Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa
File:                     34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa (raw, json)
Hash identifier:          YPyFEHlG/8hqiItGFIYqnaQQ3UrGwW5uXRiQ8cIo2Lo=
Subject key identifier:   4B:AD:91:5C:17:3B:F4:10:8D:76:36:A5:05:8E:DE:B8:E7:A8:AC:83
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       176AB4A35B3C2C87F5001788A4D4B72F2CD0BA45
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa
Signing time:             Fri 03 Oct 2025 18:18:26 +0000
ROA not before:           Fri 03 Oct 2025 18:13:26 +0000
ROA not after:            Fri 02 Oct 2026 18:18:26 +0000
asID:                     267003
IP address blocks:        45.178.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6a:b4:a3:5b:3c:2c:87:f5:00:17:88:a4:d4:b7:2f:2c:d0:ba:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct  3 18:13:26 2025 GMT
            Not After : Oct  2 18:18:26 2026 GMT
        Subject: CN=4BAD915C173BF4108D7636A5058EDEB8E7A8AC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:c2:ea:12:f6:0a:1a:7b:16:5d:fd:37:1e:
                    f9:2d:2e:f0:45:40:7f:d4:9a:8d:b0:fd:40:14:8e:
                    de:0e:c1:ed:fa:d6:d0:66:c5:25:5c:b4:0a:8e:e2:
                    59:88:0c:b4:88:c6:00:c5:ee:e7:9b:87:ff:1e:f1:
                    02:dd:3a:aa:2a:e9:2f:01:6c:f8:7b:55:2c:71:80:
                    bf:70:5f:b1:3e:96:63:f6:ae:24:9a:5e:11:34:0a:
                    27:98:aa:77:5c:5a:e2:19:e2:64:e9:0f:d2:9a:c8:
                    c9:48:8d:cc:2c:be:57:c7:4f:31:05:94:bc:53:18:
                    2d:a0:36:67:68:8c:c6:90:c2:17:70:e6:bc:79:6a:
                    d5:02:2c:08:47:a2:ef:c8:e2:c7:35:21:79:ca:29:
                    1e:a0:5e:09:79:18:3e:9a:f4:fa:07:b8:65:67:ff:
                    4f:51:2b:16:c7:dc:9b:b9:aa:5c:cd:d7:41:6f:7c:
                    46:51:b0:40:c6:1e:8e:9d:a1:b1:88:9d:21:d5:5a:
                    a2:85:00:88:0f:44:bc:68:16:1d:72:a9:2a:ef:3b:
                    fd:5c:57:08:10:55:1d:de:f6:12:24:88:83:26:89:
                    fd:f3:c9:44:63:99:89:e5:f5:40:b2:7d:cb:68:58:
                    3d:19:de:34:0e:07:96:27:6e:9a:2e:ca:01:ac:bb:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AD:91:5C:17:3B:F4:10:8D:76:36:A5:05:8E:DE:B8:E7:A8:AC:83
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/34352e3137382e3132302e302f32322d3332203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:ec:f6:06:1a:b4:fd:7b:2b:d9:c9:2c:14:c0:87:ec:da:
         21:29:a1:d1:c5:88:ba:55:50:d6:5e:4f:18:24:23:73:35:28:
         d6:f5:1a:a1:60:d7:c9:87:4f:cf:12:9b:aa:1b:5a:85:65:6d:
