Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
File:                     34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (raw, json)
Hash identifier:          mqGfp+LC+mjJxg+A7hcEpJ9Dhk53REc2bUb3Ni/2nXw=
Subject key identifier:   BE:B1:95:27:48:8E:CE:43:C5:B6:23:86:52:99:50:70:37:2D:24:76
Certificate issuer:       /CN=3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8
Certificate serial:       5B8297A9F117F8FCB115B304904C1AD54E3D729B
Authority key identifier: 3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
Signing time:             Wed 23 Sep 2026 12:50:15 +0000
ROA not before:           Wed 23 Sep 2026 12:45:15 +0000
ROA not after:            Wed 22 Sep 2027 12:50:15 +0000
asID:                     269213
IP address blocks:        45.182.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:97:a9:f1:17:f8:fc:b1:15:b3:04:90:4c:1a:d5:4e:3d:72:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8
        Validity
            Not Before: Sep 23 12:45:15 2026 GMT
            Not After : Sep 22 12:50:15 2027 GMT
        Subject: CN=BEB19527488ECE43C5B6238652995070372D2476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:dd:5c:c3:f5:43:dc:d9:24:f0:e5:1c:db:
                    0b:44:69:0c:ca:0b:5f:23:8f:1f:f1:9e:db:30:db:
                    ef:37:04:69:ce:cd:f0:32:58:05:e8:91:33:9a:18:
                    75:9a:5a:58:73:9d:0a:af:a2:7a:88:f4:4f:d0:1a:
                    c1:39:dc:c9:ec:3c:70:49:b7:91:47:06:8b:fb:c8:
                    a6:55:b7:c2:1f:6f:05:9f:c4:b8:3c:a0:52:37:da:
                    e2:44:81:64:9b:9f:6d:0c:3e:7e:68:61:9e:f8:79:
                    e3:72:47:bf:a4:2f:52:50:fd:0a:2c:30:83:8b:7c:
                    38:6d:6e:f6:db:b0:fa:9c:65:d7:23:ef:37:62:c9:
                    3e:7b:c8:2c:e3:f9:6d:e7:34:d6:a5:ef:66:1f:90:
                    53:91:37:e0:9c:12:f7:c2:d1:eb:88:0b:78:da:64:
                    66:10:14:96:d0:db:a8:c8:36:28:9f:a7:19:e9:56:
                    80:39:15:fb:1f:a3:66:ba:e8:9d:8f:33:45:45:b8:
                    50:4b:d1:de:99:ad:bd:59:77:5b:c0:7f:96:d4:03:
                    27:e6:1d:2b:5f:a3:c0:7a:28:98:ed:04:a4:f6:de:
                    8c:4b:0b:0e:3c:94:87:a1:f8:f9:a1:92:ac:53:26:
                    4c:2a:8e:02:e8:1a:de:eb:a4:b2:70:18:c2:6c:35:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B1:95:27:48:8E:CE:43:C5:B6:23:86:52:99:50:70:37:2D:24:76
            X509v3 Authority Key Identifier:
                keyid:3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c4:5f:70:cb:62:c7:f2:27:af:95:83:34:eb:51:36:1f:20:
         f8:a4:5b:c0:40:ba:dc:64:ea:af:60:6d:28:15:ec:5a:52:4a:
         47:4f:d6:ab:e7:5a:0d:76:dd:57:e1:2b:af:48:25:a7:d8:bf:
         a4:0c:5b:4d:83:c9:7f:b8:59:c0:96:2c:a2:61:78:7d:30:87:
         c9:3e:55:6d:b5:1f:b5:d7:f8:c8:f2:27:ff:f1:61:e4:5b:5a:
         c7:d4:c0:eb:75:be:2c:d2:cc:3f:91:e7:84:86:d8:8d:23:90:
         69:3e:79:77:59:5f:a4:93:3e:3f:bb:ff:66:92:00:b5:fe:44:
         d8:ec:44:1a:d0:99:38:7e:1c:ea:dc:e4:b1:d4:8f:23:fd:05:
         e3:84:59:2f:bb:3d:3d:88:c2:3f:10:a6:a2:32:38:88:38:33:
         c4:4c:23:62:8f:f3:6c:34:ed:7e:69:98:5a:7b:c4:90:ee:c9:
         0c:0c:e6:b0:f8:79:67:b0:84:82:86:6e:3f:c2:1e:28:8f:a6:
         2a:6d:41:29:74:25:32:d0:2c:2f:a4:df:21:7d:f5:e3:00:31:
         ce:55:8f:60:14:d7:37:51:dd:0b:0d:21:b3:dd:4a:d7:3b:4e:
         8d:72:56:a8:82:0d:44:39:4b:08:8b:39:7f:26:48:14:f2:68:
         d6:8b:23:56
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW4KXqfEX+PyxFbMEkEwa1U49cpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E5Rjg5QjU3NDFGODAzREZCMzNGNDNFNUFFNUY0NENC
Qzk0RDFGODAeFw0yNjA5MjMxMjQ1MTVaFw0yNzA5MjIxMjUwMTVaMDMxMTAvBgNV
BAMTKEJFQjE5NTI3NDg4RUNFNDNDNUI2MjM4NjUyOTk1MDcwMzcyRDI0NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvt1cw/VD3Nkk8OUc2wtEaQzK
C18jjx/xntsw2+83BGnOzfAyWAXokTOaGHWaWlhznQqvonqI9E/QGsE53MnsPHBJ
t5FHBov7yKZVt8IfbwWfxLg8oFI32uJEgWSbn20MPn5oYZ74eeNyR7+kL1JQ/Qos
MIOLfDhtbvbbsPqcZdcj7zdiyT57yCzj+W3nNNal72YfkFORN+CcEvfC0euIC3ja
ZGYQFJbQ26jINiifpxnpVoA5Ffsfo2a66J2PM0VFuFBL0d6Zrb1Zd1vAf5bUAyfm
HStfo8B6KJjtBKT23oxLCw48lIeh+PmhkqxTJkwqjgLoGt7rpLJwGMJsNYpVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvrGVJ0iOzkPFtiOGUplQcDctJHYwHwYDVR0j
BBgwFoAUOp+JtXQfgD37M/Q+WuX0TLyU0fgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXIxSjk4TWlFNDlOQ0xueXhwWXNUVnVXaFZieDFWU3Vzb2hSM2o4Q2Y0
MTgvMC8zQTlGODlCNTc0MUY4MDNERkIzM0Y0M0U1QUU1RjQ0Q0JDOTREMUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBOUY4OUI1NzQxRjgwM0RG
QjMzRjQzRTVBRTVGNDRDQkM5NEQxRjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyMUo5OE1pRTQ5TkNMbnl4cFlzVFZ1V2hWYngxVlN1c29oUjNqOENmNDE4LzAv
MzQzNTJlMzEzODMyMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbYYMA0GCSqGSIb3DQEBCwUAA4IBAQA4xF9wy2LH
8ievlYM061E2HyD4pFvAQLrcZOqvYG0oFexaUkpHT9ar51oNdt1X4SuvSCWn2L+k
DFtNg8l/uFnAliyiYXh9MIfJPlVttR+11/jI8if/8WHkW1rH1MDrdb4s0sw/keeE
htiNI5BpPnl3WV+kkz4/u/9mkgC1/kTY7EQa0Jk4fhzq3OSx1I8j/QXjhFkvuz09
iMI/EKaiMjiIODPETCNij/NsNO1+aZhae8SQ7skMDOaw+HlnsISChm4/wh4oj6Yq
bUEpdCUy0CwvpN8hffXjADHOVY9gFNc3Ud0LDSGz3UrXO06Nclaogg1EOUsIizl/
JkgU8mjWiyNW
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:34:14 2026 by rpki-client