Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa
File:                     34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa (raw, json)
Hash identifier:          YibpOJkqxwMtZPaNXBYGs7EUxz9MloB4YODU3r5svfA=
Subject key identifier:   5C:DC:7E:0D:BB:C2:95:55:3E:B2:A6:7F:3E:F1:C5:2B:AC:D2:97:06
Certificate issuer:       /CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6
Certificate serial:       51060CDFC0FF4838ACFEA7F885BB05231E56A764
Authority key identifier: 2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa
Signing time:             Thu 09 Oct 2025 00:41:59 +0000
ROA not before:           Thu 09 Oct 2025 00:36:59 +0000
ROA not after:            Thu 08 Oct 2026 00:41:59 +0000
asID:                     268903
IP address blocks:        45.175.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl
                          rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:06:0c:df:c0:ff:48:38:ac:fe:a7:f8:85:bb:05:23:1e:56:a7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6
        Validity
            Not Before: Oct  9 00:36:59 2025 GMT
            Not After : Oct  8 00:41:59 2026 GMT
        Subject: CN=5CDC7E0DBBC295553EB2A67F3EF1C52BACD29706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:4f:07:35:0f:5d:ab:37:d3:11:3a:cd:83:
                    6e:d7:eb:92:ed:7a:2b:6d:53:cf:4c:23:09:7d:ba:
                    fa:de:3d:7b:00:5d:3b:c3:a8:5a:36:d3:8f:b0:ae:
                    62:30:dc:bc:01:91:c2:ef:f9:c5:dd:94:c6:65:ae:
                    53:62:2b:1b:02:ec:cd:b2:4f:c0:a3:b8:a9:94:3f:
                    81:40:d1:d0:6c:81:77:5d:e0:94:40:8f:e0:1e:52:
                    99:11:bb:54:5d:a1:6d:d3:93:bd:79:72:25:4e:19:
                    a5:cb:4c:8e:8e:7a:07:ca:c1:ee:9a:8b:cd:10:3e:
                    42:bc:25:d1:51:62:92:dc:38:20:69:36:48:5f:cf:
                    b8:7f:09:bf:20:a4:6b:2c:ef:c8:14:1a:50:30:16:
                    ef:51:80:b2:3a:7c:6b:23:f6:3d:b5:e6:bd:48:13:
                    7a:85:a1:86:a6:3f:fd:38:c0:01:b8:45:d8:01:e9:
                    7d:0a:ec:7a:5e:88:ef:ee:b3:66:56:00:14:9d:41:
                    93:5c:86:77:5b:18:9c:77:9e:0a:09:59:ec:66:4f:
                    18:3d:f5:63:29:f2:b7:ca:23:83:90:d1:2f:d7:75:
                    4a:6a:b3:27:b5:29:a9:99:78:22:46:2c:fa:24:5e:
                    12:c6:22:16:ea:72:2f:bb:07:70:03:30:87:f0:f5:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DC:7E:0D:BB:C2:95:55:3E:B2:A6:7F:3E:F1:C5:2B:AC:D2:97:06
            X509v3 Authority Key Identifier:
                keyid:2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:af:2c:53:64:48:60:7b:b6:b6:e9:e8:73:ed:74:a5:c1:87:
         6d:7d:46:22:ed:e4:54:36:a6:1e:67:cd:8b:98:0a:99:89:e0:
         ab:8b:6d:36:d5:e6:e5:a5:dc:3c:aa:81:43:e7:77:d8:0c:af:
         e7:ca:9e:3d:4c:37:da:e9:7e:e2:a4:07:5d:83:88:df:5a:03:
         19:64:d9:ac:8a:13:6d:46:a5:8d:41:d8:67:f2:b6:a9:13:54:
         b6:91:47:06:c7:ea:83:e6:ba:c2:d5:bc:7d:cf:3b:a7:07:0c:
         23:04:8a:61:98:05:fb:45:33:25:ae:61:dd:8a:96:3a:64:e1:
         39:69:dc:97:5e:b9:2b:fe:7e:25:ba:0a:08:1b:d2:ba:3a:69:
         64:fe:12:d0:6f:c4:63:23:32:60:f9:94:93:27:67:40:55:31:
         0e:4d:27:b3:93:55:6a:cc:d3:16:c4:b4:28:58:ff:52:b0:0d:
         ab:de:98:cb:d6:2e:23:73:ed:a7:65:75:07:ee:06:71:86:4f:
         9e:2e:30:a0:6f:5a:af:39:09:ff:37:ad:69:87:90:b4:81:79:
         2f:3e:d2:77:57:4b:fe:27:44:5d:53:0b:b4:ce:6e:f2:9b:15:
         75:25:56:93:52:fc:98:12:cb:33:c3:0e:b1:3d:1a:65:9f:f9:
         65:1a:1f:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUQYM38D/SDis/qf4hbsFIx5Wp2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0NTMxQkJDM0JDNDMxNEUwRDA5NzU2NDFDQkE4Mjc2
Njk4MkNCNjAeFw0yNTEwMDkwMDM2NTlaFw0yNjEwMDgwMDQxNTlaMDMxMTAvBgNV
BAMTKDVDREM3RTBEQkJDMjk1NTUzRUIyQTY3RjNFRjFDNTJCQUNEMjk3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyE8HNQ9dqzfTETrNg27X65Lt
eittU89MIwl9uvrePXsAXTvDqFo204+wrmIw3LwBkcLv+cXdlMZlrlNiKxsC7M2y
T8CjuKmUP4FA0dBsgXdd4JRAj+AeUpkRu1RdoW3Tk715ciVOGaXLTI6OegfKwe6a
i80QPkK8JdFRYpLcOCBpNkhfz7h/Cb8gpGss78gUGlAwFu9RgLI6fGsj9j215r1I
E3qFoYamP/04wAG4RdgB6X0K7HpeiO/us2ZWABSdQZNchndbGJx3ngoJWexmTxg9
9WMp8rfKI4OQ0S/XdUpqsye1KamZeCJGLPokXhLGIhbqci+7B3ADMIfw9YbjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXNx+DbvClVU+sqZ/PvHFK6zSlwYwHwYDVR0j
BBgwFoAUK0Uxu8O8QxTg0JdWQcuoJ2aYLLYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5
NnkvMC8yQjQ1MzFCQkMzQkM0MzE0RTBEMDk3NTY0MUNCQTgyNzY2OTgyQ0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDUzMUJCQzNCQzQzMTRF
MEQwOTc1NjQxQ0JBODI3NjY5ODJDQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZDNuSzRpM2p2UG1ORmJWM0pzNW5DdFRnYkFHckJHMXVwaVRuVmFSOTZ5LzAv
MzQzNTJlMzEzNzM1MmUzMTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr7QwDQYJKoZIhvcNAQELBQADggEBAAOvLFNk
SGB7trbp6HPtdKXBh219RiLt5FQ2ph5nzYuYCpmJ4KuLbTbV5uWl3DyqgUPnd9gM
r+fKnj1MN9rpfuKkB12DiN9aAxlk2ayKE21GpY1B2GfytqkTVLaRRwbH6oPmusLV
vH3PO6cHDCMEimGYBftFMyWuYd2Kljpk4Tlp3JdeuSv+fiW6Cggb0ro6aWT+EtBv
xGMjMmD5lJMnZ0BVMQ5NJ7OTVWrM0xbEtChY/1KwDavemMvWLiNz7adldQfuBnGG
T54uMKBvWq85Cf83rWmHkLSBeS8+0ndXS/4nRF1TC7TObvKbFXUlVpNS/JgSyzPD
DrE9GmWf+WUaH84=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:42:36 2025 by rpki-client