         b2:23:48:8c:cd:7b:3b:35:8c:61:1a:f9:3d:d6:44:ac:53:db:
         12:3e:63:e9:09:fb:7e:08:85:0e:08:d4:72:3d:6a:75:95:0c:
         e7:04:81:d2:8f:86:38:bf:2a:d2:d0:bb:b3:c4:8d:d5:9b:6e:
         5b:f0:ea:02:e9:32:3e:71:0e:cd:47:e8:cd:44:55:d0:98:f3:
         09:44:35:fc:ac:49:9a:80:40:be:2d:fb:1a:a3:27:7e:26:c3:
         ce:49:bd:ef:7b:ce:c3:84:61:5d:9c:37:49:d7:53:d3:00:42:
         75:ab:cb:c7:fc:67:55:7a:37:22:d7:99:52:8f:7c:58:ec:7d:
         6a:30:c4:da:75:43:fd:fd:87:b8:48:ab:e3:2c:bc:ad:21:39:
         67:51:f8:75:6b:a7:34:b4:1b:28:55:dc:05:9c:21:95:2c:bb:
         ee:25:50:37:81:8c:18:dc:a8:c0:1f:ef:11:4b:4f:6c:20:99:
         f6:39:ec:f1:f2:1d:94:74:e9:a5:85:b4:3f:23:f7:c3:e1:19:
         16:d4:31:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF2q0o1s8LIf1ABeIpNS3LyzQukUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlBRUE0MDRBRkRBQzdENUE5QTE3NTVGM0EyN0ZGNUNB
RTEyREE3QjAeFw0yNTEwMDMxODEzMjZaFw0yNjEwMDIxODE4MjZaMDMxMTAvBgNV
BAMTKDRCQUQ5MTVDMTczQkY0MTA4RDc2MzZBNTA1OEVERUI4RTdBOEFDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2MLqEvYKGnsWXf03HvktLvBF
QH/Umo2w/UAUjt4Owe361tBmxSVctAqO4lmIDLSIxgDF7uebh/8e8QLdOqoq6S8B
bPh7VSxxgL9wX7E+lmP2riSaXhE0CieYqndcWuIZ4mTpD9KayMlIjcwsvlfHTzEF
lLxTGC2gNmdojMaQwhdw5rx5atUCLAhHou/I4sc1IXnKKR6gXgl5GD6a9PoHuGVn
/09RKxbH3Ju5qlzN10FvfEZRsEDGHo6dobGInSHVWqKFAIgPRLxoFh1yqSrvO/1c
VwgQVR3e9hIkiIMmif3zyURjmYnl9UCyfctoWD0Z3jQOB5YnbpouygGsuxvPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS62RXBc79BCNdjalBY7euOeorIMwHwYDVR0j
BBgwFoAU6a6kBK/ax9WpoXVfOif/XK4S2nswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1NCdEVXbTJrRWJFc0VpeVpYZlRGMmJjMTRpVHpDem1NOFNUaWgxakp2
VHYvMC9FOUFFQTQwNEFGREFDN0Q1QTlBMTc1NUYzQTI3RkY1Q0FFMTJEQTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5QUVBNDA0QUZEQUM3RDVB
OUExNzU1RjNBMjdGRjVDQUUxMkRBN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NTQnRFV20ya0ViRXNFaXlaWGZURjJiYzE0aVR6Q3ptTThTVGloMWpKdlR2LzAv
MzQzNTJlMzEzNzM4MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMDMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsngwDQYJKoZIhvcNAQELBQADggEBAA7T7PYG
GrT9eyvZySwUwIfs2iEpodHFiLpVUNZeTxgkI3M1KNb1GqFg18mHT88Sm6obWoVl
bbIjSIzNezs1jGEa+T3WRKxT2xI+Y+kJ+34IhQ4I1HI9anWVDOcEgdKPhji/KtLQ
u7PEjdWbblvw6gLpMj5xDs1H6M1EVdCY8wlENfysSZqAQL4t+xqjJ34mw85Jve97
zsOEYV2cN0nXU9MAQnWry8f8Z1V6NyLXmVKPfFjsfWowxNp1Q/39h7hIq+MsvK0h
OWdR+HVrpzS0GyhV3AWcIZUsu+4lUDeBjBjcqMAf7xFLT2wgmfY57PHyHZR06aWF
tD8j98PhGRbUMR0=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:47 2025 by rpki-client