Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa
File:                     34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa (raw, json)
Hash identifier:          DpWklczOBGv1d17sFKjYm1WabU0i7qT+QkM1R6ZiYvA=
Subject key identifier:   D3:DA:ED:BE:B4:60:2D:D5:2B:B7:00:13:8E:D3:B5:82:8E:C3:ED:BA
Certificate issuer:       /CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
Certificate serial:       58527DA05322E2D96E8493BAFAFDA60E8814C6B9
Authority key identifier: D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa
Signing time:             Thu 30 Oct 2025 17:37:57 +0000
ROA not before:           Thu 30 Oct 2025 17:32:57 +0000
ROA not after:            Thu 29 Oct 2026 17:37:57 +0000
asID:                     271617
IP address blocks:        45.162.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl
                          rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:52:7d:a0:53:22:e2:d9:6e:84:93:ba:fa:fd:a6:0e:88:14:c6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
        Validity
            Not Before: Oct 30 17:32:57 2025 GMT
            Not After : Oct 29 17:37:57 2026 GMT
        Subject: CN=D3DAEDBEB4602DD52BB700138ED3B5828EC3EDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:ba:12:73:3a:31:e8:de:47:c0:70:17:88:
                    f3:48:07:34:55:16:b1:b6:8b:4a:89:3f:10:b6:6d:
                    21:63:61:34:52:da:a8:c2:db:16:46:7a:68:25:4c:
                    e5:21:b0:30:d6:50:bd:39:d4:75:ea:49:c1:f7:85:
                    1d:1b:2e:b2:3d:28:54:b0:24:5a:eb:6d:83:85:eb:
                    c6:38:f3:47:75:5e:8f:fc:f0:4b:fc:22:fd:cf:d8:
                    74:df:06:4c:04:a4:05:55:af:95:19:54:cc:d8:91:
                    7e:3a:55:91:0b:c0:06:9c:2c:ea:35:ab:98:a2:10:
                    db:46:fb:01:23:1e:a7:79:08:86:e8:8c:42:bd:74:
                    9c:a1:a4:fd:dd:55:b0:fe:83:74:22:44:f6:c8:3f:
                    d0:23:d4:83:48:c7:51:00:69:ec:2c:2b:13:a5:1c:
                    69:08:ff:36:1a:13:82:bc:76:3c:ad:b7:4c:14:66:
                    19:24:6c:18:ac:b4:39:4a:5b:8a:45:2f:55:98:13:
                    71:5a:de:0c:b9:66:4c:92:77:64:00:52:e0:38:4a:
                    7a:7b:63:bd:be:fb:20:c9:62:4e:c1:60:aa:f2:30:
                    6b:4b:94:e7:cc:be:d2:a5:f8:eb:94:8a:73:25:58:
                    bf:68:61:73:ec:dc:3b:5f:71:ae:06:d7:a2:07:95:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:ED:BE:B4:60:2D:D5:2B:B7:00:13:8E:D3:B5:82:8E:C3:ED:BA
            X509v3 Authority Key Identifier:
                keyid:D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230332e302f32342d3234203d3e20323731363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:8e:d4:33:18:fe:b2:8e:5f:7e:f0:c5:41:2f:e6:d4:8f:
