Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
File:                     34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier:          WIZeG9VXENqyRBdnsn2Zw89aWs+DTTdhSsrCc+RAnv4=
Subject key identifier:   C4:22:9F:56:FA:BC:0B:BE:39:CD:8C:B9:64:9A:C8:07:C7:FC:4E:4B
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       744CE5FD1214E3CEA94E6B3C9438EC589CFDFAA6
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
Signing time:             Wed 30 Jul 2025 17:02:28 +0000
ROA not before:           Wed 30 Jul 2025 16:57:28 +0000
ROA not after:            Wed 29 Jul 2026 17:02:28 +0000
asID:                     269285
IP address blocks:        45.182.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 17:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4c:e5:fd:12:14:e3:ce:a9:4e:6b:3c:94:38:ec:58:9c:fd:fa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul 30 16:57:28 2025 GMT
            Not After : Jul 29 17:02:28 2026 GMT
        Subject: CN=C4229F56FABC0BBE39CD8CB9649AC807C7FC4E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:73:62:95:12:ff:6c:6a:5e:8d:bf:e4:1e:
                    48:b8:7e:8c:3e:45:d1:0a:43:93:91:56:06:1f:93:
                    13:2d:ca:42:0d:b2:68:63:29:95:22:bc:21:02:60:
                    fe:fe:8e:2f:80:41:8b:2d:f7:cb:5c:e3:2c:1b:39:
                    94:51:19:6e:1d:39:32:ec:17:57:f9:ff:18:56:f0:
                    f8:30:07:58:82:2b:31:b3:bd:10:b5:c1:d1:38:ca:
                    98:ae:f0:c0:93:2d:99:17:54:ef:1b:a4:c8:c3:0d:
                    88:6a:2c:75:7d:76:c2:b1:9c:a3:61:c2:67:89:76:
                    dd:92:58:5d:b2:ad:a1:61:6f:57:3a:96:fc:ae:20:
                    e9:06:76:b5:c4:50:1b:93:f2:3a:6d:ca:a2:ad:69:
                    86:0b:6d:5a:8a:fe:7a:cf:e5:92:48:8f:ca:a8:04:
                    d3:b1:ee:c2:77:b6:41:e4:b9:f4:80:3f:72:21:b8:
                    14:3c:70:41:9e:6f:a1:5a:8a:b1:11:3c:a7:36:11:
                    db:27:a4:72:86:70:56:e7:46:37:56:b6:20:d0:54:
                    da:8e:62:65:7e:11:0d:2d:e0:d5:ed:c9:e6:1a:ac:
                    f6:c7:7a:45:4c:71:60:53:50:6e:02:d0:1d:7b:09:
                    86:4b:72:cb:d3:71:12:3d:75:89:72:32:63:1b:fe:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:9F:56:FA:BC:0B:BE:39:CD:8C:B9:64:9A:C8:07:C7:FC:4E:4B
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d6:32:93:78:f9:fd:e3:ae:78:b7:c9:81:46:3c:75:24:b1:
         cc:ed:b7:c2:1c:d5:26:42:38:b0:09:88:e7:b2:6f:9f:e7:ac:
         be:95:e8:f2:d0:61:20:ab:51:fa:20:ac:eb:9a:58:13:8b:cd:
         79:9b:db:e0:83:6f:78:90:59:71:ae:b2:48:dd:60:6c:c2:a9:
         26:2d:4f:cf:e8:55:04:33:41:ff:f0:d7:bd:ef:56:58:69:80:
         a3:76:a9:72:69:65:11:04:b2:85:3f:0d:b5:f7:36:0f:e2:92:
         4b:79:fb:f8:65:ae:62:0a:3b:0b:84:9b:2c:7f:1a:da:e6:7c:
         3e:b1:d6:ae:43:c8:ac:d8:48:14:65:e2:99:18:29:0a:6a:d5:
         db:42:79:dd:39:35:99:69:8e:a6:b8:0a:e9:8d:42:38:77:7c:
         53:c0:04:22:b8:f3:43:72:6b:1c:29:da:bb:5d:84:9d:b6:6c:
         68:90:67:b3:21:68:af:30:07:8c:1c:63:20:d9:0f:05:66:c5:
         1e:b1:f1:a5:4a:61:c7:87:06:89:a7:d0:d1:32:aa:c6:b9:bb:
         5b:f3:8b:68:7b:a6:48:7c:17:d2:bf:21:4e:d3:86:12:a9:a8:
         fb:34:99:52:f2:80:e8:54:ec:ef:c4:b1:4a:24:41:3c:82:7f:
         92:a9:02:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdEzl/RIU486pTms8lDjsWJz9+qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNTA3MzAxNjU3MjhaFw0yNjA3MjkxNzAyMjhaMDMxMTAvBgNV
BAMTKEM0MjI5RjU2RkFCQzBCQkUzOUNEOENCOTY0OUFDODA3QzdGQzRFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yXNilRL/bGpejb/kHki4fow+
RdEKQ5ORVgYfkxMtykINsmhjKZUivCECYP7+ji+AQYst98tc4ywbOZRRGW4dOTLs
F1f5/xhW8PgwB1iCKzGzvRC1wdE4ypiu8MCTLZkXVO8bpMjDDYhqLHV9dsKxnKNh
wmeJdt2SWF2yraFhb1c6lvyuIOkGdrXEUBuT8jptyqKtaYYLbVqK/nrP5ZJIj8qo
BNOx7sJ3tkHkufSAP3IhuBQ8cEGeb6FairERPKc2EdsnpHKGcFbnRjdWtiDQVNqO
YmV+EQ0t4NXtyeYarPbHekVMcWBTUG4C0B17CYZLcsvTcRI9dYlyMmMb/iOpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxCKfVvq8C745zYy5ZJrIB8f8TkswHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzQzNTJlMzEzODMyMmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY3MA0GCSqGSIb3DQEBCwUAA4IBAQB41jKTePn9
4654t8mBRjx1JLHM7bfCHNUmQjiwCYjnsm+f56y+lejy0GEgq1H6IKzrmlgTi815
m9vgg294kFlxrrJI3WBswqkmLU/P6FUEM0H/8Ne971ZYaYCjdqlyaWURBLKFPw21
9zYP4pJLefv4Za5iCjsLhJssfxra5nw+sdauQ8is2EgUZeKZGCkKatXbQnndOTWZ
aY6muArpjUI4d3xTwAQiuPNDcmscKdq7XYSdtmxokGezIWivMAeMHGMg2Q8FZsUe
sfGlSmHHhwaJp9DRMqrGubtb84toe6ZIfBfSvyFO04YSqaj7NJlS8oDoVOzvxLFK
JEE8gn+SqQIa
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:03 2025 by rpki-client