Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32332d3233203d3e20323638363232.roa
File:                     34352e3136342e33362e302f32332d3233203d3e20323638363232.roa (raw, json)
Hash identifier:          vfzcN//MjNe5qJAAYez1Howy76km1U8AUBCQKP43n0U=
Subject key identifier:   A5:2F:1A:7D:16:B2:9F:AA:23:A7:AD:23:E2:ED:27:25:4C:D0:D5:E9
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       3943EA8602EF382F41119B148083AED4D14520EA
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32332d3233203d3e20323638363232.roa
Signing time:             Mon 06 Oct 2025 19:10:16 +0000
ROA not before:           Mon 06 Oct 2025 19:05:16 +0000
ROA not after:            Mon 05 Oct 2026 19:10:16 +0000
asID:                     268622
IP address blocks:        45.164.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:ea:86:02:ef:38:2f:41:11:9b:14:80:83:ae:d4:d1:45:20:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Oct  6 19:05:16 2025 GMT
            Not After : Oct  5 19:10:16 2026 GMT
        Subject: CN=A52F1A7D16B29FAA23A7AD23E2ED27254CD0D5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:95:86:8d:59:44:03:d7:ef:98:19:51:64:
                    f7:a3:2d:1c:b2:fb:d4:0f:21:2a:cb:52:2a:16:f3:
                    9f:3e:77:b8:01:80:a5:1d:1f:4a:93:4e:cd:8a:cf:
                    95:ad:1c:ed:54:c7:f4:f6:b0:5a:ba:cb:bc:33:ff:
                    a6:88:af:9a:a9:ba:36:1c:89:0f:d3:45:68:e5:dd:
                    99:cb:2b:9a:3d:d2:8a:a5:16:f6:46:b2:fb:d4:45:
                    eb:65:50:a0:52:a7:2f:aa:fc:1d:33:5f:16:a0:da:
                    84:26:d8:2a:09:66:fd:91:83:25:43:71:cf:4b:70:
                    a3:93:bc:09:68:6b:6a:8a:cc:ef:5f:d2:35:96:9a:
                    9b:d8:31:66:99:a2:54:4b:54:c3:0d:e4:50:3b:2a:
                    01:c3:b6:83:7f:bc:a8:78:fd:a9:b5:9e:04:29:b2:
                    76:18:85:e5:13:a8:73:e9:9e:e9:ca:ed:f2:19:b8:
                    7c:8d:ee:36:e0:d6:11:54:55:e8:2d:6d:be:73:85:
                    22:1e:e7:35:25:5b:b0:c7:be:0e:a8:b1:83:50:13:
                    56:47:0e:c1:05:e9:be:3d:30:20:3f:95:8f:85:c7:
                    2e:17:b2:30:25:cc:99:bb:d1:4a:43:8a:46:3a:e9:
                    b3:8f:ca:6e:3e:5f:c5:28:da:3c:6f:d8:19:ba:09:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:1A:7D:16:B2:9F:AA:23:A7:AD:23:E2:ED:27:25:4C:D0:D5:E9
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32332d3233203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:69:a1:8d:c8:da:c3:f4:6b:e7:49:7d:7f:97:29:fd:0e:
         fd:f0:b4:f7:21:f3:cd:12:62:33:95:7f:63:da:cb:1f:5c:6f:
