Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          3m2co5zvUxPMMZ5Mh7p8UKp45lCBB9Uupp++dPpvvgs=
Subject key identifier:   AF:94:E3:FE:9F:F7:8F:B8:16:4F:F1:A5:FB:ED:40:CA:AC:03:39:A5
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       2BA23815EBCBB0A545B7FBC9BBD4681F2AC788B0
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa
Signing time:             Wed 01 Oct 2025 20:52:28 +0000
ROA not before:           Wed 01 Oct 2025 20:47:28 +0000
ROA not after:            Wed 30 Sep 2026 20:52:28 +0000
asID:                     269182
IP address blocks:        45.181.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a2:38:15:eb:cb:b0:a5:45:b7:fb:c9:bb:d4:68:1f:2a:c7:88:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Oct  1 20:47:28 2025 GMT
            Not After : Sep 30 20:52:28 2026 GMT
        Subject: CN=AF94E3FE9FF78FB8164FF1A5FBED40CAAC0339A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:43:eb:2a:3b:ce:2b:08:db:56:4f:3a:07:
                    d8:07:6a:f0:ca:eb:95:e3:7a:6c:22:0f:07:90:2a:
                    99:9f:51:b7:b6:36:55:0c:db:09:88:4c:e8:9f:2f:
                    01:8b:99:22:e1:b7:12:7c:17:6a:7b:43:7f:51:a3:
                    b4:ea:19:0b:59:fa:db:6b:91:8b:47:63:e8:16:15:
                    a9:65:ce:72:4e:55:ec:bf:00:21:3f:2c:62:e0:22:
                    52:b9:3a:6b:80:03:e3:10:b3:2d:ae:55:20:4b:a2:
                    73:4b:70:f2:db:2d:0c:32:83:ac:93:10:df:03:f0:
                    6f:f4:67:bb:81:4e:79:d1:7b:4b:f7:6e:05:6e:f4:
                    87:18:d1:e4:58:c8:cf:f2:0d:35:d8:42:ad:1e:d0:
                    63:f4:a7:df:a3:38:7f:6a:68:00:a8:fd:97:d6:eb:
                    23:66:32:0a:bc:e4:43:be:12:fc:38:0b:9e:8d:ab:
                    48:99:5f:72:74:a5:55:ad:c5:db:60:10:8c:65:15:
                    95:5c:0d:3a:c6:53:81:00:14:43:dd:77:6a:50:83:
                    47:9f:c9:2b:7e:f0:37:38:41:61:9a:5c:71:21:5e:
                    f3:ac:a8:a1:84:4c:5b:d4:a4:29:f9:d5:a2:fa:f0:
                    5f:42:41:d4:b1:50:ae:5d:03:6e:62:f9:c7:d5:dc:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:E3:FE:9F:F7:8F:B8:16:4F:F1:A5:FB:ED:40:CA:AC:03:39:A5
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130302e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:60:fa:1c:04:0e:1b:14:41:f8:5b:fa:e1:6a:5a:3f:e8:
         56:2a:5d:36:33:07:44:36:bf:1d:61:2d:49:6b:c7:78:21:d4:
         03:cf:55:1c:0d:91:b4:31:38:9b:95:af:71:e4:4d:de:08:05:
         6a:61:e6:9b:ba:31:95:03:ac:82:0f:6b:42:95:b9:75:79:4f:
         be:8e:99:88:3b:0f:6f:dc:e9:2d:7e:e8:8a:a9:1d:66:62:91:
         fd:c0:49:56:39:51:c9:f9:a8:7f:c8:0c:94:04:99:d7:6d:34:
         0c:f7:58:af:45:2a:0b:06:b7:f1:fb:eb:80:49:7c:4c:35:d1:
         a3:7c:c9:b9:76:87:81:bd:c4:df:9c:7f:35:fb:9e:53:88:82:
         c3:d8:02:cb:4e:bb:d4:76:ba:dd:bd:08:f5:b5:92:93:18:da:
         ff:d8:a4:c9:76:32:3f:35:90:e9:1f:01:32:81:c5:91:ac:75:
         14:fd:b2:e9:35:fb:e2:12:02:67:dc:10:a6:11:f9:7d:66:f2:
         2b:1a:ad:7f:73:6a:f9:38:23:a4:12:75:c0:84:5b:c4:cf:14:
         35:0d:77:58:41:d4:12:91:64:c2:ae:e1:ea:91:3d:36:be:50:
         d7:93:7e:e5:8d:27:0f:92:5b:02:9b:08:72:25:23:49:5f:14:
         9e:9e:c0:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK6I4FevLsKVFt/vJu9RoHyrHiLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD
NzREODkwNjAeFw0yNTEwMDEyMDQ3MjhaFw0yNjA5MzAyMDUyMjhaMDMxMTAvBgNV
BAMTKEFGOTRFM0ZFOUZGNzhGQjgxNjRGRjFBNUZCRUQ0MENBQUMwMzM5QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y0PrKjvOKwjbVk86B9gHavDK
65XjemwiDweQKpmfUbe2NlUM2wmITOifLwGLmSLhtxJ8F2p7Q39Ro7TqGQtZ+ttr
kYtHY+gWFallznJOVey/ACE/LGLgIlK5OmuAA+MQsy2uVSBLonNLcPLbLQwyg6yT
EN8D8G/0Z7uBTnnRe0v3bgVu9IcY0eRYyM/yDTXYQq0e0GP0p9+jOH9qaACo/ZfW
6yNmMgq85EO+Evw4C56Nq0iZX3J0pVWtxdtgEIxlFZVcDTrGU4EAFEPdd2pQg0ef
ySt+8Dc4QWGaXHEhXvOsqKGETFvUpCn51aL68F9CQdSxUK5dA25i+cfV3NV1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr5Tj/p/3j7gWT/Gl++1AyqwDOaUwHwYDVR0j
BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG
RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv
MzQzNTJlMzEzODMxMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttWQwDQYJKoZIhvcNAQELBQADggEBAGsrYPoc
BA4bFEH4W/rhalo/6FYqXTYzB0Q2vx1hLUlrx3gh1APPVRwNkbQxOJuVr3HkTd4I
BWph5pu6MZUDrIIPa0KVuXV5T76OmYg7D2/c6S1+6IqpHWZikf3ASVY5Ucn5qH/I
DJQEmddtNAz3WK9FKgsGt/H764BJfEw10aN8ybl2h4G9xN+cfzX7nlOIgsPYAstO
u9R2ut29CPW1kpMY2v/YpMl2Mj81kOkfATKBxZGsdRT9suk1++ISAmfcEKYR+X1m
8isarX9zavk4I6QSdcCEW8TPFDUNd1hB1BKRZMKu4eqRPTa+UNeTfuWNJw+SWwKb
CHIlI0lfFJ6ewHY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:08 2025 by rpki-client