Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
File:                     34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa (raw, json)
Hash identifier:          SptmB41IPR6sVVpzyH9J96NKBITx8LPs8BHMg8PYj8M=
Subject key identifier:   5A:93:60:7F:2E:DB:0B:0D:A3:C6:B3:78:CB:9B:7C:C3:70:54:08:1C
Certificate issuer:       /CN=4EB4168867D6583D34B932C0FDA3C9A42D88C162
Certificate serial:       257F086D41A1C82949B39441A4E8DF5908D4EB6B
Authority key identifier: 4E:B4:16:88:67:D6:58:3D:34:B9:32:C0:FD:A3:C9:A4:2D:88:C1:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EB4168867D6583D34B932C0FDA3C9A42D88C162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa
Signing time:             Tue 04 Nov 2025 15:51:06 +0000
ROA not before:           Tue 04 Nov 2025 15:46:06 +0000
ROA not after:            Tue 03 Nov 2026 15:51:06 +0000
asID:                     267261
IP address blocks:        45.231.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/4EB4168867D6583D34B932C0FDA3C9A42D88C162.crl
                          rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/4EB4168867D6583D34B932C0FDA3C9A42D88C162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EB4168867D6583D34B932C0FDA3C9A42D88C162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 12:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7f:08:6d:41:a1:c8:29:49:b3:94:41:a4:e8:df:59:08:d4:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EB4168867D6583D34B932C0FDA3C9A42D88C162
        Validity
            Not Before: Nov  4 15:46:06 2025 GMT
            Not After : Nov  3 15:51:06 2026 GMT
        Subject: CN=5A93607F2EDB0B0DA3C6B378CB9B7CC37054081C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:07:55:cc:5e:6f:a4:9d:44:22:58:05:bd:
                    b8:15:33:95:fd:1f:b2:67:65:46:b0:8e:76:39:4c:
                    63:08:75:f2:54:e5:2e:48:7f:8f:46:7a:b2:66:6e:
                    b5:3c:14:61:cf:e2:69:fa:c9:f0:a4:df:af:aa:6a:
                    6e:2a:99:22:bd:e8:4f:bc:2c:fb:b0:8a:6a:c9:ee:
                    ab:bc:9d:22:58:c2:40:78:f4:81:8c:96:ba:f4:63:
                    03:44:44:24:49:1f:c3:0f:18:2e:07:18:ea:99:fe:
                    c7:0b:2e:19:15:d0:ed:cd:f0:46:80:9f:46:64:a1:
                    d1:fa:ad:2a:c9:ac:9f:31:a9:86:e5:22:50:82:f3:
                    a9:a6:68:89:86:82:51:ee:7c:37:d9:4b:49:56:59:
                    05:58:80:a8:0e:9b:40:72:8b:b9:e5:03:0f:7d:82:
                    4f:96:98:d1:88:64:92:f3:cc:6e:c7:7f:1a:d5:06:
                    24:ec:ba:e7:15:93:19:92:fb:bd:64:99:36:92:6e:
                    d6:33:43:a1:3d:95:1f:91:18:56:6b:1e:3a:af:94:
                    93:be:b5:ab:86:f5:97:59:b5:60:a5:5e:64:39:1d:
                    cb:f1:de:d2:aa:d8:b7:27:04:09:b4:36:d4:56:10:
                    ba:4f:fd:ac:79:1f:a9:17:d9:6b:36:f1:55:58:3d:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:60:7F:2E:DB:0B:0D:A3:C6:B3:78:CB:9B:7C:C3:70:54:08:1C
            X509v3 Authority Key Identifier:
                keyid:4E:B4:16:88:67:D6:58:3D:34:B9:32:C0:FD:A3:C9:A4:2D:88:C1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/4EB4168867D6583D34B932C0FDA3C9A42D88C162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EB4168867D6583D34B932C0FDA3C9A42D88C162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/34352e3233312e3135322e302f32322d3332203d3e20323637323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:36:c0:39:ef:0e:13:7e:7e:8b:1c:04:ec:70:47:dc:ba:
         e0:be:7a:1e:8f:df:ec:2e:83:35:5a:34:be:96:3a:fb:76:28:
         9c:d6:b0:b7:e8:a6:b8:5d:d5:ac:79:eb:65:2e:de:84:58:cf:
         0e:f4:48:de:68:a0:b0:a2:12:23:08:32:49:38:38:82:38:0a:
         1b:75:bb:3d:9a:8c:43:71:f6:21:39:89:ce:1a:69:e0:28:d7:
         b2:72:da:8c:54:29:4a:ba:97:a8:8e:e4:b2:4c:f5:7a:0e:77:
         df:22:e2:32:66:c6:6d:02:9d:ef:c1:01:58:5e:af:2d:55:7a:
         54:34:5d:19:5f:ef:45:f1:d6:0b:ee:c3:3c:91:42:36:1e:21:
         9b:61:8d:64:ba:59:6d:45:69:5f:fa:d8:f3:e4:f2:9c:4f:8b:
         bc:1b:9c:12:3e:9d:77:46:fe:85:b5:ef:43:af:72:8f:0d:26:
         25:8c:ce:53:05:71:b6:a7:13:23:1b:a2:9b:f5:32:ee:a1:e1:
         11:c1:53:2d:15:70:e8:df:5f:a2:65:db:65:49:b4:d2:24:ee:
         04:c8:b9:c1:ae:0c:c4:4b:6e:71:78:37:cc:db:0c:54:79:a8:
         c3:18:88:0f:42:a0:ab:59:19:2d:cb:ce:77:a9:96:ed:29:84:
         d6:b4:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:01:14 2025 by rpki-client