Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa
File:                     34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa (raw, json)
Hash identifier:          kENUqC7oSxcW6RPq+gf1025sA1DCZn2JGh3A5Oeo/Bs=
Subject key identifier:   9A:B9:1D:10:F5:32:67:04:DD:80:65:72:9C:8B:E8:C2:E9:A9:A2:72
Certificate issuer:       /CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
Certificate serial:       2CCAF6F89B0C33A7D42CCCBBA5B7A80F2CB2D2AB
Authority key identifier: D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa
Signing time:             Thu 30 Oct 2025 17:37:57 +0000
ROA not before:           Thu 30 Oct 2025 17:32:57 +0000
ROA not after:            Thu 29 Oct 2026 17:37:57 +0000
asID:                     271617
IP address blocks:        45.162.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl
                          rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ca:f6:f8:9b:0c:33:a7:d4:2c:cc:bb:a5:b7:a8:0f:2c:b2:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
        Validity
            Not Before: Oct 30 17:32:57 2025 GMT
            Not After : Oct 29 17:37:57 2026 GMT
        Subject: CN=9AB91D10F5326704DD8065729C8BE8C2E9A9A272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:55:cd:8f:eb:f3:a3:e3:d7:23:59:50:44:
                    6d:85:4b:72:ec:96:39:8b:a9:c8:36:be:20:53:be:
                    1c:fe:0c:a3:4b:f1:3d:fd:cc:f2:35:89:d5:89:97:
                    65:11:bd:a8:31:dc:81:af:c7:db:f6:79:20:c2:3f:
                    d9:1d:21:30:27:67:18:8a:ec:1e:ca:a0:d2:ed:73:
                    b7:39:bc:a1:82:80:08:dd:1d:38:39:54:83:df:b2:
                    43:82:2b:53:bb:19:45:90:6a:58:05:7b:8a:bd:25:
                    7c:85:18:87:3c:b7:ee:fb:44:7b:96:48:f1:c6:16:
                    4b:0e:54:27:ca:7b:a6:e0:a7:58:4f:ae:7e:36:a8:
                    2e:77:da:47:1d:50:c3:ab:79:21:1a:68:c7:58:5a:
                    06:b0:9f:5c:26:e5:cc:98:c4:77:f4:19:15:b9:88:
                    91:d4:58:69:f2:75:df:b9:6a:95:93:bc:e2:a3:5e:
                    d5:8c:25:e8:9f:f8:21:ff:10:b0:d2:8d:27:54:50:
                    98:05:03:ab:3f:51:77:df:90:2f:f2:69:a7:3c:45:
                    46:93:09:4b:3e:c9:04:92:a2:fb:06:8d:64:d3:59:
                    0b:ce:42:e4:7a:87:e7:88:de:68:54:34:76:c0:c6:
                    ca:25:27:be:58:a1:84:d1:5f:82:8f:0b:f2:90:ca:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B9:1D:10:F5:32:67:04:DD:80:65:72:9C:8B:E8:C2:E9:A9:A2:72
            X509v3 Authority Key Identifier:
                keyid:D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:0d:15:eb:f9:91:9b:19:5b:91:ba:d9:d0:3c:b3:0f:63:
         54:e2:f0:dc:3a:4c:61:25:f5:76:ac:a9:cb:ca:e4:06:8e:36:
         49:47:17:23:0c:87:6e:82:f8:64:8b:52:ad:13:73:73:88:65:
         5f:8c:e5:c4:18:46:36:ed:19:c3:2e:ed:a4:04:7f:cf:32:6a:
         e9:b0:af:7e:00:29:94:13:03:40:1c:83:15:f5:f7:c1:01:f7:
         37:27:dd:b2:8f:b8:fc:d4:7b:98:01:7a:5a:c9:1f:c1:4a:69:
         07:ee:bf:6e:f3:d5:6a:db:23:e0:45:70:ee:13:3f:12:38:53:
         18:34:65:e5:a0:71:07:59:07:42:8b:2b:ec:7d:d5:5a:87:8c:
         8b:5a:d5:f7:9a:37:e6:26:ce:4d:7d:a7:d2:2f:e1:ff:a5:31:
         86:3f:43:28:b2:b9:a2:bd:1e:cb:cb:6e:69:67:47:8c:80:6f:
         1e:f9:53:91:45:ca:28:45:ef:2a:80:13:71:8f:9f:0c:98:70:
         8d:45:df:2b:38:89:a8:7c:1b:38:8e:07:90:76:9d:8d:e8:ad:
         31:ef:14:f5:69:71:b0:37:19:d4:d7:f3:2b:1e:48:21:61:6c:
         79:cc:d3:16:a2:8b:5c:d8:b2:23:c1:10:49:aa:94:73:82:25:
         1a:6a:b4:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULMr2+JsMM6fULMy7pbeoDyyy0qswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4NTRFRkM1RUY4QzkzQ0VBM0E4NzdCN0JEQzRCMTk2
RDgxODFDMDAeFw0yNTEwMzAxNzMyNTdaFw0yNjEwMjkxNzM3NTdaMDMxMTAvBgNV
BAMTKDlBQjkxRDEwRjUzMjY3MDRERDgwNjU3MjlDOEJFOEMyRTlBOUEyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpulXNj+vzo+PXI1lQRG2FS3Ls
ljmLqcg2viBTvhz+DKNL8T39zPI1idWJl2URvagx3IGvx9v2eSDCP9kdITAnZxiK
7B7KoNLtc7c5vKGCgAjdHTg5VIPfskOCK1O7GUWQalgFe4q9JXyFGIc8t+77RHuW
SPHGFksOVCfKe6bgp1hPrn42qC532kcdUMOreSEaaMdYWgawn1wm5cyYxHf0GRW5
iJHUWGnydd+5apWTvOKjXtWMJeif+CH/ELDSjSdUUJgFA6s/UXffkC/yaac8RUaT
CUs+yQSSovsGjWTTWQvOQuR6h+eI3mhUNHbAxsolJ75YoYTRX4KPC/KQyn9pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmrkdEPUyZwTdgGVynIvowumponIwHwYDVR0j
BBgwFoAU1oVO/F74yTzqOod7e9xLGW2BgcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFud0U0Y1VTNTFjRFlzcVk2NjNiSzljcE1RNHNXRFhyQUxBVWVlUTlG
UjMvMC9ENjg1NEVGQzVFRjhDOTNDRUEzQTg3N0I3QkRDNEIxOTZEODE4MUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODU0RUZDNUVGOEM5M0NF
QTNBODc3QjdCREM0QjE5NkQ4MTgxQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxbndFNGNVUzUxY0RZc3FZNjYzYks5Y3BNUTRzV0RYckFMQVVlZVE5RlIzLzAv
MzQzNTJlMzEzNjMyMmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtosowDQYJKoZIhvcNAQELBQADggEBAI49DRXr
+ZGbGVuRutnQPLMPY1Ti8Nw6TGEl9XasqcvK5AaONklHFyMMh26C+GSLUq0Tc3OI
ZV+M5cQYRjbtGcMu7aQEf88yaumwr34AKZQTA0AcgxX198EB9zcn3bKPuPzUe5gB
elrJH8FKaQfuv27z1WrbI+BFcO4TPxI4Uxg0ZeWgcQdZB0KLK+x91VqHjIta1fea
N+Ymzk19p9Iv4f+lMYY/QyiyuaK9HsvLbmlnR4yAbx75U5FFyihF7yqAE3GPnwyY
cI1F3ys4iah8GziOB5B2nY3orTHvFPVpcbA3GdTX8yseSCFhbHnM0xaii1zYsiPB
EEmqlHOCJRpqtFo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:28:10 2025 by rpki-client