Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/34352e36352e3136342e302f32322d3234203d3e20323731373030.roa
File:                     34352e36352e3136342e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          CMR+E6B4gFl9I/kyjvUHy0to6QFCgl/4kzDiztxiPCo=
Subject key identifier:   ED:55:FF:05:D7:D3:40:DB:5A:AC:36:45:FF:4C:A4:20:FE:9A:87:FA
Certificate issuer:       /CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
Certificate serial:       4612FAD45C2E7C46CF7387EC86F08F1C1F06ABB4
Authority key identifier: 9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/34352e36352e3136342e302f32322d3234203d3e20323731373030.roa
Signing time:             Wed 30 Sep 2026 21:05:32 +0000
ROA not before:           Wed 30 Sep 2026 21:00:32 +0000
ROA not after:            Wed 29 Sep 2027 21:05:32 +0000
asID:                     271700
IP address blocks:        45.65.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:12:fa:d4:5c:2e:7c:46:cf:73:87:ec:86:f0:8f:1c:1f:06:ab:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6029EF76F1AD94520E558CCE3B70BDEE40E73
        Validity
            Not Before: Sep 30 21:00:32 2026 GMT
            Not After : Sep 29 21:05:32 2027 GMT
        Subject: CN=ED55FF05D7D340DB5AAC3645FF4CA420FE9A87FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:15:f1:71:bc:d1:9b:54:ee:81:84:fc:6e:
                    dc:c4:f8:36:d8:29:79:db:31:9c:b8:8b:14:7a:28:
                    44:63:fb:49:4f:a5:4e:bf:1a:61:78:49:44:5f:cf:
                    6f:31:9b:84:4b:65:25:af:e8:e8:b8:2d:f0:a3:b8:
                    4c:c4:f0:71:ef:95:53:0e:f5:04:72:55:f4:7c:22:
                    06:2a:1e:6a:7e:b6:3a:dc:47:11:dc:b0:4f:8e:89:
                    b2:02:7a:bf:25:82:1e:82:2c:2d:4b:00:c2:59:95:
                    21:d6:d8:66:79:d9:a1:9e:1d:cd:53:e9:ea:fa:e6:
                    b6:fe:8d:99:8e:36:9f:52:3e:2d:10:04:09:18:41:
                    08:04:82:39:3c:38:d3:7a:c4:32:25:ad:d0:d0:62:
                    12:50:ee:c1:70:ab:fe:cc:dd:a9:25:31:9c:bc:85:
                    8b:26:7d:e3:3b:c4:0b:37:b4:90:e5:70:29:c5:62:
                    2d:c0:dd:e6:d7:cd:fb:06:ec:af:d2:9e:3d:44:f6:
                    35:d1:ef:3d:20:aa:4a:a2:98:1d:46:92:0e:0f:dc:
                    df:46:de:16:86:1f:21:76:68:57:07:fa:84:d5:a8:
                    3f:f6:bf:2f:d2:92:5c:3d:0a:76:42:39:a8:64:30:
                    08:ec:73:59:5d:b6:48:19:68:00:7c:a8:28:55:1b:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:FF:05:D7:D3:40:DB:5A:AC:36:45:FF:4C:A4:20:FE:9A:87:FA
            X509v3 Authority Key Identifier:
