Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/34352e3138332e3135342e302f32342d3234203d3e20323639323833.roa
File:                     34352e3138332e3135342e302f32342d3234203d3e20323639323833.roa (raw, json)
Hash identifier:          w5PrJejwSZWOpT0KWE/Gml3ndnD860WgV5oJajBx4co=
Subject key identifier:   C5:81:25:B0:06:29:DE:71:A1:BD:AD:9D:4B:D3:A2:23:DA:38:FE:2E
Certificate issuer:       /CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
Certificate serial:       373A1CCC2AF14B9CFA659682C988A336B181B904
Authority key identifier: DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/34352e3138332e3135342e302f32342d3234203d3e20323639323833.roa
Signing time:             Tue 04 Nov 2025 12:36:27 +0000
ROA not before:           Tue 04 Nov 2025 12:31:27 +0000
ROA not after:            Tue 03 Nov 2026 12:36:27 +0000
asID:                     269283
IP address blocks:        45.183.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl
                          rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 07:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3a:1c:cc:2a:f1:4b:9c:fa:65:96:82:c9:88:a3:36:b1:81:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE
        Validity
            Not Before: Nov  4 12:31:27 2025 GMT
            Not After : Nov  3 12:36:27 2026 GMT
        Subject: CN=C58125B00629DE71A1BDAD9D4BD3A223DA38FE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:a6:4d:ea:09:d4:78:f8:b7:a5:54:3f:ca:
                    2b:f9:c4:a2:76:37:d0:57:d6:da:06:86:b7:8b:f4:
                    40:65:f0:75:03:9e:1d:33:c2:81:64:26:44:26:22:
                    49:77:c0:b8:e7:55:ff:e6:07:5c:1a:e8:70:d6:b0:
                    d6:a9:71:b8:00:50:1a:50:8e:71:da:90:31:6d:8d:
                    fc:f2:1f:55:42:c8:e7:28:b2:df:3a:39:fc:10:57:
                    20:a7:82:0e:97:87:22:f6:e2:82:e3:e4:11:92:de:
                    36:2e:a5:34:1c:db:b6:bb:22:8d:81:f2:98:e9:d9:
                    d6:0e:98:11:5e:d8:9f:c9:a5:9b:7f:60:eb:c1:b7:
                    40:51:40:38:05:6f:f3:e5:bd:ae:c3:21:ef:60:f9:
                    47:92:04:eb:ae:be:37:fd:df:fc:3a:13:88:18:76:
                    36:b3:70:f3:b1:90:99:01:f7:4c:dd:72:ff:e4:a3:
                    25:56:6b:83:03:51:b1:3e:ef:b2:87:3c:ae:f7:bf:
                    d7:7c:96:90:ca:34:99:db:19:0f:50:09:20:b7:a4:
                    86:fd:ae:7f:13:60:5c:29:97:81:dc:df:8e:27:7d:
                    cb:71:c6:f0:7c:e4:e9:70:c9:68:a6:3a:2b:74:cb:
                    c4:af:ff:69:47:38:90:1b:17:69:16:28:61:66:ff:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:81:25:B0:06:29:DE:71:A1:BD:AD:9D:4B:D3:A2:23:DA:38:FE:2E
            X509v3 Authority Key Identifier:
