Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          mD2Qesgrreb0Vz+bckbqJak7lTE04nmIpr3GQQ2I3eE=
Subject key identifier:   76:B8:EA:87:1D:A1:83:1A:5D:72:8F:DF:ED:91:1C:A3:77:28:50:1C
Certificate issuer:       /CN=B80B3D409568864C2E08D130EA89092DD8E7CEC7
Certificate serial:       371C11A70CA51BE60692B6E7CAF7E674837A540E
Authority key identifier: B8:0B:3D:40:95:68:86:4C:2E:08:D1:30:EA:89:09:2D:D8:E7:CE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
Signing time:             Wed 08 Oct 2025 19:29:27 +0000
ROA not before:           Wed 08 Oct 2025 19:24:27 +0000
ROA not after:            Wed 07 Oct 2026 19:29:27 +0000
asID:                     267035
IP address blocks:        45.227.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:11:a7:0c:a5:1b:e6:06:92:b6:e7:ca:f7:e6:74:83:7a:54:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80B3D409568864C2E08D130EA89092DD8E7CEC7
        Validity
            Not Before: Oct  8 19:24:27 2025 GMT
            Not After : Oct  7 19:29:27 2026 GMT
        Subject: CN=76B8EA871DA1831A5D728FDFED911CA37728501C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:fc:9c:67:de:3b:23:58:85:a9:c4:da:0f:
                    4d:f0:51:63:af:44:92:34:85:a1:9e:a4:28:d1:b3:
                    9f:e1:aa:10:b5:fb:9d:e9:a2:9b:ca:8b:4d:ae:8c:
                    07:2e:cb:ff:0b:39:71:8f:43:84:63:f8:b0:37:ca:
                    62:46:0e:1d:fe:ea:1b:b5:0c:bc:6b:c6:6d:91:1c:
                    e5:01:29:a9:d6:7c:de:02:c7:ce:d9:bb:3b:cc:6a:
                    72:e7:63:85:57:a0:8f:28:12:33:9f:97:d6:5d:22:
                    51:75:23:d5:70:82:e0:7a:93:55:08:d8:3d:62:8e:
                    7a:21:d3:9f:f2:a3:d1:64:3c:17:78:d6:77:7c:f3:
                    c7:f8:91:32:02:4b:6a:c6:47:e7:43:ec:cf:0e:48:
                    46:44:df:55:ca:3f:af:70:24:5c:c8:2a:fe:bb:df:
                    36:dc:ce:bb:2b:3b:0a:96:71:31:77:4c:f6:87:4b:
                    b9:cc:54:e2:17:6b:1d:a8:7b:09:86:d1:88:99:95:
                    a2:2b:d4:16:f5:6f:35:2c:bf:c3:c2:0c:ed:6a:15:
                    fd:88:42:2c:e8:b0:0b:07:c1:b6:ff:fd:d6:2d:4e:
                    38:1f:83:23:19:af:b3:b1:de:3d:50:f9:8f:a4:1d:
                    e7:60:b3:ed:b4:de:28:fa:e8:1e:22:81:84:39:d2:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:EA:87:1D:A1:83:1A:5D:72:8F:DF:ED:91:1C:A3:77:28:50:1C
            X509v3 Authority Key Identifier:
                keyid:B8:0B:3D:40:95:68:86:4C:2E:08:D1:30:EA:89:09:2D:D8:E7:CE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B80B3D409568864C2E08D130EA89092DD8E7CEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80B3D409568864C2E08D130EA89092DD8E7CEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:7b:11:53:04:1a:53:4e:86:dd:a1:e6:ba:02:6e:6b:ba:
