Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa
File:                     34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (raw, json)
Hash identifier:          i8P9i+svn6eTugjVKIH7LsBAziQNryR6tY4w3i2ypmg=
Subject key identifier:   C6:6E:C3:92:C9:AA:18:BE:E4:33:70:60:20:F5:3C:40:B5:08:D5:15
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       058810B3BF6EF14B9E3159DAF03909D8EC2CB19C
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa
Signing time:             Wed 30 Jul 2025 17:02:29 +0000
ROA not before:           Wed 30 Jul 2025 16:57:29 +0000
ROA not after:            Wed 29 Jul 2026 17:02:29 +0000
asID:                     268500
IP address blocks:        45.161.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
                          rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:88:10:b3:bf:6e:f1:4b:9e:31:59:da:f0:39:09:d8:ec:2c:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Jul 30 16:57:29 2025 GMT
            Not After : Jul 29 17:02:29 2026 GMT
        Subject: CN=C66EC392C9AA18BEE433706020F53C40B508D515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:ba:db:96:0c:cd:a5:ed:de:a1:5f:06:bd:
                    e4:07:8e:52:9a:7b:10:b3:e9:99:ee:6c:82:78:92:
                    b9:a7:b9:50:6f:89:e8:cb:8f:28:f5:be:7e:b2:5b:
                    4f:63:70:6f:2b:0c:35:0a:ee:c1:4d:8e:e6:98:54:
                    02:3f:76:a2:d9:62:fa:91:13:3b:b0:ef:a8:ae:d8:
                    fb:c3:d0:16:f1:0b:b3:8b:e2:ed:b8:53:68:c9:de:
                    b3:e8:25:f5:99:40:ad:a6:e0:78:2f:e9:e6:9f:2d:
                    21:34:b0:75:9e:ed:c3:a0:e4:85:c4:a5:cb:c2:2d:
                    fa:20:d6:02:a5:c4:ec:41:80:d9:11:e4:91:0f:47:
                    a1:5d:61:3d:6d:aa:18:cd:0a:54:8f:ae:d2:41:5d:
                    80:db:f0:99:1b:4d:3d:d8:bb:0d:d4:64:6a:ad:84:
                    a7:c6:de:a5:36:f6:66:b1:b2:2b:19:c1:c7:ea:29:
                    d7:2d:ca:b1:d2:1d:f2:8e:d0:35:9b:4f:91:5a:0b:
                    18:79:b8:b0:0e:6f:b7:21:fe:88:57:7e:4b:f2:e0:
                    22:54:76:e6:1f:2a:e9:c1:7f:04:c1:b8:14:44:ef:
                    c6:cd:88:a9:25:db:29:ac:d2:24:74:68:e8:8a:2c:
                    0f:56:04:c1:2b:bd:37:c9:1c:c0:b7:58:f0:2e:55:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:C3:92:C9:AA:18:BE:E4:33:70:60:20:F5:3C:40:B5:08:D5:15
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/34352e3136312e33362e302f32322d3332203d3e20323638353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:ea:50:1f:74:91:69:06:db:6c:e0:1e:c1:cf:a1:12:85:
         48:7d:eb:41:01:47:9b:2d:06:8b:1a:93:9a:34:d3:0a:22:9f:
         c6:c9:ac:c5:db:b9:6e:34:a0:9f:21:1c:f9:96:75:67:06:bf:
         b1:a6:99:98:25:34:fd:57:d1:39:ef:17:42:37:ff:84:45:41:
         24:36:f1:85:69:3d:56:29:cb:49:42:a5:f5:10:02:b8:5b:ef:
         23:22:37:d8:46:c6:33:ec:13:c7:7d:5f:22:e9:5d:69:ce:b7:
         b8:ae:f1:d1:99:84:58:7b:f9:f0:0d:23:e2:a2:da:cc:75:16:
         03:16:30:c3:6a:92:86:76:d9:1d:7d:f9:22:b9:08:d2:d3:50:
         cb:94:65:eb:24:e1:0a:d7:58:1d:89:b8:06:f8:c4:ee:4e:4a:
         6e:97:83:a7:95:00:e5:ac:c5:0c:a6:f3:ba:42:1f:c7:9f:5d:
         b6:aa:3b:eb:45:c5:25:34:79:dc:7b:88:79:6f:24:44:0a:99:
         93:6f:1e:20:7c:dc:88:63:e7:f8:31:40:17:14:19:80:fd:1c:
         ac:09:bc:0d:5b:cb:30:56:a5:d4:27:72:32:0d:e5:2e:48:e1:
         99:c6:3f:48:88:f0:6c:c9:a7:39:f3:cd:7f:a1:0f:c1:1b:30:
         d8:85:c3:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBYgQs79u8UueMVna8DkJ2OwssZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB
MDhENEZGMDAeFw0yNTA3MzAxNjU3MjlaFw0yNjA3MjkxNzAyMjlaMDMxMTAvBgNV
BAMTKEM2NkVDMzkyQzlBQTE4QkVFNDMzNzA2MDIwRjUzQzQwQjUwOEQ1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl57rblgzNpe3eoV8GveQHjlKa
exCz6ZnubIJ4krmnuVBviejLjyj1vn6yW09jcG8rDDUK7sFNjuaYVAI/dqLZYvqR
Ezuw76iu2PvD0BbxC7OL4u24U2jJ3rPoJfWZQK2m4Hgv6eafLSE0sHWe7cOg5IXE
pcvCLfog1gKlxOxBgNkR5JEPR6FdYT1tqhjNClSPrtJBXYDb8JkbTT3Yuw3UZGqt
hKfG3qU29maxsisZwcfqKdctyrHSHfKO0DWbT5FaCxh5uLAOb7ch/ohXfkvy4CJU
duYfKunBfwTBuBRE78bNiKkl2yms0iR0aOiKLA9WBMErvTfJHMC3WPAuVReRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxm7DksmqGL7kM3BgIPU8QLUI1RUwHwYDVR0j
BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D
UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz
NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5TDFEVDF3a1pidDNtdUFxYTFUWDFaelgzUGpjNkNmUGhhOWZBeDJvQ1FrLzAv
MzQzNTJlMzEzNjMxMmUzMzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaEkMA0GCSqGSIb3DQEBCwUAA4IBAQBKkepQH3SR
aQbbbOAewc+hEoVIfetBAUebLQaLGpOaNNMKIp/GyazF27luNKCfIRz5lnVnBr+x
ppmYJTT9V9E57xdCN/+ERUEkNvGFaT1WKctJQqX1EAK4W+8jIjfYRsYz7BPHfV8i
6V1pzre4rvHRmYRYe/nwDSPiotrMdRYDFjDDapKGdtkdffkiuQjS01DLlGXrJOEK
11gdibgG+MTuTkpul4OnlQDlrMUMpvO6Qh/Hn122qjvrRcUlNHnce4h5byRECpmT
bx4gfNyIY+f4MUAXFBmA/RysCbwNW8swVqXUJ3IyDeUuSOGZxj9IiPBsyac5881/
oQ/BGzDYhcNQ
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:56 2025 by rpki-client