Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa
File:                     34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa (raw, json)
Hash identifier:          CLUAVA/Sq7+vlM2anUhQexnvwLxBzhRVEGhrF1lIyew=
Subject key identifier:   D6:95:E6:EC:6A:74:A7:0E:BA:13:5D:60:A5:08:0D:7F:0E:7B:17:05
Certificate issuer:       /CN=6545F594C81E03CA80107611F7A05BD2E940F666
Certificate serial:       7CE695A16D83A8F0E72C44B351F17DD9F8CADDD9
Authority key identifier: 65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa
Signing time:             Sat 27 Sep 2025 23:00:50 +0000
ROA not before:           Sat 27 Sep 2025 22:55:50 +0000
ROA not after:            Sat 26 Sep 2026 23:00:50 +0000
asID:                     269330
IP address blocks:        45.183.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl
                          rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e6:95:a1:6d:83:a8:f0:e7:2c:44:b3:51:f1:7d:d9:f8:ca:dd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6545F594C81E03CA80107611F7A05BD2E940F666
        Validity
            Not Before: Sep 27 22:55:50 2025 GMT
            Not After : Sep 26 23:00:50 2026 GMT
        Subject: CN=D695E6EC6A74A70EBA135D60A5080D7F0E7B1705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:bd:a5:fd:d7:38:31:0f:55:7c:4f:14:2e:
                    d1:b7:8d:71:10:b6:67:af:dc:21:f5:3c:07:14:f0:
                    f4:9b:03:ce:20:33:ba:d9:03:62:95:07:16:4b:b7:
                    dc:d0:c5:c7:02:3e:e1:a7:8c:84:6e:e1:e7:c8:8b:
                    7a:3a:70:2c:78:4b:5f:b0:a9:1a:3e:06:0e:19:8d:
                    49:5b:45:d7:30:8c:c6:18:2e:50:62:9a:32:68:c8:
                    69:e8:a7:c4:86:85:fa:49:0a:40:1a:f2:d5:a8:74:
                    85:7e:ab:1d:eb:55:5f:53:18:60:be:92:97:5a:9b:
                    29:82:8c:64:88:b3:ba:9c:c7:57:60:c0:7e:f7:11:
                    5a:41:8a:e0:84:ee:77:a4:85:92:b7:99:5f:c6:f4:
                    71:10:e7:ce:02:89:c8:65:a4:ca:dd:b0:03:d2:35:
                    d4:c7:94:b8:a5:e8:5d:01:e5:2b:7c:12:c6:26:e6:
                    49:5c:26:53:4d:50:bc:d5:7b:ad:53:db:e1:08:e0:
                    18:89:e1:65:39:8a:e9:fc:8d:2b:63:a5:4c:fd:ba:
                    fc:7e:d8:5d:95:f7:15:00:20:a3:e1:2b:6d:53:f5:
                    68:3e:ae:e3:33:f7:ff:dd:ae:e0:8b:aa:b6:a5:7c:
                    3a:93:e1:45:04:da:73:19:d6:af:d9:e9:e1:7f:b7:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:E6:EC:6A:74:A7:0E:BA:13:5D:60:A5:08:0D:7F:0E:7B:17:05
            X509v3 Authority Key Identifier:
                keyid:65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/34352e3138332e3132342e302f32322d3332203d3e20323639333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:78:12:20:95:30:66:82:e8:56:3c:2c:19:f2:22:cf:ac:
