Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32332d3233203d3e20323637333330.roa
File:                     34352e3233332e3232342e302f32332d3233203d3e20323637333330.roa (raw, json)
Hash identifier:          3qhsteCTQdCR4z9xxl/FhcZal9RPFMcAmYwzapO1WVE=
Subject key identifier:   B5:48:A6:49:22:DD:DF:B5:E1:2B:B1:07:C1:B0:BF:CB:51:80:EC:F6
Certificate issuer:       /CN=0A467B137635F43F91188ECBB9D30961A5B090C1
Certificate serial:       203EC5DFE51A78F242BC577915098F75FBC6D138
Authority key identifier: 0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32332d3233203d3e20323637333330.roa
Signing time:             Thu 02 Apr 2026 13:04:05 +0000
ROA not before:           Thu 02 Apr 2026 12:59:05 +0000
ROA not after:            Thu 01 Apr 2027 13:04:05 +0000
asID:                     267330
IP address blocks:        45.233.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl
                          rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:c5:df:e5:1a:78:f2:42:bc:57:79:15:09:8f:75:fb:c6:d1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A467B137635F43F91188ECBB9D30961A5B090C1
        Validity
            Not Before: Apr  2 12:59:05 2026 GMT
            Not After : Apr  1 13:04:05 2027 GMT
        Subject: CN=B548A64922DDDFB5E12BB107C1B0BFCB5180ECF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:09:ae:5b:b9:4f:39:80:9e:da:10:d1:72:
                    72:bc:7b:56:18:e6:63:d1:70:c8:de:83:5b:48:4a:
                    83:d3:25:22:14:f3:df:87:ba:4d:a0:6c:5d:b3:7b:
                    b4:ab:9c:d0:84:25:f1:05:0e:4b:84:0a:7c:96:c1:
                    86:44:93:b8:96:f8:2c:4d:71:54:c5:fe:4a:2b:19:
                    59:d4:a0:15:ca:e7:27:54:fd:73:6b:eb:83:6a:60:
                    c8:23:fe:fa:b7:4e:f6:d2:4c:54:b6:6c:a9:36:14:
                    af:a9:a0:e6:53:4b:da:42:01:c4:2f:7a:79:57:06:
                    26:9c:e2:8d:2a:e7:e5:0b:83:96:78:07:20:48:da:
                    c1:86:31:63:d4:d4:43:69:b0:49:46:59:e4:52:de:
                    38:0e:c9:28:3b:e2:ed:c8:39:22:02:cb:d0:a8:b6:
                    ea:eb:7b:f7:37:55:0e:91:1a:9f:9b:51:2e:fd:e6:
                    38:b7:f7:e1:2c:fb:f7:42:85:d6:69:1d:5f:87:da:
                    aa:6b:79:22:f2:c8:4f:1a:a7:c5:74:89:d2:a8:ae:
                    b4:57:38:ca:7b:d9:c6:be:e8:83:cd:57:62:e5:b9:
                    4a:3e:62:9d:30:14:b3:30:50:9b:32:d7:87:39:62:
                    64:dd:2b:8d:d1:5f:6a:dd:15:40:54:29:95:fa:b8:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:48:A6:49:22:DD:DF:B5:E1:2B:B1:07:C1:B0:BF:CB:51:80:EC:F6
            X509v3 Authority Key Identifier:
                keyid:0A:46:7B:13:76:35:F4:3F:91:18:8E:CB:B9:D3:09:61:A5:B0:90:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/0A467B137635F43F91188ECBB9D30961A5B090C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A467B137635F43F91188ECBB9D30961A5B090C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/34352e3233332e3232342e302f32332d3233203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:f8:58:60:73:4e:86:a0:98:fb:c3:a0:18:ad:54:65:c2:
         a4:51:f2:ad:84:9f:af:14:14:3c:aa:af:c9:65:e6:df:0a:a1:
         d1:42:c7:2b:09:af:92:1b:92:d5:5c:27:97:5a:a1:57:90:7b:
         22:90:77:80:0f:61:51:cb:8a:61:d6:8e:70:89:c2:c6:ac:bf:
         97:97:2b:03:ea:99:f9:dd:40:9f:bd:16:88:62:e0:25:d6:a0:
         01:eb:e4:24:5b:46:4e:f1:5a:9e:21:fa:5b:cd:ec:ac:8a:7d:
         99:88:36:2c:46:76:29:5b:9f:6d:ec:51:9d:8b:b8:02:a4:93:
         09:26:ff:2d:bf:b0:18:bb:af:7f:79:bc:8d:55:fd:ff:eb:d0:
         bb:d1:3c:9b:f4:05:f5:8e:af:04:ed:98:31:c1:50:38:bb:c6:
         93:2d:05:39:c5:e8:8f:e0:4b:df:46:a4:aa:bd:c1:48:fa:d1:
         fa:97:b3:b0:5d:53:63:cf:05:29:c6:a6:8d:9d:b9:e6:6d:7b:
         80:62:bb:8d:a1:a2:d7:32:91:54:65:fd:62:1b:3c:fa:4c:b0:
         36:2d:04:05:1d:57:40:f0:18:fc:f7:4d:b4:65:14:37:34:06:
         17:17:07:47:ca:91:37:d2:17:55:53:f1:6a:3a:3e:e6:98:8e:
         ea:5a:a0:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUID7F3+UaePJCvFd5FQmPdfvG0TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0NjdCMTM3NjM1RjQzRjkxMTg4RUNCQjlEMzA5NjFB
NUIwOTBDMTAeFw0yNjA0MDIxMjU5MDVaFw0yNzA0MDExMzA0MDVaMDMxMTAvBgNV
BAMTKEI1NDhBNjQ5MjJERERGQjVFMTJCQjEwN0MxQjBCRkNCNTE4MEVDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85AmuW7lPOYCe2hDRcnK8e1YY
5mPRcMjeg1tISoPTJSIU89+Huk2gbF2ze7SrnNCEJfEFDkuECnyWwYZEk7iW+CxN
cVTF/korGVnUoBXK5ydU/XNr64NqYMgj/vq3TvbSTFS2bKk2FK+poOZTS9pCAcQv
enlXBiac4o0q5+ULg5Z4ByBI2sGGMWPU1ENpsElGWeRS3jgOySg74u3IOSICy9Co
turre/c3VQ6RGp+bUS795ji39+Es+/dChdZpHV+H2qpreSLyyE8ap8V0idKorrRX
OMp72ca+6IPNV2LluUo+Yp0wFLMwUJsy14c5YmTdK43RX2rdFUBUKZX6uCu3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtUimSSLd37XhK7EHwbC/y1GA7PYwHwYDVR0j
BBgwFoAUCkZ7E3Y19D+RGI7LudMJYaWwkMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFExc3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpD
TGgvMC8wQTQ2N0IxMzc2MzVGNDNGOTExODhFQ0JCOUQzMDk2MUE1QjA5MEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNDY3QjEzNzYzNUY0M0Y5
MTE4OEVDQkI5RDMwOTYxQTVCMDkwQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRMXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzAv
MzQzNTJlMzIzMzMzMmUzMjMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6eAwDQYJKoZIhvcNAQELBQADggEBAEC0+Fhg
c06GoJj7w6AYrVRlwqRR8q2En68UFDyqr8ll5t8KodFCxysJr5IbktVcJ5daoVeQ
eyKQd4APYVHLimHWjnCJwsasv5eXKwPqmfndQJ+9Fohi4CXWoAHr5CRbRk7xWp4h
+lvN7KyKfZmINixGdilbn23sUZ2LuAKkkwkm/y2/sBi7r395vI1V/f/r0LvRPJv0
BfWOrwTtmDHBUDi7xpMtBTnF6I/gS99GpKq9wUj60fqXs7BdU2PPBSnGpo2dueZt
e4Biu42hotcykVRl/WIbPPpMsDYtBAUdV0DwGPz3TbRlFDc0BhcXB0fKkTfSF1VT
8Wo6PuaYjupaoFU=
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:02:23 2026 by rpki-client