Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa
File:                     34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa (raw, json)
Hash identifier:          xSMmFAAWq1u+fIRT1VfC0jFrGbToGjtqVCKo6TuGZ48=
Subject key identifier:   06:D7:EC:DD:3F:E0:67:57:97:C7:1C:9F:B3:96:1F:B1:7F:3E:11:74
Certificate issuer:       /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Certificate serial:       21AE66A0C0681D5E129E23CD139E307D767D7009
Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa
Signing time:             Fri 22 Aug 2025 12:25:31 +0000
ROA not before:           Fri 22 Aug 2025 12:20:31 +0000
ROA not after:            Fri 21 Aug 2026 12:25:31 +0000
asID:                     269251
IP address blocks:        45.182.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
                          rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ae:66:a0:c0:68:1d:5e:12:9e:23:cd:13:9e:30:7d:76:7d:70:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
        Validity
            Not Before: Aug 22 12:20:31 2025 GMT
            Not After : Aug 21 12:25:31 2026 GMT
        Subject: CN=06D7ECDD3FE0675797C71C9FB3961FB17F3E1174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:32:14:80:81:e7:c8:e4:a7:e1:19:f0:82:
                    2a:81:89:40:8b:3c:5a:92:92:43:ab:44:4e:ac:71:
                    0a:80:ab:b3:01:ff:e8:69:88:d9:cd:41:8b:9d:7d:
                    f1:4e:4a:5e:eb:7a:1f:b3:09:8c:75:bc:11:e5:63:
                    0c:cb:e5:b5:ac:91:87:0f:75:7a:ec:08:45:4e:9b:
                    33:8c:d4:82:e3:1c:37:9e:15:53:d5:dc:66:02:0f:
                    44:84:64:bc:1e:d1:b4:3a:9b:3c:23:f0:3e:4d:d4:
                    91:34:ba:08:b4:91:c5:b1:25:3f:40:01:2f:47:f6:
                    73:7f:f0:c4:35:ba:ea:20:fd:db:be:07:7a:a5:7a:
                    7b:4b:1c:8d:1b:92:8e:b0:7a:10:d1:d2:96:4a:f2:
                    ad:8d:9a:a1:5c:88:61:b7:d4:e6:7c:5f:54:05:a5:
                    7f:3e:6f:53:2f:70:d8:54:c4:19:ce:b5:9e:42:5d:
                    fc:06:3f:e0:9d:db:a8:ad:5b:f7:08:05:b5:24:ed:
                    56:3d:2a:13:2b:47:85:c8:36:aa:76:5e:e0:dc:20:
                    1e:10:39:56:06:be:7d:bb:6b:05:e0:90:34:33:fd:
                    4d:1f:45:48:28:4d:ad:a2:d0:58:bd:54:cf:b5:36:
                    8a:7c:6e:31:7d:ae:90:97:2b:64:40:32:50:5c:ff:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:EC:DD:3F:E0:67:57:97:C7:1C:9F:B3:96:1F:B1:7F:3E:11:74
            X509v3 Authority Key Identifier:
                keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/34352e3138322e3231322e302f32322d3332203d3e20323639323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:5e:5e:38:73:5d:6b:6b:03:1f:2c:15:36:3e:cb:64:f1:
         c5:8c:b5:3e:60:49:61:a0:d3:5e:14:d9:cc:be:2c:34:38:2b:
         df:4b:11:7a:6b:e5:b1:d5:a0:db:a2:4b:c2:91:f0:d4:19:29:
         04:13:83:45:57:29:d6:be:60:4b:ef:33:aa:82:96:57:f8:5a:
         f2:c5:f2:25:b3:3b:9d:0a:d9:7b:11:a3:f1:cb:e9:a8:0e:1e:
         1a:9d:7a:3a:a3:3b:37:58:1b:fe:3d:15:12:fe:3e:fe:2c:f3:
         e2:16:3f:a8:1e:51:4e:9b:7c:e0:46:02:53:ee:41:25:a1:c4:
         66:ca:25:d6:c5:cd:ca:02:1a:8c:a7:49:cf:75:dd:7b:0e:0a:
         6c:10:e6:20:b3:a3:cb:c6:e4:42:45:d5:91:24:02:af:42:5d:
         2c:4c:fc:f1:17:45:84:dd:76:2d:ed:be:0b:a5:a7:70:f5:8e:
         22:35:1a:81:68:49:ca:68:aa:02:d9:0a:26:87:a2:b2:8e:3a:
         df:d2:af:56:38:98:d2:3a:f6:81:73:86:80:19:eb:89:a1:c6:
         15:8b:25:e8:bd:dc:09:b9:d4:cd:e3:c3:39:b6:98:a6:0e:06:
         91:8c:23:ff:69:8b:03:a2:0f:ae:29:81:83:75:d1:d9:73:72:
         1a:3c:3b:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIa5moMBoHV4SniPNE54wfXZ9cAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ5NkMyMkRBNzkxNTczODRCOEY2OEFCMTg0NUFBRjFF
Nzk0QTg2RDAeFw0yNTA4MjIxMjIwMzFaFw0yNjA4MjExMjI1MzFaMDMxMTAvBgNV
BAMTKDA2RDdFQ0REM0ZFMDY3NTc5N0M3MUM5RkIzOTYxRkIxN0YzRTExNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UDIUgIHnyOSn4RnwgiqBiUCL
PFqSkkOrRE6scQqAq7MB/+hpiNnNQYudffFOSl7reh+zCYx1vBHlYwzL5bWskYcP
dXrsCEVOmzOM1ILjHDeeFVPV3GYCD0SEZLwe0bQ6mzwj8D5N1JE0ugi0kcWxJT9A
AS9H9nN/8MQ1uuog/du+B3qlentLHI0bko6wehDR0pZK8q2NmqFciGG31OZ8X1QF
pX8+b1MvcNhUxBnOtZ5CXfwGP+Cd26itW/cIBbUk7VY9KhMrR4XINqp2XuDcIB4Q
OVYGvn27awXgkDQz/U0fRUgoTa2i0Fi9VM+1Nop8bjF9rpCXK2RAMlBc/1ivAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBtfs3T/gZ1eXxxyfs5YfsX8+EXQwHwYDVR0j
BBgwFoAU3ZbCLaeRVzhLj2irGEWq8eeUqG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxB
aDYvMC9ERDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REOTZDMjJEQTc5MTU3Mzg0
QjhGNjhBQjE4NDVBQUYxRTc5NEE4NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTdmJDYlMya21vNHFDRlBHMmd6RzZVSmFZZVdXc1pDWjNHb29kSDVMQWg2LzAv
MzQzNTJlMzEzODMyMmUzMjMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItttQwDQYJKoZIhvcNAQELBQADggEBADndXl44
c11rawMfLBU2Pstk8cWMtT5gSWGg014U2cy+LDQ4K99LEXpr5bHVoNuiS8KR8NQZ
KQQTg0VXKda+YEvvM6qCllf4WvLF8iWzO50K2XsRo/HL6agOHhqdejqjOzdYG/49
FRL+Pv4s8+IWP6geUU6bfOBGAlPuQSWhxGbKJdbFzcoCGoynSc913XsOCmwQ5iCz
o8vG5EJF1ZEkAq9CXSxM/PEXRYTddi3tvgulp3D1jiI1GoFoScpoqgLZCiaHorKO
Ot/Sr1Y4mNI69oFzhoAZ64mhxhWLJei93Am51M3jwzm2mKYOBpGMI/9piwOiD64p
gYN10dlzcho8O+c=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:49:06 2025 by rpki-client