         69:af:97:40:7e:3e:f2:62:16:00:75:b1:1c:18:b4:4b:8c:0f:
         3d:00:35:51:e6:86:90:47:d8:c7:e6:dc:88:b5:d4:2c:15:b2:
         06:49:73:8e:22:2c:e2:0b:f1:53:fe:a5:8f:79:ba:e1:42:ed:
         68:62:68:02:4c:b2:f4:8b:af:08:b1:eb:f4:c4:c2:62:48:21:
         39:c7:20:3d:82:fb:01:62:36:0c:89:51:f4:6d:17:ca:92:97:
         d1:c5:2d:ee:68:55:b6:86:3c:36:c1:6d:ae:3e:17:27:0b:93:
         5b:16:88:ce:c5:2c:0a:c0:dd:2b:8a:38:83:76:b8:e9:5c:aa:
         c5:93:4c:09:b8:a3:15:aa:e6:bd:3a:2a:8b:30:e7:8d:3b:42:
         ee:e1:3b:e8:1f:31:0f:91:a0:a9:d5:84:ed:59:0b:7b:39:b6:
         4c:a2:ca:27:a5:55:b6:7e:53:55:5a:5a:59:93:81:49:46:fb:
         83:2a:76:ce:84:90:79:4e:d5:0a:7c:1b:df:66:dd:c7:e1:4a:
         2e:21:99:3a:a3:90:70:22:32:ec:7a:a7:8a:4a:d6:b5:16:f3:
         00:4d:d9:33
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOUPqhgLvOC9BEZsUgIOu1NFFIOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFDMzI0RTk1RERFODEwN0Q2QzlGQ0Y5Qzc5MzFEODM2
ODQzRjRBNDAeFw0yNTEwMDYxOTA1MTZaFw0yNjEwMDUxOTEwMTZaMDMxMTAvBgNV
BAMTKEE1MkYxQTdEMTZCMjlGQUEyM0E3QUQyM0UyRUQyNzI1NENEMEQ1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QJWGjVlEA9fvmBlRZPejLRyy
+9QPISrLUioW858+d7gBgKUdH0qTTs2Kz5WtHO1Ux/T2sFq6y7wz/6aIr5qpujYc
iQ/TRWjl3ZnLK5o90oqlFvZGsvvURetlUKBSpy+q/B0zXxag2oQm2CoJZv2RgyVD
cc9LcKOTvAloa2qKzO9f0jWWmpvYMWaZolRLVMMN5FA7KgHDtoN/vKh4/am1ngQp
snYYheUTqHPpnunK7fIZuHyN7jbg1hFUVegtbb5zhSIe5zUlW7DHvg6osYNQE1ZH
DsEF6b49MCA/lY+Fxy4XsjAlzJm70UpDikY66bOPym4+X8Uo2jxv2Bm6CULPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpS8afRayn6ojp60j4u0nJUzQ1ekwHwYDVR0j
BBgwFoAUCsMk6V3egQfWyfz5x5Mdg2hD9KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2U0cUVOSmY4QzNFVnJZNVJQWGNNY0pMaGYyVWJmSmFoeVdkSkhDVGZX
a3EvMC8wQUMzMjRFOTVEREU4MTA3RDZDOUZDRjlDNzkzMUQ4MzY4NDNGNEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQzMyNEU5NURERTgxMDdE
NkM5RkNGOUM3OTMxRDgzNjg0M0Y0QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlNHFFTkpmOEMzRVZyWTVSUFhjTWNKTGhmMlViZkphaHlXZEpIQ1RmV2txLzAv
MzQzNTJlMzEzNjM0MmUzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaQkMA0GCSqGSIb3DQEBCwUAA4IBAQBlbmmhjcja
w/Rr50l9f5cp/Q798LT3IfPNEmIzlX9j2ssfXG9pr5dAfj7yYhYAdbEcGLRLjA89
ADVR5oaQR9jH5tyItdQsFbIGSXOOIiziC/FT/qWPebrhQu1oYmgCTLL0i68Isev0
xMJiSCE5xyA9gvsBYjYMiVH0bRfKkpfRxS3uaFW2hjw2wW2uPhcnC5NbFojOxSwK
wN0rijiDdrjpXKrFk0wJuKMVqua9OiqLMOeNO0Lu4TvoHzEPkaCp1YTtWQt7ObZM
osonpVW2flNVWlpZk4FJRvuDKnbOhJB5TtUKfBvfZt3H4UouIZk6o5BwIjLseqeK
Sta1FvMATdkz
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:15 2025 by rpki-client