Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/34352e3138332e36382e302f32332d3332203d3e20323639323733.roa
File:                     34352e3138332e36382e302f32332d3332203d3e20323639323733.roa (raw, json)
Hash identifier:          XfPh1ok4j7oZ7NiAwh/s5pZG0pmZyhfZ32tt7ZsO+Eg=
Subject key identifier:   6D:98:7A:80:AC:D6:90:80:F5:90:1F:B5:E5:FF:E5:4A:57:8E:F4:C2
Certificate issuer:       /CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B
Certificate serial:       133E034D4FFDDAC93ACFBA86B9C1C9CF65BF7E8E
Authority key identifier: 4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/34352e3138332e36382e302f32332d3332203d3e20323639323733.roa
Signing time:             Tue 14 Oct 2025 19:12:43 +0000
ROA not before:           Tue 14 Oct 2025 19:07:43 +0000
ROA not after:            Tue 13 Oct 2026 19:12:43 +0000
asID:                     269273
IP address blocks:        45.183.68.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl
                          rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3e:03:4d:4f:fd:da:c9:3a:cf:ba:86:b9:c1:c9:cf:65:bf:7e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B
        Validity
            Not Before: Oct 14 19:07:43 2025 GMT
            Not After : Oct 13 19:12:43 2026 GMT
        Subject: CN=6D987A80ACD69080F5901FB5E5FFE54A578EF4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:1b:77:10:19:58:ba:6a:e1:7a:26:98:13:
                    ef:f6:d2:1a:38:15:fc:75:69:53:a3:96:5c:f7:cb:
                    af:93:1e:15:36:bf:c8:b3:c5:af:03:33:3a:a1:a8:
                    9b:e9:28:7a:ae:55:3d:89:5f:43:27:7a:ef:7c:62:
                    c6:17:78:46:07:d4:1b:0c:a5:34:fc:f6:0f:45:f4:
                    1d:51:ea:76:57:42:26:03:cf:eb:f5:af:39:a2:d4:
                    fc:c6:8d:e7:88:1a:25:ee:82:0b:49:b7:2d:ad:2a:
                    78:ed:50:7a:e6:13:95:06:fe:0b:7d:22:11:a7:86:
                    d0:a7:32:2f:95:a8:ad:be:1a:04:72:ca:ea:7c:e5:
                    46:ff:02:1f:9c:98:36:36:04:fe:93:25:bf:7f:d0:
                    e3:01:63:0c:3c:2a:e8:91:2e:7f:1a:61:8a:71:55:
                    11:94:66:0a:9a:cd:6b:75:61:f5:83:24:30:71:96:
                    70:74:24:97:23:08:54:7b:cf:0f:8e:2e:a4:1c:16:
                    f9:a8:cc:bb:b8:64:b3:b5:fc:1f:aa:a6:08:1c:7d:
                    2a:a4:1f:c9:1b:70:eb:98:27:35:15:4d:48:7e:52:
                    04:8e:85:3d:6a:d1:88:78:ff:54:60:61:b4:dc:c7:
                    6b:97:c0:ae:b6:57:9f:08:e2:56:ff:25:f7:1d:ab:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:98:7A:80:AC:D6:90:80:F5:90:1F:B5:E5:FF:E5:4A:57:8E:F4:C2
            X509v3 Authority Key Identifier:
                keyid:4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/34352e3138332e36382e302f32332d3332203d3e20323639323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:ab:d7:26:c2:8f:38:f0:da:d7:75:2d:f0:e6:98:2f:25:
         21:16:e9:68:1c:b5:bd:5b:40:94:c6:7d:2c:c4:6a:92:b7:2b:
         49:3e:92:66:c5:73:9a:19:dd:4f:36:b8:3e:04:97:9c:e0:7b:
         f7:72:f9:46:4d:d6:b8:e0:c2:06:b9:67:aa:e3:65:f3:de:7a:
         d8:38:96:b6:e0:64:4e:9a:5b:69:7c:b3:2d:12:72:4d:e9:a4:
         0d:4d:07:02:8d:88:89:3d:aa:7a:a3:fa:5c:66:09:f3:c1:86:
         5b:c2:38:28:89:ab:30:17:e1:df:22:89:5e:8d:f8:4e:23:9c:
         e9:3c:95:34:4d:ad:63:b0:33:2c:b9:a7:47:bc:64:d4:c0:04:
         7c:e4:b3:3a:2f:8c:8b:14:a7:54:1a:cc:5f:15:e7:eb:f3:0b:
         80:4f:b2:41:05:1b:88:1d:bb:80:0e:10:c6:65:12:35:6a:39:
         68:29:53:62:a7:1b:15:14:2d:2e:73:a2:5d:ed:75:d9:b3:42:
         62:49:01:4e:c4:17:92:5a:23:8a:e8:4d:e2:e1:af:43:99:7a:
         12:50:15:18:e7:04:b8:32:9a:3d:10:8f:4d:3e:bf:db:a8:50:
         ad:6a:1c:72:72:e9:05:60:78:7f:fe:83:27:b8:25:d7:02:c6:
         fe:c0:51:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEz4DTU/92sk6z7qGucHJz2W/fo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZGQjMwRjRBRjZGODdBM0VDMDVCMDlBQjE0NDZGMEFE
NkYwRDYxQjAeFw0yNTEwMTQxOTA3NDNaFw0yNjEwMTMxOTEyNDNaMDMxMTAvBgNV
BAMTKDZEOTg3QTgwQUNENjkwODBGNTkwMUZCNUU1RkZFNTRBNTc4RUY0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMRt3EBlYumrheiaYE+/20ho4
Ffx1aVOjllz3y6+THhU2v8izxa8DMzqhqJvpKHquVT2JX0Mneu98YsYXeEYH1BsM
pTT89g9F9B1R6nZXQiYDz+v1rzmi1PzGjeeIGiXuggtJty2tKnjtUHrmE5UG/gt9
IhGnhtCnMi+VqK2+GgRyyup85Ub/Ah+cmDY2BP6TJb9/0OMBYww8KuiRLn8aYYpx
VRGUZgqazWt1YfWDJDBxlnB0JJcjCFR7zw+OLqQcFvmozLu4ZLO1/B+qpggcfSqk
H8kbcOuYJzUVTUh+UgSOhT1q0Yh4/1RgYbTcx2uXwK62V58I4lb/JfcdqwKXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbZh6gKzWkID1kB+15f/lSleO9MIwHwYDVR0j
BBgwFoAUT/sw9K9vh6PsBbCasURvCtbw1hswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVORVd1RHR2MWs0WmNqNWZobzRuSk1aQ0p2akw4UkJiZjdwQ2d2dTU0
emkvMC80RkZCMzBGNEFGNkY4N0EzRUMwNUIwOUFCMTQ0NkYwQUQ2RjBENjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRkIzMEY0QUY2Rjg3QTNF
QzA1QjA5QUIxNDQ2RjBBRDZGMEQ2MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlTkVXdUR0djFrNFpjajVmaG80bkpNWkNKdmpMOFJCYmY3cENndnU1NHppLzAv
MzQzNTJlMzEzODMzMmUzNjM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbdEMA0GCSqGSIb3DQEBCwUAA4IBAQBcN6vXJsKP
OPDa13Ut8OaYLyUhFuloHLW9W0CUxn0sxGqStytJPpJmxXOaGd1PNrg+BJec4Hv3
cvlGTda44MIGuWeq42Xz3nrYOJa24GROmltpfLMtEnJN6aQNTQcCjYiJPap6o/pc
ZgnzwYZbwjgoiaswF+HfIolejfhOI5zpPJU0Ta1jsDMsuadHvGTUwAR85LM6L4yL
FKdUGsxfFefr8wuAT7JBBRuIHbuADhDGZRI1ajloKVNipxsVFC0uc6Jd7XXZs0Ji
SQFOxBeSWiOK6E3i4a9DmXoSUBUY5wS4Mpo9EI9NPr/bqFCtahxycukFYHh//oMn
uCXXAsb+wFHb
-----END CERTIFICATE-----
Generated at Tue Oct 21 12:32:51 2025 by rpki-client