Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323639323230.roa
File:                     34352e3138322e36332e302f32342d3332203d3e20323639323230.roa (raw, json)
Hash identifier:          VRRNO3wSlhhADTFt3hMirNvbwbDqtAQxOXIt6iLQgbg=
Subject key identifier:   26:8C:4C:2F:62:90:11:6D:80:7B:F5:14:34:D8:03:38:1B:41:4C:BE
Certificate issuer:       /CN=90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF
Certificate serial:       4B14CEA8F25DF37C5AB0FA9D58A23F24A901C405
Authority key identifier: 90:AD:CD:FA:22:EA:68:F9:ED:A4:D7:44:4C:E4:2F:83:B5:84:9F:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323639323230.roa
Signing time:             Tue 23 Sep 2025 21:36:42 +0000
ROA not before:           Tue 23 Sep 2025 21:31:42 +0000
ROA not after:            Tue 22 Sep 2026 21:36:42 +0000
asID:                     269220
IP address blocks:        45.182.63.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.crl
                          rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:14:ce:a8:f2:5d:f3:7c:5a:b0:fa:9d:58:a2:3f:24:a9:01:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF
        Validity
            Not Before: Sep 23 21:31:42 2025 GMT
            Not After : Sep 22 21:36:42 2026 GMT
        Subject: CN=268C4C2F6290116D807BF51434D803381B414CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:ec:9c:16:02:e8:a2:fc:e6:a8:6f:41:98:
                    ca:ef:94:3a:94:ac:b7:4b:11:d8:65:46:0a:15:47:
                    b5:e1:a3:d8:56:2b:b5:21:cf:d4:b2:98:24:59:be:
                    f0:a6:a9:5f:0b:a8:fd:f5:bb:62:f7:62:91:84:2f:
                    6f:a3:bc:93:28:30:3c:87:d0:65:aa:be:1f:da:7e:
                    69:71:a3:fe:ef:ab:83:80:3d:8f:3b:99:e8:e1:f8:
                    8a:94:62:20:15:01:67:42:03:0c:ac:bc:05:f5:c8:
                    ec:24:4f:5d:08:15:87:cf:36:4e:4f:03:6e:b9:11:
                    b4:bf:56:5e:48:22:2c:9a:b4:72:5f:cc:eb:d6:1e:
                    84:5d:b1:ce:5d:a9:c5:4a:36:56:93:5c:32:49:c8:
                    73:6b:97:cb:80:c3:3b:72:20:de:af:b8:c9:ac:a7:
                    ce:ef:9a:3a:52:6f:c2:cf:29:c2:78:9e:0e:78:a5:
                    7e:4e:d4:3c:89:7b:93:da:dc:13:ac:a6:15:12:1b:
                    ae:28:85:db:96:a3:da:b8:02:ab:a2:5d:de:60:29:
                    5e:7e:a3:53:73:3b:90:72:7a:2f:f9:f1:f8:61:8d:
                    b1:7a:96:1b:2a:1d:3f:82:cb:7c:7f:cb:b6:ae:5d:
                    ff:ea:6c:95:cd:8d:a5:f2:4b:33:02:91:5f:e9:8c:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:4C:2F:62:90:11:6D:80:7B:F5:14:34:D8:03:38:1B:41:4C:BE
            X509v3 Authority Key Identifier:
                keyid:90:AD:CD:FA:22:EA:68:F9:ED:A4:D7:44:4C:E4:2F:83:B5:84:9F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90ADCDFA22EA68F9EDA4D7444CE42F83B5849FCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/34352e3138322e36332e302f32342d3332203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f9:36:70:7b:84:33:a6:c6:8a:fc:e4:15:50:35:d9:ef:93:
         65:ee:6a:8b:4b:6c:d9:ac:cb:00:51:bb:e3:32:b9:50:1e:e1:
         91:8b:b3:a6:19:8a:ea:83:08:29:de:11:10:8f:73:2e:83:ea:
         ba:8f:59:7f:c0:1e:08:76:05:22:15:0b:e7:a0:e5:3b:87:63:
         fc:23:04:84:bb:d4:fb:27:6e:49:f9:04:6b:db:ad:78:2b:c1:
         02:dd:d3:5f:29:49:9d:8e:15:e9:22:3a:f9:43:ae:a1:f1:47:
         d5:db:5e:a9:a4:3b:cf:fb:ed:13:ab:5e:3f:f3:4c:f9:cf:5a:
         f8:83:29:30:bb:49:38:9f:b3:e3:b3:37:47:d0:b3:22:fd:97:
         f7:7a:d3:5c:af:15:ef:94:53:7f:a0:54:e0:c9:12:45:7d:31:
         09:cf:e6:d4:b5:d9:0c:03:34:e7:8a:e3:8f:8c:47:18:5d:57:
         67:3c:30:83:ae:fd:bb:8b:c7:f4:b8:fa:78:a1:89:9a:3d:bd:
         02:8d:cb:28:e9:25:3d:94:be:83:34:9d:5e:ef:fd:65:2d:79:
         50:4c:c0:e2:53:f6:8b:d1:09:fa:5e:c9:d0:b5:24:a9:00:44:
         ee:6a:59:97:7f:56:b6:73:df:e5:5b:59:bd:f0:47:8f:bb:92:
         e1:a5:e5:04
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSxTOqPJd83xasPqdWKI/JKkBxAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBBRENERkEyMkVBNjhGOUVEQTRENzQ0NENFNDJGODNC
NTg0OUZDRjAeFw0yNTA5MjMyMTMxNDJaFw0yNjA5MjIyMTM2NDJaMDMxMTAvBgNV
BAMTKDI2OEM0QzJGNjI5MDExNkQ4MDdCRjUxNDM0RDgwMzM4MUI0MTRDQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ceycFgLoovzmqG9BmMrvlDqU
rLdLEdhlRgoVR7Xho9hWK7Uhz9SymCRZvvCmqV8LqP31u2L3YpGEL2+jvJMoMDyH
0GWqvh/afmlxo/7vq4OAPY87mejh+IqUYiAVAWdCAwysvAX1yOwkT10IFYfPNk5P
A265EbS/Vl5IIiyatHJfzOvWHoRdsc5dqcVKNlaTXDJJyHNrl8uAwztyIN6vuMms
p87vmjpSb8LPKcJ4ng54pX5O1DyJe5Pa3BOsphUSG64ohduWo9q4AquiXd5gKV5+
o1NzO5Byei/58fhhjbF6lhsqHT+Cy3x/y7auXf/qbJXNjaXySzMCkV/pjA75AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJoxML2KQEW2Ae/UUNNgDOBtBTL4wHwYDVR0j
BBgwFoAUkK3N+iLqaPntpNdETOQvg7WEn88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhSU0xTdFBwVUF4anJRQjdUZEhoU1VmOXVTdTFLQ1VBMk1MaW1HckhU
dmYvMC85MEFEQ0RGQTIyRUE2OEY5RURBNEQ3NDQ0Q0U0MkY4M0I1ODQ5RkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwQURDREZBMjJFQTY4RjlF
REE0RDc0NDRDRTQyRjgzQjU4NDlGQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoUlNMU3RQcFVBeGpyUUI3VGRIaFNVZjl1U3UxS0NVQTJNTGltR3JIVHZmLzAv
MzQzNTJlMzEzODMyMmUzNjMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY/MA0GCSqGSIb3DQEBCwUAA4IBAQAI+TZwe4Qz
psaK/OQVUDXZ75Nl7mqLS2zZrMsAUbvjMrlQHuGRi7OmGYrqgwgp3hEQj3Mug+q6
j1l/wB4IdgUiFQvnoOU7h2P8IwSEu9T7J25J+QRr2614K8EC3dNfKUmdjhXpIjr5
Q66h8UfV216ppDvP++0Tq14/80z5z1r4gykwu0k4n7PjszdH0LMi/Zf3etNcrxXv
lFN/oFTgyRJFfTEJz+bUtdkMAzTniuOPjEcYXVdnPDCDrv27i8f0uPp4oYmaPb0C
jcso6SU9lL6DNJ1e7/1lLXlQTMDiU/aL0Qn6XsnQtSSpAETualmXf1a2c9/lW1m9
8EePu5LhpeUE
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:15:56 2025 by rpki-client