:55:30 2026 GMT
        Subject: CN=370DD95394D606239CFB70A3C6CDB24DD5D48B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:1f:6e:0c:f0:cd:40:05:e6:38:db:29:8d:
                    04:74:58:68:0f:19:7a:1c:4e:0c:3f:b9:6e:81:96:
                    86:57:4f:ac:01:02:fe:12:09:65:47:43:25:68:d9:
                    8e:bc:9a:0a:16:7b:2a:41:75:2c:8a:24:0c:19:e1:
                    b1:96:f2:b5:a2:75:ad:89:e9:33:7f:5a:ae:a9:11:
                    b6:53:ae:dc:5b:b0:8f:dd:39:f0:1d:f4:cb:14:50:
                    09:bd:d1:f9:14:de:53:a4:77:e5:32:06:56:b1:84:
                    44:2d:2b:5e:ea:64:56:89:0a:67:5f:38:bc:9e:73:
                    c5:94:83:df:95:cf:b0:7e:6d:e6:ed:e4:9c:cf:d3:
                    fa:78:9d:47:7b:67:c9:f2:04:44:ce:53:ab:10:3d:
                    8f:b1:97:79:de:8e:61:34:f8:fd:8f:4e:57:09:51:
                    00:94:65:d2:fb:d5:99:40:aa:8d:a1:63:9a:7d:d6:
                    b1:3a:8c:ae:67:23:8e:0f:73:ae:00:31:e7:c4:81:
                    a7:6e:d6:92:68:ea:54:ca:7a:ab:ab:68:50:3a:c7:
                    85:b0:44:a7:a9:66:dc:91:07:ab:fe:dc:e9:e9:40:
                    fd:23:c6:cc:9b:68:76:e0:1b:c6:cf:77:fc:cc:11:
                    69:09:b2:45:a1:52:50:1d:2c:41:7d:e1:68:b3:f3:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:D9:53:94:D6:06:23:9C:FB:70:A3:C6:CD:B2:4D:D5:D4:8B:65
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39352e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d5:b9:9f:7c:ab:72:f2:38:08:9c:e9:fa:a1:93:a1:68:88:
         13:0c:25:28:32:33:d2:e8:8c:37:47:a8:a5:6c:fc:17:f7:fb:
         3b:88:40:7f:16:21:f2:9c:85:e7:8a:6b:d8:b7:7d:bd:54:9e:
         90:86:b4:49:b1:ea:06:96:21:b0:7f:a1:cb:91:43:60:10:cc:
         e1:35:65:96:0e:8d:22:e6:e0:1f:38:77:40:88:ac:eb:e3:f6:
         90:c6:0e:07:d0:7d:dc:e7:69:6b:d8:12:11:f7:13:0f:41:23:
         14:9a:53:e9:48:4f:a7:d8:ea:b6:eb:e7:94:15:09:8b:d5:c1:
         95:c4:c3:df:99:76:e4:34:f7:bf:68:40:94:64:f1:6b:95:ab:
         bf:0e:b1:0a:4c:9b:11:0f:c0:86:ff:c8:c1:35:ae:3e:ee:6d:
         59:02:42:c6:0e:0e:69:c1:c7:f2:12:9d:22:6f:34:a2:2e:e6:
         3e:64:80:35:06:cc:33:f8:53:bf:8a:a4:f5:cc:3a:b6:85:68:
         46:8b:ea:42:53:c7:0e:a0:c1:8a:de:74:54:b7:6c:ce:fb:e4:
         4b:d8:06:a7:fa:0b:f1:96:f7:14:47:6a:9e:f3:bd:d8:9e:8f:
         33:74:38:c8:8b:f8:80:c2:34:66:56:09:5a:f1:7a:33:57:21:
         54:c2:8a:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMQAOvwbUaea2MvOIxIMKPUo5QAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRjMxRTI4RUI2ODM1RkU5NENDNjJEOTA4OTg5QTc0
NzkwQ0IzRTAeFw0yNTA4MTIxOTUwMzBaFw0yNjA4MTExOTU1MzBaMDMxMTAvBgNV
BAMTKDM3MEREOTUzOTRENjA2MjM5Q0ZCNzBBM0M2Q0RCMjRERDVENDhCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHR9uDPDNQAXmONspjQR0WGgP
GXocTgw/uW6BloZXT6wBAv4SCWVHQyVo2Y68mgoWeypBdSyKJAwZ4bGW8rWida2J
6TN/Wq6pEbZTrtxbsI/dOfAd9MsUUAm90fkU3lOkd+UyBlaxhEQtK17qZFaJCmdf
OLyec8WUg9+Vz7B+bebt5JzP0/p4nUd7Z8nyBETOU6sQPY+xl3nejmE0+P2PTlcJ
UQCUZdL71ZlAqo2hY5p91rE6jK5nI44Pc64AMefEgadu1pJo6lTKequraFA6x4Ww
RKepZtyRB6v+3OnpQP0jxsybaHbgG8bPd/zMEWkJskWhUlAdLEF94Wiz83gbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNw3ZU5TWBiOc+3Cjxs2yTdXUi2UwHwYDVR0j
BBgwFoAUhw8x4o62g1/pTMYtkImJp0eQyz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC84NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEYzMUUyOEVCNjgzNUZF
OTRDQzYyRDkwODk4OUE3NDc5MENCM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv
MzQzNTJlMzEzODMxMmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbVfMA0GCSqGSIb3DQEBCwUAA4IBAQCS1bmffKty
8jgInOn6oZOhaIgTDCUoMjPS6Iw3R6ilbPwX9/s7iEB/FiHynIXnimvYt329VJ6Q
hrRJseoGliGwf6HLkUNgEMzhNWWWDo0i5uAfOHdAiKzr4/aQxg4H0H3c52lr2BIR
9xMPQSMUmlPpSE+n2Oq26+eUFQmL1cGVxMPfmXbkNPe/aECUZPFrlau/DrEKTJsR
D8CG/8jBNa4+7m1ZAkLGDg5pwcfyEp0ibzSiLuY+ZIA1Bswz+FO/iqT1zDq2hWhG
i+pCU8cOoMGK3nRUt2zO++RL2Aan+gvxlvcUR2qe873Yno8zdDjIi/iAwjRmVgla
8XozVyFUworT
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:32 2025 by rpki-client