Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33302e302f32342d3234203d3e20323637303838.roa
File:                     34352e3232382e33302e302f32342d3234203d3e20323637303838.roa (raw, json)
Hash identifier:          1UF3JDEghpJVVo+Uj4WhG99L5RGIbJ39ZTymvOg5vfs=
Subject key identifier:   0B:06:5E:CF:C4:7A:9C:90:B8:52:BB:57:9F:0B:F4:36:F5:3A:D9:A6
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       23C81B3F136F9880B72E436B58B246F33F8F45B6
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33302e302f32342d3234203d3e20323637303838.roa
Signing time:             Wed 08 Oct 2025 11:46:07 +0000
ROA not before:           Wed 08 Oct 2025 11:41:07 +0000
ROA not after:            Wed 07 Oct 2026 11:46:07 +0000
asID:                     267088
IP address blocks:        45.228.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 19:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:1b:3f:13:6f:98:80:b7:2e:43:6b:58:b2:46:f3:3f:8f:45:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Oct  8 11:41:07 2025 GMT
            Not After : Oct  7 11:46:07 2026 GMT
        Subject: CN=0B065ECFC47A9C90B852BB579F0BF436F53AD9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:a5:87:dd:39:cb:28:51:85:57:61:f5:27:
                    d7:aa:e9:8c:2e:f6:10:87:a3:62:c8:6c:4c:ad:ba:
                    b7:6e:62:9c:cd:33:27:fe:66:fd:1f:21:9a:89:b0:
                    07:8d:59:15:8a:de:b3:5b:7f:63:49:70:ac:01:21:
                    c9:ea:68:0e:62:09:78:e6:7d:6c:53:d6:d1:fe:7e:
                    14:74:5f:a5:47:cf:d9:cd:ed:62:c0:8a:55:fe:d1:
                    01:f9:f1:cb:0e:64:f7:d5:59:22:80:31:30:40:a3:
                    84:85:2a:ab:d8:5d:8b:d2:d3:6c:b7:75:f6:87:3b:
                    ae:8b:fe:10:da:76:bf:13:5f:9b:92:f8:15:62:63:
                    db:d7:47:c8:f4:4f:c1:97:3b:c3:16:72:66:d6:c8:
                    08:fe:91:59:c3:74:10:bc:20:7f:f7:21:27:b8:a1:
                    94:e9:3a:62:2d:ec:ce:a8:5c:e3:10:ce:4f:0f:59:
                    d8:4d:4c:72:07:cc:21:6a:15:42:49:42:29:98:c5:
                    07:a6:61:4d:f8:38:8c:4f:67:e0:6f:62:8c:fe:19:
                    c6:37:3f:d7:45:5c:b5:b3:e3:35:0a:98:d8:68:d1:
                    fc:14:10:6c:2c:96:28:28:1d:6b:ee:b0:aa:65:db:
                    b8:0a:59:ec:16:72:77:5c:f6:20:9a:8f:01:b4:09:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:06:5E:CF:C4:7A:9C:90:B8:52:BB:57:9F:0B:F4:36:F5:3A:D9:A6
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/34352e3232382e33302e302f32342d3234203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:d9:b2:ea:79:e2:c8:84:a8:bd:51:8d:93:f2:7f:6e:48:
         2a:24:cc:77:2e:e4:bd:8d:5c:a1:ef:16:37:a1:e5:c5:ac:be:
         35:03:73:c5:37:77:94:93:d3:d2:19:30:41:a6:95:83:ab:51:
         af:ba:ea:6b:50:3b:02:64:e1:d5:ce:9b:fa:63:51:db:f5:ae:
         af:1c:d5:fb:a8:5c:73:a7:84:82:6c:83:1d:99:d9:36:7b:35:
         8b:7d:7a:99:4d:94:dc:e7:f9:28:38:52:40:ec:0d:7e:b4:97:
         93:86:68:80:17:20:4f:02:cf:07:3e:e8:24:3d:f6:41:e7:b1:
         41:5a:4f:48:58:b4:ae:02:e8:39:4a:a3:e2:7f:63:20:36:90:
         0c:43:9e:b5:fd:3b:b2:a2:ad:ee:a1:59:1c:d7:fb:6e:58:63:
         f6:f6:cb:0e:1c:22:1b:04:f1:5d:74:a6:7b:e3:04:f0:3f:5a:
         47:61:b0:0d:30:d6:38:f9:75:47:99:5e:44:d2:8d:ce:2a:f8:
         66:9b:d3:96:2e:a4:9a:5d:e0:d0:27:d4:7f:a2:9d:95:38:e2:
         a8:df:87:29:43:68:28:ca:11:be:6a:25:7d:25:63:a7:37:39:
         b5:31:87:d7:52:cf:f1:03:a5:b5:43:22:56:7f:d4:53:58:73:
         36:cc:0b:56
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI8gbPxNvmIC3LkNrWLJG8z+PRbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcyMDg2NTY2RUU3ODJFNDkyNTRCRjU5RUIzMTc3RTAy
N0UzRjFFNjAeFw0yNTEwMDgxMTQxMDdaFw0yNjEwMDcxMTQ2MDdaMDMxMTAvBgNV
BAMTKDBCMDY1RUNGQzQ3QTlDOTBCODUyQkI1NzlGMEJGNDM2RjUzQUQ5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNqWH3TnLKFGFV2H1J9eq6Ywu
9hCHo2LIbEyturduYpzNMyf+Zv0fIZqJsAeNWRWK3rNbf2NJcKwBIcnqaA5iCXjm
fWxT1tH+fhR0X6VHz9nN7WLAilX+0QH58csOZPfVWSKAMTBAo4SFKqvYXYvS02y3
dfaHO66L/hDadr8TX5uS+BViY9vXR8j0T8GXO8MWcmbWyAj+kVnDdBC8IH/3ISe4
oZTpOmIt7M6oXOMQzk8PWdhNTHIHzCFqFUJJQimYxQemYU34OIxPZ+BvYoz+GcY3
P9dFXLWz4zUKmNho0fwUEGwsligoHWvusKpl27gKWewWcndc9iCajwG0CVbxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCwZez8R6nJC4UrtXnwv0NvU62aYwHwYDVR0j
BBgwFoAUxyCGVm7nguSSVL9Z6zF34Cfj8eYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpUQjVKVVlHdTVKNDU3MmM5N0VWR0tzVDlDVkI4SmpCWUg2dFZUWHI4
dlAvMS9DNzIwODY1NjZFRTc4MkU0OTI1NEJGNTlFQjMxNzdFMDI3RTNGMUU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MjA4NjU2NkVFNzgyRTQ5
MjU0QkY1OUVCMzE3N0UwMjdFM0YxRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqVEI1SlVZR3U1SjQ1NzJjOTdFVkdLc1Q5Q1ZCOEpqQllINnRWVFhyOHZQLzEv
MzQzNTJlMzIzMjM4MmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeQeMA0GCSqGSIb3DQEBCwUAA4IBAQCLmdmy6nni
yISovVGNk/J/bkgqJMx3LuS9jVyh7xY3oeXFrL41A3PFN3eUk9PSGTBBppWDq1Gv
uuprUDsCZOHVzpv6Y1Hb9a6vHNX7qFxzp4SCbIMdmdk2ezWLfXqZTZTc5/koOFJA
7A1+tJeThmiAFyBPAs8HPugkPfZB57FBWk9IWLSuAug5SqPif2MgNpAMQ561/Tuy
oq3uoVkc1/tuWGP29ssOHCIbBPFddKZ74wTwP1pHYbANMNY4+XVHmV5E0o3OKvhm
m9OWLqSaXeDQJ9R/op2VOOKo34cpQ2goyhG+aiV9JWOnNzm1MYfXUs/xA6W1QyJW
f9RTWHM2zAtW
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:00:12 2025 by rpki-client