Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          9uxYohcWv9T+KNPVoHUS9UMBlB7SiGaAy+IJj2+d3MU=
Subject key identifier:   E2:A4:21:2A:03:00:B1:2B:57:A2:50:54:90:D5:FE:60:2A:FD:A0:36
Certificate issuer:       /CN=122286327C40472B1D6624EB22C0EBC302BE84FA
Certificate serial:       492AE6E5864243AEE93770977E99026309FC78EB
Authority key identifier: 12:22:86:32:7C:40:47:2B:1D:66:24:EB:22:C0:EB:C3:02:BE:84:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122286327C40472B1D6624EB22C0EBC302BE84FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa
Signing time:             Mon 29 Jun 2026 12:37:24 +0000
ROA not before:           Mon 29 Jun 2026 12:32:24 +0000
ROA not after:            Mon 28 Jun 2027 12:37:24 +0000
asID:                     269595
IP address blocks:        45.188.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/122286327C40472B1D6624EB22C0EBC302BE84FA.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/122286327C40472B1D6624EB22C0EBC302BE84FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122286327C40472B1D6624EB22C0EBC302BE84FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2a:e6:e5:86:42:43:ae:e9:37:70:97:7e:99:02:63:09:fc:78:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122286327C40472B1D6624EB22C0EBC302BE84FA
        Validity
            Not Before: Jun 29 12:32:24 2026 GMT
            Not After : Jun 28 12:37:24 2027 GMT
        Subject: CN=E2A4212A0300B12B57A2505490D5FE602AFDA036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:0c:de:00:fb:82:25:1c:84:5c:ee:ff:65:
                    ca:f2:65:09:51:b9:c2:c6:c9:ad:19:bd:8f:19:03:
                    1d:c3:40:20:1a:ac:55:51:76:e5:08:bc:5d:77:fb:
                    d9:fc:de:99:72:b3:ba:bf:15:c7:28:47:4c:9d:ee:
                    a9:18:d7:c2:2a:eb:98:37:dd:81:4f:97:17:a4:d6:
                    6e:03:db:ba:53:61:de:f1:06:ff:1a:0f:db:02:49:
                    99:7d:b7:68:9f:1b:36:2c:55:d3:0a:da:cd:56:b1:
                    95:ee:f6:11:b8:28:ed:25:21:a0:2f:75:f8:79:31:
                    ee:87:23:91:00:0f:9d:d6:17:be:9b:23:db:3c:45:
                    c2:34:0e:d9:21:7d:ba:44:0c:cc:dd:78:d0:97:c0:
                    5b:ac:12:08:c0:1b:06:ab:0b:60:6a:55:a4:40:f0:
                    ce:24:b3:49:b5:f0:f7:d0:01:f8:3d:94:19:bd:d6:
                    e6:02:4d:89:60:81:10:43:ca:b0:27:54:b7:1b:b0:
                    9b:c2:c5:ac:4c:bf:6b:7b:b8:23:38:18:50:63:78:
                    da:81:f4:27:89:51:4e:64:01:0f:0e:0a:de:8d:86:
                    86:32:40:d4:17:20:e6:e6:01:aa:94:84:fb:47:41:
                    15:a9:39:7b:82:ff:d0:7f:70:9b:4e:23:cb:0e:7f:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:21:2A:03:00:B1:2B:57:A2:50:54:90:D5:FE:60:2A:FD:A0:36
            X509v3 Authority Key Identifier:
                keyid:12:22:86:32:7C:40:47:2B:1D:66:24:EB:22:C0:EB:C3:02:BE:84:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/122286327C40472B1D6624EB22C0EBC302BE84FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122286327C40472B1D6624EB22C0EBC302BE84FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233382e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:84:d9:ae:0e:0b:58:34:b9:e0:39:bd:06:c3:b3:f5:25:
         a9:2c:ac:c7:33:e3:59:1a:29:28:79:1c:f8:04:d2:85:31:17:
         36:f5:45:3e:8e:e1:a7:2b:07:49:a4:3b:eb:5a:5c:88:5e:36:
         06:a5:ae:ee:c3:cf:f3:d7:98:df:47:bf:d0:dc:e5:43:8d:d3:
         ac:ff:15:dd:2c:80:3a:26:67:b6:43:88:4e:4e:77:a4:4a:63:
         f3:2b:c4:be:45:f0:56:98:db:52:7b:49:74:ec:e2:e6:95:67:
         56:91:3b:3d:ef:5a:64:bf:3b:c5:53:05:6d:41:46:d0:cf:c8:
         e2:c1:97:50:f1:bf:fa:f2:05:ca:f9:36:3e:ea:00:35:0d:a5:
         c1:6f:88:bf:46:e9:03:b1:63:64:e2:81:f7:35:6a:50:d8:c0:
         ac:6a:03:e5:50:71:f4:55:ea:64:db:b9:ad:4d:05:3b:7a:02:
         b4:4c:55:a9:82:d5:f7:c6:1b:bf:57:79:31:ff:77:d9:91:cf:
         7b:6e:56:30:10:3c:1b:ff:10:3c:0a:74:e1:85:6f:f8:27:40:
         28:bd:36:b6:0c:a5:2f:d7:4d:97:25:ce:b4:20:de:10:cd:68:
         3e:de:ce:44:d0:b5:9b:93:20:29:de:84:f8:0f:23:00:00:da:
         6e:45:5b:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSSrm5YZCQ67pN3CXfpkCYwn8eOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyMjg2MzI3QzQwNDcyQjFENjYyNEVCMjJDMEVCQzMw
MkJFODRGQTAeFw0yNjA2MjkxMjMyMjRaFw0yNzA2MjgxMjM3MjRaMDMxMTAvBgNV
BAMTKEUyQTQyMTJBMDMwMEIxMkI1N0EyNTA1NDkwRDVGRTYwMkFGREEwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgwzeAPuCJRyEXO7/ZcryZQlR
ucLGya0ZvY8ZAx3DQCAarFVRduUIvF13+9n83plys7q/FccoR0yd7qkY18Iq65g3
3YFPlxek1m4D27pTYd7xBv8aD9sCSZl9t2ifGzYsVdMK2s1WsZXu9hG4KO0lIaAv
dfh5Me6HI5EAD53WF76bI9s8RcI0DtkhfbpEDMzdeNCXwFusEgjAGwarC2BqVaRA
8M4ks0m18PfQAfg9lBm91uYCTYlggRBDyrAnVLcbsJvCxaxMv2t7uCM4GFBjeNqB
9CeJUU5kAQ8OCt6NhoYyQNQXIObmAaqUhPtHQRWpOXuC/9B/cJtOI8sOfzmnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4qQhKgMAsStXolBUkNX+YCr9oDYwHwYDVR0j
BBgwFoAUEiKGMnxARysdZiTrIsDrwwK+hPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdEQ2lyZ2hRdkJhSlg5cldrSzF3UlBnNUE2UXI5N281QmRKYlFUbVlk
UDYvMC8xMjIyODYzMjdDNDA0NzJCMUQ2NjI0RUIyMkMwRUJDMzAyQkU4NEZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMjI4NjMyN0M0MDQ3MkIx
RDY2MjRFQjIyQzBFQkMzMDJCRTg0RkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHRENpcmdoUXZCYUpYOXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzAv
MzQzNTJlMzEzODM4MmUzMjMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvO4wDQYJKoZIhvcNAQELBQADggEBABj7hNmu
DgtYNLngOb0Gw7P1JaksrMcz41kaKSh5HPgE0oUxFzb1RT6O4acrB0mkO+taXIhe
Ngalru7Dz/PXmN9Hv9Dc5UON06z/Fd0sgDomZ7ZDiE5Od6RKY/MrxL5F8FaY21J7
SXTs4uaVZ1aROz3vWmS/O8VTBW1BRtDPyOLBl1Dxv/ryBcr5Nj7qADUNpcFviL9G
6QOxY2Tigfc1alDYwKxqA+VQcfRV6mTbua1NBTt6ArRMVamC1ffGG79XeTH/d9mR
z3tuVjAQPBv/EDwKdOGFb/gnQCi9NrYMpS/XTZclzrQg3hDNaD7ezkTQtZuTICne
hPgPIwAA2m5FW3g=
-----END CERTIFICATE-----
Generated at Wed Jul 8 22:06:50 2026 by rpki-client