Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa
File:                     34352e3138312e36362e302f32332d3233203d3e20323639313731.roa (raw, json)
Hash identifier:          YQxpYOzurH5MF2vtUVLSOR+3pwOZPESk8iMhhNpsuaY=
Subject key identifier:   B9:D5:FD:9A:85:EA:DF:66:C0:B0:96:9B:BD:16:F3:04:65:5C:08:87
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       054CF9D36B6604E56B0224DF83A24EE0F48E76DC
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa
Signing time:             Mon 25 Aug 2025 18:37:53 +0000
ROA not before:           Mon 25 Aug 2025 18:32:53 +0000
ROA not after:            Mon 24 Aug 2026 18:37:53 +0000
asID:                     269171
IP address blocks:        45.181.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4c:f9:d3:6b:66:04:e5:6b:02:24:df:83:a2:4e:e0:f4:8e:76:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Aug 25 18:32:53 2025 GMT
            Not After : Aug 24 18:37:53 2026 GMT
        Subject: CN=B9D5FD9A85EADF66C0B0969BBD16F304655C0887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:07:3a:cc:b0:d4:68:67:f5:35:96:42:c3:
                    20:4c:41:f2:13:de:87:cb:fe:c9:6c:19:c1:f3:09:
                    30:0d:04:e4:b4:a9:a9:4a:7a:2a:5d:16:0a:38:69:
                    f1:db:e3:d0:e7:e0:51:0d:59:2f:23:c1:03:a1:b4:
                    48:df:aa:38:87:ee:71:d3:bc:90:4b:11:60:54:a3:
                    bd:04:f2:03:89:0c:d1:50:1a:9c:eb:fd:dd:01:f7:
                    3d:cf:8c:09:12:22:2a:22:ec:a3:1b:2d:e8:c4:c6:
                    c1:23:12:1e:8d:0f:0f:58:61:cb:cc:5c:8d:7a:3c:
                    d4:7a:d3:9b:fd:ff:2d:b8:3c:ef:ee:82:8f:e8:19:
                    bd:a0:a5:ac:b2:54:11:39:b4:cc:86:4f:ec:e8:c9:
                    7c:ad:87:7b:1e:16:26:da:86:fa:dd:bd:cc:8f:23:
                    8e:2b:fc:dc:aa:35:86:de:f5:dc:82:3d:78:6f:29:
                    7a:59:27:09:5e:0b:0e:cd:d8:cb:43:0a:5e:bf:90:
                    89:2b:f6:76:5c:91:54:4d:72:92:1d:de:b8:70:89:
                    90:24:05:26:8e:03:7e:7a:61:84:51:be:4b:c4:9c:
                    30:84:01:50:2a:56:d9:d3:c9:f5:7a:7b:c1:42:c2:
                    12:6a:2d:b5:0a:05:6a:77:64:a6:05:0d:ce:40:4a:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:FD:9A:85:EA:DF:66:C0:B0:96:9B:BD:16:F3:04:65:5C:08:87
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:da:c0:63:ea:a7:29:2c:27:4a:38:c8:9f:20:b7:da:f1:
         58:a7:81:ba:36:c0:32:3f:f6:7d:e1:a1:41:d9:e3:93:bd:0c:
         61:09:ab:24:b2:27:5a:14:bf:f6:d3:8a:ce:40:0c:cc:b8:af:
         3f:da:f7:c3:a8:91:ee:fd:83:45:86:32:f6:52:04:b6:2a:78:
         b1:df:5f:c3:95:f1:28:e0:20:4b:a9:21:2d:4a:41:22:83:e6:
         8e:df:e2:56:65:dd:4e:63:bc:39:5e:be:8d:d1:e1:8f:98:5c:
         30:56:4b:83:3d:55:bf:1e:e4:3b:78:94:c3:e2:44:e2:05:f7:
         67:41:75:63:45:6c:42:04:f1:41:5b:b8:41:04:56:9a:c2:3b:
         5f:45:aa:0d:c8:b2:e6:42:30:13:ee:f3:d3:68:f5:83:a3:85:
         e2:88:7b:b2:0d:8f:fc:45:f0:8f:c7:0b:ef:69:15:40:e8:ca:
         2f:9d:62:eb:b0:78:fe:fb:4c:b1:ee:7e:55:ac:c1:91:95:27:
         78:c2:8f:25:35:3a:03:33:f6:52:88:4b:9b:0c:ce:41:4c:18:
         a4:32:7b:d9:ce:05:e1:bc:23:7f:6a:c1:c1:e6:47:09:94:bb:
         ab:60:6e:5c:a7:16:8d:50:ba:0b:e1:4e:d1:42:08:0e:0f:6e:
         e9:19:fb:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBUz502tmBOVrAiTfg6JO4PSOdtwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxQzRCNkQ3M0M2NTYxNURCQUZCM0U2MDVERkI3NzIw
RjlEMkM1QzAeFw0yNTA4MjUxODMyNTNaFw0yNjA4MjQxODM3NTNaMDMxMTAvBgNV
BAMTKEI5RDVGRDlBODVFQURGNjZDMEIwOTY5QkJEMTZGMzA0NjU1QzA4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiwc6zLDUaGf1NZZCwyBMQfIT
3ofL/slsGcHzCTANBOS0qalKeipdFgo4afHb49Dn4FENWS8jwQOhtEjfqjiH7nHT
vJBLEWBUo70E8gOJDNFQGpzr/d0B9z3PjAkSIioi7KMbLejExsEjEh6NDw9YYcvM
XI16PNR605v9/y24PO/ugo/oGb2gpayyVBE5tMyGT+zoyXyth3seFibahvrdvcyP
I44r/NyqNYbe9dyCPXhvKXpZJwleCw7N2MtDCl6/kIkr9nZckVRNcpId3rhwiZAk
BSaOA356YYRRvkvEnDCEAVAqVtnTyfV6e8FCwhJqLbUKBWp3ZKYFDc5ASq85AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUudX9moXq32bAsJabvRbzBGVcCIcwHwYDVR0j
BBgwFoAUNhxLbXPGVhXbr7PmBd+3cg+dLFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG54Y0hSTE1xNHl3RERzMlZWdTkzTDZZM0FKWVpkQ21NN05ENW5ncUJZ
aU4vMC8zNjFDNEI2RDczQzY1NjE1REJBRkIzRTYwNURGQjc3MjBGOUQyQzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MUM0QjZENzNDNjU2MTVE
QkFGQjNFNjA1REZCNzcyMEY5RDJDNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hueGNIUkxNcTR5d0REczJWVnU5M0w2WTNBSllaZENtTTdORDVuZ3FCWWlOLzAv
MzQzNTJlMzEzODMxMmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbVCMA0GCSqGSIb3DQEBCwUAA4IBAQBS19rAY+qn
KSwnSjjInyC32vFYp4G6NsAyP/Z94aFB2eOTvQxhCasksidaFL/204rOQAzMuK8/
2vfDqJHu/YNFhjL2UgS2Knix31/DlfEo4CBLqSEtSkEig+aO3+JWZd1OY7w5Xr6N
0eGPmFwwVkuDPVW/HuQ7eJTD4kTiBfdnQXVjRWxCBPFBW7hBBFaawjtfRaoNyLLm
QjAT7vPTaPWDo4XiiHuyDY/8RfCPxwvvaRVA6MovnWLrsHj++0yx7n5VrMGRlSd4
wo8lNToDM/ZSiEubDM5BTBikMnvZzgXhvCN/asHB5kcJlLurYG5cpxaNULoL4U7R
QggOD27pGfsq
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:18 2025 by rpki-client