Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa
File:                     34352e3232392e382e302f32322d3234203d3e20323637313233.roa (raw, json)
Hash identifier:          j9/yXjbHLeFdWjNt/+UbsU5bwMHLs49sOwHxrb3oU9U=
Subject key identifier:   0C:7F:2B:F8:D5:6C:EB:DB:9B:26:20:B7:5F:0F:4B:5A:8B:99:4B:4E
Certificate issuer:       /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
Certificate serial:       4891E91668CB86253971AC282A02C601F4D07117
Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa
Signing time:             Wed 01 Oct 2025 20:00:59 +0000
ROA not before:           Wed 01 Oct 2025 19:55:59 +0000
ROA not after:            Wed 30 Sep 2026 20:00:59 +0000
asID:                     267123
IP address blocks:        45.229.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl
                          rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:91:e9:16:68:cb:86:25:39:71:ac:28:2a:02:c6:01:f4:d0:71:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7
        Validity
            Not Before: Oct  1 19:55:59 2025 GMT
            Not After : Sep 30 20:00:59 2026 GMT
        Subject: CN=0C7F2BF8D56CEBDB9B2620B75F0F4B5A8B994B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:96:32:2c:23:3c:17:ca:50:8a:31:2d:c5:
                    ee:42:64:98:e7:aa:b5:62:15:af:b3:34:d6:e6:1e:
                    c0:d7:b6:10:e0:8a:aa:43:49:aa:5b:de:d1:80:af:
                    b9:23:27:dc:df:71:13:cf:4d:02:2c:4c:a2:38:e7:
                    c6:e7:5e:4c:9f:d5:39:75:3c:5b:48:e4:9e:3d:6f:
                    9d:4f:13:6a:52:dd:f9:88:3f:e9:43:15:9e:5e:b7:
                    d2:99:d2:13:ec:c2:ba:14:9b:70:7d:e0:74:d7:1e:
                    cd:05:ec:c3:b2:bc:13:3b:78:0b:a2:f5:4b:d4:06:
                    01:9e:f9:1a:f2:cc:07:af:b8:77:2b:35:96:a2:a3:
                    39:f2:c8:2e:36:25:06:19:ce:56:cc:21:76:71:1d:
                    87:77:81:30:25:fa:5c:6c:9f:19:55:f9:19:d6:c1:
                    c5:4d:e5:ea:e2:24:49:5e:86:b6:60:0d:27:75:2e:
                    07:24:77:34:1b:96:45:91:c8:4e:28:1c:eb:39:30:
                    1d:75:18:11:1d:3b:bf:c3:8f:44:b2:00:39:ff:d2:
                    18:25:fa:29:6e:de:26:1f:73:15:d6:21:58:25:87:
                    15:80:5a:a5:42:e5:0a:38:f4:bf:b3:30:74:55:a9:
                    53:bb:cc:3c:f6:0a:8a:12:f2:01:aa:91:2a:86:2d:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:2B:F8:D5:6C:EB:DB:9B:26:20:B7:5F:0F:4B:5A:8B:99:4B:4E
            X509v3 Authority Key Identifier:
                keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/34352e3232392e382e302f32322d3234203d3e20323637313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:00:7a:88:8f:bd:22:bb:7d:1c:0d:8b:d7:7e:f6:45:13:96:
