Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa
File:                     34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          9Vo7TMk0LsQC6eY6zJCwPIUN7QZTvoPSQbfWVYjuA30=
Subject key identifier:   84:87:C4:98:2A:D2:89:88:69:E0:94:6C:A6:96:9B:2C:5A:97:71:8F
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       53C1ADF7397AD4C9BC7A2D9C5622BF323554DA8C
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa
Signing time:             Wed 01 Oct 2025 20:52:24 +0000
ROA not before:           Wed 01 Oct 2025 20:47:24 +0000
ROA not after:            Wed 30 Sep 2026 20:52:24 +0000
asID:                     269182
IP address blocks:        45.181.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c1:ad:f7:39:7a:d4:c9:bc:7a:2d:9c:56:22:bf:32:35:54:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Oct  1 20:47:24 2025 GMT
            Not After : Sep 30 20:52:24 2026 GMT
        Subject: CN=8487C4982AD2898869E0946CA6969B2C5A97718F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:25:d3:a3:3f:05:8b:48:45:b1:dc:50:7e:
                    ee:96:7e:4b:75:90:be:23:5e:1f:5d:b2:f6:36:b7:
                    d3:f4:27:67:f7:6c:39:48:65:76:6e:a1:42:b6:50:
                    e0:5f:a2:de:63:a6:ca:ba:ac:5a:68:b5:21:98:91:
                    8a:f3:4e:06:39:c9:d2:6a:09:ac:47:e6:e2:14:cc:
                    dc:6c:cb:fc:c9:ee:13:e3:f1:22:49:24:8d:c7:4f:
                    68:ec:87:21:56:56:e6:6c:b8:04:c8:0c:e5:19:5f:
                    be:e7:f0:ed:40:75:0a:9c:d4:3b:ac:84:33:c7:2c:
                    a8:71:61:51:ee:60:11:e7:67:c5:9c:92:a6:45:1a:
                    c2:0a:c4:cc:07:c3:cb:77:9b:96:0b:6e:41:91:f8:
                    14:b9:bc:b7:71:a7:76:1e:7d:e4:57:fe:54:4a:1d:
                    0b:35:7e:5f:68:b6:c5:32:b5:3d:72:38:19:9f:87:
                    ba:9c:15:5e:35:de:10:cf:13:4e:c6:49:83:63:5d:
                    31:65:ce:d3:96:72:4c:6c:ba:13:72:57:64:c1:5a:
                    19:3e:37:53:f9:4a:86:8b:ad:59:c8:43:f6:96:4f:
                    68:df:f4:30:34:5e:66:a3:0c:34:33:bd:8e:31:45:
                    c8:39:0e:82:cd:c0:74:75:5e:b9:b2:ad:b8:d4:4a:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:C4:98:2A:D2:89:88:69:E0:94:6C:A6:96:9B:2C:5A:97:71:8F
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:27:6f:1a:d0:17:9d:0c:a8:f2:ce:58:97:b5:d9:a9:5a:fa:
         4b:36:4f:46:6d:24:83:30:21:2a:11:35:cb:12:c8:53:82:b3:
         48:e5:f3:6c:d3:c2:dc:8a:f6:2d:bf:7f:a8:ff:20:a8:57:56:
         11:ba:74:f5:5a:8e:d5:be:74:a3:09:b2:55:89:af:a9:da:54:
         4c:92:bd:b8:78:2c:1f:9d:5f:0d:d4:52:1b:b1:a3:f5:ed:08:
         fc:ae:b0:08:55:e4:10:f6:12:a3:09:60:6b:fc:ee:e7:bd:b1:
         28:fb:12:a6:39:9f:27:61:0a:d4:4c:b2:25:6e:e9:56:bc:ca:
         1c:b5:24:19:59:7e:85:28:8a:60:db:de:61:75:26:1d:5b:ff:
         69:74:0c:f0:e3:03:2d:6f:cf:13:83:3c:a1:29:46:26:75:92:
         84:13:b0:7b:9f:9c:a6:f3:0f:d2:c7:69:05:97:94:29:c2:32:
         14:2d:e2:77:ea:49:6a:32:64:0a:ed:93:4c:14:43:a9:75:a7:
         f2:9c:78:c5:3f:d6:98:e2:b7:e1:c4:a1:da:30:00:7b:71:c1:
         4f:c1:0b:10:4a:a7:6b:f5:8e:bf:b9:cd:b2:cf:78:97:cc:39:
         bd:b9:45:82:cc:38:87:6b:2d:ab:9b:9b:c2:02:6b:57:cb:3d:
         25:59:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:43 2025 by rpki-client