         ad:f7:6b:24:2b:ba:db:53:48:2d:8b:07:74:9b:4a:b5:7a:13:
         63:16:e6:5e:ea:2f:40:c7:af:76:97:43:15:de:b7:36:1d:fd:
         c1:a8:9a:11:d6:2e:19:9f:09:1a:d1:34:49:93:e6:34:09:93:
         1b:3d:5f:01:0f:21:1e:e9:a6:d7:1b:9e:84:34:fd:6b:72:0f:
         0a:99:48:28:f4:67:1d:5f:d5:99:20:76:01:f2:56:70:a6:04:
         88:c3:b2:9a:a9:d1:e7:51:92:00:8f:83:6f:6c:be:10:dc:a4:
         59:61:e8:b1:6f:87:5d:c5:fb:be:39:c0:f5:32:ec:d1:14:2a:
         db:f0:d3:62:94:34:47:94:9c:c8:b6:c3:26:4a:ae:18:6f:b2:
         d4:52:29:a8:6c:b5:ad:cf:07:3d:29:51:aa:08:dd:d7:9d:6b:
         ed:c6:dc:e4:6a:08:81:0c:5e:62:23:72:ea:df:57:9f:ae:c9:
         ae:8b:2d:e7:c0:26:df:73:fd:dc:70:aa:48:bf:48:ba:63:d9:
         97:99:6d:21:39:a8:0d:03:67:dc:30:0f:66:b8:a5:ca:ed:3c:
         19:31:62:d1:80:57:5b:2a:38:5d:08:33:79:00:ab:8a:b4:31:
         d8:79:26:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWFJ9oFMi4tluhJO6+v2mDogUxrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4NTRFRkM1RUY4QzkzQ0VBM0E4NzdCN0JEQzRCMTk2
RDgxODFDMDAeFw0yNTEwMzAxNzMyNTdaFw0yNjEwMjkxNzM3NTdaMDMxMTAvBgNV
BAMTKEQzREFFREJFQjQ2MDJERDUyQkI3MDAxMzhFRDNCNTgyOEVDM0VEQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIaLoSczox6N5HwHAXiPNIBzRV
FrG2i0qJPxC2bSFjYTRS2qjC2xZGemglTOUhsDDWUL051HXqScH3hR0bLrI9KFSw
JFrrbYOF68Y480d1Xo/88Ev8Iv3P2HTfBkwEpAVVr5UZVMzYkX46VZELwAacLOo1
q5iiENtG+wEjHqd5CIbojEK9dJyhpP3dVbD+g3QiRPbIP9Aj1INIx1EAaewsKxOl
HGkI/zYaE4K8djytt0wUZhkkbBistDlKW4pFL1WYE3Fa3gy5ZkySd2QAUuA4Snp7
Y72++yDJYk7BYKryMGtLlOfMvtKl+OuUinMlWL9oYXPs3Dtfca4G16IHlWs7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU09rtvrRgLdUrtwATjtO1go7D7bowHwYDVR0j
BBgwFoAU1oVO/F74yTzqOod7e9xLGW2BgcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFud0U0Y1VTNTFjRFlzcVk2NjNiSzljcE1RNHNXRFhyQUxBVWVlUTlG
UjMvMC9ENjg1NEVGQzVFRjhDOTNDRUEzQTg3N0I3QkRDNEIxOTZEODE4MUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODU0RUZDNUVGOEM5M0NF
QTNBODc3QjdCREM0QjE5NkQ4MTgxQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxbndFNGNVUzUxY0RZc3FZNjYzYks5Y3BNUTRzV0RYckFMQVVlZVE5RlIzLzAv
MzQzNTJlMzEzNjMyMmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtosswDQYJKoZIhvcNAQELBQADggEBAD/KjtQz
GP6yjl9+8MVBL+bUj633ayQruttTSC2LB3SbSrV6E2MW5l7qL0DHr3aXQxXetzYd
/cGomhHWLhmfCRrRNEmT5jQJkxs9XwEPIR7pptcbnoQ0/WtyDwqZSCj0Zx1f1Zkg
dgHyVnCmBIjDspqp0edRkgCPg29svhDcpFlh6LFvh13F+745wPUy7NEUKtvw02KU
NEeUnMi2wyZKrhhvstRSKahsta3PBz0pUaoI3deda+3G3ORqCIEMXmIjcurfV5+u
ya6LLefAJt9z/dxwqki/SLpj2ZeZbSE5qA0DZ9wwD2a4pcrtPBkxYtGAV1sqOF0I
M3kAq4q0Mdh5Jq4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:23:43 2025 by rpki-client