Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32332d3233203d3e20323639313636.roa
File:                     34352e3138312e32322e302f32332d3233203d3e20323639313636.roa (raw, json)
Hash identifier:          4VAkRpmeewEer1R+SRjpPm9uWFKrjDaxtYpAFgd8d+U=
Subject key identifier:   9A:BC:00:5F:7A:F9:C2:69:CC:38:54:D8:74:48:1F:F9:5A:FF:D9:9D
Certificate issuer:       /CN=D357DC68A05ED575BA6451EB468F237AA28B467D
Certificate serial:       46DA77C4C76454076810F5BA30E3C1002CEDC759
Authority key identifier: D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32332d3233203d3e20323639313636.roa
Signing time:             Mon 30 Mar 2026 19:09:13 +0000
ROA not before:           Mon 30 Mar 2026 19:04:13 +0000
ROA not after:            Mon 29 Mar 2027 19:09:13 +0000
asID:                     269166
IP address blocks:        45.181.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl
                          rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:77:c4:c7:64:54:07:68:10:f5:ba:30:e3:c1:00:2c:ed:c7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D357DC68A05ED575BA6451EB468F237AA28B467D
        Validity
            Not Before: Mar 30 19:04:13 2026 GMT
            Not After : Mar 29 19:09:13 2027 GMT
        Subject: CN=9ABC005F7AF9C269CC3854D874481FF95AFFD99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:f7:d6:13:a4:a1:0f:7f:51:a9:f7:42:2d:
                    d0:0c:b2:f9:a2:b4:a7:e4:07:3c:1d:68:58:79:71:
                    5d:6d:1a:fa:22:84:b4:b9:97:73:e9:20:24:85:a6:
                    12:f9:75:1d:65:a0:15:49:d4:3b:d5:76:ee:81:13:
                    eb:18:d0:92:93:bd:49:60:22:60:da:9c:2b:80:ce:
                    68:b7:b0:b0:42:d4:cc:ad:59:2d:d0:89:3f:98:f0:
                    1e:3b:bd:5f:43:f9:ee:7c:c1:d8:48:3c:4e:fa:32:
                    6a:cb:0d:f6:a1:dd:17:4c:1a:fc:07:9a:52:be:2b:
                    a9:5f:57:d7:ae:8d:5f:80:b6:80:9b:c3:97:06:d2:
                    e6:0d:f6:73:8d:c9:ce:bd:51:6e:7a:2b:74:72:03:
                    28:a2:5f:6e:56:84:1b:d7:1c:93:43:71:6c:f3:29:
                    6b:43:32:04:2e:c9:02:31:47:1b:62:7b:46:0e:68:
                    25:6d:fd:e3:8f:90:05:72:9d:b8:d5:56:67:23:d6:
                    1b:0c:36:a2:32:57:4a:5e:70:dd:c1:77:07:98:3e:
                    ff:7f:77:34:ab:66:ff:dd:54:76:d7:0e:20:7e:98:
                    48:92:1d:11:1d:60:1d:c1:2b:8e:90:95:14:de:be:
                    4b:81:b8:d5:43:04:2b:a8:41:55:a4:41:37:b3:a8:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BC:00:5F:7A:F9:C2:69:CC:38:54:D8:74:48:1F:F9:5A:FF:D9:9D
            X509v3 Authority Key Identifier:
                keyid:D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32332d3233203d3e20323639313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:c5:2d:a0:a6:a3:64:fb:ba:23:9d:06:9f:cf:ec:e4:86:
         d0:3e:b7:50:02:cf:d0:83:2c:76:8c:e2:86:63:7a:fb:57:b8:
         c1:65:99:47:0f:f5:4f:3b:8b:8d:c3:41:81:a4:dd:21:33:c5:
         e3:4f:17:ef:4d:a9:be:96:68:bc:7c:31:55:b8:7a:3f:8a:c1:
         c1:a4:b7:53:26:eb:77:05:f4:6b:e7:0b:7c:0e:67:dd:90:2d:
         29:ec:3b:4f:26:7e:86:cb:cb:d3:9a:a2:3e:fe:77:77:b2:9e:
         1e:ea:75:5c:27:b7:b7:ec:49:ab:f8:6a:51:c1:74:55:24:fe:
         3a:2d:73:89:86:d6:08:fa:5e:2c:98:6c:78:03:30:40:e9:c4:
         47:23:f5:25:e8:86:04:b5:44:38:e2:b9:22:5e:8b:d5:5c:16:
         0a:4a:ce:5a:1c:04:60:2a:4c:10:97:f8:c7:5b:55:d5:3b:2f:
         64:50:fa:d9:7f:55:67:6c:83:9a:46:8e:8e:dc:20:e5:84:8e:
         7d:6b:c7:46:d8:25:79:68:49:89:e0:db:ae:3d:81:f0:66:d8:
         43:2b:ba:85:32:85:aa:f0:49:56:bd:21:fe:57:b2:e0:8d:8d:
         e4:2b:90:ca:fe:53:22:4a:6f:2f:59:7e:01:d7:69:74:a1:bc:
         0a:85:62:ff
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURtp3xMdkVAdoEPW6MOPBACztx1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1N0RDNjhBMDVFRDU3NUJBNjQ1MUVCNDY4RjIzN0FB
MjhCNDY3RDAeFw0yNjAzMzAxOTA0MTNaFw0yNzAzMjkxOTA5MTNaMDMxMTAvBgNV
BAMTKDlBQkMwMDVGN0FGOUMyNjlDQzM4NTREODc0NDgxRkY5NUFGRkQ5OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKvfWE6ShD39RqfdCLdAMsvmi
tKfkBzwdaFh5cV1tGvoihLS5l3PpICSFphL5dR1loBVJ1DvVdu6BE+sY0JKTvUlg
ImDanCuAzmi3sLBC1MytWS3QiT+Y8B47vV9D+e58wdhIPE76MmrLDfah3RdMGvwH
mlK+K6lfV9eujV+AtoCbw5cG0uYN9nONyc69UW56K3RyAyiiX25WhBvXHJNDcWzz
KWtDMgQuyQIxRxtie0YOaCVt/eOPkAVynbjVVmcj1hsMNqIyV0pecN3BdweYPv9/
dzSrZv/dVHbXDiB+mEiSHREdYB3BK46QlRTevkuBuNVDBCuoQVWkQTezqMQtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmrwAX3r5wmnMOFTYdEgf+Vr/2Z0wHwYDVR0j
BBgwFoAU01fcaKBe1XW6ZFHrRo8jeqKLRn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJjWEZwN0o2TDhUb2lRbXhHeUc2OVVOMzVMdFdzNWpKRm1XQjlrR0tN
bTYvMC9EMzU3REM2OEEwNUVENTc1QkE2NDUxRUI0NjhGMjM3QUEyOEI0NjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNTdEQzY4QTA1RUQ1NzVC
QTY0NTFFQjQ2OEYyMzdBQTI4QjQ2N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyY1hGcDdKNkw4VG9pUW14R3lHNjlVTjM1THRXczVqSkZtV0I5a0dLTW02LzAv
MzQzNTJlMzEzODMxMmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUWMA0GCSqGSIb3DQEBCwUAA4IBAQA7FcUtoKaj
ZPu6I50Gn8/s5IbQPrdQAs/Qgyx2jOKGY3r7V7jBZZlHD/VPO4uNw0GBpN0hM8Xj
TxfvTam+lmi8fDFVuHo/isHBpLdTJut3BfRr5wt8DmfdkC0p7DtPJn6Gy8vTmqI+
/nd3sp4e6nVcJ7e37Emr+GpRwXRVJP46LXOJhtYI+l4smGx4AzBA6cRHI/Ul6IYE
tUQ44rkiXovVXBYKSs5aHARgKkwQl/jHW1XVOy9kUPrZf1VnbIOaRo6O3CDlhI59
a8dG2CV5aEmJ4NuuPYHwZthDK7qFMoWq8ElWvSH+V7LgjY3kK5DK/lMiSm8vWX4B
12l0obwKhWL/
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:40:32 2026 by rpki-client