         60:5b:9c:12:5c:1c:f1:cc:d2:95:94:a0:aa:24:23:20:e4:30:
         b1:8e:3a:47:28:78:be:5a:f5:8e:52:a9:c0:ae:87:17:8d:59:
         b3:3c:3d:fc:ef:62:50:43:3c:9b:29:44:bf:26:05:e0:b9:e0:
         50:97:be:6e:cf:59:af:85:fc:d3:63:83:4b:e0:4a:6c:35:81:
         dd:11:97:08:e9:6e:76:eb:fb:4b:f2:c8:cd:03:b5:ab:4e:d9:
         17:cb:c4:c0:37:f7:44:78:7c:85:cd:05:ea:23:f6:78:ed:9c:
         a6:5d:4f:ef:04:9e:7f:7a:9a:24:5a:66:75:57:f6:7b:c3:b6:
         9f:06:5b:ab:69:f0:70:9b:e8:b7:aa:a9:f7:38:d6:15:3a:78:
         bb:d1:a4:9f:f8:2d:9d:21:8f:8b:84:e0:9b:9c:4c:7c:44:66:
         9c:74:21:55:37:0f:d8:51:ae:d1:96:7b:24:2a:af:28:66:96:
         07:ff:cc:d7:7d:66:c2:26:e3:86:11:ff:ac:7b:da:b1:10:37:
         d0:d4:19:dd:6d:dc:87:33:ad:cd:ec:d9:25:01:65:4f:39:5a:
         a5:ea:a0:cd:9b:4a:bb:a3:09:2a:ca:eb:17:a1:5e:7a:78:a6:
         88:5f:ad:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfOaVoW2DqPDnLESzUfF92fjK3dkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU0NUY1OTRDODFFMDNDQTgwMTA3NjExRjdBMDVCRDJF
OTQwRjY2NjAeFw0yNTA5MjcyMjU1NTBaFw0yNjA5MjYyMzAwNTBaMDMxMTAvBgNV
BAMTKEQ2OTVFNkVDNkE3NEE3MEVCQTEzNUQ2MEE1MDgwRDdGMEU3QjE3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fL2l/dc4MQ9VfE8ULtG3jXEQ
tmev3CH1PAcU8PSbA84gM7rZA2KVBxZLt9zQxccCPuGnjIRu4efIi3o6cCx4S1+w
qRo+Bg4ZjUlbRdcwjMYYLlBimjJoyGnop8SGhfpJCkAa8tWodIV+qx3rVV9TGGC+
kpdamymCjGSIs7qcx1dgwH73EVpBiuCE7nekhZK3mV/G9HEQ584CichlpMrdsAPS
NdTHlLil6F0B5St8EsYm5klcJlNNULzVe61T2+EI4BiJ4WU5iun8jStjpUz9uvx+
2F2V9xUAIKPhK21T9Wg+ruMz9//druCLqralfDqT4UUE2nMZ1q/Z6eF/t8vNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1pXm7Gp0pw66E11gpQgNfw57FwUwHwYDVR0j
BBgwFoAUZUX1lMgeA8qAEHYR96Bb0ulA9mYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dXVXBTV2trVnlqRnZUUjN2eFNyakpVSm0zck5BR2g1aFhCMlREZkhp
cFgvMC82NTQ1RjU5NEM4MUUwM0NBODAxMDc2MTFGN0EwNUJEMkU5NDBGNjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NDVGNTk0QzgxRTAzQ0E4
MDEwNzYxMUY3QTA1QkQyRTk0MEY2NjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3V1VwU1dra1Z5akZ2VFIzdnhTcmpKVUptM3JOQUdoNWhYQjJURGZIaXBYLzAv
MzQzNTJlMzEzODMzMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItt3wwDQYJKoZIhvcNAQELBQADggEBAExXeBIg
lTBmguhWPCwZ8iLPrGBbnBJcHPHM0pWUoKokIyDkMLGOOkcoeL5a9Y5SqcCuhxeN
WbM8PfzvYlBDPJspRL8mBeC54FCXvm7PWa+F/NNjg0vgSmw1gd0Rlwjpbnbr+0vy
yM0DtatO2RfLxMA390R4fIXNBeoj9njtnKZdT+8Enn96miRaZnVX9nvDtp8GW6tp
8HCb6Leqqfc41hU6eLvRpJ/4LZ0hj4uE4JucTHxEZpx0IVU3D9hRrtGWeyQqryhm
lgf/zNd9ZsIm44YR/6x72rEQN9DUGd1t3Iczrc3s2SUBZU85WqXqoM2bSrujCSrK
6xehXnp4pohfrc4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:38 2025 by rpki-client