Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa
File:                     34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          GOP8p59Gn/XeSTbhdKbmvj+Wp9vq5nK/IHHr7kN/k7g=
Subject key identifier:   3B:44:F9:24:E3:6D:E2:07:39:33:5D:18:B9:0B:69:BF:2A:AD:66:93
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       6227AD096748FAD704AEC6DEA0BFDA3BB21495EA
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa
Signing time:             Wed 01 Oct 2025 20:52:32 +0000
ROA not before:           Wed 01 Oct 2025 20:47:32 +0000
ROA not after:            Wed 30 Sep 2026 20:52:32 +0000
asID:                     269182
IP address blocks:        45.181.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:27:ad:09:67:48:fa:d7:04:ae:c6:de:a0:bf:da:3b:b2:14:95:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Oct  1 20:47:32 2025 GMT
            Not After : Sep 30 20:52:32 2026 GMT
        Subject: CN=3B44F924E36DE20739335D18B90B69BF2AAD6693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:a4:00:d2:19:4c:50:b2:81:4d:a1:ab:69:
                    cf:e5:3d:5e:e3:45:19:a9:27:5b:1f:b5:a5:b4:7e:
                    5e:4f:95:f9:46:77:a7:be:78:b0:00:ff:16:a9:e0:
                    ff:a3:22:dd:c6:2d:fb:34:62:e8:50:7c:00:74:e0:
                    a6:63:20:f1:89:a5:e8:50:0f:eb:f8:d8:99:fa:5d:
                    92:5f:36:0c:05:b0:96:83:f6:02:5c:e1:a2:5d:7a:
                    3e:20:37:73:03:8d:1d:23:78:39:db:5a:16:4c:39:
                    76:66:4e:fa:20:53:d1:66:78:97:a9:bf:39:35:e5:
                    21:4b:ae:b4:49:35:b5:20:12:28:80:b6:30:36:e3:
                    a5:47:09:b8:55:79:f7:f1:57:91:51:4f:a7:09:da:
                    3c:77:9f:57:9f:58:11:15:98:21:51:b4:77:a3:f2:
                    b6:1a:e4:bc:3b:48:fc:25:ad:3a:07:4b:38:88:e6:
                    ae:65:63:90:9b:8d:ab:c2:eb:a1:31:2a:4c:78:38:
                    2e:ad:3a:38:ca:f7:fb:eb:d7:c5:20:7d:af:65:23:
                    52:a5:a8:68:7d:8e:41:a6:05:8c:e5:81:d5:2a:25:
                    53:8e:82:e2:ea:12:4c:61:18:0b:45:5a:99:11:2f:
                    1d:e6:6d:96:ee:72:c0:c4:2c:d7:3e:48:e9:ab:51:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:F9:24:E3:6D:E2:07:39:33:5D:18:B9:0B:69:BF:2A:AD:66:93
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/34352e3138312e3130312e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:29:09:3b:bd:98:8d:be:40:9a:b4:c1:b0:42:f5:6c:12:22:
         56:5a:96:00:43:4a:4c:bb:b1:17:32:f3:d5:18:89:f9:5a:cd:
         d1:2b:44:83:18:a6:0f:93:45:c8:cb:f7:53:95:97:2c:6f:cc:
         76:f0:1d:2a:f1:ab:fc:a0:c8:ba:06:a4:57:e7:2b:e6:cc:c8:
         18:41:31:f3:01:59:93:df:6a:13:09:7f:d3:e6:38:00:b2:5d:
         30:b1:47:d2:fb:9c:5d:82:04:bd:72:86:94:48:e5:b0:61:f9:
         6f:c6:f5:43:b0:47:b7:18:ad:38:69:07:8a:94:49:a2:1a:1d:
         ff:da:92:6f:03:a7:26:b9:3b:19:78:ed:7d:b7:b7:8d:31:a9:
         b1:bb:71:6f:c3:f3:d7:1c:29:20:fc:c5:c0:29:c7:66:14:dc:
         c6:ec:4b:0f:a0:a4:ac:d2:cd:64:c8:43:bc:6e:ef:51:3f:4f:
         47:45:16:af:e1:49:5c:f6:a5:b5:d1:15:98:7b:fe:0b:2d:94:
         51:fd:7e:09:0d:a5:39:7a:53:28:69:e0:8f:9c:9f:c2:9c:02:
         21:e4:94:7e:93:7d:1c:60:bc:96:c7:ed:c4:75:0d:f6:d2:4b:
         5d:4d:5c:b1:9c:37:86:6d:52:44:f1:20:8d:f5:27:e2:bc:73:
         52:57:4d:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYietCWdI+tcErsbeoL/aO7IUleowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD
NzREODkwNjAeFw0yNTEwMDEyMDQ3MzJaFw0yNjA5MzAyMDUyMzJaMDMxMTAvBgNV
BAMTKDNCNDRGOTI0RTM2REUyMDczOTMzNUQxOEI5MEI2OUJGMkFBRDY2OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFKQA0hlMULKBTaGrac/lPV7j
RRmpJ1sftaW0fl5PlflGd6e+eLAA/xap4P+jIt3GLfs0YuhQfAB04KZjIPGJpehQ
D+v42Jn6XZJfNgwFsJaD9gJc4aJdej4gN3MDjR0jeDnbWhZMOXZmTvogU9FmeJep
vzk15SFLrrRJNbUgEiiAtjA246VHCbhVeffxV5FRT6cJ2jx3n1efWBEVmCFRtHej
8rYa5Lw7SPwlrToHSziI5q5lY5CbjavC66ExKkx4OC6tOjjK9/vr18Ugfa9lI1Kl
qGh9jkGmBYzlgdUqJVOOguLqEkxhGAtFWpkRLx3mbZbucsDELNc+SOmrUUKVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO0T5JONt4gc5M10YuQtpvyqtZpMwHwYDVR0j
BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG
RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv
MzQzNTJlMzEzODMxMmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAttWUwDQYJKoZIhvcNAQELBQADggEBAAwpCTu9
mI2+QJq0wbBC9WwSIlZalgBDSky7sRcy89UYiflazdErRIMYpg+TRcjL91OVlyxv
zHbwHSrxq/ygyLoGpFfnK+bMyBhBMfMBWZPfahMJf9PmOACyXTCxR9L7nF2CBL1y
hpRI5bBh+W/G9UOwR7cYrThpB4qUSaIaHf/akm8Dpya5Oxl47X23t40xqbG7cW/D
89ccKSD8xcApx2YU3MbsSw+gpKzSzWTIQ7xu71E/T0dFFq/hSVz2pbXRFZh7/gst
lFH9fgkNpTl6Uyhp4I+cn8KcAiHklH6TfRxgvJbH7cR1DfbSS11NXLGcN4ZtUkTx
II31J+K8c1JXTY0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:13 2025 by rpki-client