Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32332d3233203d3e20323638363734.roa (raw, json)
Hash identifier:          sWOAfFj2tdrS7V9v5mDwHy16X+t8Nb4QxKQFWySwN30=
Subject key identifier:   1A:92:8D:3B:70:F9:98:ED:9B:92:D7:4A:92:FC:B2:A7:C0:DF:92:02
Certificate issuer:       /CN=434F36A7682F1C0B36BEEDA7D466801534075702
Certificate serial:       02A77AD83722EF64DA32E0A5DD1F6D1FF97AE70B
Authority key identifier: 43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa
Signing time:             Tue 27 Oct 2026 13:11:04 +0000
ROA not before:           Tue 27 Oct 2026 13:06:04 +0000
ROA not after:            Tue 26 Oct 2027 13:11:04 +0000
asID:                     268674
IP address blocks:        45.165.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a7:7a:d8:37:22:ef:64:da:32:e0:a5:dd:1f:6d:1f:f9:7a:e7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434F36A7682F1C0B36BEEDA7D466801534075702
        Validity
            Not Before: Oct 27 13:06:04 2026 GMT
            Not After : Oct 26 13:11:04 2027 GMT
        Subject: CN=1A928D3B70F998ED9B92D74A92FCB2A7C0DF9202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:1a:54:99:82:f9:c7:d1:1d:eb:8a:34:64:
                    2a:0e:38:90:86:9c:33:b3:18:c6:aa:22:ea:7a:91:
                    e7:97:b1:db:1c:7a:8e:ce:5a:a6:c1:d6:86:f8:31:
                    d0:cf:eb:16:65:6d:52:b3:bc:96:82:f5:66:49:22:
                    36:a1:ba:18:48:e0:86:2a:69:64:16:57:d4:5f:1f:
                    c0:fe:da:3b:45:56:23:71:d9:04:ec:bd:32:0b:40:
                    fe:cb:4b:5c:94:d0:66:3e:01:54:56:19:2d:08:3a:
                    92:5c:ab:af:ad:f4:ed:47:13:b6:31:c3:5c:ed:9f:
                    af:da:d4:94:44:59:e2:1b:e6:f4:23:d4:df:a2:35:
                    ca:ef:86:69:a0:ac:0d:ef:45:c2:61:e5:f8:dc:19:
                    5d:49:6e:ef:75:46:0c:3d:93:d4:46:4b:6b:83:c1:
                    a1:79:7a:45:14:45:ac:73:44:00:26:81:8f:e9:f4:
                    a4:3e:d6:4d:40:59:33:c8:e0:45:e9:ea:5d:e7:56:
                    d9:e7:4a:3c:f4:6d:ca:2e:b4:6f:a6:fd:37:b6:79:
                    e1:62:46:3e:ee:47:e3:29:76:da:21:3f:a0:25:da:
                    17:ed:31:25:ae:46:2a:5b:96:92:4a:01:cb:90:67:
                    78:61:ba:b3:71:b0:21:db:12:aa:2a:f0:1e:fe:68:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:92:8D:3B:70:F9:98:ED:9B:92:D7:4A:92:FC:B2:A7:C0:DF:92:02
            X509v3 Authority Key Identifier:
                keyid:43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32332d3233203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:56:ae:22:d3:4c:08:c3:1a:cb:ae:ba:72:33:67:33:29:
         23:e3:a8:f4:18:ef:7e:26:6f:9f:f8:e9:89:59:25:b8:4c:7c:
         bd:4b:01:82:bf:98:ac:c1:d2:fe:96:d7:47:ae:65:55:e4:0c:
         a5:af:69:1f:ce:c3:0d:d6:0e:7d:e5:da:dd:d5:7b:bd:e9:46:
         16:ca:75:82:58:09:89:bf:cf:1d:f9:38:87:96:6b:1a:7a:04:
         8b:ba:f0:42:58:4a:db:60:50:9b:72:6b:fc:dd:8c:75:b5:f5:
         94:fa:df:cb:48:d5:9b:af:84:40:b2:27:ff:e5:f0:b2:f0:06:
         58:52:49:70:e9:70:5f:57:c5:fa:32:2e:3a:90:ef:03:77:d9:
         e3:50:f4:e3:a2:ff:18:ef:a8:18:ec:03:ba:95:d1:5f:5e:02:
         45:d2:14:b5:c3:62:59:84:8d:94:d1:63:70:fc:23:78:af:12:
         b1:fa:c2:36:b7:eb:e4:76:59:28:a2:87:dc:f3:51:5f:12:b4:
         3c:2e:62:99:cd:3d:cb:06:f9:0e:14:a5:4b:af:61:d8:3d:9c:
         90:ee:69:3e:1d:99:09:4c:ad:13:b4:71:10:8c:27:81:35:49:
         43:c4:9f:86:94:18:48:9f:ed:a2:fb:c3:d7:7b:72:5f:29:28:
         f9:49:f3:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAqd62Dci72TaMuCl3R9tH/l65wswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM0RjM2QTc2ODJGMUMwQjM2QkVFREE3RDQ2NjgwMTUz
NDA3NTcwMjAeFw0yNjEwMjcxMzA2MDRaFw0yNzEwMjYxMzExMDRaMDMxMTAvBgNV
BAMTKDFBOTI4RDNCNzBGOTk4RUQ5QjkyRDc0QTkyRkNCMkE3QzBERjkyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLRpUmYL5x9Ed64o0ZCoOOJCG
nDOzGMaqIup6keeXsdsceo7OWqbB1ob4MdDP6xZlbVKzvJaC9WZJIjahuhhI4IYq
aWQWV9RfH8D+2jtFViNx2QTsvTILQP7LS1yU0GY+AVRWGS0IOpJcq6+t9O1HE7Yx
w1ztn6/a1JREWeIb5vQj1N+iNcrvhmmgrA3vRcJh5fjcGV1Jbu91Rgw9k9RGS2uD
waF5ekUURaxzRAAmgY/p9KQ+1k1AWTPI4EXp6l3nVtnnSjz0bcoutG+m/Te2eeFi
Rj7uR+MpdtohP6Al2hftMSWuRipblpJKAcuQZ3hhurNxsCHbEqoq8B7+aPl5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGpKNO3D5mO2bktdKkvyyp8DfkgIwHwYDVR0j
BBgwFoAUQ082p2gvHAs2vu2n1GaAFTQHVwIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2F2TE5TdVR3emdKMUR2a3FDUm5jWTVkUzZiM21ibjdieXBaVEg5Rjk1
eW0vMi80MzRGMzZBNzY4MkYxQzBCMzZCRUVEQTdENDY2ODAxNTM0MDc1NzAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNEYzNkE3NjgyRjFDMEIz
NkJFRURBN0Q0NjY4MDE1MzQwNzU3MDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhdkxOU3VUd3pnSjFEdmtxQ1JuY1k1ZFM2YjNtYm43YnlwWlRIOUY5NXltLzIv
MzQzNTJlMzEzNjM1MmUzOTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzYzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLaVgMA0GCSqGSIb3DQEBCwUAA4IBAQAdBFauItNM
CMMay666cjNnMykj46j0GO9+Jm+f+OmJWSW4THy9SwGCv5iswdL+ltdHrmVV5Ayl
r2kfzsMN1g595drd1Xu96UYWynWCWAmJv88d+TiHlmsaegSLuvBCWErbYFCbcmv8
3Yx1tfWU+t/LSNWbr4RAsif/5fCy8AZYUklw6XBfV8X6Mi46kO8Dd9njUPTjov8Y
76gY7AO6ldFfXgJF0hS1w2JZhI2U0WNw/CN4rxKx+sI2t+vkdlkooofc81FfErQ8
LmKZzT3LBvkOFKVLr2HYPZyQ7mk+HZkJTK0TtHEQjCeBNUlDxJ+GlBhIn+2i+8PX
e3JfKSj5SfN+
-----END CERTIFICATE-----