Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa
File:                     34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa (raw, json)
Hash identifier:          b9PZKRIsDW2sPFC76s9Bs5hOghelZtPouxcDwhAKJxk=
Subject key identifier:   12:BC:A3:F1:ED:42:71:F7:B1:5B:FC:FB:3B:4F:77:83:38:5C:88:5E
Certificate issuer:       /CN=57D88BED66EFA598F0EDBC36B55FB7C02FE7F681
Certificate serial:       3DB1175AB699D4F5D25BB4C0C4C17081F530C761
Authority key identifier: 57:D8:8B:ED:66:EF:A5:98:F0:ED:BC:36:B5:5F:B7:C0:2F:E7:F6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa
Signing time:             Wed 23 Sep 2026 14:00:51 +0000
ROA not before:           Wed 23 Sep 2026 13:55:51 +0000
ROA not after:            Wed 22 Sep 2027 14:00:51 +0000
asID:                     268711
IP address blocks:        45.171.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b1:17:5a:b6:99:d4:f5:d2:5b:b4:c0:c4:c1:70:81:f5:30:c7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D88BED66EFA598F0EDBC36B55FB7C02FE7F681
        Validity
            Not Before: Sep 23 13:55:51 2026 GMT
            Not After : Sep 22 14:00:51 2027 GMT
        Subject: CN=12BCA3F1ED4271F7B15BFCFB3B4F7783385C885E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:79:e6:8b:0f:7c:91:b8:5d:34:62:1c:a5:
                    9a:59:1a:90:5b:49:35:73:dd:83:15:a1:e3:ee:cd:
                    23:7a:0d:d4:1a:21:09:3d:27:f0:eb:0d:6c:29:3b:
                    b7:b2:ae:17:c6:11:a4:5d:b5:75:ce:d0:88:0f:65:
                    98:36:fd:63:04:c0:11:63:24:c5:5d:47:83:fb:cd:
                    a3:db:ee:7d:57:38:a8:23:a2:73:b2:d4:74:ff:2c:
                    9a:e6:60:e9:65:b9:0a:31:64:46:f6:17:be:17:60:
                    23:17:85:08:21:9b:37:8c:0e:d3:22:02:66:1d:ff:
                    e3:03:65:30:0e:18:3d:d9:eb:dc:cd:81:0a:af:9c:
                    01:ac:87:90:5c:e7:e6:a2:de:42:25:00:46:c7:e0:
                    38:2e:99:fd:03:2f:e2:01:e5:4f:aa:9f:6c:52:96:
                    79:61:6c:91:9d:e1:8f:c0:d6:b1:85:ed:d4:ec:1b:
                    20:7e:76:49:08:19:65:b1:55:0f:3b:04:c4:bb:cf:
                    f7:6c:94:9e:c1:44:27:14:5e:21:dd:f4:8c:79:2f:
                    1b:47:30:8c:2e:5a:33:90:4e:94:bc:95:19:6f:04:
                    fd:fa:bf:61:f0:9a:03:1d:92:e0:ae:7c:9b:a4:97:
                    e6:84:31:1f:ff:0c:99:a9:b5:eb:de:4f:c5:a6:46:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:A3:F1:ED:42:71:F7:B1:5B:FC:FB:3B:4F:77:83:38:5C:88:5E
            X509v3 Authority Key Identifier:
                keyid:57:D8:8B:ED:66:EF:A5:98:F0:ED:BC:36:B5:5F:B7:C0:2F:E7:F6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/34352e3137312e3132342e302f32322d3332203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:08:56:8d:54:8e:39:12:ce:9d:62:82:48:3d:ca:e2:7d:
         92:f9:3f:eb:e0:31:5b:b4:b2:b7:80:17:a5:d5:3f:87:9b:3f:
         35:f7:e1:a5:27:d3:3d:40:fe:91:56:5a:f8:5d:f3:52:7a:c7:
         74:f9:ee:43:b3:83:f1:13:e3:2e:5c:06:b3:cb:9b:ed:a7:48:
         1a:e3:8c:cf:c6:a2:5f:0a:41:a3:2c:a5:08:62:ba:8f:5d:f5:
         25:69:16:3f:53:85:f3:6d:b4:fd:2d:65:a0:5b:ca:76:11:08:
         bc:b6:7f:86:76:fd:20:15:94:78:4b:34:7c:22:e2:b0:b3:b1:
         8e:2c:6d:19:32:f1:25:e7:c6:bb:7e:ff:76:28:24:92:dd:48:
         03:58:d9:5d:82:e3:7f:3a:99:87:22:16:36:61:ff:9c:c6:9c:
         71:63:12:5e:63:60:f8:7f:b5:b0:9f:a2:ff:e9:ef:26:3a:d7:
         6c:40:87:e0:98:a3:c4:e8:10:a5:7a:d5:32:91:36:c5:87:16:
         4a:64:3e:29:51:52:c7:3e:9a:fd:87:e3:7e:d1:f1:40:54:d1:
         31:f5:ab:42:22:c4:fe:f0:ce:73:32:dc:a1:b3:3a:b5:4a:25:
         78:53:1b:cc:9c:a4:08:ad:b7:3e:33:ce:f9:92:3f:e2:05:1f:
         03:eb:69:b7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPbEXWraZ1PXSW7TAxMFwgfUwx2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdEODhCRUQ2NkVGQTU5OEYwRURCQzM2QjU1RkI3QzAy
RkU3RjY4MTAeFw0yNjA5MjMxMzU1NTFaFw0yNzA5MjIxNDAwNTFaMDMxMTAvBgNV
BAMTKDEyQkNBM0YxRUQ0MjcxRjdCMTVCRkNGQjNCNEY3NzgzMzg1Qzg4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejHnmiw98kbhdNGIcpZpZGpBb
STVz3YMVoePuzSN6DdQaIQk9J/DrDWwpO7eyrhfGEaRdtXXO0IgPZZg2/WMEwBFj
JMVdR4P7zaPb7n1XOKgjonOy1HT/LJrmYOlluQoxZEb2F74XYCMXhQghmzeMDtMi
AmYd/+MDZTAOGD3Z69zNgQqvnAGsh5Bc5+ai3kIlAEbH4Dgumf0DL+IB5U+qn2xS
lnlhbJGd4Y/A1rGF7dTsGyB+dkkIGWWxVQ87BMS7z/dslJ7BRCcUXiHd9Ix5LxtH
MIwuWjOQTpS8lRlvBP36v2HwmgMdkuCufJukl+aEMR//DJmpteveT8WmRnC3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEryj8e1CcfexW/z7O093gzhciF4wHwYDVR0j
BBgwFoAUV9iL7WbvpZjw7bw2tV+3wC/n9oEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRD
RWEvMC81N0Q4OEJFRDY2RUZBNTk4RjBFREJDMzZCNTVGQjdDMDJGRTdGNjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RDg4QkVENjZFRkE1OThG
MEVEQkMzNkI1NUZCN0MwMkZFN0Y2ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAv
MzQzNTJlMzEzNzMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItq3wwDQYJKoZIhvcNAQELBQADggEBAH/4CFaN
VI45Es6dYoJIPcrifZL5P+vgMVu0sreAF6XVP4ebPzX34aUn0z1A/pFWWvhd81J6
x3T57kOzg/ET4y5cBrPLm+2nSBrjjM/Gol8KQaMspQhiuo9d9SVpFj9ThfNttP0t
ZaBbynYRCLy2f4Z2/SAVlHhLNHwi4rCzsY4sbRky8SXnxrt+/3YoJJLdSANY2V2C
4386mYciFjZh/5zGnHFjEl5jYPh/tbCfov/p7yY612xAh+CYo8ToEKV61TKRNsWH
FkpkPilRUsc+mv2H437R8UBU0TH1q0IixP7wznMy3KGzOrVKJXhTG8ycpAittz4z
zvmSP+IFHwPrabc=
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:00:24 2026 by rpki-client