Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/34352e3137332e33322e302f32322d3332203d3e20323636343338.roa
File:                     34352e3137332e33322e302f32322d3332203d3e20323636343338.roa (raw, json)
Hash identifier:          CJjrgnCCmcFCHIYqXiWS0uEONKp/FXLPf6yVQju0DbM=
Subject key identifier:   F3:62:D2:4E:9D:CF:98:46:68:F0:3B:0D:91:5E:EB:46:C2:64:03:9E
Certificate issuer:       /CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
Certificate serial:       4FA46B0AB561701E929810418E561339F55A0EBB
Authority key identifier: 42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/34352e3137332e33322e302f32322d3332203d3e20323636343338.roa
Signing time:             Tue 11 Aug 2026 13:32:58 +0000
ROA not before:           Tue 11 Aug 2026 13:27:58 +0000
ROA not after:            Tue 10 Aug 2027 13:32:58 +0000
asID:                     266438
IP address blocks:        45.173.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a4:6b:0a:b5:61:70:1e:92:98:10:41:8e:56:13:39:f5:5a:0e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CB6339B5B163F6D6A5494AA81144D6D05048F9
        Validity
            Not Before: Aug 11 13:27:58 2026 GMT
            Not After : Aug 10 13:32:58 2027 GMT
        Subject: CN=F362D24E9DCF984668F03B0D915EEB46C264039E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:bf:4c:64:4d:6a:68:93:4a:36:68:ea:f4:
                    a2:bf:53:1f:54:e7:23:df:7c:f8:26:6b:d8:cc:4e:
                    19:c3:ae:75:2d:9d:8c:6e:ad:68:11:55:a6:4f:69:
                    5e:e3:52:5c:06:4b:78:59:93:f1:d6:a3:90:df:cf:
                    26:be:b2:7f:d0:fc:87:1e:31:fe:58:2b:88:cf:4d:
                    dc:1d:f4:cc:e3:08:66:83:68:b0:69:bc:6c:2e:7a:
                    d7:4d:bc:66:46:b0:94:bb:26:15:1f:d3:56:fc:dd:
                    80:92:54:89:cd:0c:ad:d4:97:b7:3e:ee:9f:35:4e:
                    d1:34:c5:76:96:3e:1e:52:11:02:3b:5d:c8:af:e2:
                    5c:b6:91:f3:2d:17:50:2b:1d:ba:46:a9:d1:3e:ec:
                    9a:c3:92:81:e1:c9:0a:2b:48:16:13:ba:a4:69:90:
                    1d:bf:1e:e6:ae:2d:bd:67:b7:9d:66:48:01:7b:de:
                    54:31:69:ef:a4:08:46:b7:6f:7a:f7:a9:a4:da:0e:
                    e1:53:97:4a:09:14:ac:50:1b:74:ec:d5:4b:66:85:
                    2b:4c:37:4e:f2:eb:89:ed:47:d3:f9:69:4b:74:cd:
                    ab:e1:3d:89:23:a0:9a:a0:78:1e:73:e4:72:99:0b:
                    4c:23:6a:81:e8:f4:16:48:1f:6a:d1:1d:a8:2b:8c:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:D2:4E:9D:CF:98:46:68:F0:3B:0D:91:5E:EB:46:C2:64:03:9E
            X509v3 Authority Key Identifier:
                keyid:42:CB:63:39:B5:B1:63:F6:D6:A5:49:4A:A8:11:44:D6:D0:50:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/42CB6339B5B163F6D6A5494AA81144D6D05048F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CB6339B5B163F6D6A5494AA81144D6D05048F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/34352e3137332e33322e302f32322d3332203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:53:24:57:24:08:e3:31:6f:6d:8e:79:72:2e:d9:5f:a6:
         df:ec:6b:7a:da:08:51:52:10:cd:b7:b5:a5:cf:ab:a7:8d:2f:
         10:d8:3a:88:90:33:77:42:df:c6:4c:7f:9f:0e:9f:23:3a:58:
         30:b0:96:df:43:4e:5a:1f:ba:5d:5c:05:d9:3a:a6:fb:a9:4e:
         63:02:c6:36:21:61:ec:f3:9a:cc:87:39:a2:58:09:09:40:cc:
         9b:f4:ef:30:90:f1:67:09:fa:0e:a8:78:5d:31:8d:e1:f0:a4:
         0c:33:2a:63:f0:a5:24:04:61:b3:84:1c:ad:72:5c:cb:e2:1a:
         2c:70:77:a5:ac:47:74:87:7b:1d:6b:55:0a:8e:d6:7f:ee:2f:
         0d:ba:7a:f0:76:b7:24:2d:d6:e2:4f:52:c9:5b:bc:67:87:b6:
         c1:4d:da:e5:dd:86:12:c0:e5:b6:cb:f8:7b:9d:79:0a:c6:ea:
         64:e3:db:80:8d:90:b7:6c:85:11:eb:30:09:0b:3e:16:11:00:
         75:fe:90:fa:bd:77:82:d5:ed:f6:20:76:67:b4:cf:33:25:d3:
         c4:ab:27:a4:04:ac:03:da:61:55:31:48:26:08:0d:a1:d2:00:
         b7:b4:4e:ff:7f:78:d2:ba:28:22:54:31:69:80:42:14:5e:e4:
         be:00:a3:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT6RrCrVhcB6SmBBBjlYTOfVaDrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDQjYzMzlCNUIxNjNGNkQ2QTU0OTRBQTgxMTQ0RDZE
MDUwNDhGOTAeFw0yNjA4MTExMzI3NThaFw0yNzA4MTAxMzMyNThaMDMxMTAvBgNV
BAMTKEYzNjJEMjRFOURDRjk4NDY2OEYwM0IwRDkxNUVFQjQ2QzI2NDAzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChT79MZE1qaJNKNmjq9KK/Ux9U
5yPffPgma9jMThnDrnUtnYxurWgRVaZPaV7jUlwGS3hZk/HWo5Dfzya+sn/Q/Ice
Mf5YK4jPTdwd9MzjCGaDaLBpvGwuetdNvGZGsJS7JhUf01b83YCSVInNDK3Ul7c+
7p81TtE0xXaWPh5SEQI7Xciv4ly2kfMtF1ArHbpGqdE+7JrDkoHhyQorSBYTuqRp
kB2/HuauLb1nt51mSAF73lQxae+kCEa3b3r3qaTaDuFTl0oJFKxQG3Ts1UtmhStM
N07y64ntR9P5aUt0zavhPYkjoJqgeB5z5HKZC0wjaoHo9BZIH2rRHagrjBo1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU82LSTp3PmEZo8DsNkV7rRsJkA54wHwYDVR0j
BBgwFoAUQstjObWxY/bWpUlKqBFE1tBQSPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5
THYvMC80MkNCNjMzOUI1QjE2M0Y2RDZBNTQ5NEFBODExNDRENkQwNTA0OEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0I2MzM5QjVCMTYzRjZE
NkE1NDk0QUE4MTE0NEQ2RDA1MDQ4RjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpRXA3TjZKYUZkZGRDNVBjWjZLQjlrTFVNOVB0WjFWRFI1YmZUYVpReUx2LzAv
MzQzNTJlMzEzNzMzMmUzMzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa0gMA0GCSqGSIb3DQEBCwUAA4IBAQCqlFMkVyQI
4zFvbY55ci7ZX6bf7Gt62ghRUhDNt7Wlz6unjS8Q2DqIkDN3Qt/GTH+fDp8jOlgw
sJbfQ05aH7pdXAXZOqb7qU5jAsY2IWHs85rMhzmiWAkJQMyb9O8wkPFnCfoOqHhd
MY3h8KQMMypj8KUkBGGzhBytclzL4hoscHelrEd0h3sda1UKjtZ/7i8Nunrwdrck
LdbiT1LJW7xnh7bBTdrl3YYSwOW2y/h7nXkKxupk49uAjZC3bIUR6zAJCz4WEQB1
/pD6vXeC1e32IHZntM8zJdPEqyekBKwD2mFVMUgmCA2h0gC3tE7/f3jSuigiVDFp
gEIUXuS+AKNP
-----END CERTIFICATE-----