Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa
File:                     34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (raw, json)
Hash identifier:          BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=
Subject key identifier:   C9:73:6B:8A:AE:89:A8:3D:DB:EF:99:F5:16:B5:4D:78:39:A1:E7:37
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       611F5640EC227A101AD7FF8CDC1149BE4C502256
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa
Signing time:             Tue 12 Aug 2025 17:15:47 +0000
ROA not before:           Tue 12 Aug 2025 17:10:47 +0000
ROA not after:            Tue 11 Aug 2026 17:15:47 +0000
asID:                     269203
IP address blocks:        45.181.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:56:40:ec:22:7a:10:1a:d7:ff:8c:dc:11:49:be:4c:50:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Aug 12 17:10:47 2025 GMT
            Not After : Aug 11 17:15:47 2026 GMT
        Subject: CN=C9736B8AAE89A83DDBEF99F516B54D7839A1E737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:32:a8:6c:1d:7f:d3:1b:42:88:1a:24:02:
                    6d:d9:11:5b:fa:e7:c3:db:ff:0b:e6:17:06:03:2b:
                    9b:c1:9f:7e:c8:4e:83:c1:f8:e1:f6:d6:b0:b6:84:
                    80:73:47:b9:5e:64:23:3f:d4:db:1a:0a:65:37:ab:
                    97:5d:c7:f1:f6:b8:c6:50:96:46:6c:89:fc:d9:35:
                    c4:ef:eb:6f:d0:66:c6:90:fd:a1:85:f2:f8:4c:19:
                    c1:33:75:00:54:6b:ff:78:3a:84:5f:fa:5f:b1:43:
                    d9:56:d2:44:a3:54:23:fe:7f:81:69:1f:67:a8:ef:
                    ef:20:c6:c4:fd:ad:17:d7:02:2d:42:51:ea:ec:84:
                    b6:fd:99:ec:b5:5b:a9:12:09:41:a2:8c:e6:d0:ef:
                    4c:72:a0:4b:c8:4c:98:78:3e:55:20:11:f4:1b:9d:
                    bd:d4:d9:95:7c:47:1e:dc:04:7f:0e:39:84:4a:64:
                    9f:d7:42:39:4c:7a:c6:dc:57:89:80:a1:af:0a:fe:
                    3e:e0:75:ff:18:ab:48:7a:98:c1:00:ea:1d:cb:c1:
                    70:6c:32:98:f6:41:e9:f7:36:34:37:6d:7d:97:29:
                    43:ef:56:1f:03:38:67:91:8d:f0:c5:83:5c:42:18:
                    ee:09:6e:5f:6a:49:fd:e5:37:2d:f0:51:cd:e1:25:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:73:6B:8A:AE:89:A8:3D:DB:EF:99:F5:16:B5:4D:78:39:A1:E7:37
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:11:28:c8:a4:e5:6b:97:c4:3a:e9:f5:02:c4:9d:ff:9d:bd:
         79:d9:86:e4:f6:f0:1f:91:df:b9:be:93:86:00:44:48:88:9a:
         91:87:ee:aa:bb:0e:00:34:27:16:e6:26:8d:ba:7e:b6:f2:7e:
         35:16:e9:27:89:10:02:16:87:bb:c3:8e:05:5d:c9:89:13:ff:
         fe:19:4e:e7:c7:f1:04:d8:f1:4a:b9:93:5d:18:92:8c:17:54:
         91:45:fb:31:5c:c3:19:39:85:7e:e2:60:8a:c5:3d:e4:13:08:
         e8:f8:3d:6d:b1:1c:7b:78:91:f6:fb:7a:ec:4f:08:34:e6:05:
         ef:74:ee:1c:be:64:46:ce:c6:a8:af:f3:ff:d1:28:ae:35:a6:
         4b:42:1b:9d:45:b7:3a:db:8c:17:f2:3e:06:e9:af:c6:00:6f:
         bf:cf:74:1f:1a:d3:90:cf:72:67:76:10:29:8e:d7:44:a3:1d:
         28:77:02:59:2c:0c:0f:4d:49:53:c5:15:3e:a9:46:66:70:e7:
         6d:5c:fb:02:ed:d4:f2:b4:55:d7:af:d5:22:0f:9e:6e:91:2c:
         f9:0f:05:56:49:a6:d6:9b:d7:c5:dd:45:b4:92:91:34:b1:23:
         16:78:3a:96:89:0c:12:e8:5a:f6:ef:73:68:74:4c:b9:cf:be:
         a8:c7:e6:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYR9WQOwiehAa1/+M3BFJvkxQIlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1
MDhCQjQzQTAeFw0yNTA4MTIxNzEwNDdaFw0yNjA4MTExNzE1NDdaMDMxMTAvBgNV
BAMTKEM5NzM2QjhBQUU4OUE4M0REQkVGOTlGNTE2QjU0RDc4MzlBMUU3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3DKobB1/0xtCiBokAm3ZEVv6
58Pb/wvmFwYDK5vBn37IToPB+OH21rC2hIBzR7leZCM/1NsaCmU3q5ddx/H2uMZQ
lkZsifzZNcTv62/QZsaQ/aGF8vhMGcEzdQBUa/94OoRf+l+xQ9lW0kSjVCP+f4Fp
H2eo7+8gxsT9rRfXAi1CUershLb9mey1W6kSCUGijObQ70xyoEvITJh4PlUgEfQb
nb3U2ZV8Rx7cBH8OOYRKZJ/XQjlMesbcV4mAoa8K/j7gdf8Yq0h6mMEA6h3LwXBs
Mpj2Qen3NjQ3bX2XKUPvVh8DOGeRjfDFg1xCGO4Jbl9qSf3lNy3wUc3hJVQHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyXNriq6JqD3b75n1FrVNeDmh5zcwHwYDVR0j
BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG
SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG
NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY1S05HcktId0s3ZDcxMkVQNFVaOG9QNW9zR1pkMjI3Ym1nNEc4Ulc1RkhTLzEv
MzQzNTJlMzEzODMxMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttcAwDQYJKoZIhvcNAQELBQADggEBAKARKMik
5WuXxDrp9QLEnf+dvXnZhuT28B+R37m+k4YAREiImpGH7qq7DgA0JxbmJo26frby
fjUW6SeJEAIWh7vDjgVdyYkT//4ZTufH8QTY8Uq5k10YkowXVJFF+zFcwxk5hX7i
YIrFPeQTCOj4PW2xHHt4kfb7euxPCDTmBe907hy+ZEbOxqiv8//RKK41pktCG51F
tzrbjBfyPgbpr8YAb7/PdB8a05DPcmd2ECmO10SjHSh3AlksDA9NSVPFFT6pRmZw
521c+wLt1PK0Vdev1SIPnm6RLPkPBVZJptab18XdRbSSkTSxIxZ4OpaJDBLoWvbv
c2h0TLnPvqjH5s0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:14 2025 by rpki-client