Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
File:                     34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier:          Lx8z6+Hruj11yOIrk/1BhstwWtt1zamuVhOawokbpe0=
Subject key identifier:   E0:C5:5A:E0:4C:BC:AC:D6:CD:5B:E5:64:57:8D:53:29:37:E0:6C:2B
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       10F32F590DE62C2AB6FEA2056BD3BE2D3AF20186
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:26 +0000
ROA not before:           Fri 17 Oct 2025 11:55:26 +0000
ROA not after:            Fri 16 Oct 2026 12:00:26 +0000
asID:                     267991
IP address blocks:        45.167.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:2f:59:0d:e6:2c:2a:b6:fe:a2:05:6b:d3:be:2d:3a:f2:01:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:26 2025 GMT
            Not After : Oct 16 12:00:26 2026 GMT
        Subject: CN=E0C55AE04CBCACD6CD5BE564578D532937E06C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:bc:ec:66:1a:24:ee:f4:a7:7e:db:88:e9:
                    e7:41:5f:15:41:91:63:c9:5c:8b:65:9c:35:ca:19:
                    c6:54:55:3e:d8:1d:97:a9:72:62:22:98:fd:2c:56:
                    fb:85:92:84:89:17:7a:b8:04:c1:af:9e:9c:f7:bc:
                    c1:7c:23:92:de:a7:22:2b:15:27:d3:4e:ae:77:5d:
                    48:a2:32:da:a7:3f:8e:3c:06:ed:7d:5d:ef:f6:f8:
                    64:00:50:20:68:9f:aa:af:81:dc:65:70:b6:17:2d:
                    43:d7:c0:c2:e6:e3:8d:5b:0f:29:d1:13:8f:25:c0:
                    d5:ca:49:38:42:27:6d:7a:5a:95:cf:ff:24:0a:f8:
                    6d:56:66:76:16:f2:87:5e:05:0a:d8:91:d4:64:27:
                    4f:a8:2b:e6:f9:d2:21:f6:bb:a4:e4:dd:9a:13:25:
                    00:81:4e:ac:db:35:55:33:94:c6:38:98:a7:65:17:
                    ce:ee:38:28:1c:78:0c:b9:41:ea:4d:2d:fa:5a:32:
                    04:2c:7e:af:3c:f8:6b:1e:b9:e9:e6:a4:12:31:4e:
                    63:fa:e5:9c:47:e7:75:1b:f5:8a:19:3c:16:8f:30:
                    ac:2e:1a:cd:3c:12:25:8f:40:44:b2:e6:44:53:98:
                    c0:97:c6:a4:b4:c0:31:01:28:be:6c:92:92:87:8f:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:5A:E0:4C:BC:AC:D6:CD:5B:E5:64:57:8D:53:29:37:E0:6C:2B
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:12:38:6e:35:6e:e7:ee:48:c8:9a:8f:3f:15:85:dd:96:
         1c:8c:a8:ef:09:7e:2f:d5:3c:1d:bd:b4:99:c6:6e:24:3f:3c:
         c6:64:37:b1:cd:be:84:d9:fd:e9:c8:d9:9d:b8:11:e4:92:2c:
         5a:67:39:83:c6:b7:0d:8f:27:cd:4a:59:17:f0:aa:cd:61:f4:
         10:c1:ff:bf:af:2c:cb:61:2d:58:c7:36:7b:82:e1:80:c8:87:
         99:dc:7d:50:56:a8:3c:de:d5:ea:16:57:22:ad:04:82:79:63:
         1d:ee:60:03:b9:96:92:90:ac:72:15:c6:97:eb:79:ca:f2:f7:
         6c:45:33:23:d2:f0:e6:18:b3:de:8e:cd:31:9e:8a:8a:e9:a7:
         53:0f:cf:b8:1c:a9:48:d6:3b:c4:7c:29:a6:7f:36:63:1e:f6:
         56:79:2f:1a:9f:f7:a9:3b:be:66:57:fc:ba:34:d1:7d:38:ea:
         c6:3b:34:3d:a2:28:78:4c:fa:07:85:b5:0f:70:b4:51:2b:88:
         d6:4b:31:9b:f9:72:a2:34:ff:1b:22:20:c0:43:e3:e2:85:ab:
         18:9a:fe:fe:30:29:58:e1:38:74:c8:38:f6:67:1f:f2:d0:8b:
         5a:40:e6:b2:16:cd:34:20:94:b8:a3:07:8b:d9:d9:a7:79:34:
         7f:fc:e4:05
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEPMvWQ3mLCq2/qIFa9O+LTryAYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RTZBNDkzOTY3RkU1NUJBMDE0MDA2MUJDNjQzNURE
ODc3OUZEOTAeFw0yNTEwMTcxMTU1MjZaFw0yNjEwMTYxMjAwMjZaMDMxMTAvBgNV
BAMTKEUwQzU1QUUwNENCQ0FDRDZDRDVCRTU2NDU3OEQ1MzI5MzdFMDZDMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNn7zsZhok7vSnftuI6edBXxVB
kWPJXItlnDXKGcZUVT7YHZepcmIimP0sVvuFkoSJF3q4BMGvnpz3vMF8I5LepyIr
FSfTTq53XUiiMtqnP448Bu19Xe/2+GQAUCBon6qvgdxlcLYXLUPXwMLm441bDynR
E48lwNXKSThCJ216WpXP/yQK+G1WZnYW8odeBQrYkdRkJ0+oK+b50iH2u6Tk3ZoT
JQCBTqzbNVUzlMY4mKdlF87uOCgceAy5QepNLfpaMgQsfq88+GseuenmpBIxTmP6
5ZxH53Ub9YoZPBaPMKwuGs08EiWPQESy5kRTmMCXxqS0wDEBKL5skpKHjx+DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4MVa4Ey8rNbNW+VkV41TKTfgbCswHwYDVR0j
BBgwFoAUGZ5qSTln/lW6AUAGG8ZDXdh3n9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC8xOTlFNkE0OTM5NjdGRTU1QkEwMTQwMDYxQkM2NDM1REQ4Nzc5RkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUU2QTQ5Mzk2N0ZFNTVC
QTAxNDAwNjFCQzY0MzVERDg3NzlGRDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzQzNTJlMzEzNjM3MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALac2MA0GCSqGSIb3DQEBCwUAA4IBAQBNcxI4bjVu
5+5IyJqPPxWF3ZYcjKjvCX4v1TwdvbSZxm4kPzzGZDexzb6E2f3pyNmduBHkkixa
ZzmDxrcNjyfNSlkX8KrNYfQQwf+/ryzLYS1YxzZ7guGAyIeZ3H1QVqg83tXqFlci
rQSCeWMd7mADuZaSkKxyFcaX63nK8vdsRTMj0vDmGLPejs0xnoqK6adTD8+4HKlI
1jvEfCmmfzZjHvZWeS8an/epO75mV/y6NNF9OOrGOzQ9oih4TPoHhbUPcLRRK4jW
SzGb+XKiNP8bIiDAQ+PihasYmv7+MClY4Th0yDj2Zx/y0ItaQOayFs00IJS4oweL
2dmneTR//OQF
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:55 2025 by rpki-client