Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36322e302f32342d3234203d3e20323639313730.roa
File:                     34352e3138312e36322e302f32342d3234203d3e20323639313730.roa (raw, json)
Hash identifier:          IonYoiapNcoWkoV7loCpJnBAQfRj9zi7/2jHi+OiHh8=
Subject key identifier:   60:EF:7C:BE:2E:9C:82:FB:83:5D:E6:F7:69:A9:2A:11:4D:79:4D:4F
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       0893CDE0344B9E20C8C88B6E049D142467EF0EA3
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36322e302f32342d3234203d3e20323639313730.roa
Signing time:             Tue 02 Sep 2025 10:30:03 +0000
ROA not before:           Tue 02 Sep 2025 10:25:03 +0000
ROA not after:            Tue 01 Sep 2026 10:30:03 +0000
asID:                     269170
IP address blocks:        45.181.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:93:cd:e0:34:4b:9e:20:c8:c8:8b:6e:04:9d:14:24:67:ef:0e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Sep  2 10:25:03 2025 GMT
            Not After : Sep  1 10:30:03 2026 GMT
        Subject: CN=60EF7CBE2E9C82FB835DE6F769A92A114D794D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:e2:5a:45:35:d3:ad:ee:86:5d:3c:34:49:
                    e4:da:cf:f7:b0:84:b8:df:8e:b1:35:d1:ca:f6:a0:
                    60:e9:cc:35:fe:5a:99:43:66:4f:ba:00:0c:c4:5e:
                    83:0f:24:d5:c4:5d:e2:a2:6b:7c:32:c4:ed:6d:98:
                    ee:1a:d4:1d:16:84:29:5e:e1:a6:9a:44:9f:57:92:
                    fd:9a:7e:3f:4c:bb:a5:e9:ef:a3:91:22:41:0a:df:
                    61:d0:35:49:4e:d4:f4:a6:dd:8b:b3:4a:f4:1b:7d:
                    0c:67:62:81:a2:e9:2d:a4:af:fe:7c:2c:98:b5:15:
                    cc:a0:fd:dc:f8:36:80:6a:a1:24:3a:bc:56:8c:f3:
                    19:c2:32:a9:f6:57:d9:ea:39:79:56:e3:78:e3:82:
                    47:4d:87:76:d1:4c:a7:45:c1:bf:17:0a:90:25:87:
                    7f:4a:d7:50:58:a5:8c:82:e3:ed:d3:a8:bf:3b:ff:
                    59:f5:f5:92:5c:82:10:90:80:fc:19:52:4a:74:30:
                    77:55:76:d2:47:bd:b9:d0:30:f4:f7:a8:d6:33:01:
                    16:f1:25:29:1b:a4:b1:1d:a1:01:11:e4:ba:08:4f:
                    a8:c6:ef:8c:6b:fd:02:ba:5d:d1:96:dd:9b:15:5f:
                    d2:f5:a8:68:a8:f0:81:28:4f:79:d0:92:30:fc:c7:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EF:7C:BE:2E:9C:82:FB:83:5D:E6:F7:69:A9:2A:11:4D:79:4D:4F
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/34352e3138312e36322e302f32342d3234203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:38:1c:ff:a2:13:ed:20:75:5e:c3:97:2b:72:1c:9f:4f:
         03:81:e0:1e:7a:70:cc:1e:e5:58:20:b6:5a:d6:bc:ce:96:fe:
         36:c6:bd:67:7d:0b:a4:83:d1:6e:3e:fc:c2:00:ac:7e:6a:d7:
         e5:37:00:b6:95:4f:f6:1b:e1:a5:a4:3a:d8:83:45:61:f5:d7:
         e6:72:bf:61:d5:05:79:c3:89:f9:b0:06:98:f6:aa:de:b6:94:
         ad:da:70:2a:6e:8d:f5:9f:1e:b0:9c:aa:67:95:b2:e2:31:f3:
         fe:71:88:05:84:93:b0:f7:d8:d2:06:b4:59:eb:01:b5:0e:67:
         1e:28:47:29:c4:ef:3c:d1:df:7b:c1:39:73:f8:31:b6:f5:96:
         6d:16:b2:d5:91:6f:bc:e0:dc:ef:5f:41:3a:d1:36:8c:e5:ba:
         fa:6e:aa:8f:05:a8:d8:b2:01:c3:5a:31:81:b6:de:86:f6:e6:
         9a:ac:d0:5a:7e:1a:b6:2d:d7:6d:64:0b:8c:3a:7d:d5:22:d3:
         2a:f7:8f:1a:d3:8d:9d:39:13:bf:d2:32:94:66:01:4d:e1:18:
         c9:51:11:d5:1e:ec:b0:fa:e1:df:1b:ff:86:c7:2b:8b:7b:d7:
         13:79:36:e8:04:be:14:ef:f7:15:34:c5:2c:cb:6a:81:9e:06:
         9c:83:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:35:50 2025 by rpki-client