Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233332e302f32342d3234203d3e20323732353438.roa
File:                     3138312e3233322e3233332e302f32342d3234203d3e20323732353438.roa (raw, json)
Hash identifier:          ngVL/lNvvCnFVrVR/W4hC0SgP9ZEb0sX2Asmt5555Ew=
Subject key identifier:   54:43:CF:BB:53:0D:AC:42:1A:6E:88:D5:9E:00:14:6F:F8:76:29:79
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       67145EC0E764A4F7BEB649BA7BFA06E42A452DD1
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233332e302f32342d3234203d3e20323732353438.roa
Signing time:             Wed 28 Oct 2026 01:13:16 +0000
ROA not before:           Wed 28 Oct 2026 01:08:16 +0000
ROA not after:            Wed 27 Oct 2027 01:13:16 +0000
asID:                     272548
IP address blocks:        181.232.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 02:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:14:5e:c0:e7:64:a4:f7:be:b6:49:ba:7b:fa:06:e4:2a:45:2d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Oct 28 01:08:16 2026 GMT
            Not After : Oct 27 01:13:16 2027 GMT
        Subject: CN=5443CFBB530DAC421A6E88D59E00146FF8762979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:2a:63:82:8e:32:9c:de:2f:39:1c:29:5d:
                    48:c3:6f:69:20:90:af:dc:77:6e:fb:56:ab:d1:e6:
                    67:ac:80:db:71:81:44:be:ac:b9:45:c4:fc:ab:59:
                    9d:fa:63:1f:9e:ea:df:3f:e6:bb:a9:83:be:bb:86:
                    c9:24:d1:4b:52:c5:ef:2b:65:ed:b9:fd:6b:65:3b:
                    57:f3:a8:dd:6b:69:97:5e:55:87:db:46:48:33:3d:
                    53:98:66:72:6a:21:ad:21:63:5c:ea:3c:2e:81:b5:
                    ad:4d:ce:f3:e8:7c:75:ea:3b:27:31:b3:a1:a2:07:
                    8f:67:ee:4f:70:1c:81:06:be:f2:d3:c5:0e:f9:f4:
                    a9:61:1e:ea:eb:f0:e7:50:f5:6d:09:48:e3:70:ac:
                    6a:fe:1f:5b:de:5b:bf:25:83:1e:54:b8:6c:87:59:
                    b3:5d:88:01:83:ec:37:d5:f4:64:75:b3:b9:3b:91:
                    e0:b1:b4:3b:82:66:f9:d2:01:6a:a9:7c:e7:d2:f7:
                    f6:92:46:f5:50:6b:dd:9f:96:00:25:f4:27:cd:ec:
                    31:05:c0:be:09:dc:da:43:66:df:32:c9:b9:23:b3:
                    66:bd:e2:e8:f8:e6:fb:ef:f0:31:2d:84:7e:1d:84:
                    89:61:d4:10:0d:c5:c7:53:02:83:50:49:a7:8f:29:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:43:CF:BB:53:0D:AC:42:1A:6E:88:D5:9E:00:14:6F:F8:76:29:79
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233332e302f32342d3234203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a2:a7:ee:9d:3f:fc:fc:93:12:37:63:f8:21:f5:52:7b:ad:
         d3:69:3b:3d:3d:fd:e2:f9:42:51:0b:f2:6e:bf:d2:2c:64:ec:
         8d:1c:6b:58:b4:a1:c7:ba:03:18:0c:df:f5:e8:20:ec:03:91:
         e1:d5:63:50:7e:55:a9:41:4b:ca:0e:91:3b:2a:9f:b9:a0:6b:
         90:fa:c5:b0:1a:23:7c:83:9b:e2:19:69:d9:c0:e2:7f:4f:49:
         1c:7e:2a:60:c8:94:db:32:18:97:f2:be:54:f4:21:7b:11:b2:
         04:4a:4d:92:57:db:f0:b6:86:51:44:5e:3a:da:2a:0b:4e:86:
         6e:9b:39:15:96:5d:63:e2:7a:b2:46:f6:ea:49:52:52:15:a4:
         31:3d:7a:d7:c2:51:a2:b0:7a:e1:30:65:9b:d1:e6:42:95:b1:
         2e:ce:b7:7a:b5:b5:f9:47:fa:7b:58:4f:32:05:91:48:f0:72:
         1b:7f:8a:a7:1d:69:a5:3a:39:77:14:da:d4:36:36:49:4e:c8:
         4a:b9:a7:e3:98:14:bd:c4:37:83:61:10:da:0b:60:65:d1:2a:
         70:cc:31:80:37:bb:cd:1b:fa:b9:e8:4f:76:0c:96:f6:f2:f0:
         cc:66:89:3b:1a:eb:47:a5:19:ae:d9:9c:4c:06:7b:2c:37:e0:
         ee:03:9f:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZxRewOdkpPe+tkm6e/oG5CpFLdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQyOTZBQzAyNzRDOUUxOEZGQTFERTZBNzZEOEU4QjhF
RjdGRDMxRjAeFw0yNjEwMjgwMTA4MTZaFw0yNzEwMjcwMTEzMTZaMDMxMTAvBgNV
BAMTKDU0NDNDRkJCNTMwREFDNDIxQTZFODhENTlFMDAxNDZGRjg3NjI5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzripjgo4ynN4vORwpXUjDb2kg
kK/cd277VqvR5mesgNtxgUS+rLlFxPyrWZ36Yx+e6t8/5rupg767hskk0UtSxe8r
Ze25/WtlO1fzqN1raZdeVYfbRkgzPVOYZnJqIa0hY1zqPC6Bta1NzvPofHXqOycx
s6GiB49n7k9wHIEGvvLTxQ759KlhHurr8OdQ9W0JSONwrGr+H1veW78lgx5UuGyH
WbNdiAGD7DfV9GR1s7k7keCxtDuCZvnSAWqpfOfS9/aSRvVQa92flgAl9CfN7DEF
wL4J3NpDZt8yybkjs2a94uj45vvv8DEthH4dhIlh1BANxcdTAoNQSaePKXN9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVEPPu1MNrEIabojVngAUb/h2KXkwHwYDVR0j
BBgwFoAUNClqwCdMnhj/od5qdtjouO9/0x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk5CUzVWQktkZTROOWNiSDJzenNqMWVvaHhNUHAxNm5BTUZROUE2REtS
R2svMS8zNDI5NkFDMDI3NEM5RTE4RkZBMURFNkE3NkQ4RThCOEVGN0ZEMzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0Mjk2QUMwMjc0QzlFMThG
RkExREU2QTc2RDhFOEI4RUY3RkQzMUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOQlM1VkJLZGU0TjljYkgyc3pzajFlb2h4TVBwMTZuQU1GUTlBNkRLUkdrLzEv
MzEzODMxMmUzMjMzMzIyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjM1MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALXo6TANBgkqhkiG9w0BAQsFAAOCAQEAxKKn
7p0//PyTEjdj+CH1Unut02k7PT394vlCUQvybr/SLGTsjRxrWLShx7oDGAzf9egg
7AOR4dVjUH5VqUFLyg6ROyqfuaBrkPrFsBojfIOb4hlp2cDif09JHH4qYMiU2zIY
l/K+VPQhexGyBEpNklfb8LaGUUReOtoqC06Gbps5FZZdY+J6skb26klSUhWkMT16
18JRorB64TBlm9HmQpWxLs63erW1+Uf6e1hPMgWRSPByG3+Kpx1ppTo5dxTa1DY2
SU7ISrmn45gUvcQ3g2EQ2gtgZdEqcMwxgDe7zRv6uehPdgyW9vLwzGaJOxrrR6UZ
rtmcTAZ7LDfg7gOfHQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 03:28:09 2026 by rpki-client