Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
File:                     34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          KQXI2qaY/0J5AROdpd404puiKa5sk3dJIp7GXWxIelQ=
Subject key identifier:   18:8E:C8:06:70:F4:07:E4:D2:C6:30:5D:5D:85:9D:25:19:B1:82:9C
Certificate issuer:       /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
Certificate serial:       48B815EE1F1820C38E68B766363A2171CC239B77
Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
Signing time:             Mon 06 Oct 2025 22:57:38 +0000
ROA not before:           Mon 06 Oct 2025 22:52:38 +0000
ROA not after:            Mon 05 Oct 2026 22:57:38 +0000
asID:                     267056
IP address blocks:        45.226.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b8:15:ee:1f:18:20:c3:8e:68:b7:66:36:3a:21:71:cc:23:9b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
        Validity
            Not Before: Oct  6 22:52:38 2025 GMT
            Not After : Oct  5 22:57:38 2026 GMT
        Subject: CN=188EC80670F407E4D2C6305D5D859D2519B1829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:18:1e:e6:30:ba:6e:58:01:ca:1d:13:91:78:
                    41:6a:09:8f:b3:d1:a4:40:1f:6c:13:92:9c:a5:da:
                    59:94:49:30:bb:08:a4:cc:cc:2e:93:96:02:20:f6:
                    ed:6e:60:0d:96:df:5c:74:33:76:59:b8:8e:5b:f7:
                    fc:b2:35:a0:28:e0:d1:bc:33:07:0a:85:f0:06:63:
                    23:fc:2e:ad:a4:37:50:22:d8:7a:6a:4e:e5:9b:b6:
                    4f:e9:81:78:5f:1b:46:eb:b4:a6:e9:09:3f:16:40:
                    8f:22:b4:49:6a:ea:8e:fa:e0:9a:e9:0b:76:cd:8e:
                    b4:ce:1c:d7:f6:2f:15:bd:7f:e7:ab:e6:3f:11:7e:
                    4d:cf:27:8f:31:9c:0f:c5:dc:6a:d1:65:28:1c:14:
                    86:43:04:be:e8:d4:57:1b:c7:f5:58:1e:97:61:6b:
                    e7:0c:13:10:29:41:ab:a4:99:22:b0:be:30:87:7f:
                    16:36:59:64:86:50:b2:a2:d3:80:70:3f:da:33:bf:
                    ff:8f:e2:85:4e:e4:66:8a:6c:6a:1c:f4:6b:28:bd:
                    62:38:2f:2d:7c:19:36:0b:32:97:e1:e3:83:1c:3c:
                    ff:2b:d0:d3:3b:e2:3c:41:d0:9c:78:01:10:36:f2:
                    20:1c:21:61:b3:6d:0b:63:b2:5f:57:d1:dc:d5:14:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8E:C8:06:70:F4:07:E4:D2:C6:30:5D:5D:85:9D:25:19:B1:82:9C
            X509v3 Authority Key Identifier:
                keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:d7:bb:51:e4:12:bd:0e:6c:ba:65:1c:6d:b3:bf:48:0c:
         61:8e:e6:52:34:b5:be:71:11:95:21:40:58:d6:87:85:4e:61:
         d1:75:08:a1:5c:1f:72:7b:a6:40:3d:df:ae:98:99:60:2a:23:
         f2:b0:5f:fd:50:e3:47:f2:84:58:71:68:17:bf:cf:bf:fc:d4:
         44:67:47:79:1b:85:10:d3:f0:1b:7a:e5:b4:d0:41:6c:4e:16:
         e5:6b:a1:c2:bf:72:ed:46:da:83:05:8b:d4:4d:7f:4c:73:64:
         88:65:09:96:04:4e:77:0d:5c:60:d5:e4:d7:b4:7b:44:95:81:
         c0:c9:17:1b:1e:5d:5f:39:8f:78:f1:83:c5:52:08:3e:0f:b5:
         a8:12:33:50:ef:ac:0d:80:be:54:50:fd:50:e0:e0:26:64:6e:
         9d:0c:10:0e:28:69:d9:b2:62:2c:c3:d0:b6:5f:68:99:94:0a:
         19:97:6a:e3:bf:a9:53:46:9a:c9:7b:45:1b:1d:9c:30:9f:53:
         11:f1:7b:45:b1:77:9d:0c:a0:11:fe:c7:68:61:d1:f7:87:49:
         bc:e4:d5:0d:95:36:8b:04:c3:ec:5f:a1:80:c8:c1:c9:99:bc:
         c4:fe:1d:db:95:33:3a:66:06:ec:21:2b:ab:a8:a5:f0:14:f6:
         ff:f0:2b:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSLgV7h8YIMOOaLdmNjohccwjm3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFNURFQjI4RkIxQjc3QzU2MjFBNDhEMzMwMzQ5REIw
N0QxRDNGODAeFw0yNTEwMDYyMjUyMzhaFw0yNjEwMDUyMjU3MzhaMDMxMTAvBgNV
BAMTKDE4OEVDODA2NzBGNDA3RTREMkM2MzA1RDVEODU5RDI1MTlCMTgyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjGB7mMLpuWAHKHROReEFqCY+z
0aRAH2wTkpyl2lmUSTC7CKTMzC6TlgIg9u1uYA2W31x0M3ZZuI5b9/yyNaAo4NG8
MwcKhfAGYyP8Lq2kN1Ai2HpqTuWbtk/pgXhfG0brtKbpCT8WQI8itElq6o764Jrp
C3bNjrTOHNf2LxW9f+er5j8Rfk3PJ48xnA/F3GrRZSgcFIZDBL7o1Fcbx/VYHpdh
a+cMExApQaukmSKwvjCHfxY2WWSGULKi04BwP9ozv/+P4oVO5GaKbGoc9GsovWI4
Ly18GTYLMpfh44McPP8r0NM74jxB0Jx4ARA28iAcIWGzbQtjsl9X0dzVFLqzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGI7IBnD0B+TSxjBdXYWdJRmxgpwwHwYDVR0j
BBgwFoAUquXeso+xt3xWIaSNMwNJ2wfR0/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGpr
czYvMC9BQUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRTVERUIyOEZCMUI3N0M1
NjIxQTQ4RDMzMDM0OURCMDdEMUQzRjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JwalF6bjRiTnVCZ28zZUU5U2tXQnplZG56ZHdLVG1rRVR1YXoyR0Rqa3M2LzAv
MzQzNTJlMzIzMjM2MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4tAwDQYJKoZIhvcNAQELBQADggEBAHrl17tR
5BK9Dmy6ZRxts79IDGGO5lI0tb5xEZUhQFjWh4VOYdF1CKFcH3J7pkA9366YmWAq
I/KwX/1Q40fyhFhxaBe/z7/81ERnR3kbhRDT8Bt65bTQQWxOFuVrocK/cu1G2oMF
i9RNf0xzZIhlCZYETncNXGDV5Ne0e0SVgcDJFxseXV85j3jxg8VSCD4PtagSM1Dv
rA2AvlRQ/VDg4CZkbp0MEA4oadmyYizD0LZfaJmUChmXauO/qVNGmsl7RRsdnDCf
UxHxe0Wxd50MoBH+x2hh0feHSbzk1Q2VNosEw+xfoYDIwcmZvMT+HduVMzpmBuwh
K6uopfAU9v/wK4w=
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:58 2025 by rpki-client