Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137302e302f32342d3332203d3e20323638373836.roa
File:                     34352e3137322e3137302e302f32342d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          QLL7MLOneHUBgspgyggY/q6wH7dyKGExvL1Tv+8j0ng=
Subject key identifier:   9B:DC:D7:E6:D8:A5:74:3F:32:3C:37:0D:E8:EE:54:DD:BA:22:7A:B0
Certificate issuer:       /CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
Certificate serial:       69DA7AD9C13DAFD642430E8E1D3EF20D4C51D9E4
Authority key identifier: 81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137302e302f32342d3332203d3e20323638373836.roa
Signing time:             Thu 08 Oct 2026 18:39:13 +0000
ROA not before:           Thu 08 Oct 2026 18:34:13 +0000
ROA not after:            Thu 07 Oct 2027 18:39:13 +0000
asID:                     268786
IP address blocks:        45.172.170.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 02:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:da:7a:d9:c1:3d:af:d6:42:43:0e:8e:1d:3e:f2:0d:4c:51:d9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
        Validity
            Not Before: Oct  8 18:34:13 2026 GMT
            Not After : Oct  7 18:39:13 2027 GMT
        Subject: CN=9BDCD7E6D8A5743F323C370DE8EE54DDBA227AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:30:ae:73:5c:3d:c4:1c:1f:5a:82:a3:dd:
                    14:be:ee:e5:68:ab:ab:73:ba:8d:8d:ca:5e:64:1a:
                    08:c8:57:9b:21:e7:95:06:a9:88:cd:72:f3:3b:9b:
                    ad:7e:92:82:52:55:b5:8b:50:7f:61:fa:a4:ca:ba:
                    17:3b:fa:42:9c:e6:a6:79:78:2f:a4:ac:ff:30:7e:
                    8f:8c:4b:33:46:e4:cd:2d:88:35:6d:9f:ee:15:82:
                    8a:38:8f:76:8e:b1:5a:2a:cb:51:5b:89:35:67:11:
                    d8:c6:72:d2:00:6d:e6:92:2e:40:aa:85:3c:50:dc:
                    5b:9e:d3:32:38:15:15:ba:40:a4:87:d6:57:ba:ab:
                    1e:5e:eb:af:2d:e4:69:39:29:29:77:f8:f5:3d:48:
                    09:89:d9:2e:ec:55:bd:dc:a9:df:07:3c:10:55:04:
                    a5:bd:2c:20:a0:aa:ec:e1:5f:09:70:e7:23:c9:d8:
                    78:2d:9f:de:93:23:35:dc:a4:c0:5c:e7:40:5e:cd:
                    db:cb:89:7a:42:cd:f8:9a:20:95:a5:03:ca:9d:8e:
                    48:32:d9:d8:19:e1:0a:ad:31:dc:3e:14:59:44:c9:
                    a4:63:19:98:99:46:43:02:65:a1:48:34:85:d0:17:
                    1a:5f:21:59:27:a8:e8:0d:7b:8d:d8:6d:1b:78:3e:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:D7:E6:D8:A5:74:3F:32:3C:37:0D:E8:EE:54:DD:BA:22:7A:B0
            X509v3 Authority Key Identifier:
