Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          F+6lh7otbr0e3bVpBFeNAyyAwdYQzOs7LkuwEu4QQ5M=
Subject key identifier:   36:5D:F8:AA:4A:06:DF:23:F3:52:95:6D:87:F5:E3:AC:D9:21:1E:B6
Certificate issuer:       /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
Certificate serial:       50719185651582350DB5AFE8EAD6323E4ABB9148
Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 01 Oct 2025 12:50:27 +0000
ROA not before:           Wed 01 Oct 2025 12:45:27 +0000
ROA not after:            Wed 30 Sep 2026 12:50:27 +0000
asID:                     262899
IP address blocks:        45.165.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 08:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:71:91:85:65:15:82:35:0d:b5:af:e8:ea:d6:32:3e:4a:bb:91:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
        Validity
            Not Before: Oct  1 12:45:27 2025 GMT
            Not After : Sep 30 12:50:27 2026 GMT
        Subject: CN=365DF8AA4A06DF23F352956D87F5E3ACD9211EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:5c:18:7a:af:27:01:eb:fc:d5:6f:cf:9c:
                    9a:2a:4f:6f:dc:8f:0e:68:7d:92:f9:2d:03:37:0f:
                    5a:c2:5b:1d:e6:31:89:57:97:e9:18:e6:fd:9c:0b:
                    9d:75:23:ab:f2:de:c1:9b:4a:67:02:82:df:2e:09:
                    4a:fd:b9:61:60:c7:4d:a8:3c:ab:13:8a:b0:29:45:
                    3b:14:c3:77:56:60:83:0b:40:45:17:35:7b:82:13:
                    9d:8c:a9:dc:f5:5b:cc:eb:52:76:80:cb:27:fe:50:
                    ab:c3:04:66:28:9c:ff:df:d7:bf:3d:c8:c4:35:57:
                    54:cb:7a:d3:09:26:b2:d6:81:f8:31:86:22:84:0c:
                    38:c7:4d:2f:a9:0d:25:0e:0e:9c:b8:79:1b:7c:ff:
                    0f:e7:d1:ef:e4:54:09:08:c3:e1:b0:b6:9a:9a:9a:
                    71:d6:f8:be:64:8b:2d:3f:b9:ed:55:36:c3:63:a9:
                    af:db:20:4e:59:db:52:08:1c:ee:36:4b:f6:fd:3f:
                    32:05:d3:99:38:e5:17:41:c6:75:b8:88:1e:a2:60:
                    6e:83:4a:77:e9:03:8f:63:61:67:80:99:f6:59:5c:
                    0f:01:bf:a9:8b:2f:47:c3:68:10:81:6d:30:7c:56:
                    9e:4f:4f:fc:04:a2:7c:48:5b:7d:b8:c1:a3:ef:c8:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:F8:AA:4A:06:DF:23:F3:52:95:6D:87:F5:E3:AC:D9:21:1E:B6
            X509v3 Authority Key Identifier:
                keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:71:10:d8:76:77:d7:98:71:97:14:0c:7c:07:d1:3b:7e:
         fa:89:97:58:a8:c3:cd:a6:e4:e5:b2:e1:65:5e:74:7c:43:8b:
         4f:42:a9:19:9e:4d:ad:54:4a:32:f8:4b:34:bb:58:22:87:69:
         16:87:29:da:c1:23:bc:ca:6d:51:51:41:c6:79:0a:66:24:4f:
         d7:02:ed:e7:b4:04:ab:64:30:37:f2:41:a8:28:50:55:2e:75:
         8b:b5:89:ed:41:fd:71:86:e8:e0:c5:43:71:e5:c3:0b:d9:55:
         b6:be:2c:69:3a:9a:1e:5f:7e:6f:c4:71:a6:70:ac:87:ef:8f:
         9b:2c:05:15:eb:e9:f5:23:bc:0f:04:6e:e0:a4:f3:bd:06:90:
         a1:e2:ca:de:e5:20:c7:5f:6e:f5:29:a1:58:e6:6e:51:1d:e1:
         75:ff:5b:b9:16:3e:c3:ea:f5:4c:63:92:5d:89:1d:94:06:ff:
         e8:2f:8a:f8:58:06:e5:94:a3:be:0f:22:1a:50:ab:0a:0f:26:
         af:31:2e:2b:0e:3b:a0:43:0d:ff:26:08:94:3e:78:20:86:57:
         dd:89:e5:08:93:8d:a9:cd:a7:cc:79:f7:c7:07:8b:f3:76:c3:
         1f:cb:8d:2e:62:4a:04:68:5f:a4:95:b4:2a:db:13:5b:22:ba:
         df:33:e9:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUHGRhWUVgjUNta/o6tYyPkq7kUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2NThDNkU1RDlCRjgwQzBENTA1RTRBRjc3MkZDOTI2
RkMyOEM1NjAeFw0yNTEwMDExMjQ1MjdaFw0yNjA5MzAxMjUwMjdaMDMxMTAvBgNV
BAMTKDM2NURGOEFBNEEwNkRGMjNGMzUyOTU2RDg3RjVFM0FDRDkyMTFFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXjVwYeq8nAev81W/PnJoqT2/c
jw5ofZL5LQM3D1rCWx3mMYlXl+kY5v2cC511I6vy3sGbSmcCgt8uCUr9uWFgx02o
PKsTirApRTsUw3dWYIMLQEUXNXuCE52Mqdz1W8zrUnaAyyf+UKvDBGYonP/f1789
yMQ1V1TLetMJJrLWgfgxhiKEDDjHTS+pDSUODpy4eRt8/w/n0e/kVAkIw+Gwtpqa
mnHW+L5kiy0/ue1VNsNjqa/bIE5Z21IIHO42S/b9PzIF05k45RdBxnW4iB6iYG6D
SnfpA49jYWeAmfZZXA8Bv6mLL0fDaBCBbTB8Vp5PT/wEonxIW324waPvyEi7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNl34qkoG3yPzUpVth/XjrNkhHrYwHwYDVR0j
BBgwFoAUnGWMbl2b+AwNUF5K93L8km/CjFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k
OFgvMC85QzY1OEM2RTVEOUJGODBDMEQ1MDVFNEFGNzcyRkM5MjZGQzI4QzU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjU4QzZFNUQ5QkY4MEMw
RDUwNUU0QUY3NzJGQzkyNkZDMjhDNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv
MzQzNTJlMzEzNjM1MmUzMTMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYAwDQYJKoZIhvcNAQELBQADggEBADH4cRDY
dnfXmHGXFAx8B9E7fvqJl1iow82m5OWy4WVedHxDi09CqRmeTa1USjL4SzS7WCKH
aRaHKdrBI7zKbVFRQcZ5CmYkT9cC7ee0BKtkMDfyQagoUFUudYu1ie1B/XGG6ODF
Q3HlwwvZVba+LGk6mh5ffm/EcaZwrIfvj5ssBRXr6fUjvA8EbuCk870GkKHiyt7l
IMdfbvUpoVjmblEd4XX/W7kWPsPq9Uxjkl2JHZQG/+gvivhYBuWUo74PIhpQqwoP
Jq8xLisOO6BDDf8mCJQ+eCCGV92J5QiTjanNp8x598cHi/N2wx/LjS5iSgRoX6SV
tCrbE1siut8z6UU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:42:13 2025 by rpki-client