Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          0oK/EFTVT848ZMxTCGkVWwzrZBBnzvPLlwmDVaQhZSA=
Subject key identifier:   5F:D3:F4:2A:69:CC:31:8E:BA:40:1C:32:08:59:9C:CC:6C:89:5A:5A
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       63BFF974C3C8E6305BAA43D697BE5AA8A62DCF80
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
Signing time:             Fri 27 Feb 2026 20:29:54 +0000
ROA not before:           Fri 27 Feb 2026 20:24:54 +0000
ROA not after:            Fri 26 Feb 2027 20:29:54 +0000
asID:                     61592
IP address blocks:        45.234.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bf:f9:74:c3:c8:e6:30:5b:aa:43:d6:97:be:5a:a8:a6:2d:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Feb 27 20:24:54 2026 GMT
            Not After : Feb 26 20:29:54 2027 GMT
        Subject: CN=5FD3F42A69CC318EBA401C3208599CCC6C895A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:75:b6:6a:91:84:21:0c:4e:e8:48:a7:af:
                    50:37:7a:1a:2d:31:2f:b3:d4:28:aa:e0:b5:c2:a9:
                    02:54:a1:2e:6a:ed:d2:a0:64:04:53:52:9f:0c:56:
                    7f:34:22:3b:ee:49:47:e9:f7:01:f8:47:f8:6b:d7:
                    30:73:ef:0c:65:7e:7e:67:2c:f1:23:a2:86:79:94:
                    30:49:89:6f:7a:d7:59:17:c8:a1:ef:96:26:c7:c4:
                    50:ab:c9:50:a8:16:2d:83:f9:61:6b:8d:21:59:2b:
                    58:59:c7:f0:f9:4a:aa:3e:45:b2:d1:eb:00:b4:c6:
                    68:48:4a:37:4f:74:9a:5b:77:45:68:db:ed:d6:a9:
                    b2:be:eb:b5:10:33:a7:de:5b:0c:d5:db:3f:9c:fb:
                    48:fb:14:14:26:6b:a1:9b:3d:d1:26:25:e7:19:71:
                    c6:d7:72:49:55:45:79:ea:50:46:56:27:47:eb:80:
                    42:89:3e:e2:32:62:c9:3e:6f:ca:bd:48:31:59:7e:
                    81:92:cb:9a:9c:05:42:0e:9f:ee:f8:bd:5d:8a:95:
                    5f:ea:bb:f0:5e:a2:cb:6b:17:3e:8e:24:f8:1b:0a:
                    43:80:15:33:4e:70:f6:b9:09:b7:9f:63:8e:61:e2:
                    68:6d:3c:7a:6b:a1:48:8f:c5:5c:3a:99:26:a3:31:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D3:F4:2A:69:CC:31:8E:BA:40:1C:32:08:59:9C:CC:6C:89:5A:5A
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:63:71:c5:0f:dd:d0:9a:2a:d1:45:db:53:32:87:be:24:
         66:bc:a0:4f:91:ba:d2:fd:5e:c8:5c:1e:2c:32:25:ee:4d:89:
         67:c7:34:7d:02:d6:4d:9e:69:d8:1b:43:17:f0:84:57:77:1d:
         4b:f2:9f:1c:28:90:bb:a8:6f:6c:43:83:08:6e:c8:a7:46:38:
         fd:9c:3d:a6:16:21:03:1d:1e:8f:d4:63:d6:be:59:80:32:44:
         56:94:7d:d5:11:cd:28:f0:4a:0c:b5:40:b1:14:6f:ec:8f:64:
         5a:23:0d:1c:28:7d:15:c8:ec:fc:25:1c:34:c5:c6:02:37:40:
         58:ed:5a:1a:d9:4c:57:ff:fa:f5:70:84:e6:ed:09:82:f9:3c:
         9b:2d:fe:51:51:fe:bb:63:8a:bd:44:ac:6e:82:0d:80:fd:79:
         c1:a6:5f:9d:43:27:25:ae:dc:3c:60:f2:c1:dc:64:f4:6d:fe:
         a2:d3:f9:fc:c2:53:db:f6:53:4d:29:21:37:e1:2e:a9:ba:46:
         96:44:09:4f:47:32:1d:5f:5c:2d:5a:bc:7a:36:ef:fb:7c:7c:
         e3:a3:07:de:67:1e:c2:e8:03:c2:1d:44:0a:7a:01:de:21:37:
         1a:e5:54:49:f7:72:35:b2:c1:86:1d:0f:fe:92:d1:5b:c6:16:
         ca:1a:63:f7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY7/5dMPI5jBbqkPWl75aqKYtz4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF
M0E4RDIyQjAeFw0yNjAyMjcyMDI0NTRaFw0yNzAyMjYyMDI5NTRaMDMxMTAvBgNV
BAMTKDVGRDNGNDJBNjlDQzMxOEVCQTQwMUMzMjA4NTk5Q0NDNkM4OTVBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6M3W2apGEIQxO6Einr1A3ehot
MS+z1Ciq4LXCqQJUoS5q7dKgZARTUp8MVn80IjvuSUfp9wH4R/hr1zBz7wxlfn5n
LPEjooZ5lDBJiW9611kXyKHvlibHxFCryVCoFi2D+WFrjSFZK1hZx/D5Sqo+RbLR
6wC0xmhISjdPdJpbd0Vo2+3WqbK+67UQM6feWwzV2z+c+0j7FBQma6GbPdEmJecZ
ccbXcklVRXnqUEZWJ0frgEKJPuIyYsk+b8q9SDFZfoGSy5qcBUIOn+74vV2KlV/q
u/BeostrFz6OJPgbCkOAFTNOcPa5CbefY45h4mhtPHproUiPxVw6mSajMSmNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX9P0KmnMMY66QBwyCFmczGyJWlowHwYDVR0j
BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw
NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv
MzQzNTJlMzIzMzM0MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLepkMA0GCSqGSIb3DQEBCwUAA4IBAQBpyWNxxQ/d
0Joq0UXbUzKHviRmvKBPkbrS/V7IXB4sMiXuTYlnxzR9AtZNnmnYG0MX8IRXdx1L
8p8cKJC7qG9sQ4MIbsinRjj9nD2mFiEDHR6P1GPWvlmAMkRWlH3VEc0o8EoMtUCx
FG/sj2RaIw0cKH0VyOz8JRw0xcYCN0BY7Voa2UxX//r1cITm7QmC+TybLf5RUf67
Y4q9RKxugg2A/XnBpl+dQyclrtw8YPLB3GT0bf6i0/n8wlPb9lNNKSE34S6pukaW
RAlPRzIdX1wtWrx6Nu/7fHzjowfeZx7C6APCHUQKegHeITca5VRJ93I1ssGGHQ/+
ktFbxhbKGmP3
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:27:06 2026 by rpki-client