Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/34352e342e32342e302f32322d3232203d3e20323636303433.roa
File:                     34352e342e32342e302f32322d3232203d3e20323636303433.roa (raw, json)
Hash identifier:          91GF9vMgu0VgCTjBtcW2fJz3dNQvYKuYznAGRYskzG0=
Subject key identifier:   6F:1B:1E:5B:D4:E0:70:0F:7F:74:8F:DE:9F:E6:07:48:23:79:0E:23
Certificate issuer:       /CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
Certificate serial:       5111523A96F8F87B5B372CFD60AB303616225140
Authority key identifier: 85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/34352e342e32342e302f32322d3232203d3e20323636303433.roa
Signing time:             Fri 18 Sep 2026 13:09:54 +0000
ROA not before:           Fri 18 Sep 2026 13:04:54 +0000
ROA not after:            Fri 17 Sep 2027 13:09:54 +0000
asID:                     266043
IP address blocks:        45.4.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl
                          rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:11:52:3a:96:f8:f8:7b:5b:37:2c:fd:60:ab:30:36:16:22:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
        Validity
            Not Before: Sep 18 13:04:54 2026 GMT
            Not After : Sep 17 13:09:54 2027 GMT
        Subject: CN=6F1B1E5BD4E0700F7F748FDE9FE6074823790E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:18:e8:98:62:91:d0:d6:c3:df:df:01:78:
                    ed:12:64:6c:86:80:a3:6f:d6:d4:ff:a5:47:6c:37:
                    15:8e:fa:77:ea:02:91:dc:f3:e7:34:a2:01:97:42:
                    b0:10:94:87:47:7e:10:2e:cb:d4:1c:1b:9a:ce:11:
                    ce:85:6b:d7:dd:fd:12:10:78:0d:a6:2a:e8:cb:af:
                    2c:da:8f:08:52:4d:6e:64:f6:9e:ba:f6:b2:8d:1d:
                    44:3f:c5:d7:d1:a7:76:ca:7b:1b:b0:9c:4d:42:18:
                    69:9d:f8:04:f0:10:6e:b9:b2:6c:6e:9b:0a:b2:28:
                    5d:c9:68:8a:0e:9b:27:c4:3b:80:23:ac:74:96:cd:
                    30:04:14:d9:fd:3d:c1:4d:fd:5d:73:51:4f:2f:28:
                    8a:3b:2f:ee:e4:e8:99:c2:c7:58:dc:40:14:db:aa:
                    e6:6b:cf:b7:d0:92:16:9b:c8:06:68:19:79:80:0b:
                    e0:ae:c1:df:55:85:c5:3b:23:e7:74:d4:4b:07:48:
                    0d:fd:1b:de:91:a3:11:9f:f1:32:7c:0b:89:70:20:
                    ce:e4:61:52:7b:2d:14:56:57:fd:ce:3f:7e:04:83:
                    8c:8c:55:76:3d:8e:6b:97:2c:ba:41:94:40:d9:bf:
                    50:40:f6:65:1e:49:91:4b:37:68:97:19:48:88:1c:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1B:1E:5B:D4:E0:70:0F:7F:74:8F:DE:9F:E6:07:48:23:79:0E:23
            X509v3 Authority Key Identifier:
                keyid:85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/34352e342e32342e302f32322d3232203d3e20323636303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:5b:25:bf:d9:63:4d:9a:59:8d:76:78:12:66:92:07:7c:33:
         e8:e9:63:40:f7:66:5d:39:c1:48:f5:d2:9a:82:a7:2d:f8:af:
         05:d0:af:7d:be:97:23:e2:0d:b6:7b:24:0b:e4:a6:3a:54:de:
         c0:00:30:5a:c0:2e:49:00:86:9e:c4:2d:0d:94:ce:73:8b:4a:
         98:5d:ee:15:f5:8d:a6:68:52:8c:f9:7e:ee:99:c8:4c:a3:75:
         c0:88:4c:6f:38:af:b0:99:6f:2f:34:e3:3e:e9:25:3a:4b:85:
         e3:24:db:ea:0f:f7:ca:85:4f:44:09:51:62:b3:aa:82:97:86:
         fe:e9:2d:99:30:aa:7e:fc:52:2f:c4:00:b2:fd:18:5e:4c:52:
         c4:e3:64:26:f5:a0:40:98:84:cf:21:55:ce:f6:48:ef:0d:df:
         70:c1:95:ac:d1:d4:29:53:fb:fb:32:bc:c4:76:fb:f9:b8:44:
         18:fc:f5:2e:ca:d8:db:4b:89:76:33:8b:0b:17:c7:d7:6b:0b:
         48:f2:6a:79:75:d2:01:d9:dd:d1:83:55:c2:21:b4:06:e1:fc:
         2a:e4:4a:32:53:dd:df:7d:e9:3b:72:4f:b2:6a:58:1f:53:9c:
         81:37:9f:05:0d:3d:c4:07:08:60:83:31:a7:a6:bb:5d:15:10:
         a7:e4:ee:70
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUURFSOpb4+HtbNyz9YKswNhYiUUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4NzkxRjMxOTdCMjQwM0MwNDNCOEM3ODFFMzBGRkY2
QzFDOEMxOTAeFw0yNjA5MTgxMzA0NTRaFw0yNzA5MTcxMzA5NTRaMDMxMTAvBgNV
BAMTKDZGMUIxRTVCRDRFMDcwMEY3Rjc0OEZERTlGRTYwNzQ4MjM3OTBFMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaxjomGKR0NbD398BeO0SZGyG
gKNv1tT/pUdsNxWO+nfqApHc8+c0ogGXQrAQlIdHfhAuy9QcG5rOEc6Fa9fd/RIQ
eA2mKujLryzajwhSTW5k9p669rKNHUQ/xdfRp3bKexuwnE1CGGmd+ATwEG65smxu
mwqyKF3JaIoOmyfEO4AjrHSWzTAEFNn9PcFN/V1zUU8vKIo7L+7k6JnCx1jcQBTb
quZrz7fQkhabyAZoGXmAC+Cuwd9VhcU7I+d01EsHSA39G96RoxGf8TJ8C4lwIM7k
YVJ7LRRWV/3OP34Eg4yMVXY9jmuXLLpBlEDZv1BA9mUeSZFLN2iXGUiIHPlhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUbxseW9TgcA9/dI/en+YHSCN5DiMwHwYDVR0j
BBgwFoAUhYeR8xl7JAPAQ7jHgeMP/2wcjBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjkzSG1Wc1dYeXNMcWdDa2JEcWtEeFNEVm9IeUMyaGVmU3lUWXptWU1y
b0MvMC84NTg3OTFGMzE5N0IyNDAzQzA0M0I4Qzc4MUUzMEZGRjZDMUM4QzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1ODc5MUYzMTk3QjI0MDND
MDQzQjhDNzgxRTMwRkZGNkMxQzhDMTkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI5M0htVnNXWHlzTHFnQ2tiRHFrRHhTRFZvSHlDMmhlZlN5VFl6bVlNcm9DLzAv
MzQzNTJlMzQyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzYzMDM0
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBBgwDQYJKoZIhvcNAQELBQADggEBALBbJb/ZY02aWY12
eBJmkgd8M+jpY0D3Zl05wUj10pqCpy34rwXQr32+lyPiDbZ7JAvkpjpU3sAAMFrA
LkkAhp7ELQ2UznOLSphd7hX1jaZoUoz5fu6ZyEyjdcCITG84r7CZby804z7pJTpL
heMk2+oP98qFT0QJUWKzqoKXhv7pLZkwqn78Ui/EALL9GF5MUsTjZCb1oECYhM8h
Vc72SO8N33DBlazR1ClT+/syvMR2+/m4RBj89S7K2NtLiXYziwsXx9drC0jyanl1
0gHZ3dGDVcIhtAbh/CrkSjJT3d996TtyT7JqWB9TnIE3nwUNPcQHCGCDMaemu10V
EKfk7nA=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:08:50 2026 by rpki-client