Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa
File:                     34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa (raw, json)
Hash identifier:          7RyJTre8V9d9fCSUfe2B05z4WesaSddMAgNBw/iYQ2c=
Subject key identifier:   B1:37:46:58:D1:8F:E8:16:0D:DE:BC:6A:7C:BD:7F:14:F0:17:43:E0
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       63D6AD00F66D588AA6D31798BDE977E5037AAB79
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa
Signing time:             Thu 10 Sep 2026 17:01:11 +0000
ROA not before:           Thu 10 Sep 2026 16:56:11 +0000
ROA not after:            Thu 09 Sep 2027 17:01:11 +0000
asID:                     269098
IP address blocks:        45.165.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Sep 2026 17:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:ad:00:f6:6d:58:8a:a6:d3:17:98:bd:e9:77:e5:03:7a:ab:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Sep 10 16:56:11 2026 GMT
            Not After : Sep  9 17:01:11 2027 GMT
        Subject: CN=B1374658D18FE8160DDEBC6A7CBD7F14F01743E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:31:5a:95:73:31:a8:74:f1:75:ad:a4:08:
                    c2:ca:da:b3:9b:53:5e:3a:65:ac:f2:0c:c1:37:5d:
                    e0:50:96:a1:1b:09:96:79:e0:c9:fa:a3:c0:79:f1:
                    d4:f0:9b:92:f5:13:5a:8a:39:60:b8:2a:4a:4e:8f:
                    08:06:9e:4e:11:8e:8e:60:d2:45:fa:0d:6b:b3:1e:
                    06:2f:49:ad:b2:81:23:ee:ac:d7:9d:c8:3f:8a:e5:
                    86:29:6a:84:f7:d7:91:46:76:13:28:bb:07:8e:1a:
                    e0:33:7b:6e:e0:57:9f:74:f9:78:65:dd:33:b2:bc:
                    ef:03:ad:f8:11:32:1b:15:67:b2:79:f8:17:0a:c7:
                    e2:5e:3e:92:c0:c2:c0:f9:a7:60:94:c0:fa:d7:9c:
                    25:d4:d0:89:06:13:3f:38:20:20:6d:d2:ab:39:a3:
                    64:5c:dd:6b:8d:a2:21:94:44:3e:40:5b:7f:42:16:
                    d6:c5:b3:7f:a8:ad:af:73:b5:69:16:81:1f:d3:a6:
                    34:d7:48:21:3a:a5:1c:36:36:89:1e:96:62:8b:e0:
                    5a:e6:e9:09:17:63:41:15:e2:a3:d8:2c:22:b0:4a:
                    98:25:70:0e:cf:3a:35:00:fe:3a:7b:3e:17:93:05:
                    03:58:8b:46:50:24:2b:9a:e6:7e:9a:71:30:38:f1:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:37:46:58:D1:8F:E8:16:0D:DE:BC:6A:7C:BD:7F:14:F0:17:43:E0
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3136352e3131362e302f32322d3234203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:31:8b:54:1a:b3:cd:bb:74:ba:59:fc:17:55:ce:4e:85:e7:
         bf:a0:60:3c:70:ff:d4:af:7d:d8:6a:b3:9e:47:74:22:01:0b:
         81:54:0e:29:1a:9b:6a:df:3c:5e:b3:51:03:cf:67:b5:97:8c:
         c1:ff:5e:cc:dc:78:93:f8:95:d5:69:dd:52:02:03:87:99:6c:
         89:1a:10:15:4d:ce:ac:5b:1c:06:b2:c8:53:ff:b9:99:bb:36:
         67:b9:04:a6:9d:e8:97:c8:3c:f4:2a:42:61:ee:e0:32:2f:e6:
         aa:b4:9d:5f:26:c0:10:29:11:5d:e7:3e:6a:27:f3:7e:db:66:
         c1:9f:e0:b0:6f:38:1e:40:7e:e4:d6:98:a5:e8:2f:08:00:88:
         13:0d:fa:46:0c:ba:5c:58:97:8c:36:20:99:7d:ff:45:07:2c:
         e3:75:22:b2:33:0b:6e:a4:46:0e:e0:af:19:93:32:91:27:05:
         32:4b:13:42:09:b9:72:03:57:81:7d:5b:11:7a:e7:5e:aa:5b:
         9c:8f:0f:30:ec:7d:9e:72:71:bd:ab:39:e8:d7:bf:45:6d:ec:
         b4:c4:1a:60:8e:79:dd:8d:2f:87:3f:54:fd:8e:67:a6:48:e1:
         0a:50:8e:e6:e1:7f:ec:ea:63:1a:99:02:dc:5a:2c:3e:44:d3:
         5e:bc:4e:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY9atAPZtWIqm0xeYvel35QN6q3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NzdDMTJDQTRCRDg3MzNCNzVEMzAxMEQ5OTdDOTFF
Nzc2OTM3RjAeFw0yNjA5MTAxNjU2MTFaFw0yNzA5MDkxNzAxMTFaMDMxMTAvBgNV
BAMTKEIxMzc0NjU4RDE4RkU4MTYwRERFQkM2QTdDQkQ3RjE0RjAxNzQzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EzFalXMxqHTxda2kCMLK2rOb
U146ZazyDME3XeBQlqEbCZZ54Mn6o8B58dTwm5L1E1qKOWC4KkpOjwgGnk4Rjo5g
0kX6DWuzHgYvSa2ygSPurNedyD+K5YYpaoT315FGdhMouweOGuAze27gV590+Xhl
3TOyvO8DrfgRMhsVZ7J5+BcKx+JePpLAwsD5p2CUwPrXnCXU0IkGEz84ICBt0qs5
o2Rc3WuNoiGURD5AW39CFtbFs3+ora9ztWkWgR/TpjTXSCE6pRw2NokelmKL4Frm
6QkXY0EV4qPYLCKwSpglcA7POjUA/jp7PheTBQNYi0ZQJCua5n6acTA48RUtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsTdGWNGP6BYN3rxqfL1/FPAXQ+AwHwYDVR0j
BBgwFoAUc3d8EspL2HM7ddMBDZl8ked2k38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0JmYTJ0dHc2elhaZzhhOXNpREg2QVhQOTFLdFN6bnQyUjkzeUdHeDFQ
YksvMC83Mzc3N0MxMkNBNEJEODczM0I3NUQzMDEwRDk5N0M5MUU3NzY5MzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNzc3QzEyQ0E0QkQ4NzMz
Qjc1RDMwMTBEOTk3QzkxRTc3NjkzN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNCZmEydHR3NnpYWmc4YTlzaURINkFYUDkxS3RTem50MlI5M3lHR3gxUGJLLzAv
MzQzNTJlMzEzNjM1MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpXQwDQYJKoZIhvcNAQELBQADggEBAJgxi1Qa
s827dLpZ/BdVzk6F57+gYDxw/9Svfdhqs55HdCIBC4FUDikam2rfPF6zUQPPZ7WX
jMH/XszceJP4ldVp3VICA4eZbIkaEBVNzqxbHAayyFP/uZm7Nme5BKad6JfIPPQq
QmHu4DIv5qq0nV8mwBApEV3nPmon837bZsGf4LBvOB5AfuTWmKXoLwgAiBMN+kYM
ulxYl4w2IJl9/0UHLON1IrIzC26kRg7grxmTMpEnBTJLE0IJuXIDV4F9WxF6516q
W5yPDzDsfZ5ycb2rOejXv0Vt7LTEGmCOed2NL4c/VP2OZ6ZI4QpQjubhf+zqYxqZ
AtxaLD5E0168Th4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:35:15 2026 by rpki-client