Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (raw, json)
Hash identifier:          KUjKdr4lZgotgR+zs/iGunz2SVIT0IPjv96MtuYT+AU=
Subject key identifier:   42:B6:1C:EA:D2:64:47:53:49:3B:5F:90:95:09:76:62:34:5C:E8:A8
Certificate issuer:       /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial:       68A07EE89D7A6282FFEDAFA987489C58E830B9D9
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
Signing time:             Thu 25 Sep 2025 13:25:20 +0000
ROA not before:           Thu 25 Sep 2025 13:20:20 +0000
ROA not after:            Thu 24 Sep 2026 13:25:20 +0000
asID:                     268463
IP address blocks:        45.161.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a0:7e:e8:9d:7a:62:82:ff:ed:af:a9:87:48:9c:58:e8:30:b9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
        Validity
            Not Before: Sep 25 13:20:20 2025 GMT
            Not After : Sep 24 13:25:20 2026 GMT
        Subject: CN=42B61CEAD2644753493B5F9095097662345CE8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:3a:73:fd:11:9c:fe:9b:86:99:41:80:ef:
                    63:89:71:53:21:39:93:22:19:72:90:87:af:68:63:
                    04:5f:95:c3:03:cb:25:7e:93:9a:85:95:cd:0e:40:
                    58:07:ab:97:2e:0d:10:d8:ae:96:bc:42:89:39:46:
                    b2:6b:ce:98:60:03:9e:46:70:4a:e9:d5:c2:7e:5f:
                    5d:47:b5:13:99:e8:e9:02:e2:46:30:5e:a8:56:0b:
                    4f:f7:3d:90:1d:f7:e1:85:69:1b:15:4b:54:5d:bd:
                    c1:49:b5:39:b0:5d:54:90:93:ce:9e:8f:ae:3c:97:
                    13:8f:02:e7:e1:2a:49:c0:3f:89:67:a7:1a:24:23:
                    bf:65:a4:cb:8f:cf:01:29:e7:10:12:d6:fb:6e:67:
                    0b:bc:6b:85:6e:89:6c:fb:f5:5d:6b:93:a4:c6:3a:
                    cd:85:6c:d2:b5:60:25:54:f0:93:0f:64:df:32:d1:
                    76:c3:69:40:94:52:74:d4:b1:6e:cd:40:c6:50:ce:
                    6a:e8:81:33:20:5c:ad:fb:a2:08:96:58:7c:cd:2f:
                    af:4f:31:2e:9b:45:f4:66:a6:e7:4e:c5:d6:e5:67:
                    8b:bc:26:2c:00:84:8e:72:fe:5d:ed:12:e0:29:bc:
                    b7:f2:c2:82:13:0a:ec:f4:fc:16:3e:62:8d:ef:85:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B6:1C:EA:D2:64:47:53:49:3B:5F:90:95:09:76:62:34:5C:E8:A8
            X509v3 Authority Key Identifier:
                keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:df:70:23:87:56:82:06:f3:27:92:c0:3b:d8:6c:d9:4d:
         2d:ea:61:c3:a7:97:60:57:e1:97:35:87:0c:cc:73:fc:c1:c4:
         70:69:e8:14:2a:26:38:5c:e2:e1:2d:72:2a:5b:59:e2:34:98:
         47:1b:3b:c2:ea:a2:5c:28:c3:4f:57:85:26:51:0e:40:5a:91:
         24:80:7b:5e:43:77:0d:11:74:3f:89:cf:f2:16:45:a0:40:bf:
         71:1b:c5:c1:6c:1d:44:68:4b:12:69:c9:c3:da:e7:00:4f:14:
         65:cc:88:34:5d:8b:6c:63:35:ad:55:2a:4d:06:7b:62:6e:50:
         e9:4f:37:2d:21:b6:3f:a8:c8:48:e2:d7:93:33:66:6c:48:b1:
         d9:9a:67:97:c5:24:3d:63:26:7d:c2:51:39:49:a6:e1:89:ab:
         ec:b8:51:32:19:60:90:c9:83:79:a2:d6:b8:4b:cb:b4:37:8f:
         a8:0c:54:65:0d:4d:5f:f4:ce:7e:19:ca:d3:13:9e:4d:87:44:
         4f:ff:52:5a:88:f1:d2:78:71:c2:b7:44:c0:a7:4a:80:b6:e8:
         a4:53:15:25:8c:72:11:5a:e0:60:28:f0:5a:79:fc:0b:01:ef:
         99:17:a1:68:33:87:31:5d:36:2c:78:94:09:a2:11:ab:0c:cc:
         c1:18:1a:66
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaKB+6J16YoL/7a+ph0icWOgwudkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBFNTczMkQ1Q0IyMzU0RjcxMjhFMUI2QTc1MDQwNzQ2
NDQxNTQ1NDAeFw0yNTA5MjUxMzIwMjBaFw0yNjA5MjQxMzI1MjBaMDMxMTAvBgNV
BAMTKDQyQjYxQ0VBRDI2NDQ3NTM0OTNCNUY5MDk1MDk3NjYyMzQ1Q0U4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndTpz/RGc/puGmUGA72OJcVMh
OZMiGXKQh69oYwRflcMDyyV+k5qFlc0OQFgHq5cuDRDYrpa8Qok5RrJrzphgA55G
cErp1cJ+X11HtROZ6OkC4kYwXqhWC0/3PZAd9+GFaRsVS1RdvcFJtTmwXVSQk86e
j648lxOPAufhKknAP4lnpxokI79lpMuPzwEp5xAS1vtuZwu8a4VuiWz79V1rk6TG
Os2FbNK1YCVU8JMPZN8y0XbDaUCUUnTUsW7NQMZQzmrogTMgXK37ogiWWHzNL69P
MS6bRfRmpudOxdblZ4u8JiwAhI5y/l3tEuApvLfywoITCuz0/BY+Yo3vhZe5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQrYc6tJkR1NJO1+QlQl2YjRc6KgwHwYDVR0j
BBgwFoAUoOVzLVyyNU9xKOG2p1BAdGRBVFQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNNd3BvV1FERTlRMlE0YVRGR0hxdjZqZGcybTdZRmNENjlOcUs2ZTJm
S3MvMC9BMEU1NzMyRDVDQjIzNTRGNzEyOEUxQjZBNzUwNDA3NDY0NDE1NDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRTU3MzJENUNCMjM1NEY3
MTI4RTFCNkE3NTA0MDc0NjQ0MTU0NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzTXdwb1dRREU5UTJRNGFURkdIcXY2amRnMm03WUZjRDY5TnFLNmUyZktzLzAv
MzQzNTJlMzEzNjMxMmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFgMA0GCSqGSIb3DQEBCwUAA4IBAQA8fd9wI4dW
ggbzJ5LAO9hs2U0t6mHDp5dgV+GXNYcMzHP8wcRwaegUKiY4XOLhLXIqW1niNJhH
GzvC6qJcKMNPV4UmUQ5AWpEkgHteQ3cNEXQ/ic/yFkWgQL9xG8XBbB1EaEsSacnD
2ucATxRlzIg0XYtsYzWtVSpNBntiblDpTzctIbY/qMhI4teTM2ZsSLHZmmeXxSQ9
YyZ9wlE5SabhiavsuFEyGWCQyYN5ota4S8u0N4+oDFRlDU1f9M5+GcrTE55Nh0RP
/1JaiPHSeHHCt0TAp0qAtuikUxUljHIRWuBgKPBaefwLAe+ZF6FoM4cxXTYseJQJ
ohGrDMzBGBpm
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:25 2025 by rpki-client