Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa (raw, json)
Hash identifier:          tAB/lZQNEI4AUb57w/15Mf2eJx6xGXDyjHeu0nl3IdM=
Subject key identifier:   04:1A:7E:3D:F7:52:CB:93:31:97:8F:43:B6:07:74:F7:97:02:76:32
Certificate issuer:       /CN=B20E70F81B422B7960B3939928B1B16370431917
Certificate serial:       5ABE460E2720143FE905DB90BFD471B334A1B6E5
Authority key identifier: B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
Signing time:             Sat 04 Apr 2026 02:01:34 +0000
ROA not before:           Sat 04 Apr 2026 01:56:34 +0000
ROA not after:            Sat 03 Apr 2027 02:01:34 +0000
asID:                     268729
IP address blocks:        45.171.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl
                          rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:be:46:0e:27:20:14:3f:e9:05:db:90:bf:d4:71:b3:34:a1:b6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20E70F81B422B7960B3939928B1B16370431917
        Validity
            Not Before: Apr  4 01:56:34 2026 GMT
            Not After : Apr  3 02:01:34 2027 GMT
        Subject: CN=041A7E3DF752CB9331978F43B60774F797027632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:35:f6:50:59:d7:13:cf:54:69:6f:ec:4e:
                    61:14:71:38:b5:55:06:d7:e6:eb:e7:10:62:92:79:
                    9a:00:d4:17:63:57:09:86:75:ba:38:60:02:9d:f8:
                    64:2d:53:4e:08:a5:ff:99:ac:75:ca:fa:d3:63:92:
                    44:39:02:ad:49:b0:ba:b6:3c:f9:ac:27:b2:ba:8f:
                    88:85:4f:1b:a8:7f:eb:8a:3d:12:06:b4:7d:34:13:
                    f2:d5:61:02:d4:81:83:d7:dd:8b:b7:a2:3f:4c:ed:
                    c1:0d:65:48:7f:87:57:fc:84:70:16:0d:a6:f3:a2:
                    ee:56:e9:51:35:5f:17:37:0c:39:df:38:cb:9b:24:
                    34:b5:5e:bd:c7:b6:ad:63:25:02:2c:6b:17:7e:02:
                    64:66:f5:db:ed:90:0d:2e:bf:38:0c:44:57:e8:42:
                    0b:72:64:b0:ad:be:7c:c2:c2:6e:15:4c:b5:30:b9:
                    3b:c9:be:32:e4:b2:29:a2:f2:39:99:df:33:a4:f4:
                    46:97:24:88:7a:c3:8d:dc:4a:3c:4f:3e:a5:9c:c7:
                    db:4b:c8:5d:90:dc:eb:a1:3e:dd:8b:bf:87:89:41:
                    59:2f:38:e8:0e:7d:cc:57:a0:4a:34:27:5a:cd:c4:
                    a8:d3:89:9c:f2:34:b6:00:37:d6:a4:4c:68:d4:21:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:7E:3D:F7:52:CB:93:31:97:8F:43:B6:07:74:F7:97:02:76:32
            X509v3 Authority Key Identifier:
                keyid:B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:49:5b:31:41:d6:5d:e1:bc:3d:cb:5e:98:3b:69:21:f4:65:
         f3:bb:cd:35:31:93:22:2a:84:f8:29:a1:99:ee:4f:22:21:ed:
         aa:5c:84:7a:c3:91:97:d2:a0:06:c1:fc:a1:e0:b7:f5:f1:77:
         06:41:96:08:ed:46:7d:55:77:4e:d1:9f:41:ec:e1:dd:6c:26:
         ab:a0:75:ed:f0:3d:76:df:1a:ef:5c:51:94:bf:6a:58:ed:b7:
         b8:48:1d:21:95:b3:2e:73:98:c7:3d:cc:a2:45:d6:1e:cc:69:
         58:e0:b8:23:38:6b:4d:a7:52:01:35:98:bf:87:74:46:9b:cc:
         c6:68:02:9e:8c:7a:22:d2:e6:68:48:f3:bb:8e:e6:d6:76:f3:
         1e:05:ad:9a:74:b0:48:e6:f6:91:09:0a:33:ef:a8:09:43:a1:
         f4:cd:09:2a:76:ac:0b:83:dd:8c:43:05:01:22:fb:ec:13:4f:
         bf:4f:d4:d2:2f:4a:66:71:04:47:5e:ef:e1:21:42:d3:d0:6e:
         15:c3:93:4a:85:5c:01:ea:61:30:7c:d2:26:3b:c1:97:89:ff:
         af:ad:48:c5:41:96:ee:f7:e1:15:62:ef:88:a0:76:d6:57:3c:
         05:56:db:0d:7a:8b:ac:86:63:5a:40:5a:9c:7e:b9:dc:82:af:
         81:cc:97:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWr5GDicgFD/pBduQv9RxszShtuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIwRTcwRjgxQjQyMkI3OTYwQjM5Mzk5MjhCMUIxNjM3
MDQzMTkxNzAeFw0yNjA0MDQwMTU2MzRaFw0yNzA0MDMwMjAxMzRaMDMxMTAvBgNV
BAMTKDA0MUE3RTNERjc1MkNCOTMzMTk3OEY0M0I2MDc3NEY3OTcwMjc2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dzX2UFnXE89UaW/sTmEUcTi1
VQbX5uvnEGKSeZoA1BdjVwmGdbo4YAKd+GQtU04Ipf+ZrHXK+tNjkkQ5Aq1JsLq2
PPmsJ7K6j4iFTxuof+uKPRIGtH00E/LVYQLUgYPX3Yu3oj9M7cENZUh/h1f8hHAW
Dabzou5W6VE1Xxc3DDnfOMubJDS1Xr3Htq1jJQIsaxd+AmRm9dvtkA0uvzgMRFfo
QgtyZLCtvnzCwm4VTLUwuTvJvjLksimi8jmZ3zOk9EaXJIh6w43cSjxPPqWcx9tL
yF2Q3OuhPt2Lv4eJQVkvOOgOfcxXoEo0J1rNxKjTiZzyNLYAN9akTGjUIVXBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBBp+PfdSy5Mxl49Dtgd095cCdjIwHwYDVR0j
BBgwFoAUsg5w+BtCK3lgs5OZKLGxY3BDGRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMC9CMjBFNzBGODFCNDIyQjc5NjBCMzkzOTkyOEIxQjE2MzcwNDMxOTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMEU3MEY4MUI0MjJCNzk2
MEIzOTM5OTI4QjFCMTYzNzA0MzE5MTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzAv
MzQzNTJlMzEzNzMxMmUzMjM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItq/gwDQYJKoZIhvcNAQELBQADggEBADZJWzFB
1l3hvD3LXpg7aSH0ZfO7zTUxkyIqhPgpoZnuTyIh7apchHrDkZfSoAbB/KHgt/Xx
dwZBlgjtRn1Vd07Rn0Hs4d1sJqugde3wPXbfGu9cUZS/aljtt7hIHSGVsy5zmMc9
zKJF1h7MaVjguCM4a02nUgE1mL+HdEabzMZoAp6MeiLS5mhI87uO5tZ28x4FrZp0
sEjm9pEJCjPvqAlDofTNCSp2rAuD3YxDBQEi++wTT79P1NIvSmZxBEde7+EhQtPQ
bhXDk0qFXAHqYTB80iY7wZeJ/6+tSMVBlu734RVi74igdtZXPAVW2w16i6yGY1pA
Wpx+udyCr4HMl3k=
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:22:11 2026 by rpki-client