Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa
File:                     34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier:          GCAQD/boiYsNT3WymMyip2dHhp3GCPxK89cfuCFLorM=
Subject key identifier:   D3:F0:35:24:C7:98:7C:56:75:7A:43:BC:85:10:BC:55:A0:69:85:BC
Certificate issuer:       /CN=B20E70F81B422B7960B3939928B1B16370431917
Certificate serial:       7E71C5839DC744CA3C1684EB7131C1E84299A488
Authority key identifier: B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa
Signing time:             Sat 04 Apr 2026 02:01:49 +0000
ROA not before:           Sat 04 Apr 2026 01:56:49 +0000
ROA not after:            Sat 03 Apr 2027 02:01:49 +0000
asID:                     268729
IP address blocks:        45.171.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl
                          rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:71:c5:83:9d:c7:44:ca:3c:16:84:eb:71:31:c1:e8:42:99:a4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B20E70F81B422B7960B3939928B1B16370431917
        Validity
            Not Before: Apr  4 01:56:49 2026 GMT
            Not After : Apr  3 02:01:49 2027 GMT
        Subject: CN=D3F03524C7987C56757A43BC8510BC55A06985BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:46:c4:10:e6:d4:47:37:dc:d9:b6:70:86:
                    78:b2:6a:dc:c7:02:6f:94:33:94:94:8a:21:d4:b9:
                    bb:39:6a:d1:30:17:29:8b:34:03:40:e0:39:ef:45:
                    8f:84:3c:ed:94:71:99:ab:a7:19:be:bb:6f:17:4c:
                    fb:9c:d2:7e:a0:3d:2e:25:0f:9c:9d:5e:23:16:78:
                    86:92:f0:52:2e:e3:b7:54:2f:6d:0c:4d:85:f3:b9:
                    5d:f0:7b:4e:a6:58:4d:1c:12:ec:2b:b2:65:0f:9d:
                    48:c2:df:86:8e:96:f2:1e:d0:74:2c:91:15:aa:f2:
                    5a:30:eb:df:22:bd:64:d0:be:db:ab:94:b0:f3:55:
                    4b:5c:83:86:6c:f2:ed:39:90:ee:75:84:1b:4a:9f:
                    b1:35:49:92:05:21:1e:f0:0c:4f:d7:85:8e:b0:36:
                    f8:86:5c:34:c1:6e:36:a0:c3:0e:70:74:1e:ec:06:
                    e9:0a:dd:80:dc:ec:22:be:d1:35:4e:5c:20:51:83:
                    6b:72:8c:20:76:f8:14:c5:b4:dd:d9:a8:e1:df:09:
                    cd:97:fe:5d:d6:52:30:f6:4f:e7:20:2d:de:c1:63:
                    8a:89:c8:ad:0e:bc:e1:ff:99:14:d6:d8:01:8f:c2:
                    fe:e1:77:40:6b:91:08:e3:06:59:c9:de:60:91:bd:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:35:24:C7:98:7C:56:75:7A:43:BC:85:10:BC:55:A0:69:85:BC
            X509v3 Authority Key Identifier:
                keyid:B2:0E:70:F8:1B:42:2B:79:60:B3:93:99:28:B1:B1:63:70:43:19:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/B20E70F81B422B7960B3939928B1B16370431917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E70F81B422B7960B3939928B1B16370431917.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:09:0e:b3:31:98:47:aa:73:43:2d:2d:e4:c2:09:db:c0:
