Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
File:                     34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          c70bPsGEnYfs5lwyK+q+dAD8xmBOFcriUeLu0HQX2Vw=
Subject key identifier:   22:41:A9:76:A2:39:6D:6A:98:F6:14:B0:FA:63:D2:45:0F:82:02:3F
Certificate issuer:       /CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
Certificate serial:       42F136B4328BEE1E1DE04BBE262EF6395A652823
Authority key identifier: 95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
Signing time:             Wed 15 Oct 2025 22:44:21 +0000
ROA not before:           Wed 15 Oct 2025 22:39:21 +0000
ROA not after:            Wed 14 Oct 2026 22:44:21 +0000
asID:                     268257
IP address blocks:        45.236.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:36:b4:32:8b:ee:1e:1d:e0:4b:be:26:2e:f6:39:5a:65:28:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95395C0185FB28E0FDA3561FDEE202227C1CC8D0
        Validity
            Not Before: Oct 15 22:39:21 2025 GMT
            Not After : Oct 14 22:44:21 2026 GMT
        Subject: CN=2241A976A2396D6A98F614B0FA63D2450F82023F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:1e:0c:b0:d3:4b:ba:93:88:d1:ba:90:f1:
                    75:08:0a:3c:27:53:db:02:b9:c1:e6:c6:8e:79:8f:
                    5d:7e:5f:b9:cc:19:8e:b8:e7:27:48:b6:85:12:5f:
                    80:11:d6:dd:0b:39:8d:46:e4:bd:a4:b3:a7:87:ed:
                    c2:18:58:75:e2:e2:b4:a7:73:d8:0f:31:6b:14:7a:
                    c8:ab:18:97:94:f3:33:ae:c5:8f:1c:bd:29:cc:6b:
                    e5:83:0c:bc:92:a4:9d:f0:14:91:d6:3c:b9:45:ba:
                    30:f2:8a:5f:f8:d3:ae:61:91:2b:9f:1f:b2:9c:81:
                    2e:a9:99:ee:c3:23:f2:d4:f1:3c:7c:c6:07:c0:dd:
                    0a:42:1b:19:88:8d:95:2d:c5:13:aa:72:ca:be:38:
                    a2:11:af:2e:ff:81:95:95:88:fe:4e:33:18:92:c4:
                    d7:76:c6:3d:e1:e1:cc:ec:74:97:be:54:a7:86:bf:
                    a4:98:06:f7:1a:06:bb:28:03:55:b2:0c:09:b3:29:
                    0e:9a:31:b0:3f:13:20:f4:98:14:c9:26:94:14:35:
                    28:5b:e4:a8:5e:ff:bf:9b:fc:51:00:1e:0d:a4:e0:
                    3f:5c:1e:92:b4:1c:9e:d6:83:96:ea:bb:5f:55:fc:
                    dc:c8:a2:22:20:4b:87:cc:ac:fe:f4:51:f7:fc:34:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:41:A9:76:A2:39:6D:6A:98:F6:14:B0:FA:63:D2:45:0F:82:02:3F
            X509v3 Authority Key Identifier:
                keyid:95:39:5C:01:85:FB:28:E0:FD:A3:56:1F:DE:E2:02:22:7C:1C:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95395C0185FB28E0FDA3561FDEE202227C1CC8D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:21:e8:2a:5a:80:54:da:b5:44:b1:24:93:bd:f2:3c:2f:a1:
         ee:4e:8e:96:71:f8:0d:c4:6e:bb:9c:9f:72:1a:54:cc:69:61:
         ef:62:5d:41:6f:4e:ad:a3:c3:f2:61:77:c5:7d:75:19:55:db:
         bc:7e:e4:a7:a7:b0:5e:06:da:5a:3b:01:6c:a4:1e:ba:4e:fd:
         9c:1e:41:36:b3:8b:31:4f:f8:7e:bb:13:e1:44:fb:30:c7:19:
         b6:20:89:1a:87:2e:a3:5a:23:cd:11:d1:7d:c1:c1:bd:e4:81:
         18:14:fd:e8:3d:05:2f:bc:b3:63:a8:90:63:a5:99:6c:cd:05:
         85:55:85:f3:7c:4c:b1:f8:a8:a0:1d:59:d5:2f:ca:ac:f8:73:
         af:2f:c4:21:ab:6b:af:3e:82:1d:55:a6:99:fa:6c:17:80:28:
         97:d7:90:4c:43:fc:64:42:94:b4:a7:50:74:fc:4e:d5:26:6c:
         9d:0b:a5:07:e4:84:ff:34:1b:1a:8b:2c:16:b9:c7:81:57:a5:
         cb:b7:b3:c9:e5:15:ed:28:7d:ef:98:f2:a4:f9:4b:a3:eb:53:
         6d:ed:0a:86:3d:9f:1d:6c:c1:2d:f6:44:70:c4:b2:08:db:7c:
         2a:2e:0f:a2:74:ca:64:c9:f6:fb:d9:2e:44:a4:d4:ea:be:a3:
         50:00:51:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQvE2tDKL7h4d4Eu+Ji72OVplKCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzOTVDMDE4NUZCMjhFMEZEQTM1NjFGREVFMjAyMjI3
QzFDQzhEMDAeFw0yNTEwMTUyMjM5MjFaFw0yNjEwMTQyMjQ0MjFaMDMxMTAvBgNV
BAMTKDIyNDFBOTc2QTIzOTZENkE5OEY2MTRCMEZBNjNEMjQ1MEY4MjAyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdR4MsNNLupOI0bqQ8XUICjwn
U9sCucHmxo55j11+X7nMGY645ydItoUSX4AR1t0LOY1G5L2ks6eH7cIYWHXi4rSn
c9gPMWsUesirGJeU8zOuxY8cvSnMa+WDDLySpJ3wFJHWPLlFujDyil/4065hkSuf
H7KcgS6pme7DI/LU8Tx8xgfA3QpCGxmIjZUtxROqcsq+OKIRry7/gZWViP5OMxiS
xNd2xj3h4czsdJe+VKeGv6SYBvcaBrsoA1WyDAmzKQ6aMbA/EyD0mBTJJpQUNShb
5Khe/7+b/FEAHg2k4D9cHpK0HJ7Wg5bqu19V/NzIoiIgS4fMrP70Uff8NMinAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIkGpdqI5bWqY9hSw+mPSRQ+CAj8wHwYDVR0j
BBgwFoAUlTlcAYX7KOD9o1Yf3uICInwcyNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR
blgvMC85NTM5NUMwMTg1RkIyOEUwRkRBMzU2MUZERUUyMDIyMjdDMUNDOEQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1Mzk1QzAxODVGQjI4RTBG
REEzNTYxRkRFRTIwMjIyN0MxQ0M4RDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv
MzQzNTJlMzIzMzM2MmUzMjM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7PEwDQYJKoZIhvcNAQELBQADggEBAFAh6Cpa
gFTatUSxJJO98jwvoe5OjpZx+A3Ebrucn3IaVMxpYe9iXUFvTq2jw/Jhd8V9dRlV
27x+5KensF4G2lo7AWykHrpO/ZweQTazizFP+H67E+FE+zDHGbYgiRqHLqNaI80R
0X3Bwb3kgRgU/eg9BS+8s2OokGOlmWzNBYVVhfN8TLH4qKAdWdUvyqz4c68vxCGr
a68+gh1Vppn6bBeAKJfXkExD/GRClLSnUHT8TtUmbJ0LpQfkhP80GxqLLBa5x4FX
pcu3s8nlFe0ofe+Y8qT5S6PrU23tCoY9nx1swS32RHDEsgjbfCouD6J0ymTJ9vvZ
LkSk1Oq+o1AAUcs=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:40 2025 by rpki-client