Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (raw, json)
Hash identifier:          5pFVEAu666YLgnmc7FkzxXD1WhuAlLFCF7BHCZ8ugDY=
Subject key identifier:   FB:46:E4:8C:2D:17:CD:AC:0B:0F:6C:15:B1:5B:E9:3F:60:9A:0C:C6
Certificate issuer:       /CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA
Certificate serial:       07D24A15B7246CCB448C01E88BF1A5A459C9C44E
Authority key identifier: DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
Signing time:             Wed 08 Apr 2026 13:22:01 +0000
ROA not before:           Wed 08 Apr 2026 13:17:01 +0000
ROA not after:            Wed 07 Apr 2027 13:22:01 +0000
asID:                     268444
IP address blocks:        45.161.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl
                          rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d2:4a:15:b7:24:6c:cb:44:8c:01:e8:8b:f1:a5:a4:59:c9:c4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA
        Validity
            Not Before: Apr  8 13:17:01 2026 GMT
            Not After : Apr  7 13:22:01 2027 GMT
        Subject: CN=FB46E48C2D17CDAC0B0F6C15B15BE93F609A0CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:91:9a:e9:d1:73:d4:b7:8f:a2:c3:f7:86:
                    01:cf:21:c1:54:f2:e7:7d:de:d8:03:47:7e:5a:99:
                    77:96:2b:b6:2f:07:6d:1b:25:7d:e5:5c:67:1c:b1:
                    2d:ae:1d:63:4d:39:73:1a:bc:7d:e3:4e:36:10:88:
                    86:d9:1b:25:59:e7:68:14:08:49:29:db:d2:83:91:
                    5d:7f:ee:6a:e0:59:db:d8:1f:15:89:92:59:93:c8:
                    bf:64:41:0d:25:b0:8c:88:be:ad:8a:8a:4d:21:cf:
                    8c:03:1a:29:ec:9a:67:76:27:67:c8:6e:f8:ca:2d:
                    60:3d:40:c5:1e:e3:24:2c:09:05:85:ba:36:52:90:
                    8e:d7:dc:22:d4:38:b0:9a:cc:c4:c2:70:0a:35:b6:
                    64:cd:82:38:29:37:fd:95:11:c6:8d:1e:9a:e6:5b:
                    30:2c:fe:0a:21:39:aa:95:6c:8f:5d:ab:d2:37:d4:
                    c9:bf:63:da:1a:ea:10:18:8c:04:f4:15:27:0e:cc:
                    49:df:53:05:64:7f:14:4e:08:fe:03:38:04:90:0f:
                    e6:12:4e:d2:11:c3:43:d4:fe:b9:82:2e:e0:a9:a2:
                    5c:ed:fc:32:a9:f4:9b:2b:51:24:37:38:8d:2c:c8:
                    41:ef:20:66:e7:a5:0b:b1:5f:4b:78:a6:78:7a:b6:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:E4:8C:2D:17:CD:AC:0B:0F:6C:15:B1:5B:E9:3F:60:9A:0C:C6
            X509v3 Authority Key Identifier:
                keyid:DC:4F:64:5F:79:7D:2D:16:DA:AC:79:9C:E7:6E:8F:53:0B:7E:FC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC4F645F797D2D16DAAC799CE76E8F530B7EFCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:f6:6a:5b:30:3d:a6:d7:01:88:79:1b:88:80:cc:17:79:
         ab:5e:08:fb:8f:1a:0e:16:35:de:9e:f4:82:4c:73:fa:ca:02:
         36:8d:83:66:e5:9f:8a:8b:74:ed:28:c0:8c:7b:f0:75:30:3e:
         98:11:9e:32:09:3e:a7:88:7f:4b:00:42:fc:bf:13:40:ad:80:
         1b:ec:4c:9f:12:df:12:b9:de:16:49:be:d4:3b:c2:aa:e7:13:
         82:d9:e1:f6:6b:1d:e9:85:c4:77:cf:97:95:f0:e7:cf:ac:66:
         32:13:e0:62:6e:46:84:78:48:c9:29:15:bb:89:4d:3d:5e:57:
         6b:86:42:ca:1d:2f:4a:d0:a8:7b:d4:74:31:55:0c:76:0b:6c:
         38:1e:2b:72:2a:3f:95:b1:29:ca:b5:99:70:f1:10:28:a6:3a:
         e5:a3:47:af:c5:b4:cd:7c:c9:86:f5:17:cf:d2:03:bf:df:a9:
         dd:f1:96:4a:8a:d1:7a:4a:51:fe:ab:ec:04:2c:d4:56:71:e0:
         b7:82:53:63:b5:2c:12:c4:51:1f:3f:e2:45:ba:da:1b:89:70:
         c8:50:19:11:55:ee:d1:14:d2:36:1c:38:0f:0d:ea:98:80:d8:
         e6:89:ed:88:1c:b4:7b:2a:0d:78:9e:38:f0:8b:ad:96:97:40:
         b3:fd:55:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB9JKFbckbMtEjAHoi/GlpFnJxE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM0RjY0NUY3OTdEMkQxNkRBQUM3OTlDRTc2RThGNTMw
QjdFRkNFQTAeFw0yNjA0MDgxMzE3MDFaFw0yNzA0MDcxMzIyMDFaMDMxMTAvBgNV
BAMTKEZCNDZFNDhDMkQxN0NEQUMwQjBGNkMxNUIxNUJFOTNGNjA5QTBDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFpGa6dFz1LePosP3hgHPIcFU
8ud93tgDR35amXeWK7YvB20bJX3lXGccsS2uHWNNOXMavH3jTjYQiIbZGyVZ52gU
CEkp29KDkV1/7mrgWdvYHxWJklmTyL9kQQ0lsIyIvq2Kik0hz4wDGinsmmd2J2fI
bvjKLWA9QMUe4yQsCQWFujZSkI7X3CLUOLCazMTCcAo1tmTNgjgpN/2VEcaNHprm
WzAs/gohOaqVbI9dq9I31Mm/Y9oa6hAYjAT0FScOzEnfUwVkfxROCP4DOASQD+YS
TtIRw0PU/rmCLuCpolzt/DKp9JsrUSQ3OI0syEHvIGbnpQuxX0t4pnh6tkKxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+0bkjC0XzawLD2wVsVvpP2CaDMYwHwYDVR0j
BBgwFoAU3E9kX3l9LRbarHmc526PUwt+/OowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw
NW4vMC9EQzRGNjQ1Rjc5N0QyRDE2REFBQzc5OUNFNzZFOEY1MzBCN0VGQ0VBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNEY2NDVGNzk3RDJEMTZE
QUFDNzk5Q0U3NkU4RjUzMEI3RUZDRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAv
MzQzNTJlMzEzNjMxMmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaFAMA0GCSqGSIb3DQEBCwUAA4IBAQBL9PZqWzA9
ptcBiHkbiIDMF3mrXgj7jxoOFjXenvSCTHP6ygI2jYNm5Z+Ki3TtKMCMe/B1MD6Y
EZ4yCT6niH9LAEL8vxNArYAb7EyfEt8Sud4WSb7UO8Kq5xOC2eH2ax3phcR3z5eV
8OfPrGYyE+BibkaEeEjJKRW7iU09XldrhkLKHS9K0Kh71HQxVQx2C2w4HityKj+V
sSnKtZlw8RAopjrlo0evxbTNfMmG9RfP0gO/36nd8ZZKitF6SlH+q+wELNRWceC3
glNjtSwSxFEfP+JFutobiXDIUBkRVe7RFNI2HDgPDeqYgNjmie2IHLR7Kg14njjw
i62Wl0Cz/VWi
-----END CERTIFICATE-----
Generated at Wed Apr 8 17:08:45 2026 by rpki-client