Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
File:                     34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa (raw, json)
Hash identifier:          iM67q2zP6itowLcu06mlk/IpPtTT80G+7o7QK9REA80=
Subject key identifier:   F2:CD:82:97:37:7E:11:E6:FF:3D:C4:01:20:A6:7F:6D:12:F1:59:78
Certificate issuer:       /CN=8DC85194511BA403C112A8F5E843BA0786DEE453
Certificate serial:       753BD2D8C3792D64ACA72B21E2D35C0E278C618E
Authority key identifier: 8D:C8:51:94:51:1B:A4:03:C1:12:A8:F5:E8:43:BA:07:86:DE:E4:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC85194511BA403C112A8F5E843BA0786DEE453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa
Signing time:             Tue 02 Sep 2025 22:52:10 +0000
ROA not before:           Tue 02 Sep 2025 22:47:10 +0000
ROA not after:            Tue 01 Sep 2026 22:52:10 +0000
asID:                     269186
IP address blocks:        45.180.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/8DC85194511BA403C112A8F5E843BA0786DEE453.crl
                          rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/8DC85194511BA403C112A8F5E843BA0786DEE453.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC85194511BA403C112A8F5E843BA0786DEE453.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3b:d2:d8:c3:79:2d:64:ac:a7:2b:21:e2:d3:5c:0e:27:8c:61:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC85194511BA403C112A8F5E843BA0786DEE453
        Validity
            Not Before: Sep  2 22:47:10 2025 GMT
            Not After : Sep  1 22:52:10 2026 GMT
        Subject: CN=F2CD8297377E11E6FF3DC40120A67F6D12F15978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:fb:6a:dd:b0:56:6d:84:42:93:7a:8e:25:
                    32:84:20:d6:fe:3f:33:91:1f:d1:45:32:d0:d2:d5:
                    55:2b:b3:a6:af:ad:b9:75:36:63:d7:41:ec:d6:b1:
                    ea:8b:0a:fd:8e:a5:2a:55:b1:45:49:59:dd:d7:aa:
                    8a:2f:f3:d1:79:f3:0f:e2:69:cf:4a:e6:20:62:f9:
                    59:7f:a7:bb:e4:a2:d0:f8:88:db:67:f2:46:1d:fb:
                    9e:e0:a9:8f:67:33:ca:e6:22:6e:e4:e8:71:c3:26:
                    8a:f4:42:3d:48:ff:7b:73:ef:3f:79:3f:2e:76:35:
                    45:93:6b:db:42:0c:08:65:5d:b7:a2:9d:25:d6:80:
                    28:68:4e:47:96:08:04:c9:41:39:24:43:83:ee:f5:
                    c5:0b:67:26:91:95:0a:14:5d:be:69:36:90:c0:5e:
                    90:15:27:5a:2e:52:72:dc:01:a6:d6:e2:be:10:ab:
                    67:99:c6:f3:11:a3:58:23:49:dc:54:12:16:79:26:
                    b3:71:3b:c2:51:f3:f6:81:e7:64:f3:c1:49:67:55:
                    87:98:8e:94:22:8a:5c:72:c8:6b:b5:5d:60:b2:95:
                    02:1b:17:9c:4a:b7:a5:88:80:1a:c7:c3:e8:52:9f:
                    b5:8b:fe:5c:d7:47:d5:30:17:4d:ab:8e:01:4d:65:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:82:97:37:7E:11:E6:FF:3D:C4:01:20:A6:7F:6D:12:F1:59:78
            X509v3 Authority Key Identifier:
                keyid:8D:C8:51:94:51:1B:A4:03:C1:12:A8:F5:E8:43:BA:07:86:DE:E4:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/8DC85194511BA403C112A8F5E843BA0786DEE453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC85194511BA403C112A8F5E843BA0786DEE453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5M3McpBTXGA2VZ5uifcx6M5VhkJc38rvfGS8Fh2ULg1/0/34352e3138302e3130382e302f32322d3332203d3e20323639313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:f7:c8:5d:9a:8b:26:e0:c4:a1:ff:51:df:eb:dc:ae:fa:2a:
         fd:4f:63:f0:e0:91:55:c3:c1:9f:ad:ae:9e:7a:22:ec:62:cd:
         c9:0d:65:a7:aa:4d:b9:ab:76:80:d3:d4:d6:c2:fd:13:d6:a7:
         7e:7c:6c:43:2e:99:32:7d:e8:89:84:a3:a1:f4:54:e9:c2:e6:
         de:ab:b0:42:76:d7:98:8d:40:19:ba:c5:af:5f:2d:5e:56:bf:
         f0:a2:54:e8:76:a5:0e:c4:c3:c3:1c:ac:98:98:c6:bb:3c:59:
         e2:33:19:50:44:e8:22:ff:af:f4:2b:5e:10:ff:83:21:ec:f9:
         84:a1:30:30:9e:1b:52:f3:6c:15:c2:9c:bf:12:29:d6:c9:06:
         c6:f3:da:17:c9:f6:27:60:b4:23:b7:2f:a3:96:15:f8:b0:19:
         4a:e9:06:8e:44:93:7a:33:54:0d:39:c5:32:77:c8:b3:87:12:
         40:04:67:c4:29:16:b9:85:4f:27:9e:1e:5b:45:10:5a:4b:44:
         35:a3:6d:94:12:76:84:e0:1d:01:c6:18:ea:7e:e3:f2:b2:2d:
         56:f6:b8:7f:19:08:44:82:c7:03:0f:a3:fc:cc:4a:47:4e:f4:
         1d:f8:d4:bc:c9:d2:47:05:b6:89:a4:9d:cd:63:b8:6b:9c:79:
         ca:dc:c2:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdTvS2MN5LWSspysh4tNcDieMYY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDODUxOTQ1MTFCQTQwM0MxMTJBOEY1RTg0M0JBMDc4
NkRFRTQ1MzAeFw0yNTA5MDIyMjQ3MTBaFw0yNjA5MDEyMjUyMTBaMDMxMTAvBgNV
BAMTKEYyQ0Q4Mjk3Mzc3RTExRTZGRjNEQzQwMTIwQTY3RjZEMTJGMTU5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjePtq3bBWbYRCk3qOJTKEINb+
PzORH9FFMtDS1VUrs6avrbl1NmPXQezWseqLCv2OpSpVsUVJWd3Xqoov89F58w/i
ac9K5iBi+Vl/p7vkotD4iNtn8kYd+57gqY9nM8rmIm7k6HHDJor0Qj1I/3tz7z95
Py52NUWTa9tCDAhlXbeinSXWgChoTkeWCATJQTkkQ4Pu9cULZyaRlQoUXb5pNpDA
XpAVJ1ouUnLcAabW4r4Qq2eZxvMRo1gjSdxUEhZ5JrNxO8JR8/aB52TzwUlnVYeY
jpQiilxyyGu1XWCylQIbF5xKt6WIgBrHw+hSn7WL/lzXR9UwF02rjgFNZUbFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8s2Clzd+Eeb/PcQBIKZ/bRLxWXgwHwYDVR0j
BBgwFoAUjchRlFEbpAPBEqj16EO6B4be5FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVNM01jcEJUWEdBMlZaNXVpZmN4Nk01VmhrSmMzOHJ2ZkdTOEZoMlVM
ZzEvMC84REM4NTE5NDUxMUJBNDAzQzExMkE4RjVFODQzQkEwNzg2REVFNDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzg1MTk0NTExQkE0MDND
MTEyQThGNUU4NDNCQTA3ODZERUU0NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1TTNNY3BCVFhHQTJWWjV1aWZjeDZNNVZoa0pjMzhydmZHUzhGaDJVTGcxLzAv
MzQzNTJlMzEzODMwMmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMTM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttGwwDQYJKoZIhvcNAQELBQADggEBAAz3yF2a
iybgxKH/Ud/r3K76Kv1PY/DgkVXDwZ+trp56IuxizckNZaeqTbmrdoDT1NbC/RPW
p358bEMumTJ96ImEo6H0VOnC5t6rsEJ215iNQBm6xa9fLV5Wv/CiVOh2pQ7Ew8Mc
rJiYxrs8WeIzGVBE6CL/r/QrXhD/gyHs+YShMDCeG1LzbBXCnL8SKdbJBsbz2hfJ
9idgtCO3L6OWFfiwGUrpBo5Ek3ozVA05xTJ3yLOHEkAEZ8QpFrmFTyeeHltFEFpL
RDWjbZQSdoTgHQHGGOp+4/KyLVb2uH8ZCESCxwMPo/zMSkdO9B341LzJ0kcFtomk
nc1juGucecrcwnE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:59:45 2025 by rpki-client