Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa
File:                     34352e3137312e31382e302f32342d3234203d3e20323638313831.roa (raw, json)
Hash identifier:          2xZ6f8licPKZN8HjAZ6LYkJH4paB6xtcY0S1ND1oRQY=
Subject key identifier:   DD:77:C0:CA:3D:7F:B5:96:F7:D1:10:AC:FE:DE:4B:89:B8:7D:E7:F2
Certificate issuer:       /CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
Certificate serial:       2CDCA2E7BD6EE09B4BC7E1FEE53A82FBBCF69034
Authority key identifier: A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa
Signing time:             Fri 28 Aug 2026 17:32:01 +0000
ROA not before:           Fri 28 Aug 2026 17:27:01 +0000
ROA not after:            Fri 27 Aug 2027 17:32:01 +0000
asID:                     268181
IP address blocks:        45.171.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl
                          rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dc:a2:e7:bd:6e:e0:9b:4b:c7:e1:fe:e5:3a:82:fb:bc:f6:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97765788ABBF9CF9F38CFF907138FBAE29C9607
        Validity
            Not Before: Aug 28 17:27:01 2026 GMT
            Not After : Aug 27 17:32:01 2027 GMT
        Subject: CN=DD77C0CA3D7FB596F7D110ACFEDE4B89B87DE7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fd:f2:10:f5:06:78:64:6a:3e:2e:fc:d9:23:
                    a1:1f:6d:1b:c6:c0:a4:d4:c8:01:ca:49:e7:ff:a8:
                    1f:36:31:43:62:6b:23:b9:a8:93:c9:a7:d5:30:a6:
                    e1:93:db:f0:55:06:e8:62:ff:d3:6b:75:46:44:86:
                    51:95:44:a1:62:44:05:20:19:d1:70:cd:08:a2:60:
                    c8:a3:18:4c:19:e7:1b:a8:16:e0:e5:2e:84:c0:bd:
                    22:85:36:99:74:0c:9b:8c:68:47:57:b0:7a:87:15:
                    6f:b0:08:09:77:8d:f8:8d:41:80:48:23:47:de:b5:
                    16:ec:57:42:d1:91:cc:66:72:5d:af:54:e4:bb:18:
                    a9:84:f6:6f:53:10:b2:43:9c:00:ee:98:55:91:52:
                    26:cc:d0:09:05:45:d0:49:45:ab:b3:d3:6b:d7:45:
                    0d:2f:bd:21:82:e3:6c:e4:80:8e:c8:c7:6b:8e:f5:
                    84:72:45:77:13:f9:e7:13:be:58:b4:26:47:24:28:
                    f9:08:98:15:03:41:8e:ec:b2:65:3f:3c:2d:aa:7f:
                    f1:37:38:c0:13:94:ce:42:aa:b4:1e:30:41:b9:3a:
                    ec:1e:25:2a:05:df:ee:59:7a:9e:18:76:ff:d4:18:
                    c9:21:da:d8:da:5d:43:c6:c7:14:7a:6a:44:a5:f5:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:C0:CA:3D:7F:B5:96:F7:D1:10:AC:FE:DE:4B:89:B8:7D:E7:F2
            X509v3 Authority Key Identifier:
                keyid:A9:77:65:78:8A:BB:F9:CF:9F:38:CF:F9:07:13:8F:BA:E2:9C:96:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/A97765788ABBF9CF9F38CFF907138FBAE29C9607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A97765788ABBF9CF9F38CFF907138FBAE29C9607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsZJfFdMDrc5WN96jv2a9EQhz2LZH5sWbLaVBLLNJMHu/0/34352e3137312e31382e302f32342d3234203d3e20323638313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:4e:1a:d1:29:33:b8:7e:6d:c5:f8:a4:cf:09:de:73:07:
         24:f3:de:6b:1e:e2:45:9d:51:fa:22:48:8f:05:1d:b8:a2:e9:
         10:bc:e6:43:7e:69:e1:b7:d8:f8:23:56:14:70:89:25:86:2f:
         69:41:92:77:ae:e7:80:82:38:8e:70:54:7b:ef:7c:ff:d9:3a:
         c5:ee:14:34:cf:f3:1a:19:65:3d:61:22:ae:cd:b4:64:73:e5:
         fb:9d:4c:b3:a0:2a:dd:52:ff:9d:06:34:b7:b3:a5:e5:1d:78:
         78:e8:b7:5e:28:ca:8d:a7:e9:33:6d:31:56:c2:f3:ca:fd:d9:
         9e:f7:91:f5:ee:b4:28:b8:7e:f3:c9:ed:ff:83:95:94:aa:24:
         61:53:ac:5e:ad:08:67:c0:73:f2:89:3b:d6:65:8b:f1:30:a5:
         39:fc:f1:70:c0:b6:97:f4:0d:c3:e3:aa:f6:19:44:44:c6:9b:
         05:2d:d8:b9:67:6d:46:6a:fd:19:be:4f:e6:84:8a:f0:9f:58:
         7c:1d:32:6c:13:bc:87:4a:3b:d1:df:04:62:d0:cb:3d:5e:a6:
         55:fe:06:ea:71:2f:3a:a7:ae:9f:b8:58:9e:9f:e2:51:a5:cc:
         02:cc:8c:37:44:7a:40:a0:b0:15:26:02:5b:03:8a:07:18:27:
         e0:9c:9b:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULNyi571u4JtLx+H+5TqC+7z2kDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk3NzY1Nzg4QUJCRjlDRjlGMzhDRkY5MDcxMzhGQkFF
MjlDOTYwNzAeFw0yNjA4MjgxNzI3MDFaFw0yNzA4MjcxNzMyMDFaMDMxMTAvBgNV
BAMTKERENzdDMENBM0Q3RkI1OTZGN0QxMTBBQ0ZFREU0Qjg5Qjg3REU3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/fIQ9QZ4ZGo+LvzZI6EfbRvG
wKTUyAHKSef/qB82MUNiayO5qJPJp9UwpuGT2/BVBuhi/9NrdUZEhlGVRKFiRAUg
GdFwzQiiYMijGEwZ5xuoFuDlLoTAvSKFNpl0DJuMaEdXsHqHFW+wCAl3jfiNQYBI
I0fetRbsV0LRkcxmcl2vVOS7GKmE9m9TELJDnADumFWRUibM0AkFRdBJRauz02vX
RQ0vvSGC42zkgI7Ix2uO9YRyRXcT+ecTvli0JkckKPkImBUDQY7ssmU/PC2qf/E3
OMATlM5CqrQeMEG5OuweJSoF3+5Zep4Ydv/UGMkh2tjaXUPGxxR6akSl9Y+JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3XfAyj1/tZb30RCs/t5Libh95/IwHwYDVR0j
BBgwFoAUqXdleIq7+c+fOM/5BxOPuuKclgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NaSmZGZE1EcmM1V045Nmp2MmE5RVFoejJMWkg1c1diTGFWQkxMTkpN
SHUvMC9BOTc3NjU3ODhBQkJGOUNGOUYzOENGRjkwNzEzOEZCQUUyOUM5NjA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5Nzc2NTc4OEFCQkY5Q0Y5
RjM4Q0ZGOTA3MTM4RkJBRTI5Qzk2MDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzWkpmRmRNRHJjNVdOOTZqdjJhOUVRaHoyTFpINXNXYkxhVkJMTE5KTUh1LzAv
MzQzNTJlMzEzNzMxMmUzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALasSMA0GCSqGSIb3DQEBCwUAA4IBAQA1Hk4a0Skz
uH5txfikzwnecwck895rHuJFnVH6IkiPBR24oukQvOZDfmnht9j4I1YUcIklhi9p
QZJ3rueAgjiOcFR773z/2TrF7hQ0z/MaGWU9YSKuzbRkc+X7nUyzoCrdUv+dBjS3
s6XlHXh46LdeKMqNp+kzbTFWwvPK/dme95H17rQouH7zye3/g5WUqiRhU6xerQhn
wHPyiTvWZYvxMKU5/PFwwLaX9A3D46r2GURExpsFLdi5Z21Gav0Zvk/mhIrwn1h8
HTJsE7yHSjvR3wRi0Ms9XqZV/gbqcS86p66fuFien+JRpcwCzIw3RHpAoLAVJgJb
A4oHGCfgnJv9
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:13:46 2026 by rpki-client