                keyid:9A:F6:02:9E:F7:6F:1A:D9:45:20:E5:58:CC:E3:B7:0B:DE:E4:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF6029EF76F1AD94520E558CCE3B70BDEE40E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/34352e36352e3136342e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:d4:d3:ff:74:c4:ab:78:ac:74:9d:1e:72:28:30:20:23:
         b1:f0:f8:32:20:57:ef:81:bb:66:19:f8:6f:da:6d:7c:4d:98:
         8e:fc:81:f3:30:69:3b:44:79:c2:63:0f:65:88:67:26:cd:a6:
         7c:b5:68:c1:d4:0b:9e:95:b1:86:26:76:bb:71:90:fb:f7:ab:
         8b:30:a3:7e:7d:36:21:d8:ba:a5:56:f2:25:c6:3f:f1:e6:09:
         a4:3c:8b:dd:e9:be:f8:5a:6f:27:19:0d:5b:fc:af:61:7b:d8:
         2f:86:e8:e8:3e:73:04:79:3f:84:65:1b:fb:52:f1:24:e9:0d:
         9c:5a:3d:56:c3:f5:44:20:11:8a:4e:1b:c6:ce:8b:4a:53:0b:
         90:29:20:29:20:38:5f:b7:7d:f8:24:2a:9e:42:9c:76:57:5e:
         0f:72:db:4e:f7:1f:b5:67:ed:98:40:ae:c0:d6:29:5a:0e:37:
         4b:59:52:a9:ab:9a:b3:eb:ca:91:68:e2:56:d9:89:09:d5:cc:
         9d:01:f9:9c:d0:7f:9b:c3:6d:3d:f3:24:85:80:8c:d6:7d:9c:
         92:78:d4:56:e9:f6:ea:19:81:0c:a8:25:82:c0:a1:52:9c:7d:
         31:e4:52:e0:6d:54:12:b9:7e:51:3c:fb:f6:30:44:43:39:4c:
         59:98:ce:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURhL61FwufEbPc4fshvCPHB8Gq7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFGNjAyOUVGNzZGMUFEOTQ1MjBFNTU4Q0NFM0I3MEJE
RUU0MEU3MzAeFw0yNjA5MzAyMTAwMzJaFw0yNzA5MjkyMTA1MzJaMDMxMTAvBgNV
BAMTKEVENTVGRjA1RDdEMzQwREI1QUFDMzY0NUZGNENBNDIwRkU5QTg3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HxXxcbzRm1TugYT8btzE+DbY
KXnbMZy4ixR6KERj+0lPpU6/GmF4SURfz28xm4RLZSWv6Oi4LfCjuEzE8HHvlVMO
9QRyVfR8IgYqHmp+tjrcRxHcsE+OibICer8lgh6CLC1LAMJZlSHW2GZ52aGeHc1T
6er65rb+jZmONp9SPi0QBAkYQQgEgjk8ONN6xDIlrdDQYhJQ7sFwq/7M3aklMZy8
hYsmfeM7xAs3tJDlcCnFYi3A3ebXzfsG7K/Snj1E9jXR7z0gqkqimB1Gkg4P3N9G
3haGHyF2aFcH+oTVqD/2vy/Sklw9CnZCOahkMAjsc1ldtkgZaAB8qChVG5+xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7VX/BdfTQNtarDZF/0ykIP6ah/owHwYDVR0j
BBgwFoAUmvYCnvdvGtlFIOVYzOO3C97kDnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC85QUY2MDI5RUY3NkYxQUQ5NDUyMEU1NThDQ0UzQjcwQkRFRTQwRTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRjYwMjlFRjc2RjFBRDk0
NTIwRTU1OENDRTNCNzBCREVFNDBFNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzQzNTJlMzYzNTJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUGkMA0GCSqGSIb3DQEBCwUAA4IBAQAe8NTT/3TE
q3isdJ0ecigwICOx8PgyIFfvgbtmGfhv2m18TZiO/IHzMGk7RHnCYw9liGcmzaZ8
tWjB1AuelbGGJna7cZD796uLMKN+fTYh2LqlVvIlxj/x5gmkPIvd6b74Wm8nGQ1b
/K9he9gvhujoPnMEeT+EZRv7UvEk6Q2cWj1Ww/VEIBGKThvGzotKUwuQKSApIDhf
t334JCqeQpx2V14PcttO9x+1Z+2YQK7A1ilaDjdLWVKpq5qz68qRaOJW2YkJ1cyd
Afmc0H+bw2098ySFgIzWfZySeNRW6fbqGYEMqCWCwKFSnH0x5FLgbVQSuX5RPPv2
MERDOUxZmM5R
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:50:14 2026 by rpki-client