                keyid:81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137302e302f32342d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:67:3f:95:33:5d:00:16:19:cd:38:2f:3a:95:7c:f4:ec:ae:
         15:c6:2d:42:b3:e1:80:f0:4f:9c:ad:95:b9:fe:88:22:a8:79:
         d2:08:3d:15:6c:ce:31:ce:c1:5b:b7:a6:27:49:36:5a:a9:d1:
         ca:8c:fc:c0:80:56:cb:a9:69:1f:57:65:e2:de:52:e1:e8:93:
         cd:e0:7e:5b:a2:2d:2f:8f:f4:e8:6a:9b:5d:a1:57:dc:7c:1b:
         d1:cf:56:0e:87:eb:8b:92:a2:40:24:86:18:85:c5:f5:4a:42:
         af:ea:df:0b:f3:71:a4:0b:ed:db:c6:66:20:3b:c6:09:a9:e0:
         1d:8b:9d:e4:c4:16:c8:2f:24:09:42:dd:a6:8a:c2:14:e8:f5:
         21:4f:ba:35:e6:7c:99:da:fb:c6:78:00:a7:8a:f2:7a:8b:cb:
         b8:5b:3a:e4:62:71:1a:74:db:18:e2:fd:0d:f3:83:52:14:b6:
         5d:58:56:c8:d7:89:b1:27:1e:fb:bc:94:64:0a:03:93:81:25:
         ca:cf:6c:75:d4:6b:f6:30:7b:2e:13:a9:9d:b1:01:ea:36:4e:
         67:25:24:ca:c4:e7:a4:e4:0b:6d:bf:22:da:8a:7d:f0:10:aa:
         15:0f:a1:96:50:2c:3b:d9:fd:11:53:43:44:06:6b:46:93:58:
         0c:5d:1e:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUadp62cE9r9ZCQw6OHT7yDUxR2eQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE5REY5QkNBQkI2MDkyOEQwRkE0MzE4ODQ4QUNERjI1
OURFMjYyRTAeFw0yNjEwMDgxODM0MTNaFw0yNzEwMDcxODM5MTNaMDMxMTAvBgNV
BAMTKDlCRENEN0U2RDhBNTc0M0YzMjNDMzcwREU4RUU1NEREQkEyMjdBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZjCuc1w9xBwfWoKj3RS+7uVo
q6tzuo2Nyl5kGgjIV5sh55UGqYjNcvM7m61+koJSVbWLUH9h+qTKuhc7+kKc5qZ5
eC+krP8wfo+MSzNG5M0tiDVtn+4Vgoo4j3aOsVoqy1FbiTVnEdjGctIAbeaSLkCq
hTxQ3Fue0zI4FRW6QKSH1le6qx5e668t5Gk5KSl3+PU9SAmJ2S7sVb3cqd8HPBBV
BKW9LCCgquzhXwlw5yPJ2Hgtn96TIzXcpMBc50BezdvLiXpCzfiaIJWlA8qdjkgy
2dgZ4QqtMdw+FFlEyaRjGZiZRkMCZaFINIXQFxpfIVknqOgNe43YbRt4PgGPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm9zX5tildD8yPDcN6O5U3boierAwHwYDVR0j
BBgwFoAUgZ35vKu2CSjQ+kMYhIrN8lneJi4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3
aDEvMC84MTlERjlCQ0FCQjYwOTI4RDBGQTQzMTg4NDhBQ0RGMjU5REUyNjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxOURGOUJDQUJCNjA5MjhE
MEZBNDMxODg0OEFDREYyNTlERTI2MkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAv
MzQzNTJlMzEzNzMyMmUzMTM3MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrKowDQYJKoZIhvcNAQELBQADggEBAFdnP5Uz
XQAWGc04LzqVfPTsrhXGLUKz4YDwT5ytlbn+iCKoedIIPRVszjHOwVu3pidJNlqp
0cqM/MCAVsupaR9XZeLeUuHok83gfluiLS+P9Ohqm12hV9x8G9HPVg6H64uSokAk
hhiFxfVKQq/q3wvzcaQL7dvGZiA7xgmp4B2LneTEFsgvJAlC3aaKwhTo9SFPujXm
fJna+8Z4AKeK8nqLy7hbOuRicRp02xji/Q3zg1IUtl1YVsjXibEnHvu8lGQKA5OB
JcrPbHXUa/Ywey4TqZ2xAeo2TmclJMrE56TkC22/ItqKffAQqhUPoZZQLDvZ/RFT
Q0QGa0aTWAxdHok=
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:17:56 2026 by rpki-client