         6d:69:2b:ef:ef:d0:b2:3b:4f:60:8f:d2:0a:76:6e:b7:6b:49:
         fe:41:75:25:43:ad:71:98:a5:17:77:41:d7:8c:8a:bc:34:df:
         8d:93:63:4a:9a:54:06:6b:d3:2f:39:ef:de:ec:91:09:17:b3:
         e9:ad:e3:d9:dd:07:a6:76:f3:bb:ab:99:34:cb:ec:50:16:fe:
         7d:f5:93:1c:f6:70:ec:14:12:51:90:6a:d4:40:53:5c:f2:6d:
         61:89:8e:4c:aa:7d:7f:ff:77:ea:09:9d:aa:cc:ee:ff:75:e4:
         64:ca:d1:7e:24:a7:f9:05:39:fe:5f:de:01:6c:ae:d4:6e:21:
         1c:2f:64:24:0b:a3:40:e2:9f:c3:87:cf:2f:0f:44:3a:36:1b:
         84:60:28:8a:fb:8d:a1:48:3b:94:09:02:41:5e:42:dc:99:85:
         31:bb:af:2a:75:d5:b6:93:c8:65:2c:9a:03:e6:cc:13:62:18:
         0b:a3:4f:92:64:7f:37:9e:9b:80:3f:90:fb:f8:95:9d:5d:16:
         eb:e0:71:88:1d:df:64:7e:bd:d6:e8:70:19:26:f9:71:76:f0:
         01:d8:e1:90:b2:53:23:21:53:6b:df:f9:09:6f:f7:b5:40:1e:
         72:a0:dc:45
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNxwRpwylG+YGkrbnyvfmdIN6VA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgwQjNENDA5NTY4ODY0QzJFMDhEMTMwRUE4OTA5MkRE
OEU3Q0VDNzAeFw0yNTEwMDgxOTI0MjdaFw0yNjEwMDcxOTI5MjdaMDMxMTAvBgNV
BAMTKDc2QjhFQTg3MURBMTgzMUE1RDcyOEZERkVEOTExQ0EzNzcyODUwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyfycZ947I1iFqcTaD03wUWOv
RJI0haGepCjRs5/hqhC1+53popvKi02ujAcuy/8LOXGPQ4Rj+LA3ymJGDh3+6hu1
DLxrxm2RHOUBKanWfN4Cx87ZuzvManLnY4VXoI8oEjOfl9ZdIlF1I9VwguB6k1UI
2D1ijnoh05/yo9FkPBd41nd888f4kTICS2rGR+dD7M8OSEZE31XKP69wJFzIKv67
3zbczrsrOwqWcTF3TPaHS7nMVOIXax2oewmG0YiZlaIr1Bb1bzUsv8PCDO1qFf2I
QizosAsHwbb//dYtTjgfgyMZr7Ox3j1Q+Y+kHedgs+203ij66B4igYQ50kKHAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUdrjqhx2hgxpdco/f7ZEco3coUBwwHwYDVR0j
BBgwFoAUuAs9QJVohkwuCNEw6okJLdjnzscwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvQjgwQjNENDA5NTY4ODY0QzJFMDhEMTMwRUE4OTA5MkREOEU3Q0VDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODBCM0Q0MDk1Njg4NjRDMkUw
OEQxMzBFQTg5MDkyREQ4RTdDRUM3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzQz
NTJlMzIzMjM3MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt45cwDQYJKoZIhvcNAQELBQADggEBAFXcexFTBBpT
Tobdoea6Am5rum1pK+/v0LI7T2CP0gp2brdrSf5BdSVDrXGYpRd3QdeMirw0342T
Y0qaVAZr0y85797skQkXs+mt49ndB6Z287urmTTL7FAW/n31kxz2cOwUElGQatRA
U1zybWGJjkyqfX//d+oJnarM7v915GTK0X4kp/kFOf5f3gFsrtRuIRwvZCQLo0Di
n8OHzy8PRDo2G4RgKIr7jaFIO5QJAkFeQtyZhTG7ryp11baTyGUsmgPmzBNiGAuj
T5Jkfzeem4A/kPv4lZ1dFuvgcYgd32R+vdbocBkm+XF28AHY4ZCyUyMhU2vf+Qlv
97VAHnKg3EU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:09:48 2025 by rpki-client