Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/34352e3139312e3138312e302f32342d3332203d3e20313938393439.roa
File:                     34352e3139312e3138312e302f32342d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          wnw5pPVyKOeskkzwKmtau47nc7ZLMgakeZ3uwkKTvbo=
Subject key identifier:   0C:89:A5:C8:8C:47:E1:25:77:AF:97:7E:B5:B1:FB:F4:14:A6:8D:A9
Certificate issuer:       /CN=12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A
Certificate serial:       553FABEFC381B58E9898B10592BC13C46C70A59C
Authority key identifier: 12:E3:6D:0D:E2:88:3B:3D:EB:BE:89:A0:8A:8C:64:74:B8:AC:96:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/34352e3139312e3138312e302f32342d3332203d3e20313938393439.roa
Signing time:             Thu 25 Sep 2025 14:08:37 +0000
ROA not before:           Thu 25 Sep 2025 14:03:37 +0000
ROA not after:            Thu 24 Sep 2026 14:08:37 +0000
asID:                     198949
IP address blocks:        45.191.181.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.crl
                          rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 17:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3f:ab:ef:c3:81:b5:8e:98:98:b1:05:92:bc:13:c4:6c:70:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A
        Validity
            Not Before: Sep 25 14:03:37 2025 GMT
            Not After : Sep 24 14:08:37 2026 GMT
        Subject: CN=0C89A5C88C47E12577AF977EB5B1FBF414A68DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:a3:25:27:2c:51:80:c6:d5:69:53:ad:ff:
                    69:fa:fe:51:fd:8f:93:b1:76:0d:87:5b:ca:19:6b:
                    5b:e9:19:59:14:29:cc:39:9b:91:58:86:1c:41:60:
                    03:ce:aa:af:57:09:41:47:31:bb:4f:ee:dc:57:31:
                    12:93:a1:d2:09:ec:3c:fe:50:07:9e:a2:d3:32:8a:
                    a7:e0:99:67:4d:66:ec:96:d3:ed:36:3c:ee:1f:14:
                    b7:ee:61:b3:f0:22:ce:ff:ab:cd:b5:84:4a:4a:de:
                    48:16:0f:cb:30:34:36:ef:60:89:a0:f6:99:92:b8:
                    73:72:14:bd:4b:8f:fb:bb:79:18:6d:62:fd:90:8d:
                    69:53:20:11:3d:2e:8f:fb:06:48:b8:26:26:9e:9a:
                    e3:b2:08:80:0d:bf:de:9e:0f:8f:7b:95:52:d1:68:
                    29:ea:98:0a:81:54:97:4a:f1:d9:6a:00:42:ee:f7:
                    1f:90:32:5b:3f:20:e9:92:0d:d1:91:92:9e:9d:fa:
                    0c:27:35:27:ee:d7:2b:8f:4f:b8:c6:54:59:47:ed:
                    00:e8:1d:11:26:6c:35:73:d2:7c:87:e6:55:c7:69:
                    20:7e:98:bc:f5:d5:28:f2:23:80:f3:fb:d8:95:66:
                    36:aa:d3:1a:d8:b3:bb:27:fc:69:28:43:50:d1:96:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:A5:C8:8C:47:E1:25:77:AF:97:7E:B5:B1:FB:F4:14:A6:8D:A9
            X509v3 Authority Key Identifier:
                keyid:12:E3:6D:0D:E2:88:3B:3D:EB:BE:89:A0:8A:8C:64:74:B8:AC:96:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/34352e3139312e3138312e302f32342d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e1:b1:b2:00:91:54:88:5f:dd:53:15:2e:74:41:59:3a:a6:
         db:cb:db:16:35:25:61:f7:6b:b0:43:8f:af:65:41:a4:fc:d5:
         56:47:79:0c:55:2a:41:09:38:e3:f6:1d:36:86:98:cf:b4:b3:
         ef:b9:ac:e9:b9:da:dc:4e:3a:6f:2d:dc:c4:b2:70:cb:59:17:
         d6:a3:73:09:9d:42:90:f0:d4:ff:c4:9a:2c:83:e1:01:dc:20:
         e0:cb:26:15:3c:c5:a5:e8:8e:1c:d1:f9:e0:5b:d4:1b:2c:0e:
         2f:51:5e:f4:3e:e3:f4:1c:5d:c7:f0:1e:4e:94:4d:51:39:a0:
         ba:98:1f:97:7e:92:c7:00:fb:50:eb:bb:eb:13:7d:84:38:53:
         17:d1:78:e5:23:3a:06:d7:e9:fa:02:c5:07:a0:d3:71:2f:3e:
         00:21:0d:59:eb:90:d6:dc:0c:7e:f2:b4:a9:a7:09:16:d7:fb:
         a7:b4:f0:f6:9a:25:43:22:c4:d3:5c:11:4b:d7:81:40:6c:ee:
         1d:73:20:b8:c5:be:7a:7e:dc:5b:e2:78:78:ed:85:ac:6c:82:
         25:a8:14:1a:45:bf:06:0d:ce:dc:db:53:e5:2e:00:1a:62:b4:
         f1:a1:cf:9e:c6:32:66:1d:79:4f:ac:dc:e5:73:80:5e:86:02:
         96:01:ab:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVT+r78OBtY6YmLEFkrwTxGxwpZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJFMzZEMERFMjg4M0IzREVCQkU4OUEwOEE4QzY0NzRC
OEFDOTYwQTAeFw0yNTA5MjUxNDAzMzdaFw0yNjA5MjQxNDA4MzdaMDMxMTAvBgNV
BAMTKDBDODlBNUM4OEM0N0UxMjU3N0FGOTc3RUI1QjFGQkY0MTRBNjhEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EKMlJyxRgMbVaVOt/2n6/lH9
j5Oxdg2HW8oZa1vpGVkUKcw5m5FYhhxBYAPOqq9XCUFHMbtP7txXMRKTodIJ7Dz+
UAeeotMyiqfgmWdNZuyW0+02PO4fFLfuYbPwIs7/q821hEpK3kgWD8swNDbvYImg
9pmSuHNyFL1Lj/u7eRhtYv2QjWlTIBE9Lo/7Bki4JiaemuOyCIANv96eD497lVLR
aCnqmAqBVJdK8dlqAELu9x+QMls/IOmSDdGRkp6d+gwnNSfu1yuPT7jGVFlH7QDo
HREmbDVz0nyH5lXHaSB+mLz11SjyI4Dz+9iVZjaq0xrYs7sn/GkoQ1DRlvchAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDImlyIxH4SV3r5d+tbH79BSmjakwHwYDVR0j
BBgwFoAUEuNtDeKIOz3rvomgioxkdLislgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVRFV0E3UDloOUFFM1lmVDY4VVRiaHpvN2RmalR1SkZkYW02cUc5OVE5
V2ovMC8xMkUzNkQwREUyODgzQjNERUJCRTg5QTA4QThDNjQ3NEI4QUM5NjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRTM2RDBERTI4ODNCM0RF
QkJFODlBMDhBOEM2NDc0QjhBQzk2MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VURVdBN1A5aDlBRTNZZlQ2OFVUYmh6bzdkZmpUdUpGZGFtNnFHOTlROVdqLzAv
MzQzNTJlMzEzOTMxMmUzMTM4MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM5
MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtv7UwDQYJKoZIhvcNAQELBQADggEBAD3hsbIA
kVSIX91TFS50QVk6ptvL2xY1JWH3a7BDj69lQaT81VZHeQxVKkEJOOP2HTaGmM+0
s++5rOm52txOOm8t3MSycMtZF9ajcwmdQpDw1P/EmiyD4QHcIODLJhU8xaXojhzR
+eBb1BssDi9RXvQ+4/QcXcfwHk6UTVE5oLqYH5d+kscA+1Dru+sTfYQ4UxfReOUj
OgbX6foCxQeg03EvPgAhDVnrkNbcDH7ytKmnCRbX+6e08PaaJUMixNNcEUvXgUBs
7h1zILjFvnp+3FvieHjthaxsgiWoFBpFvwYNztzbU+UuABpitPGhz57GMmYdeU+s
3OVzgF6GApYBqwk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:38 2025 by rpki-client