Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa
File:                     34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier:          j/6wNvti+ouVezBLKpQxA2ff5QcJS7IoiSTmbXL+0BE=
Subject key identifier:   03:91:52:B4:FC:B3:7F:C7:A2:F2:DD:BD:BA:06:5A:73:B0:65:02:92
Certificate issuer:       /CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
Certificate serial:       1DEB8172CB5992FB7030E28C2F0B3B689F88FB36
Authority key identifier: 24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa
Signing time:             Fri 27 Feb 2026 15:33:57 +0000
ROA not before:           Fri 27 Feb 2026 15:28:57 +0000
ROA not after:            Fri 26 Feb 2027 15:33:57 +0000
asID:                     268229
IP address blocks:        45.235.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl
                          rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:81:72:cb:59:92:fb:70:30:e2:8c:2f:0b:3b:68:9f:88:fb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4
        Validity
            Not Before: Feb 27 15:28:57 2026 GMT
            Not After : Feb 26 15:33:57 2027 GMT
        Subject: CN=039152B4FCB37FC7A2F2DDBDBA065A73B0650292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:5a:3d:bd:5f:b1:72:4e:73:20:c6:df:db:
                    95:91:c3:7d:3c:33:b3:eb:6c:7a:80:5d:8f:8a:8b:
                    21:0b:2a:8d:d2:66:ef:2b:dc:36:32:46:1b:78:54:
                    93:40:4e:24:b9:ed:66:05:d6:45:f9:d3:a7:b2:f8:
                    e6:18:36:f7:0f:6b:cd:00:d2:02:c8:af:4a:7b:a1:
                    a6:08:48:ee:18:30:e1:3a:ae:4d:4f:03:fc:7c:1c:
                    96:94:71:cb:ba:53:1c:fd:e8:d9:04:50:4d:c4:55:
                    57:68:56:3d:8c:32:fe:57:67:de:b2:ee:1e:49:f5:
                    d8:77:61:64:1c:49:40:55:02:7d:0c:db:95:d8:d4:
                    a3:29:4b:06:63:6f:c4:68:f2:2a:a2:70:80:ee:9b:
                    46:a4:d9:37:f1:40:a0:43:1f:fc:8a:3a:14:3e:ef:
                    cd:ec:41:73:ac:e4:5a:1f:78:f1:4c:67:6b:d2:50:
                    22:ec:9f:4e:62:37:8a:4e:d9:c4:c8:1f:88:7c:49:
                    95:7e:1b:67:d5:61:66:91:c3:26:d5:76:c2:83:e9:
                    3c:72:5d:a8:7b:fe:7f:f4:d9:74:b4:fc:d8:f8:07:
                    8a:7e:95:40:a6:9d:1e:46:a5:1f:2f:db:d5:14:e8:
                    b8:ed:b7:e0:b9:ed:0c:e7:97:55:50:2f:5c:67:72:
                    89:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:91:52:B4:FC:B3:7F:C7:A2:F2:DD:BD:BA:06:5A:73:B0:65:02:92
            X509v3 Authority Key Identifier:
                keyid:24:A3:CC:FD:6B:6E:5E:8C:FE:F3:99:22:F1:A6:ED:76:4A:91:35:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24A3CCFD6B6E5E8CFEF39922F1A6ED764A9135F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:08:0f:87:71:52:34:67:8c:57:45:69:6e:4d:c9:b9:a2:
         87:9c:74:71:e4:93:23:47:27:42:81:63:2f:d2:18:9b:22:03:
         b9:c3:c2:55:1e:11:5d:5e:36:52:67:c3:30:25:23:a3:97:90:
         a5:69:ac:40:51:94:00:2b:69:f4:91:96:45:f6:aa:77:01:5f:
         02:6f:97:9c:44:c9:20:28:41:a0:dc:35:5e:13:35:4c:b5:75:
         01:08:56:b6:3b:ab:87:f5:8d:ed:f6:76:4d:0a:1a:9b:e0:72:
         bc:22:6a:e5:cc:7a:0a:c1:7e:17:ea:e5:77:a3:2b:ec:30:96:
         b1:e0:d4:87:cf:cf:69:d7:c7:cc:c8:7f:80:c9:44:49:30:e7:
         8a:c5:fd:b3:90:49:df:1d:7d:1e:86:d2:eb:97:cd:7f:ee:60:
         0e:f6:3c:d8:26:56:08:04:14:8a:d5:d8:2f:03:08:79:b5:9c:
         54:48:d1:ec:ae:f7:63:27:37:d6:ce:c1:ed:6c:26:36:15:1c:
         48:d0:66:c1:02:05:9e:66:3f:c1:ac:e6:94:b1:03:8f:3d:af:
         9a:47:ff:0e:55:1d:e3:1d:e8:46:ad:ac:33:63:c9:2c:45:42:
         34:c6:4c:19:68:13:13:22:fb:78:c1:91:af:ca:23:ce:00:0a:
         ac:45:0f:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHeuBcstZkvtwMOKMLws7aJ+I+zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRBM0NDRkQ2QjZFNUU4Q0ZFRjM5OTIyRjFBNkVENzY0
QTkxMzVGNDAeFw0yNjAyMjcxNTI4NTdaFw0yNzAyMjYxNTMzNTdaMDMxMTAvBgNV
BAMTKDAzOTE1MkI0RkNCMzdGQzdBMkYyRERCREJBMDY1QTczQjA2NTAyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl61o9vV+xck5zIMbf25WRw308
M7PrbHqAXY+KiyELKo3SZu8r3DYyRht4VJNATiS57WYF1kX506ey+OYYNvcPa80A
0gLIr0p7oaYISO4YMOE6rk1PA/x8HJaUccu6Uxz96NkEUE3EVVdoVj2MMv5XZ96y
7h5J9dh3YWQcSUBVAn0M25XY1KMpSwZjb8Ro8iqicIDum0ak2TfxQKBDH/yKOhQ+
783sQXOs5FofePFMZ2vSUCLsn05iN4pO2cTIH4h8SZV+G2fVYWaRwybVdsKD6Txy
Xah7/n/02XS0/Nj4B4p+lUCmnR5GpR8v29UU6Ljtt+C57Qznl1VQL1xncolVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA5FStPyzf8ei8t29ugZac7BlApIwHwYDVR0j
BBgwFoAUJKPM/WtuXoz+85ki8abtdkqRNfQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9DM2Y3VHdkRllhTkRubXVRaGlFNWozdnNyb2d4bTlocUZxM2V2b25i
ZWkvMC8yNEEzQ0NGRDZCNkU1RThDRkVGMzk5MjJGMUE2RUQ3NjRBOTEzNUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QTNDQ0ZENkI2RTVFOENG
RUYzOTkyMkYxQTZFRDc2NEE5MTM1RjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvQzNmN1R3ZEZZYU5Ebm11UWhpRTVqM3Zzcm9neG05aHFGcTNldm9uYmVpLzAv
MzQzNTJlMzIzMzM1MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt68owDQYJKoZIhvcNAQELBQADggEBAIvvCA+H
cVI0Z4xXRWluTcm5ooecdHHkkyNHJ0KBYy/SGJsiA7nDwlUeEV1eNlJnwzAlI6OX
kKVprEBRlAArafSRlkX2qncBXwJvl5xEySAoQaDcNV4TNUy1dQEIVrY7q4f1je32
dk0KGpvgcrwiauXMegrBfhfq5XejK+wwlrHg1IfPz2nXx8zIf4DJREkw54rF/bOQ
Sd8dfR6G0uuXzX/uYA72PNgmVggEFIrV2C8DCHm1nFRI0eyu92MnN9bOwe1sJjYV
HEjQZsECBZ5mP8Gs5pSxA489r5pH/w5VHeMd6EatrDNjySxFQjTGTBloExMi+3jB
ka/KI84ACqxFDwU=
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:08 2026 by rpki-client