                keyid:DF:7F:00:ED:DA:32:63:94:DA:65:BF:2B:92:33:F7:2E:4D:EA:98:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF7F00EDDA326394DA65BF2B9233F72E4DEA98DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/729GkFPsQC6nzSLZFSVS8CqnqnSbT7y4GarVQ5fUfFtc/0/34352e3138332e3135342e302f32342d3234203d3e20323639323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:57:bb:19:82:24:85:4e:06:bc:c4:ee:15:84:87:9c:d5:1a:
         20:94:57:ba:8c:8d:3a:ab:84:06:67:2f:2a:4a:41:39:30:88:
         e6:3b:91:a3:53:48:d7:e3:11:d4:a0:dd:12:05:86:9f:10:36:
         e6:4a:1b:47:64:c3:b6:bf:ac:14:b0:ba:8c:aa:32:7c:29:b6:
         6c:b8:ae:3a:3c:8f:09:ce:23:19:e3:bc:98:0f:4b:6e:fa:67:
         e0:97:87:1a:6d:aa:2a:33:e1:97:24:9b:57:e3:39:83:1e:94:
         e4:86:da:16:b7:45:30:ad:9d:3e:72:63:b6:a9:10:1a:65:fe:
         c4:91:5c:ad:1d:9b:03:94:bd:0c:6c:57:e2:85:4d:f7:d7:dc:
         fb:1c:65:73:ab:fe:3c:7a:67:3d:8a:f7:d2:06:25:88:07:58:
         8f:cc:79:83:b1:8a:e8:f6:d3:4d:f2:cd:da:f8:e6:a2:8c:e9:
         c3:4d:db:d1:b7:49:b1:66:f2:be:0c:30:dc:5e:4d:d7:f4:14:
         30:c9:28:43:67:1c:6d:6d:ca:7a:16:ae:0b:66:c9:51:f7:ee:
         21:41:46:28:b8:f1:09:a2:7f:0d:cd:27:50:ce:41:33:1f:70:
         5f:aa:d5:fb:ca:33:08:c5:87:c1:5a:26:48:b9:c1:67:30:da:
         0d:a1:e5:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNzoczCrxS5z6ZZaCyYijNrGBuQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY3RjAwRUREQTMyNjM5NERBNjVCRjJCOTIzM0Y3MkU0
REVBOThERTAeFw0yNTExMDQxMjMxMjdaFw0yNjExMDMxMjM2MjdaMDMxMTAvBgNV
BAMTKEM1ODEyNUIwMDYyOURFNzFBMUJEQUQ5RDRCRDNBMjIzREEzOEZFMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5qZN6gnUePi3pVQ/yiv5xKJ2
N9BX1toGhreL9EBl8HUDnh0zwoFkJkQmIkl3wLjnVf/mB1wa6HDWsNapcbgAUBpQ
jnHakDFtjfzyH1VCyOcost86OfwQVyCngg6XhyL24oLj5BGS3jYupTQc27a7Io2B
8pjp2dYOmBFe2J/JpZt/YOvBt0BRQDgFb/Plva7DIe9g+UeSBOuuvjf93/w6E4gY
djazcPOxkJkB90zdcv/koyVWa4MDUbE+77KHPK73v9d8lpDKNJnbGQ9QCSC3pIb9
rn8TYFwpl4Hc344nfctxxvB85OlwyWimOit0y8Sv/2lHOJAbF2kWKGFm//A1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxYElsAYp3nGhva2dS9OiI9o4/i4wHwYDVR0j
BBgwFoAU338A7doyY5TaZb8rkjP3Lk3qmN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI5R2tGUHNRQzZuelNMWkZTVlM4Q3FucW5TYlQ3eTRHYXJWUTVmVWZG
dGMvMC9ERjdGMDBFRERBMzI2Mzk0REE2NUJGMkI5MjMzRjcyRTRERUE5OERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGN0YwMEVEREEzMjYzOTRE
QTY1QkYyQjkyMzNGNzJFNERFQTk4REUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOUdrRlBzUUM2bnpTTFpGU1ZTOENxbnFuU2JUN3k0R2FyVlE1ZlVmRnRjLzAv
MzQzNTJlMzEzODMzMmUzMTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtt5owDQYJKoZIhvcNAQELBQADggEBAIdXuxmC
JIVOBrzE7hWEh5zVGiCUV7qMjTqrhAZnLypKQTkwiOY7kaNTSNfjEdSg3RIFhp8Q
NuZKG0dkw7a/rBSwuoyqMnwptmy4rjo8jwnOIxnjvJgPS276Z+CXhxptqioz4Zck
m1fjOYMelOSG2ha3RTCtnT5yY7apEBpl/sSRXK0dmwOUvQxsV+KFTffX3PscZXOr
/jx6Zz2K99IGJYgHWI/MeYOxiuj2003yzdr45qKM6cNN29G3SbFm8r4MMNxeTdf0
FDDJKENnHG1tynoWrgtmyVH37iFBRii48Qmifw3NJ1DOQTMfcF+q1fvKMwjFh8Fa
Jki5wWcw2g2h5aM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:04:32 2025 by rpki-client