         a7:ee:7d:42:0f:29:d1:a9:b4:92:0d:37:d8:39:6b:ac:42:36:
         7a:96:06:ce:33:ce:a3:b5:fc:0b:fb:bb:85:0e:be:51:54:68:
         ed:6f:c0:d3:11:b2:59:b0:e9:67:c8:3e:08:bb:b4:3c:23:4d:
         9d:be:47:52:2c:ec:86:17:de:1c:e2:fa:29:16:46:71:1d:50:
         9c:a0:30:56:a3:51:4c:1d:07:6f:e9:5d:c6:b6:c8:b4:e2:7b:
         12:7b:51:e4:2b:6b:4f:21:ec:9b:2a:f7:47:b0:b9:cc:c4:01:
         af:d6:90:c1:fa:ad:4a:14:e2:c2:58:ec:ac:e2:49:ed:b8:a3:
         0d:cb:69:c5:df:32:4c:45:4d:fb:d8:cb:e8:96:e8:12:c4:c8:
         07:c9:f1:02:ab:24:7e:de:92:c3:b5:06:3e:31:93:f9:88:8f:
         a8:d2:8a:25:18:8b:3a:38:52:31:80:fd:1f:9a:2f:de:4c:45:
         f0:24:1c:c3:2e:95:89:5e:69:49:66:3d:67:47:48:98:da:69:
         10:2c:d3:85:8b:61:c9:bc:48:d2:bb:24:9e:56:67:fe:12:e1:
         a0:41:53:b7:40:da:32:0a:f8:a1:9d:a1:50:51:c6:ca:86:4a:
         0d:06:eb:58
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSJHpFmjLhiU5cawoKgLGAfTQcRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY5RDFGRjE0QkQ2RDQyMDlBRjE5N0ExRTg3NjhFOEE3
QTkzQzVFNzAeFw0yNTEwMDExOTU1NTlaFw0yNjA5MzAyMDAwNTlaMDMxMTAvBgNV
BAMTKDBDN0YyQkY4RDU2Q0VCREI5QjI2MjBCNzVGMEY0QjVBOEI5OTRCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T5YyLCM8F8pQijEtxe5CZJjn
qrViFa+zNNbmHsDXthDgiqpDSapb3tGAr7kjJ9zfcRPPTQIsTKI458bnXkyf1Tl1
PFtI5J49b51PE2pS3fmIP+lDFZ5et9KZ0hPswroUm3B94HTXHs0F7MOyvBM7eAui
9UvUBgGe+RryzAevuHcrNZaioznyyC42JQYZzlbMIXZxHYd3gTAl+lxsnxlV+RnW
wcVN5eriJElehrZgDSd1LgckdzQblkWRyE4oHOs5MB11GBEdO7/Dj0SyADn/0hgl
+ilu3iYfcxXWIVglhxWAWqVC5Qo49L+zMHRVqVO7zDz2CooS8gGqkSqGLRHjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDH8r+NVs69ubJiC3Xw9LWouZS04wHwYDVR0j
BBgwFoAU350f8UvW1CCa8Zeh6HaOinqTxecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUFFVWVpcFFrZnhnYzhwS0FlcnRVR0xtTUU0NUtSYnR1QkFZNDZYeTh6
M2UvMC9ERjlEMUZGMTRCRDZENDIwOUFGMTk3QTFFODc2OEU4QTdBOTNDNUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGOUQxRkYxNEJENkQ0MjA5
QUYxOTdBMUU4NzY4RThBN0E5M0M1RTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VBRVVlaXBRa2Z4Z2M4cEtBZXJ0VUdMbU1FNDVLUmJ0dUJBWTQ2WHk4ejNlLzAv
MzQzNTJlMzIzMjM5MmUzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzMx
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3lCDANBgkqhkiG9w0BAQsFAAOCAQEASQB6iI+9Irt9
HA2L1372RROWp+59Qg8p0am0kg032DlrrEI2epYGzjPOo7X8C/u7hQ6+UVRo7W/A
0xGyWbDpZ8g+CLu0PCNNnb5HUizshhfeHOL6KRZGcR1QnKAwVqNRTB0Hb+ldxrbI
tOJ7EntR5CtrTyHsmyr3R7C5zMQBr9aQwfqtShTiwljsrOJJ7bijDctpxd8yTEVN
+9jL6JboEsTIB8nxAqskft6Sw7UGPjGT+YiPqNKKJRiLOjhSMYD9H5ov3kxF8CQc
wy6ViV5pSWY9Z0dImNppECzThYthybxI0rsknlZn/hLhoEFTt0DaMgr4oZ2hUFHG
yoZKDQbrWA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:55:44 2025 by rpki-client