Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32342d3234203d3e20323638323632.roa
File:                     34352e3233372e32342e302f32342d3234203d3e20323638323632.roa (raw, json)
Hash identifier:          s2d2BFydk0GqoBW1qfFjRdgglviyyxlKEHSDwZXERHs=
Subject key identifier:   A6:0C:7A:52:9D:4A:67:2C:9F:CD:1A:B1:AC:7E:53:C6:EE:43:37:B0
Certificate issuer:       /CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
Certificate serial:       444B2BDF363F10C0A3F59ECB3A407F63BCD60709
Authority key identifier: AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32342d3234203d3e20323638323632.roa
Signing time:             Fri 18 Sep 2026 12:38:37 +0000
ROA not before:           Fri 18 Sep 2026 12:33:37 +0000
ROA not after:            Fri 17 Sep 2027 12:38:37 +0000
asID:                     268262
IP address blocks:        45.237.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4b:2b:df:36:3f:10:c0:a3:f5:9e:cb:3a:40:7f:63:bc:d6:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
        Validity
            Not Before: Sep 18 12:33:37 2026 GMT
            Not After : Sep 17 12:38:37 2027 GMT
        Subject: CN=A60C7A529D4A672C9FCD1AB1AC7E53C6EE4337B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:43:9a:6f:d2:10:5a:1d:46:f3:c1:f7:51:
                    20:48:c7:f3:e9:8d:c9:ef:44:78:1f:fc:fd:e7:22:
                    1a:0c:e4:10:66:f3:12:cb:a1:45:7b:93:bf:98:5f:
                    30:9b:26:31:a4:fe:4a:53:57:0a:cc:25:ea:d3:c8:
                    62:48:a2:24:34:56:78:ba:34:80:9d:ab:04:61:7f:
                    9e:29:f0:a5:4c:46:ef:cb:fe:14:31:94:28:24:4e:
                    d3:d8:43:ab:4b:25:8e:83:71:25:a4:91:55:a2:5a:
                    88:ff:2e:cd:84:cc:1c:c8:39:1e:5b:a3:a7:0a:79:
                    c8:71:c0:2f:e7:45:cb:2a:08:0e:75:08:35:95:01:
                    0b:42:f3:9d:18:10:08:af:95:7b:7e:c0:fd:66:f2:
                    01:ae:f1:62:4d:2f:94:61:7d:5e:36:73:6f:43:c8:
                    62:98:b3:09:36:44:f4:37:fb:25:51:cd:01:c0:83:
                    b0:b8:be:c1:13:07:73:bd:7e:b6:e9:2f:8f:70:1d:
                    38:4c:1f:b4:3e:b5:bf:b8:10:6b:4b:fb:19:40:f6:
                    e6:de:2f:43:14:b3:c7:32:3f:56:43:4e:86:7c:08:
                    ae:62:bb:aa:4e:2a:d3:da:29:b7:4e:fa:aa:0e:df:
                    5a:15:1f:e3:33:8e:a1:80:d8:2b:da:5a:dc:db:47:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0C:7A:52:9D:4A:67:2C:9F:CD:1A:B1:AC:7E:53:C6:EE:43:37:B0
            X509v3 Authority Key Identifier:
                keyid:AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32342e302f32342d3234203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:55:f1:09:09:6f:3f:2f:64:2d:26:48:25:27:7a:18:b0:c6:
         47:43:96:1d:23:01:fa:e5:29:e6:a4:0c:57:03:a6:af:5d:69:
         ff:82:d9:30:88:0e:c9:a4:25:40:b5:47:96:21:85:b8:98:df:
         f4:69:b9:92:d0:35:5c:c7:32:1d:99:3e:52:1d:74:9e:73:7b:
         6f:30:a9:2c:f8:3a:a7:4c:8f:1a:31:51:1a:dc:c1:27:64:77:
         5c:4c:2c:fe:7a:76:76:ba:2e:a6:b7:ed:f0:5c:8a:ed:4f:8e:
         19:cc:42:b5:0c:d1:b2:b9:50:fa:4e:ba:7f:4c:99:83:0f:e7:
         b2:ea:b3:0f:65:f1:cc:78:8d:5b:83:56:f0:7f:c0:d4:a2:a4:
         f1:47:a8:c4:ef:4e:07:8d:e0:21:61:c4:92:df:4e:d4:30:0f:
         4d:be:59:5b:ac:39:4f:55:cb:76:59:0b:d1:90:59:e0:97:b3:
         73:ab:ba:ff:e3:59:b5:df:54:75:5c:d8:72:c2:8f:3c:1f:a3:
         7a:d3:6f:e8:05:f8:eb:04:75:8f:94:8e:42:0d:f6:da:b6:da:
         f4:dd:cd:a9:d8:b7:73:7a:75:0d:58:36:83:0f:46:1f:47:5f:
         cf:64:a2:c3:d7:a8:9f:3d:0c:ff:b1:68:64:29:0e:01:a7:eb:
         44:62:03:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUREsr3zY/EMCj9Z7LOkB/Y7zWBwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJCMURFRDU3Njc0QjNBRDlGQzdGMTJFMjMzNzQ3MkMy
RDk1RkJGQzAeFw0yNjA5MTgxMjMzMzdaFw0yNzA5MTcxMjM4MzdaMDMxMTAvBgNV
BAMTKEE2MEM3QTUyOUQ0QTY3MkM5RkNEMUFCMUFDN0U1M0M2RUU0MzM3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0EOab9IQWh1G88H3USBIx/Pp
jcnvRHgf/P3nIhoM5BBm8xLLoUV7k7+YXzCbJjGk/kpTVwrMJerTyGJIoiQ0Vni6
NICdqwRhf54p8KVMRu/L/hQxlCgkTtPYQ6tLJY6DcSWkkVWiWoj/Ls2EzBzIOR5b
o6cKechxwC/nRcsqCA51CDWVAQtC850YEAivlXt+wP1m8gGu8WJNL5RhfV42c29D
yGKYswk2RPQ3+yVRzQHAg7C4vsETB3O9frbpL49wHThMH7Q+tb+4EGtL+xlA9ube
L0MUs8cyP1ZDToZ8CK5iu6pOKtPaKbdO+qoO31oVH+MzjqGA2CvaWtzbRwMJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpgx6Up1KZyyfzRqxrH5Txu5DN7AwHwYDVR0j
BBgwFoAUq7He1XZ0s62fx/EuIzdHLC2V+/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl
VmovMC9BQkIxREVENTc2NzRCM0FEOUZDN0YxMkUyMzM3NDcyQzJEOTVGQkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjFERUQ1NzY3NEIzQUQ5
RkM3RjEyRTIzMzc0NzJDMkQ5NUZCRkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe0YMA0GCSqGSIb3DQEBCwUAA4IBAQATVfEJCW8/
L2QtJkglJ3oYsMZHQ5YdIwH65SnmpAxXA6avXWn/gtkwiA7JpCVAtUeWIYW4mN/0
abmS0DVcxzIdmT5SHXSec3tvMKks+DqnTI8aMVEa3MEnZHdcTCz+enZ2ui6mt+3w
XIrtT44ZzEK1DNGyuVD6Trp/TJmDD+ey6rMPZfHMeI1bg1bwf8DUoqTxR6jE704H
jeAhYcSS307UMA9NvllbrDlPVct2WQvRkFngl7Nzq7r/41m131R1XNhywo88H6N6
02/oBfjrBHWPlI5CDfbattr03c2p2LdzenUNWDaDD0YfR1/PZKLD16ifPQz/sWhk
KQ4Bp+tEYgO/
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:25 2026 by rpki-client