Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32342d3234203d3e20323639313636.roa
File:                     34352e3138312e32322e302f32342d3234203d3e20323639313636.roa (raw, json)
Hash identifier:          88GTJ5jgzIdA4n/LKWeR41RVT6v19QuT5FeiQgMnbqA=
Subject key identifier:   79:57:6D:92:5A:84:81:76:81:15:95:2C:64:BD:F6:0F:0E:A2:57:66
Certificate issuer:       /CN=D357DC68A05ED575BA6451EB468F237AA28B467D
Certificate serial:       37AB1D70FF11575C322D5FB1ECF31CF6E52AC8A6
Authority key identifier: D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32342d3234203d3e20323639313636.roa
Signing time:             Mon 30 Mar 2026 19:09:15 +0000
ROA not before:           Mon 30 Mar 2026 19:04:15 +0000
ROA not after:            Mon 29 Mar 2027 19:09:15 +0000
asID:                     269166
IP address blocks:        45.181.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl
                          rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ab:1d:70:ff:11:57:5c:32:2d:5f:b1:ec:f3:1c:f6:e5:2a:c8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D357DC68A05ED575BA6451EB468F237AA28B467D
        Validity
            Not Before: Mar 30 19:04:15 2026 GMT
            Not After : Mar 29 19:09:15 2027 GMT
        Subject: CN=79576D925A8481768115952C64BDF60F0EA25766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:87:93:be:15:ea:b1:0b:38:e6:67:a2:52:
                    99:2b:ab:f3:7a:3c:3c:a8:76:02:df:58:db:77:c0:
                    4f:b9:eb:a6:46:26:cc:2f:62:2a:26:ec:da:32:68:
                    56:b1:0c:67:3f:c1:a9:11:5c:0f:a7:c2:0b:0f:bb:
                    7f:36:ea:53:b9:03:8f:cf:09:c3:ae:e3:02:2b:38:
                    96:87:ef:f4:fc:64:c4:86:6a:b4:a0:ed:d6:76:1e:
                    f2:ea:4a:99:7e:3a:a3:2f:e3:4f:29:3a:db:24:a0:
                    f0:34:e4:40:a2:d2:c6:da:6c:fc:df:7c:d1:7f:5d:
                    1b:07:c8:0e:0c:2d:c9:08:a1:69:91:cb:1b:03:89:
                    0a:78:16:b6:0d:a3:9d:1a:d3:24:6c:28:21:34:7b:
                    89:de:a8:f0:a3:9d:fe:5b:a4:dd:b5:d9:7c:48:d6:
                    b2:b8:77:32:8d:50:bc:36:e1:15:7d:14:97:de:ea:
                    79:35:a1:7e:e2:80:16:41:ba:78:9d:d7:80:8b:98:
                    a1:26:4c:c2:2c:51:2d:e4:31:60:27:2e:8f:e2:c6:
                    89:82:68:6d:19:c6:31:25:85:ec:84:6c:9d:92:fd:
                    eb:da:60:cb:f7:c7:e0:c7:79:4d:be:08:c5:1a:b4:
                    9d:8d:af:43:84:5d:60:0b:27:ef:54:93:b0:16:25:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:57:6D:92:5A:84:81:76:81:15:95:2C:64:BD:F6:0F:0E:A2:57:66
            X509v3 Authority Key Identifier:
                keyid:D3:57:DC:68:A0:5E:D5:75:BA:64:51:EB:46:8F:23:7A:A2:8B:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/D357DC68A05ED575BA6451EB468F237AA28B467D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D357DC68A05ED575BA6451EB468F237AA28B467D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2cXFp7J6L8ToiQmxGyG69UN35LtWs5jJFmWB9kGKMm6/0/34352e3138312e32322e302f32342d3234203d3e20323639313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0c:3b:70:f4:66:1e:97:c8:08:c3:6c:74:dd:18:46:a9:5b:
         17:d1:e8:3e:c4:77:78:81:41:ae:f7:f1:46:4f:89:e0:6c:e3:
         22:b2:6c:2c:70:9c:4d:55:16:7d:af:52:94:1d:34:b8:a9:7f:
         21:f1:21:fd:6e:91:13:bc:09:2b:5c:4f:c2:66:2e:52:d8:49:
         58:3c:f7:3d:d7:3a:20:c5:68:af:9d:ce:70:bf:b4:df:f8:7d:
         4f:61:5b:ef:89:b2:3a:a0:eb:25:39:98:ce:b3:d9:6f:d4:15:
         12:7b:32:66:e4:b9:a3:05:b5:e3:7d:6c:32:7f:cd:b3:15:70:
         76:96:ef:6d:a7:63:42:7b:6e:00:23:31:4e:e1:fe:79:89:92:
         d7:3d:3e:b9:a0:9a:a7:84:21:ce:14:f9:e4:2d:56:fe:4e:ea:
         68:2a:eb:51:1b:5a:ba:68:30:89:c0:3a:72:3e:3e:d4:90:01:
         1f:9a:74:ca:79:8d:a9:5a:bf:13:86:af:3e:79:66:b3:e1:e2:
         c6:0a:c4:48:39:b9:d2:b8:11:52:67:50:38:ee:e1:d1:44:95:
         22:c3:91:e9:98:48:47:6b:e3:7a:87:50:c5:b7:56:69:bf:f9:
         15:d4:8b:12:8a:6e:81:c9:2c:b5:e8:2c:98:17:97:40:2d:6c:
         83:fe:74:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN6sdcP8RV1wyLV+x7PMc9uUqyKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1N0RDNjhBMDVFRDU3NUJBNjQ1MUVCNDY4RjIzN0FB
MjhCNDY3RDAeFw0yNjAzMzAxOTA0MTVaFw0yNzAzMjkxOTA5MTVaMDMxMTAvBgNV
BAMTKDc5NTc2RDkyNUE4NDgxNzY4MTE1OTUyQzY0QkRGNjBGMEVBMjU3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGKoeTvhXqsQs45meiUpkrq/N6
PDyodgLfWNt3wE+566ZGJswvYiom7NoyaFaxDGc/wakRXA+nwgsPu3826lO5A4/P
CcOu4wIrOJaH7/T8ZMSGarSg7dZ2HvLqSpl+OqMv408pOtskoPA05ECi0sbabPzf
fNF/XRsHyA4MLckIoWmRyxsDiQp4FrYNo50a0yRsKCE0e4neqPCjnf5bpN212XxI
1rK4dzKNULw24RV9FJfe6nk1oX7igBZBunid14CLmKEmTMIsUS3kMWAnLo/ixomC
aG0ZxjElheyEbJ2S/evaYMv3x+DHeU2+CMUatJ2Nr0OEXWALJ+9Uk7AWJQ1RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeVdtklqEgXaBFZUsZL32Dw6iV2YwHwYDVR0j
BBgwFoAU01fcaKBe1XW6ZFHrRo8jeqKLRn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJjWEZwN0o2TDhUb2lRbXhHeUc2OVVOMzVMdFdzNWpKRm1XQjlrR0tN
bTYvMC9EMzU3REM2OEEwNUVENTc1QkE2NDUxRUI0NjhGMjM3QUEyOEI0NjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNTdEQzY4QTA1RUQ1NzVC
QTY0NTFFQjQ2OEYyMzdBQTI4QjQ2N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyY1hGcDdKNkw4VG9pUW14R3lHNjlVTjM1THRXczVqSkZtV0I5a0dLTW02LzAv
MzQzNTJlMzEzODMxMmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbUWMA0GCSqGSIb3DQEBCwUAA4IBAQCtDDtw9GYe
l8gIw2x03RhGqVsX0eg+xHd4gUGu9/FGT4ngbOMismwscJxNVRZ9r1KUHTS4qX8h
8SH9bpETvAkrXE/CZi5S2ElYPPc91zogxWivnc5wv7Tf+H1PYVvvibI6oOslOZjO
s9lv1BUSezJm5LmjBbXjfWwyf82zFXB2lu9tp2NCe24AIzFO4f55iZLXPT65oJqn
hCHOFPnkLVb+TupoKutRG1q6aDCJwDpyPj7UkAEfmnTKeY2pWr8Thq8+eWaz4eLG
CsRIObnSuBFSZ1A47uHRRJUiw5HpmEhHa+N6h1DFt1Zpv/kV1IsSim6BySy16CyY
F5dALWyD/nQ+
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:40:18 2026 by rpki-client