Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
File:                     34352e3137372e342e302f32332d3332203d3e20323638393433.roa (raw, json)
Hash identifier:          XgiFRQZHrtbc9NYE/zk6yyrEnZrywbnXKBcI8/bEzT4=
Subject key identifier:   C8:AF:51:AF:48:8E:F7:B0:B6:79:03:35:79:53:E7:4D:70:C2:7C:66
Certificate issuer:       /CN=DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2
Certificate serial:       5BCB63354266F506E3A98C965C41591892C504C7
Authority key identifier: DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa
Signing time:             Thu 26 Mar 2026 15:00:13 +0000
ROA not before:           Thu 26 Mar 2026 14:55:13 +0000
ROA not after:            Thu 25 Mar 2027 15:00:13 +0000
asID:                     268943
IP address blocks:        45.177.4.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.crl
                          rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cb:63:35:42:66:f5:06:e3:a9:8c:96:5c:41:59:18:92:c5:04:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2
        Validity
            Not Before: Mar 26 14:55:13 2026 GMT
            Not After : Mar 25 15:00:13 2027 GMT
        Subject: CN=C8AF51AF488EF7B0B67903357953E74D70C27C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:c5:c3:4a:36:87:76:52:12:d9:66:d3:46:
                    8e:c4:d2:e2:bf:4d:88:69:fc:d3:3f:61:6a:86:a1:
                    b5:19:bf:c0:47:5d:18:fc:ed:e4:8f:d1:06:27:2e:
                    15:c2:3e:76:69:26:6a:2e:6f:70:6d:7a:3e:f3:9d:
                    b6:96:5d:25:3a:6f:7d:11:65:6c:2e:76:fe:c0:72:
                    9c:b1:24:91:39:9f:ef:69:bf:c0:ae:ad:d2:55:6d:
                    2d:2a:dd:b9:94:1d:dd:65:82:39:7b:53:8f:02:3a:
                    ef:c6:a6:08:c1:64:8c:a2:50:68:31:d5:eb:8a:9f:
                    76:72:b3:e0:28:a7:b3:7f:0a:11:bf:a8:93:57:e2:
                    75:66:f4:33:62:dd:95:d4:03:89:47:d0:46:f5:e4:
                    9a:10:0c:b2:5a:04:55:6d:bb:79:dc:bc:99:75:ac:
                    6b:67:fc:a2:b5:17:43:f7:85:5d:48:4c:51:e8:de:
                    a8:96:3a:80:42:46:9c:ee:dd:1a:1e:b3:b9:88:11:
                    38:4c:60:03:62:dd:94:ca:c3:62:87:b6:e0:d4:9b:
                    80:99:c1:a4:af:a8:40:92:30:3f:03:bc:4f:1c:a2:
                    76:dc:d0:2b:10:96:2b:11:84:59:f5:c1:38:01:4d:
                    17:96:89:14:5c:66:5c:49:07:3b:2a:b2:0d:54:70:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:51:AF:48:8E:F7:B0:B6:79:03:35:79:53:E7:4D:70:C2:7C:66
            X509v3 Authority Key Identifier:
                keyid:DA:8E:43:A0:0C:92:DE:5B:A2:20:32:60:A3:7B:E3:8E:19:F1:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA8E43A00C92DE5BA2203260A37BE38E19F1C2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/34352e3137372e342e302f32332d3332203d3e20323638393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:6f:70:04:de:10:10:ee:62:cd:16:5d:aa:d7:9c:70:7b:c0:
         a2:f0:61:ea:6b:74:04:63:ad:42:22:0a:23:62:e5:f2:64:db:
         5a:fb:7a:82:22:97:0b:18:d9:ee:f3:e9:5d:43:a9:6a:72:8f:
         fa:85:b9:d9:d5:54:36:0b:b1:44:c2:b9:df:b2:b4:ef:e4:c6:
         82:35:e1:be:3b:96:e7:c5:6e:24:b4:24:30:20:3b:e6:f3:10:
         3c:6f:c6:1d:2d:c1:04:8f:f2:9b:e2:f8:1c:9f:a7:56:de:38:
         cc:36:34:d5:75:dd:2e:0a:8a:59:ad:d5:19:bb:48:a3:81:fe:
         16:4e:86:ea:90:96:49:e2:9b:b1:fb:29:19:cf:5c:b7:f6:51:
         4f:44:32:b4:8a:eb:b6:b7:18:7c:42:e9:18:f4:6c:99:cd:a9:
         6e:28:f9:6b:e1:00:4b:d4:d8:75:ee:cf:40:c6:3b:a8:d2:c3:
         84:cb:b8:b8:3f:f7:33:05:2b:59:d9:9c:15:7b:26:5f:3f:35:
         ea:21:b0:19:d4:58:4b:14:1b:4c:71:85:a0:ef:7c:27:f6:11:
         97:6d:71:5c:89:97:28:8a:7b:2f:c0:07:43:95:34:e7:9f:cd:
         5d:18:57:a4:04:30:0f:ce:7b:b9:b3:4f:93:cb:b0:f1:d4:49:
         75:fd:9f:98
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW8tjNUJm9QbjqYyWXEFZGJLFBMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE4RTQzQTAwQzkyREU1QkEyMjAzMjYwQTM3QkUzOEUx
OUYxQzJBMjAeFw0yNjAzMjYxNDU1MTNaFw0yNzAzMjUxNTAwMTNaMDMxMTAvBgNV
BAMTKEM4QUY1MUFGNDg4RUY3QjBCNjc5MDMzNTc5NTNFNzRENzBDMjdDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0MXDSjaHdlIS2WbTRo7E0uK/
TYhp/NM/YWqGobUZv8BHXRj87eSP0QYnLhXCPnZpJmoub3Btej7znbaWXSU6b30R
ZWwudv7AcpyxJJE5n+9pv8CurdJVbS0q3bmUHd1lgjl7U48COu/GpgjBZIyiUGgx
1euKn3Zys+Aop7N/ChG/qJNX4nVm9DNi3ZXUA4lH0Eb15JoQDLJaBFVtu3ncvJl1
rGtn/KK1F0P3hV1ITFHo3qiWOoBCRpzu3Roes7mIEThMYANi3ZTKw2KHtuDUm4CZ
waSvqECSMD8DvE8conbc0CsQlisRhFn1wTgBTReWiRRcZlxJBzsqsg1UcN5zAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyK9Rr0iO97C2eQM1eVPnTXDCfGYwHwYDVR0j
BBgwFoAU2o5DoAyS3luiIDJgo3vjjhnxwqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz
QzQvMC9EQThFNDNBMDBDOTJERTVCQTIyMDMyNjBBMzdCRTM4RTE5RjFDMkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBOEU0M0EwMEM5MkRFNUJB
MjIwMzI2MEEzN0JFMzhFMTlGMUMyQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2NWhrdldSbVBBZ1U2RmlNbkwxd2kxMkZrbWVDa2V5UUFkQzNEb1JGc0M0LzAv
MzQzNTJlMzEzNzM3MmUzNDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMyMzYzODM5
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2xBDANBgkqhkiG9w0BAQsFAAOCAQEAxW9wBN4QEO5i
zRZdqteccHvAovBh6mt0BGOtQiIKI2Ll8mTbWvt6giKXCxjZ7vPpXUOpanKP+oW5
2dVUNguxRMK537K07+TGgjXhvjuW58VuJLQkMCA75vMQPG/GHS3BBI/ym+L4HJ+n
Vt44zDY01XXdLgqKWa3VGbtIo4H+Fk6G6pCWSeKbsfspGc9ct/ZRT0QytIrrtrcY
fELpGPRsmc2pbij5a+EAS9TYde7PQMY7qNLDhMu4uD/3MwUrWdmcFXsmXz816iGw
GdRYSxQbTHGFoO98J/YRl21xXImXKIp7L8AHQ5U055/NXRhXpAQwD857ubNPk8uw
8dRJdf2fmA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:41:05 2026 by rpki-client