Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa
File:                     34352e3138312e36342e302f32342d3234203d3e20323639313731.roa (raw, json)
Hash identifier:          hPPSQnEZ0yKiGEBJ0r0ivzuKHn5j9pbyLsxMFPyOXnU=
Subject key identifier:   67:14:6E:21:98:2B:5D:DE:30:D2:A6:77:72:64:F5:0F:08:3B:AE:E7
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       3E91C96515CF639D34767784761F60478470BFCE
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa
Signing time:             Mon 25 Aug 2025 18:37:53 +0000
ROA not before:           Mon 25 Aug 2025 18:32:53 +0000
ROA not after:            Mon 24 Aug 2026 18:37:53 +0000
asID:                     269171
IP address blocks:        45.181.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:91:c9:65:15:cf:63:9d:34:76:77:84:76:1f:60:47:84:70:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Aug 25 18:32:53 2025 GMT
            Not After : Aug 24 18:37:53 2026 GMT
        Subject: CN=67146E21982B5DDE30D2A6777264F50F083BAEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:f6:26:22:42:2c:49:77:4e:23:0c:40:34:
                    01:1d:d3:ca:4e:a2:2a:d2:aa:ee:be:3d:0f:d0:56:
                    02:f8:59:d4:1a:a2:d8:0c:e6:6a:4e:b5:01:25:25:
                    b8:72:96:1b:9d:42:f4:c7:52:de:95:6e:ae:79:a7:
                    e3:e7:f6:a6:c0:8f:27:c6:5d:69:e3:db:69:24:3a:
                    cb:3a:d2:e9:79:40:1f:8c:50:f8:3a:d1:33:5a:d7:
                    71:69:24:ef:e1:81:aa:6a:01:2a:8e:d2:81:15:64:
                    fb:97:e6:56:1f:3b:09:66:e0:76:d1:48:14:ce:fe:
                    1b:ff:f1:1e:23:50:64:ef:87:7d:fd:94:a7:03:5f:
                    d0:40:59:35:03:32:74:7f:99:4e:93:33:bd:d0:71:
                    30:6a:91:9d:c4:20:00:de:64:74:de:c7:11:ad:d3:
                    5f:df:ae:a8:2c:e0:e9:cf:a2:fa:e1:a4:44:4e:1f:
                    5c:e0:c0:27:1e:5c:9e:eb:52:d9:d7:50:c0:65:40:
                    f2:ab:c4:99:0a:1f:02:0f:9f:0e:01:25:40:3e:64:
                    7b:47:5e:84:72:f8:d4:92:69:bc:23:b4:43:32:5f:
                    bb:f6:7f:5c:29:e3:0c:82:3d:6b:e9:d4:39:56:b1:
                    5f:13:83:31:e2:3b:c4:58:08:84:d2:25:b1:e7:aa:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:14:6E:21:98:2B:5D:DE:30:D2:A6:77:72:64:F5:0F:08:3B:AE:E7
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36342e302f32342d3234203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:10:89:b8:4e:b5:5e:d8:9d:80:9a:86:12:49:3b:95:6c:
         03:f4:eb:fa:53:67:fa:ef:40:cf:aa:47:cf:93:7d:3e:e9:42:
         1b:74:00:74:38:e2:79:ff:a9:92:ed:4c:9f:24:eb:9a:94:c4:
         36:9e:ab:3c:5f:0d:12:9d:17:7a:6b:02:ce:71:ef:ad:4e:0d:
         88:7c:41:a5:c8:11:ed:31:fb:63:34:68:77:9e:49:81:c8:b8:
         2a:0d:2a:83:84:16:97:c6:54:25:03:1f:ce:6d:6b:0b:0e:07:
         42:d3:fe:12:13:18:59:90:d4:a0:d5:e8:20:d3:53:72:53:60:
         df:0f:bb:c4:e4:46:c8:7b:29:54:c3:94:fe:af:ce:44:bf:41:
         94:d0:07:ea:3f:b1:be:24:56:b0:a3:1a:f9:e1:ed:59:aa:1d:
         5f:4f:e8:ac:77:a7:57:ed:f0:96:f7:ec:e6:6d:28:9c:99:fb:
         0c:84:0d:82:53:e2:92:32:d0:b0:ea:3e:94:5b:ba:51:7b:9d:
         93:65:eb:41:a5:e9:86:74:5e:b5:5c:67:ad:4a:18:5a:62:3a:
         35:69:fa:6f:63:c3:5b:4b:25:4e:84:56:33:7c:0e:71:21:97:
         1e:67:df:07:bd:9e:ff:3d:d6:c8:8e:8e:95:63:3b:8f:ce:5c:
         1d:28:e6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:06 2025 by rpki-client