Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636303434.roa
File:                     34352e3232352e3136382e302f32322d3234203d3e20323636303434.roa (raw, json)
Hash identifier:          PZmxiJha7hjqOe6mIRmeyFqK1if1CwRbfTLaouzrUXc=
Subject key identifier:   99:0B:D2:ED:02:A5:04:87:AE:AE:44:34:2F:39:D0:8B:D2:07:24:B3
Certificate issuer:       /CN=F4E8326758C25B3EC9DB8F538ABF484174DD0A9E
Certificate serial:       1F6A2BA029C68A96C4B56A16E39BB599C43EAF5C
Authority key identifier: F4:E8:32:67:58:C2:5B:3E:C9:DB:8F:53:8A:BF:48:41:74:DD:0A:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636303434.roa
Signing time:             Wed 05 Aug 2026 16:59:39 +0000
ROA not before:           Wed 05 Aug 2026 16:54:39 +0000
ROA not after:            Wed 04 Aug 2027 16:59:39 +0000
asID:                     266044
IP address blocks:        45.225.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.crl
                          rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6a:2b:a0:29:c6:8a:96:c4:b5:6a:16:e3:9b:b5:99:c4:3e:af:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4E8326758C25B3EC9DB8F538ABF484174DD0A9E
        Validity
            Not Before: Aug  5 16:54:39 2026 GMT
            Not After : Aug  4 16:59:39 2027 GMT
        Subject: CN=990BD2ED02A50487AEAE44342F39D08BD20724B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:d1:44:43:89:aa:41:1d:50:37:5f:50:36:
                    f8:7c:83:69:cb:91:0e:9a:9b:8e:58:de:fa:41:f9:
                    13:1c:c1:07:5d:de:b0:4d:6c:da:5a:72:02:a3:03:
                    e3:50:d4:bd:13:b9:87:d6:39:30:4d:98:3b:37:7e:
                    4a:bb:87:8c:06:31:63:c4:66:0d:55:59:12:98:4e:
                    42:1e:f7:d3:be:29:ce:bb:db:75:9d:a3:47:1e:aa:
                    e0:74:48:9c:62:ce:75:9d:3c:25:fb:09:2e:a9:93:
                    80:a3:25:6e:b0:e4:3d:d6:c2:7a:89:13:69:38:36:
                    7a:00:62:c0:0d:13:d4:3d:91:16:f3:cb:ce:cd:f9:
                    e8:0e:d0:ef:17:56:2e:5a:0f:7e:00:c5:36:31:aa:
                    6c:ec:c3:b7:45:4a:44:53:6e:05:98:9e:23:9d:a8:
                    23:03:a7:46:3b:bb:2a:c3:a4:bf:13:64:fe:50:55:
                    51:4a:a9:54:88:49:d9:57:cf:ae:73:63:a4:ec:fe:
                    e9:ab:73:fd:30:89:f9:74:d8:01:a3:2e:59:28:7f:
                    d9:93:de:6c:d7:cc:85:24:ea:c0:bb:66:fe:33:e6:
                    72:2a:4c:30:f9:d9:c5:41:3b:d3:b0:24:f6:fd:28:
                    45:45:5f:9f:ce:2f:38:b1:e4:87:5e:0f:6e:71:a2:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:D2:ED:02:A5:04:87:AE:AE:44:34:2F:39:D0:8B:D2:07:24:B3
            X509v3 Authority Key Identifier:
                keyid:F4:E8:32:67:58:C2:5B:3E:C9:DB:8F:53:8A:BF:48:41:74:DD:0A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/34352e3232352e3136382e302f32322d3234203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:15:30:f5:13:08:11:ba:bc:7e:d3:e1:89:e9:22:85:54:
         f7:67:76:ee:2e:85:07:59:2f:2b:20:f6:9c:16:54:28:7d:e2:
         ee:ab:2a:97:da:a3:b7:cb:fb:d5:0b:0f:7b:55:0e:01:eb:f9:
         e8:88:29:a3:03:b0:63:fc:7f:36:b2:e1:22:8f:00:52:18:2f:
         41:0b:e9:fd:69:8d:61:38:51:e9:31:8c:64:56:a4:84:f9:19:
         ff:95:c0:c2:c0:00:d4:84:12:83:e5:3b:35:55:66:c1:19:82:
         c8:42:2f:fb:13:36:ea:03:78:42:5d:fc:82:b6:2b:14:29:83:
         4f:6b:67:35:95:ba:43:34:cf:0d:c7:ce:3f:ae:ac:0a:fb:0d:
         28:de:39:8d:cc:75:5a:46:9e:26:43:f7:2f:e3:79:be:7c:e3:
         6b:44:d2:ac:c5:bd:c8:04:d7:60:11:8c:84:ed:ed:35:96:87:
         3b:5b:10:4c:22:63:d4:23:73:f3:44:22:3f:d5:57:39:31:9f:
         9c:55:54:63:e7:34:e6:a3:26:f7:c5:28:4e:aa:8f:bf:a0:17:
         a7:f2:13:b2:13:b9:52:74:4c:b0:ab:03:76:62:65:78:ac:aa:
         66:89:c0:8c:91:16:77:3f:7e:27:31:52:56:23:ef:93:45:e0:
         01:a6:d5:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH2oroCnGipbEtWoW45u1mcQ+r1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRFODMyNjc1OEMyNUIzRUM5REI4RjUzOEFCRjQ4NDE3
NEREMEE5RTAeFw0yNjA4MDUxNjU0MzlaFw0yNzA4MDQxNjU5MzlaMDMxMTAvBgNV
BAMTKDk5MEJEMkVEMDJBNTA0ODdBRUFFNDQzNDJGMzlEMDhCRDIwNzI0QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/btFEQ4mqQR1QN19QNvh8g2nL
kQ6am45Y3vpB+RMcwQdd3rBNbNpacgKjA+NQ1L0TuYfWOTBNmDs3fkq7h4wGMWPE
Zg1VWRKYTkIe99O+Kc6723Wdo0cequB0SJxiznWdPCX7CS6pk4CjJW6w5D3WwnqJ
E2k4NnoAYsANE9Q9kRbzy87N+egO0O8XVi5aD34AxTYxqmzsw7dFSkRTbgWYniOd
qCMDp0Y7uyrDpL8TZP5QVVFKqVSISdlXz65zY6Ts/umrc/0wifl02AGjLlkof9mT
3mzXzIUk6sC7Zv4z5nIqTDD52cVBO9OwJPb9KEVFX5/OLzix5IdeD25xouU7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmQvS7QKlBIeurkQ0LznQi9IHJLMwHwYDVR0j
BBgwFoAU9OgyZ1jCWz7J249Tir9IQXTdCp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVpmNXdLd0pRTTgzZW9iWnpRMmlVVmtXb1NhbWQ5ZUxQOTdGcjJO
dlMvMC9GNEU4MzI2NzU4QzI1QjNFQzlEQjhGNTM4QUJGNDg0MTc0REQwQTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0RTgzMjY3NThDMjVCM0VD
OURCOEY1MzhBQkY0ODQxNzRERDBBOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFaZjV3S3dKUU04M2VvYlp6UTJpVVZrV29TYW1kOWVMUDk3RnIyTnZTLzAv
MzQzNTJlMzIzMjM1MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4agwDQYJKoZIhvcNAQELBQADggEBAFCjFTD1
EwgRurx+0+GJ6SKFVPdndu4uhQdZLysg9pwWVCh94u6rKpfao7fL+9ULD3tVDgHr
+eiIKaMDsGP8fzay4SKPAFIYL0EL6f1pjWE4UekxjGRWpIT5Gf+VwMLAANSEEoPl
OzVVZsEZgshCL/sTNuoDeEJd/IK2KxQpg09rZzWVukM0zw3Hzj+urAr7DSjeOY3M
dVpGniZD9y/jeb5842tE0qzFvcgE12ARjITt7TWWhztbEEwiY9Qjc/NEIj/VVzkx
n5xVVGPnNOajJvfFKE6qj7+gF6fyE7ITuVJ0TLCrA3ZiZXisqmaJwIyRFnc/ficx
UlYj75NF4AGm1Yo=
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:16:23 2026 by rpki-client