         c1:00:07:5a:93:c4:d7:24:78:1e:57:1a:65:09:88:c0:7a:c4:
         f1:1d:f8:55:dc:12:aa:54:3f:3a:15:ee:e5:a2:6f:aa:84:6d:
         6b:91:9d:56:88:50:8a:0e:c6:be:b9:7c:1d:99:35:30:84:f4:
         77:ad:a3:e4:5a:a4:25:b6:13:18:f2:1a:d6:fa:7d:f2:dc:24:
         0e:ce:33:e8:5e:2c:3d:e4:e0:7c:64:e0:41:4b:50:8c:8e:cf:
         a5:f9:fd:31:0e:f1:7b:c7:90:5a:37:39:5f:a8:71:52:59:89:
         2a:65:9e:1a:5a:90:f7:50:e1:8a:6a:0b:39:cc:ca:e5:f4:ce:
         58:22:f2:73:b3:8c:00:60:46:d8:21:cd:80:36:44:b0:c9:7f:
         05:7e:ff:45:37:5a:23:13:62:27:b7:2a:0a:a5:45:6c:1e:ce:
         bb:fa:e5:e6:15:68:e0:d4:1a:2c:0f:2f:2a:7f:a6:d0:61:57:
         fc:97:52:fc:23:aa:92:58:a6:44:81:5f:56:a2:58:12:09:9b:
         e3:db:6a:d3:85:36:99:b4:ac:70:40:6b:12:8f:5e:b9:cc:d5:
         0a:1e:f3:e2:b5:6d:d5:b2:1f:6e:e9:a4:60:79:4a:b9:4c:cf:
         45:db:f8:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfnHFg53HRMo8FoTrcTHB6EKZpIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIwRTcwRjgxQjQyMkI3OTYwQjM5Mzk5MjhCMUIxNjM3
MDQzMTkxNzAeFw0yNjA0MDQwMTU2NDlaFw0yNzA0MDMwMjAxNDlaMDMxMTAvBgNV
BAMTKEQzRjAzNTI0Qzc5ODdDNTY3NTdBNDNCQzg1MTBCQzU1QTA2OTg1QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIUbEEObURzfc2bZwhniyatzH
Am+UM5SUiiHUubs5atEwFymLNANA4DnvRY+EPO2UcZmrpxm+u28XTPuc0n6gPS4l
D5ydXiMWeIaS8FIu47dUL20MTYXzuV3we06mWE0cEuwrsmUPnUjC34aOlvIe0HQs
kRWq8low698ivWTQvturlLDzVUtcg4Zs8u05kO51hBtKn7E1SZIFIR7wDE/XhY6w
NviGXDTBbjagww5wdB7sBukK3YDc7CK+0TVOXCBRg2tyjCB2+BTFtN3ZqOHfCc2X
/l3WUjD2T+cgLd7BY4qJyK0OvOH/mRTW2AGPwv7hd0BrkQjjBlnJ3mCRvQTNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0/A1JMeYfFZ1ekO8hRC8VaBphbwwHwYDVR0j
BBgwFoAUsg5w+BtCK3lgs5OZKLGxY3BDGRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZTZ3NiOU53UDJCdmdMZDhhMVlVOUJ2c25UaFVLc1AyYWNKNGVOWXc2
YXkvMC9CMjBFNzBGODFCNDIyQjc5NjBCMzkzOTkyOEIxQjE2MzcwNDMxOTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyMEU3MEY4MUI0MjJCNzk2
MEIzOTM5OTI4QjFCMTYzNzA0MzE5MTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGU2dzYjlOd1AyQnZnTGQ4YTFZVTlCdnNuVGhVS3NQMmFjSjRlTll3NmF5LzAv
MzQzNTJlMzEzNzMxMmUzMjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtq/owDQYJKoZIhvcNAQELBQADggEBAF7yCQ6z
MZhHqnNDLS3kwgnbwMEAB1qTxNckeB5XGmUJiMB6xPEd+FXcEqpUPzoV7uWib6qE
bWuRnVaIUIoOxr65fB2ZNTCE9Heto+RapCW2ExjyGtb6ffLcJA7OM+heLD3k4Hxk
4EFLUIyOz6X5/TEO8XvHkFo3OV+ocVJZiSplnhpakPdQ4YpqCznMyuX0zlgi8nOz
jABgRtghzYA2RLDJfwV+/0U3WiMTYie3KgqlRWwezrv65eYVaODUGiwPLyp/ptBh
V/yXUvwjqpJYpkSBX1aiWBIJm+PbatOFNpm0rHBAaxKPXrnM1Qoe8+K1bdWyH27p
pGB5SrlMz0Xb+Eg=
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:22:07 2026 by rpki-client