Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
File:                     34352e3137312e34342e302f32322d3332203d3e20323638373338.roa (raw, json)
Hash identifier:          1hfLLgPLndMHPA/uuDeQstzCTGkdyFHXJMoTMJfWJRo=
Subject key identifier:   38:0E:1B:A1:7E:02:3B:10:C7:1F:13:C8:2F:32:9F:C9:84:56:B1:0C
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       6B9D87643E274731C66EF87E6EB21D0C9FECC13A
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
Signing time:             Tue 26 Aug 2025 17:06:25 +0000
ROA not before:           Tue 26 Aug 2025 17:01:25 +0000
ROA not after:            Tue 25 Aug 2026 17:06:25 +0000
asID:                     268738
IP address blocks:        45.171.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9d:87:64:3e:27:47:31:c6:6e:f8:7e:6e:b2:1d:0c:9f:ec:c1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Aug 26 17:01:25 2025 GMT
            Not After : Aug 25 17:06:25 2026 GMT
        Subject: CN=380E1BA17E023B10C71F13C82F329FC98456B10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:6c:c4:c8:a0:bb:df:73:87:56:0a:a3:83:
                    2e:ac:6f:40:04:5f:52:72:77:05:1d:1c:65:cb:c2:
                    31:ea:07:29:2d:f6:9c:38:5e:ce:91:e1:05:ef:3b:
                    6a:b1:c8:87:fb:a1:20:7e:c7:ba:7b:06:3c:9b:1e:
                    71:85:75:6b:12:1a:bb:2f:5b:63:fe:e6:93:77:a8:
                    88:b7:73:63:af:89:7f:22:3e:d4:4e:e1:a2:c3:4c:
                    49:3a:fb:59:df:a8:a9:c5:0e:c0:8a:2f:78:a7:1e:
                    4f:a4:04:ca:91:ce:9b:32:a5:fe:c2:f2:d3:13:89:
                    ab:01:74:d3:26:fb:65:35:c3:6f:db:73:c7:7c:b9:
                    4b:6e:37:3a:70:81:9a:d0:f7:98:58:79:13:55:4c:
                    c7:ff:9d:1c:2e:6f:f9:c7:6b:49:8b:f0:1f:d6:06:
                    43:bd:b4:5d:0d:ea:e4:e1:ad:a4:aa:22:0e:42:d6:
                    3c:9e:ef:41:5e:27:b9:9d:cb:1f:00:ec:51:a9:5b:
                    52:9b:08:1b:0b:c4:9a:67:fa:0d:d9:8a:53:20:29:
                    e5:56:d2:de:be:b3:f8:b7:f3:f0:54:80:2b:ef:88:
                    29:43:56:bf:02:1f:11:a2:2c:bb:1d:b3:f3:74:5e:
                    11:3e:4c:28:ba:60:25:d9:43:2d:35:ce:f8:c7:09:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0E:1B:A1:7E:02:3B:10:C7:1F:13:C8:2F:32:9F:C9:84:56:B1:0C
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:80:ec:29:ce:cf:72:fe:cd:f1:07:2d:ec:fc:24:cf:94:
         a0:7d:1c:ac:62:e8:d7:b2:9c:35:2c:37:37:1d:de:76:69:11:
         65:6d:00:b4:6f:02:98:6c:2f:09:41:6d:b8:9c:2e:bc:5c:1d:
         f0:62:65:50:9b:7d:0d:eb:59:3f:87:dd:39:e7:4b:22:7a:26:
         2d:2c:37:63:ca:38:b9:d8:a1:b5:7f:e1:b0:ae:4f:2b:c3:1d:
         eb:f4:1f:78:df:31:2f:f7:0a:e2:2c:5c:8a:69:b8:a9:d7:f5:
         27:fd:b3:b6:71:33:4c:ca:18:73:a4:8b:f8:8e:e9:11:0e:e2:
         ee:8c:50:66:86:cb:c9:f7:1a:30:72:00:34:a7:f0:fe:c1:9f:
         65:8d:64:e3:13:8f:69:e8:dd:0a:85:22:48:62:e4:9a:b9:f4:
         d4:f7:9d:ac:fd:0d:65:b6:36:6c:b9:52:fe:9e:73:f3:8a:fb:
         36:8a:8c:40:64:e7:61:7b:96:b7:29:51:5d:c7:d3:03:31:e3:
         93:e2:44:a9:9b:e7:f9:07:0a:bf:9e:2d:a7:dc:27:71:1b:0e:
         08:18:4b:99:e1:cc:da:cb:7c:18:d3:0e:d7:60:b6:95:df:a8:
         44:8e:91:b9:f8:89:25:75:29:42:4b:d7:57:ee:d2:9f:06:76:
         b9:28:fb:79
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUa52HZD4nRzHGbvh+brIdDJ/swTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNE
OTFCQ0Y1OTAeFw0yNTA4MjYxNzAxMjVaFw0yNjA4MjUxNzA2MjVaMDMxMTAvBgNV
BAMTKDM4MEUxQkExN0UwMjNCMTBDNzFGMTNDODJGMzI5RkM5ODQ1NkIxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpv2zEyKC733OHVgqjgy6sb0AE
X1JydwUdHGXLwjHqBykt9pw4Xs6R4QXvO2qxyIf7oSB+x7p7BjybHnGFdWsSGrsv
W2P+5pN3qIi3c2OviX8iPtRO4aLDTEk6+1nfqKnFDsCKL3inHk+kBMqRzpsypf7C
8tMTiasBdNMm+2U1w2/bc8d8uUtuNzpwgZrQ95hYeRNVTMf/nRwub/nHa0mL8B/W
BkO9tF0N6uThraSqIg5C1jye70FeJ7mdyx8A7FGpW1KbCBsLxJpn+g3ZilMgKeVW
0t6+s/i38/BUgCvviClDVr8CHxGiLLsds/N0XhE+TCi6YCXZQy01zvjHCYo7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUOA4boX4COxDHHxPILzKfyYRWsQwwHwYDVR0j
BBgwFoAUe+exAga1tWwPUAoacegqXNkbz1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xWWNxNGNyemYxZEFyeW5iQXdSN2JUR0Z1N3dqNjNxQ3Jtckc2Y3VaVUJk
LzAvN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNEOTFCQ0Y1OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QkU3QjEwMjA2QjVCNTZDMEY1
MDBBMUE3MUU4MkE1Q0Q5MUJDRjU5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
WWNxNGNyemYxZEFyeW5iQXdSN2JUR0Z1N3dqNjNxQ3Jtckc2Y3VaVUJkLzAvMzQz
NTJlMzEzNzMxMmUzNDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4Mzcz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLassMA0GCSqGSIb3DQEBCwUAA4IBAQAtCoDsKc7Pcv7N
8Qct7Pwkz5SgfRysYujXspw1LDc3Hd52aRFlbQC0bwKYbC8JQW24nC68XB3wYmVQ
m30N61k/h90550sieiYtLDdjyji52KG1f+Gwrk8rwx3r9B943zEv9wriLFyKabip
1/Un/bO2cTNMyhhzpIv4jukRDuLujFBmhsvJ9xowcgA0p/D+wZ9ljWTjE49p6N0K
hSJIYuSaufTU952s/Q1ltjZsuVL+nnPzivs2ioxAZOdhe5a3KVFdx9MDMeOT4kSp
m+f5Bwq/ni2n3CdxGw4IGEuZ4czay3wY0w7XYLaV36hEjpG5+IkldSlCS9dX7tKf
Bna5KPt5
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:09 2025 by rpki-client