Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa
File:                     34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa (raw, json)
Hash identifier:          G/QxWUWyKrHaWCk/OHQX6eh7UtkLx75trTLv4Mon0mE=
Subject key identifier:   06:B2:23:FB:04:FB:86:8E:97:83:51:53:6B:A2:F7:C4:63:15:10:32
Certificate issuer:       /CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF
Certificate serial:       76A4D3748EA0B35F92AB1DFD1CFCF6FC8A29D349
Authority key identifier: AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa
Signing time:             Thu 11 Jun 2026 12:23:01 +0000
ROA not before:           Thu 11 Jun 2026 12:18:01 +0000
ROA not after:            Thu 10 Jun 2027 12:23:01 +0000
asID:                     268104
IP address blocks:        45.167.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl
                          rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a4:d3:74:8e:a0:b3:5f:92:ab:1d:fd:1c:fc:f6:fc:8a:29:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF
        Validity
            Not Before: Jun 11 12:18:01 2026 GMT
            Not After : Jun 10 12:23:01 2027 GMT
        Subject: CN=06B223FB04FB868E978351536BA2F7C463151032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:ef:11:cd:3d:52:f4:b5:94:af:c2:92:0e:
                    5f:11:18:03:92:e1:25:17:7d:09:ea:cd:ea:bd:8d:
                    23:13:11:28:9b:d3:cd:31:f4:83:91:11:64:ac:3a:
                    df:64:3a:1f:12:73:5e:44:f0:9c:dd:b1:61:6d:3c:
                    73:e0:2d:7c:98:82:d2:99:8e:b6:e7:67:e5:ee:18:
                    0e:9b:08:ae:ef:59:e6:fd:74:d4:26:63:ca:42:3c:
                    37:be:b4:11:96:32:2c:ab:2f:4c:35:c8:85:33:13:
                    df:0b:8a:f4:86:f4:5d:50:9d:51:71:ed:97:28:ec:
                    8c:21:8c:32:37:c5:9d:32:c2:15:43:28:32:dc:91:
                    60:be:16:c4:0c:2c:b5:fd:2a:05:26:93:71:7b:81:
                    7b:59:59:36:98:fb:fe:18:33:11:5c:7b:31:88:cf:
                    a4:68:0e:56:7f:37:b2:d7:4a:a5:df:4e:91:46:ab:
                    4a:0f:de:95:b7:38:01:e0:c9:32:16:e8:78:36:f4:
                    24:ee:be:b0:8f:90:b3:48:c6:7c:b6:dc:03:02:ea:
                    9f:27:1c:3d:9c:2d:2b:25:e1:fa:21:5c:9b:5c:d7:
                    62:28:3c:d4:c7:f7:df:f0:a4:e0:23:1d:5f:84:cb:
                    f2:cd:8d:7a:14:df:08:e8:be:a0:47:b8:e9:31:c7:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:23:FB:04:FB:86:8E:97:83:51:53:6B:A2:F7:C4:63:15:10:32
            X509v3 Authority Key Identifier:
                keyid:AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:1a:f9:5e:c9:ee:fb:5d:7b:41:9a:04:18:18:2e:a8:dc:ce:
         19:4d:b5:d0:f1:9e:53:38:0a:1f:a0:3a:00:b7:6b:86:b2:7a:
         d6:fd:79:6b:5f:f0:d3:1d:3e:e7:b3:8e:d4:93:d8:09:85:7f:
         06:88:ef:16:e1:89:dd:82:57:c1:04:60:93:18:20:6d:92:e9:
         8f:a2:5d:d1:20:81:63:c0:02:95:65:85:21:21:45:3b:df:ea:
         b1:21:02:bf:87:16:f7:cc:ab:9e:6f:c1:eb:3d:d2:d5:14:e8:
         21:09:71:62:9d:c6:2f:41:8e:c0:d8:1f:71:cf:bb:3d:f8:d5:
         51:97:99:19:82:2c:cd:19:ee:ee:be:15:29:2b:86:63:04:2a:
         7a:31:d1:c1:86:48:44:5f:07:64:96:ad:d1:8f:b5:3b:53:28:
         a3:47:ad:75:3e:ef:5b:90:9e:60:52:09:de:eb:f3:2b:ed:fe:
         6f:84:8f:92:61:8d:11:4d:33:fc:9b:03:f6:64:f5:3c:1f:ef:
         ce:6f:a6:da:a6:90:c7:dc:55:c7:e8:b5:9f:03:59:2e:64:25:
         96:03:f6:a1:e4:a1:e4:04:b6:f7:33:bd:86:0e:4c:c7:1b:4f:
         76:0e:d1:07:bf:b8:2f:4c:9f:e0:60:7c:38:47:cb:9c:f0:eb:
         62:e5:d1:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdqTTdI6gs1+Sqx39HPz2/Iop00kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFCOTA5REM1QUZDOTE0QTI3NjE3Rjk1RUIxMjExOUQx
Q0M2RDVCRjAeFw0yNjA2MTExMjE4MDFaFw0yNzA2MTAxMjIzMDFaMDMxMTAvBgNV
BAMTKDA2QjIyM0ZCMDRGQjg2OEU5NzgzNTE1MzZCQTJGN0M0NjMxNTEwMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ce8RzT1S9LWUr8KSDl8RGAOS
4SUXfQnqzeq9jSMTESib080x9IOREWSsOt9kOh8Sc15E8JzdsWFtPHPgLXyYgtKZ
jrbnZ+XuGA6bCK7vWeb9dNQmY8pCPDe+tBGWMiyrL0w1yIUzE98LivSG9F1QnVFx
7Zco7IwhjDI3xZ0ywhVDKDLckWC+FsQMLLX9KgUmk3F7gXtZWTaY+/4YMxFcezGI
z6RoDlZ/N7LXSqXfTpFGq0oP3pW3OAHgyTIW6Hg29CTuvrCPkLNIxny23AMC6p8n
HD2cLSsl4fohXJtc12IoPNTH99/wpOAjHV+Ey/LNjXoU3wjovqBHuOkxxzORAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBrIj+wT7ho6Xg1FTa6L3xGMVEDIwHwYDVR0j
BBgwFoAUqrkJ3Fr8kUonYX+V6xIRnRzG1b8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2
MWYvMC9BQUI5MDlEQzVBRkM5MTRBMjc2MTdGOTVFQjEyMTE5RDFDQzZENUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQjkwOURDNUFGQzkxNEEy
NzYxN0Y5NUVCMTIxMTlEMUNDNkQ1QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIUVJtNWVyY0Zxc0tzZ3JLYkJoQ1lwUnhHWGZYeVhIWW9IdVBWbzhKdjFmLzAv
MzQzNTJlMzEzNjM3MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtp+IwDQYJKoZIhvcNAQELBQADggEBANUa+V7J
7vtde0GaBBgYLqjczhlNtdDxnlM4Ch+gOgC3a4ayetb9eWtf8NMdPuezjtST2AmF
fwaI7xbhid2CV8EEYJMYIG2S6Y+iXdEggWPAApVlhSEhRTvf6rEhAr+HFvfMq55v
wes90tUU6CEJcWKdxi9BjsDYH3HPuz341VGXmRmCLM0Z7u6+FSkrhmMEKnox0cGG
SERfB2SWrdGPtTtTKKNHrXU+71uQnmBSCd7r8yvt/m+Ej5JhjRFNM/ybA/Zk9Twf
785vptqmkMfcVcfotZ8DWS5kJZYD9qHkoeQEtvczvYYOTMcbT3YO0Qe/uC9Mn+Bg
fDhHy5zw62Ll0bA=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:24 2026 by rpki-client