Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
File:                     34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (raw, json)
Hash identifier:          jDkzEu3dfEoW/TK85s2VDg93/wRMdxQYYXsBqd5++Ao=
Subject key identifier:   38:0C:D1:E8:28:B8:9B:D0:6A:12:40:D4:DF:C1:EA:54:07:CA:E1:DC
Certificate issuer:       /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial:       41E799B415AF1E90948B9B0EC0D50244ABD5C05D
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
Signing time:             Fri 10 Oct 2025 15:47:31 +0000
ROA not before:           Fri 10 Oct 2025 15:42:31 +0000
ROA not after:            Fri 09 Oct 2026 15:47:31 +0000
asID:                     268663
IP address blocks:        45.165.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
                          rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e7:99:b4:15:af:1e:90:94:8b:9b:0e:c0:d5:02:44:ab:d5:c0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
        Validity
            Not Before: Oct 10 15:42:31 2025 GMT
            Not After : Oct  9 15:47:31 2026 GMT
        Subject: CN=380CD1E828B89BD06A1240D4DFC1EA5407CAE1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:37:39:f7:56:73:2b:a4:3b:7b:d2:c8:5c:ad:
                    ec:d8:7a:81:54:5e:f3:88:3c:12:4a:ef:df:18:01:
                    b8:dc:2b:d2:c4:98:3e:37:1a:41:22:fc:d2:aa:b2:
                    0c:35:4d:f3:61:a5:6f:d0:7b:e0:46:8e:e6:e1:11:
                    7d:45:7f:76:c7:2d:8e:7b:b6:d0:26:09:bf:97:32:
                    44:02:18:d8:7f:38:94:e0:46:7c:b5:29:bf:e1:21:
                    0c:cc:06:06:f9:dd:05:30:54:7a:14:54:ca:06:e1:
                    f4:14:f2:0b:41:61:f6:24:ee:03:7c:0b:fd:49:a6:
                    ce:84:91:ba:c6:ee:34:d6:e1:eb:9c:1c:04:7b:14:
                    bd:47:3e:d9:be:f8:02:9c:a6:07:ea:e7:a1:fc:8f:
                    d6:72:66:f7:53:72:07:db:ce:d6:97:d3:b5:bb:43:
                    41:5d:fe:df:2d:03:94:98:2c:0d:f3:f4:6b:bb:c6:
                    28:3f:99:05:7b:be:2e:2c:5f:8c:50:c0:28:04:87:
                    48:63:6a:c9:e7:28:bd:d1:65:5e:15:15:15:f8:31:
                    ec:26:cb:28:72:0b:e9:b4:c0:24:0e:dc:8f:26:47:
                    5e:eb:ca:eb:0a:28:48:8c:fb:47:6d:0d:33:a1:10:
                    c7:96:ed:ec:03:91:a7:d7:d5:9a:c6:c6:9b:f1:e7:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:D1:E8:28:B8:9B:D0:6A:12:40:D4:DF:C1:EA:54:07:CA:E1:DC
            X509v3 Authority Key Identifier:
                keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:01:a1:2b:1c:53:27:a7:36:18:04:dc:d6:1d:0a:d9:42:4d:
         fe:aa:fc:a2:15:7b:c7:90:fc:84:21:3b:25:31:91:1d:05:51:
         9b:4e:98:f9:11:8d:3f:c8:e7:3e:29:df:08:10:1f:f9:30:a9:
         37:d8:f2:93:cb:4c:89:ba:f9:8a:d6:b3:9d:73:25:b9:3f:0e:
         cd:bb:a3:6e:30:fb:8a:1e:6d:4a:3e:02:6b:4e:d5:a0:7c:9d:
         c4:d2:a1:9c:ea:13:97:b4:a4:e8:83:a2:60:b3:30:d2:ca:ce:
         6f:48:02:a2:6d:fc:02:99:cf:75:68:8b:28:83:96:2d:a9:a5:
         e2:c5:f2:cc:ab:53:d8:2f:6a:b2:18:14:25:5e:b0:09:21:3a:
         7e:c9:4b:bb:2a:94:03:0e:0c:5d:72:5f:11:05:2a:e7:aa:3e:
         47:6e:57:cb:4a:4e:ea:b2:11:86:78:48:b3:52:df:95:75:53:
         44:e8:a0:3b:70:a7:36:2a:54:48:a7:23:c6:87:ff:0e:a3:f4:
         28:9a:99:65:e3:14:3d:b2:59:fe:c7:55:d2:be:3b:45:19:7f:
         0d:c8:64:2c:f1:52:e5:f0:80:d3:68:6f:37:59:db:ee:05:cb:
         f5:bc:77:76:58:62:95:c7:15:ac:80:7e:9a:d6:88:c0:b4:be:
         f3:de:22:33
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQeeZtBWvHpCUi5sOwNUCRKvVwF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDNUQ1RURBQUYzM0M3MDY2MjQ0RDI4RTUzNENGRDVE
NjY5MTM1MzAeFw0yNTEwMTAxNTQyMzFaFw0yNjEwMDkxNTQ3MzFaMDMxMTAvBgNV
BAMTKDM4MENEMUU4MjhCODlCRDA2QTEyNDBENERGQzFFQTU0MDdDQUUxREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNzn3VnMrpDt70shcrezYeoFU
XvOIPBJK798YAbjcK9LEmD43GkEi/NKqsgw1TfNhpW/Qe+BGjubhEX1Ff3bHLY57
ttAmCb+XMkQCGNh/OJTgRny1Kb/hIQzMBgb53QUwVHoUVMoG4fQU8gtBYfYk7gN8
C/1Jps6EkbrG7jTW4eucHAR7FL1HPtm++AKcpgfq56H8j9ZyZvdTcgfbztaX07W7
Q0Fd/t8tA5SYLA3z9Gu7xig/mQV7vi4sX4xQwCgEh0hjasnnKL3RZV4VFRX4Mewm
yyhyC+m0wCQO3I8mR17ryusKKEiM+0dtDTOhEMeW7ewDkafX1ZrGxpvx57+xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOAzR6Ci4m9BqEkDU38HqVAfK4dwwHwYDVR0j
BBgwFoAUjcXV7arzPHBmJE0o5TTP1dZpE1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRHaHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQ
ZlovMC84REM1RDVFREFBRjMzQzcwNjYyNDREMjhFNTM0Q0ZENUQ2NjkxMzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzVENUVEQUFGMzNDNzA2
NjI0NEQyOEU1MzRDRkQ1RDY2OTEzNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0R2hyaTlHbXBXbld3b2tpU0VLbXdrUk1kYUhDazh6TXh0RGpMY0drUGZaLzAv
MzQzNTJlMzEzNjM1MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaUMMA0GCSqGSIb3DQEBCwUAA4IBAQATAaErHFMn
pzYYBNzWHQrZQk3+qvyiFXvHkPyEITslMZEdBVGbTpj5EY0/yOc+Kd8IEB/5MKk3
2PKTy0yJuvmK1rOdcyW5Pw7Nu6NuMPuKHm1KPgJrTtWgfJ3E0qGc6hOXtKTog6Jg
szDSys5vSAKibfwCmc91aIsog5YtqaXixfLMq1PYL2qyGBQlXrAJITp+yUu7KpQD
Dgxdcl8RBSrnqj5HblfLSk7qshGGeEizUt+VdVNE6KA7cKc2KlRIpyPGh/8Oo/Qo
mpll4xQ9sln+x1XSvjtFGX8NyGQs8VLl8IDTaG83WdvuBcv1vHd2WGKVxxWsgH6a
1ojAtL7z3iIz
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:11 2025 by rpki-client