Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130322e302f32332d3233203d3e203631353932.roa
File:                     34352e3233342e3130322e302f32332d3233203d3e203631353932.roa (raw, json)
Hash identifier:          ks0DfgzHo8VMTod9T3krqi6XGPob8gHN1i5MRlTAfdo=
Subject key identifier:   43:2C:F2:07:9E:7A:C2:41:14:0E:55:35:70:A4:61:78:39:D0:3F:08
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       65AA8D527633E004A18C20AE26EDD0913337859B
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130322e302f32332d3233203d3e203631353932.roa
Signing time:             Fri 27 Feb 2026 20:29:55 +0000
ROA not before:           Fri 27 Feb 2026 20:24:55 +0000
ROA not after:            Fri 26 Feb 2027 20:29:55 +0000
asID:                     61592
IP address blocks:        45.234.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:8d:52:76:33:e0:04:a1:8c:20:ae:26:ed:d0:91:33:37:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Feb 27 20:24:55 2026 GMT
            Not After : Feb 26 20:29:55 2027 GMT
        Subject: CN=432CF2079E7AC241140E553570A4617839D03F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:14:bc:49:74:9c:c6:10:12:fa:c4:cc:13:
                    7a:f9:00:f2:55:bb:ce:89:ab:fa:83:29:39:a1:d6:
                    28:7b:6a:85:cc:ef:2c:03:d3:95:68:16:12:82:40:
                    99:40:2c:c3:68:e5:0c:2e:2e:d5:a6:23:d8:09:78:
                    10:77:d9:10:6c:c2:b1:fe:56:04:ca:fb:e7:a2:0e:
                    31:d2:13:e8:40:5b:8d:a2:26:49:4e:2d:ae:26:c4:
                    98:95:35:d7:cc:3a:2e:a3:10:86:d9:cc:cc:07:c3:
                    ef:5d:47:60:28:32:80:44:f9:83:54:97:e0:86:75:
                    43:c5:a2:5e:74:4c:fd:14:a3:14:fd:26:24:15:46:
                    62:47:67:02:85:78:6c:07:ef:d6:39:b9:07:4b:8b:
                    9c:8f:71:70:51:f5:59:72:d3:95:d1:7a:05:da:70:
                    54:93:a3:18:61:38:fd:be:d2:6c:83:69:b6:d5:e7:
                    ac:25:d1:33:2d:bd:ed:3d:74:3f:9b:24:01:eb:36:
                    a7:79:4a:31:04:9c:ad:a9:bc:0a:e2:f9:c9:d7:31:
                    1d:e2:58:98:08:6e:88:1e:3a:82:d6:8d:84:c5:67:
                    9d:00:b9:f1:02:14:93:eb:d4:86:60:3b:ca:7e:1c:
                    15:ce:71:81:78:72:f6:05:72:b4:e8:ca:71:bf:a3:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:F2:07:9E:7A:C2:41:14:0E:55:35:70:A4:61:78:39:D0:3F:08
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/34352e3233342e3130322e302f32332d3233203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:06:ce:c3:3b:14:dc:13:ae:da:8a:58:ff:f0:0d:9a:74:f1:
         3c:0f:8f:ee:4e:f6:49:aa:e7:e7:64:2e:a3:cf:5f:7b:6d:b7:
         11:60:6a:cf:b5:64:db:2a:a5:66:f2:00:ff:6d:e1:f5:50:c7:
         d3:0c:da:3f:57:96:51:29:6a:a5:8d:79:3b:d3:b1:cd:58:cf:
         09:b2:33:5f:3f:e4:11:bf:2d:64:49:27:b5:4e:c9:5e:50:f4:
         d9:4c:f2:d7:b6:05:63:f8:9e:d3:a7:6a:cc:af:e6:58:ce:21:
         d2:b7:a9:96:7f:ab:38:a4:6e:9b:ce:38:10:01:09:51:4b:c1:
         a0:73:67:3f:c6:23:49:79:7d:e5:02:04:53:53:eb:1c:c4:b7:
         bf:ea:bc:1d:20:64:0f:3d:4e:e6:25:84:ae:0e:ff:ae:2d:58:
         56:67:ef:90:05:12:ab:6b:6f:85:dc:b8:a7:b6:04:a7:84:9a:
         b9:87:31:ac:44:a7:94:6d:87:9a:4b:bb:24:39:c1:ac:b9:94:
         c5:a1:15:12:a3:42:39:9a:61:3f:11:d9:27:7c:9b:57:34:93:
         c4:3f:01:b2:46:bb:c1:6a:67:b1:ab:48:b5:c3:38:2b:2e:6b:
         8c:5d:cc:ee:42:fc:5d:f2:43:9f:6e:28:90:e6:64:5b:34:81:
         0c:fd:80:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZaqNUnYz4AShjCCuJu3QkTM3hZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZF
M0E4RDIyQjAeFw0yNjAyMjcyMDI0NTVaFw0yNzAyMjYyMDI5NTVaMDMxMTAvBgNV
BAMTKDQzMkNGMjA3OUU3QUMyNDExNDBFNTUzNTcwQTQ2MTc4MzlEMDNGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vRS8SXScxhAS+sTME3r5APJV
u86Jq/qDKTmh1ih7aoXM7ywD05VoFhKCQJlALMNo5QwuLtWmI9gJeBB32RBswrH+
VgTK++eiDjHSE+hAW42iJklOLa4mxJiVNdfMOi6jEIbZzMwHw+9dR2AoMoBE+YNU
l+CGdUPFol50TP0UoxT9JiQVRmJHZwKFeGwH79Y5uQdLi5yPcXBR9Vly05XRegXa
cFSToxhhOP2+0myDabbV56wl0TMtve09dD+bJAHrNqd5SjEEnK2pvAri+cnXMR3i
WJgIbogeOoLWjYTFZ50AufECFJPr1IZgO8p+HBXOcYF4cvYFcrToynG/o1ujAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQyzyB556wkEUDlU1cKRheDnQPwgwHwYDVR0j
BBgwFoAUkJ6f6lZjIb4HgpgtLYurP+Oo0iswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMS85MDlFOUZFQTU2NjMyMUJFMDc4Mjk4MkQyRDhCQUIzRkUzQThEMjJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUU5RkVBNTY2MzIxQkUw
NzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEv
MzQzNTJlMzIzMzM0MmUzMTMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLepmMA0GCSqGSIb3DQEBCwUAA4IBAQAhBs7DOxTc
E67ailj/8A2adPE8D4/uTvZJqufnZC6jz197bbcRYGrPtWTbKqVm8gD/beH1UMfT
DNo/V5ZRKWqljXk707HNWM8JsjNfP+QRvy1kSSe1TsleUPTZTPLXtgVj+J7Tp2rM
r+ZYziHSt6mWf6s4pG6bzjgQAQlRS8Ggc2c/xiNJeX3lAgRTU+scxLe/6rwdIGQP
PU7mJYSuDv+uLVhWZ++QBRKra2+F3LintgSnhJq5hzGsRKeUbYeaS7skOcGsuZTF
oRUSo0I5mmE/EdknfJtXNJPEPwGyRrvBamexq0i1wzgrLmuMXczuQvxd8kOfbiiQ
5mRbNIEM/YDh
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:56 2026 by rpki-client