Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa
File:                     34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa (raw, json)
Hash identifier:          LRYt3DicoLC1lxdyYgYEQnNaZ7NEw/DjxkNKNIAY8Qo=
Subject key identifier:   A0:5D:1E:BF:C1:FD:E0:05:57:A1:92:82:88:10:EF:2E:B2:89:25:A1
Certificate issuer:       /CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
Certificate serial:       5998D91D6256A5D0C83522500DE21BF597020436
Authority key identifier: 4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa
Signing time:             Mon 02 Mar 2026 15:09:38 +0000
ROA not before:           Mon 02 Mar 2026 15:04:38 +0000
ROA not after:            Mon 01 Mar 2027 15:09:38 +0000
asID:                     267413
IP address blocks:        45.235.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl
                          rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 19:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:98:d9:1d:62:56:a5:d0:c8:35:22:50:0d:e2:1b:f5:97:02:04:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5BC3338DC2CABB21A0AA55A293FE62BF78383E
        Validity
            Not Before: Mar  2 15:04:38 2026 GMT
            Not After : Mar  1 15:09:38 2027 GMT
        Subject: CN=A05D1EBFC1FDE00557A192828810EF2EB28925A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:19:f3:e7:ee:6a:1a:5a:ae:de:cd:b5:03:
                    22:da:30:9a:f5:7f:0b:c2:6f:57:79:44:dc:6c:12:
                    af:79:e4:84:c2:15:5f:c8:4d:49:f5:17:64:e0:a9:
                    df:ab:30:85:43:1e:87:48:40:97:fe:a8:f3:40:a2:
                    c7:33:1c:23:e3:f5:44:82:7b:f6:e1:bb:36:e8:36:
                    64:22:c1:f0:ad:b5:55:ed:63:e9:1d:a1:11:8b:be:
                    c6:14:78:4a:4d:e8:89:d6:4d:d3:33:48:22:34:63:
                    37:48:dc:54:0d:54:c3:e4:dd:ff:9b:55:c8:df:a2:
                    ba:38:2b:77:d2:99:cf:c9:b3:4c:e1:c2:25:67:46:
                    f7:5b:bf:de:1c:9a:be:a6:90:61:68:2e:b2:46:cf:
                    43:8f:32:7d:98:ab:35:73:77:d9:25:02:93:a6:4e:
                    bd:d5:9c:28:35:ca:a3:03:11:50:3c:cb:a7:8a:8d:
                    41:76:78:cd:26:39:32:07:1f:81:ce:06:73:e3:92:
                    59:a6:63:0b:8b:dc:c8:f0:e7:b3:ca:45:6f:45:65:
                    ba:a0:fa:80:d6:b1:54:04:e9:72:f0:0e:42:55:2e:
                    f4:64:08:94:b1:0a:ce:43:7a:2e:68:15:36:11:99:
                    ad:41:c6:65:8a:d8:81:5c:0e:9d:a6:1c:c6:5d:c5:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:1E:BF:C1:FD:E0:05:57:A1:92:82:88:10:EF:2E:B2:89:25:A1
            X509v3 Authority Key Identifier:
                keyid:4B:5B:C3:33:8D:C2:CA:BB:21:A0:AA:55:A2:93:FE:62:BF:78:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5BC3338DC2CABB21A0AA55A293FE62BF78383E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/55xmA5yHKnYLaAP8pAZWKEvgq26gYNh9YKPVpLKP1HsC/1/34352e3233352e3130342e302f32322d3234203d3e20323637343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:da:18:74:73:cc:96:90:1f:d2:7b:f4:98:11:c7:29:7f:1c:
         a9:dc:27:48:66:bd:a4:fb:f8:3f:20:ab:4e:78:c4:67:d3:46:
         96:be:16:aa:2c:04:e6:ca:e1:bd:2f:a2:08:48:d9:58:be:19:
         af:df:cd:64:95:39:ed:c2:ce:e8:47:95:92:0b:75:2c:6a:c8:
         5a:28:ee:ab:c4:44:e1:fe:a1:ca:23:b0:a0:6a:ed:5b:53:99:
         a5:22:ee:fb:dd:20:26:06:48:c1:4a:87:d0:73:59:92:47:ec:
         6a:07:62:7c:1d:f0:23:5a:ac:a9:68:79:be:b5:10:e3:d8:23:
         8e:13:ab:8c:88:ed:48:8e:f6:01:3d:ed:28:d7:e9:5f:d7:39:
         85:6b:4f:f9:01:8d:33:20:14:95:30:63:0b:3f:cd:77:9c:ff:
         7b:f1:f0:46:1c:99:30:67:21:fd:fb:2d:7f:08:59:de:c8:1f:
         75:ff:fc:4f:cd:9f:47:2f:52:31:74:6d:56:d3:5e:3b:91:78:
         87:d7:cc:d7:80:d8:2d:54:06:fb:42:83:6f:e8:d6:71:fd:c3:
         ea:ce:f7:df:7d:b6:ab:e9:75:90:56:e0:43:48:00:43:6e:66:
         cf:59:04:21:a6:8a:05:e9:c6:f1:42:a1:14:19:e5:8f:3e:85:
         d0:66:df:64
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWZjZHWJWpdDINSJQDeIb9ZcCBDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI1QkMzMzM4REMyQ0FCQjIxQTBBQTU1QTI5M0ZFNjJC
Rjc4MzgzRTAeFw0yNjAzMDIxNTA0MzhaFw0yNzAzMDExNTA5MzhaMDMxMTAvBgNV
BAMTKEEwNUQxRUJGQzFGREUwMDU1N0ExOTI4Mjg4MTBFRjJFQjI4OTI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Qxnz5+5qGlqu3s21AyLaMJr1
fwvCb1d5RNxsEq955ITCFV/ITUn1F2Tgqd+rMIVDHodIQJf+qPNAosczHCPj9USC
e/bhuzboNmQiwfCttVXtY+kdoRGLvsYUeEpN6InWTdMzSCI0YzdI3FQNVMPk3f+b
Vcjforo4K3fSmc/Js0zhwiVnRvdbv94cmr6mkGFoLrJGz0OPMn2YqzVzd9klApOm
Tr3VnCg1yqMDEVA8y6eKjUF2eM0mOTIHH4HOBnPjklmmYwuL3Mjw57PKRW9FZbqg
+oDWsVQE6XLwDkJVLvRkCJSxCs5Dei5oFTYRma1BxmWK2IFcDp2mHMZdxTzzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoF0ev8H94AVXoZKCiBDvLrKJJaEwHwYDVR0j
BBgwFoAUS1vDM43CyrshoKpVopP+Yr94OD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTV4bUE1eUhLbllMYUFQOHBBWldLRXZncTI2Z1lOaDlZS1BWcExLUDFI
c0MvMS80QjVCQzMzMzhEQzJDQUJCMjFBMEFBNTVBMjkzRkU2MkJGNzgzODNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCNUJDMzMzOERDMkNBQkIy
MUEwQUE1NUEyOTNGRTYyQkY3ODM4M0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU1eG1BNXlIS25ZTGFBUDhwQVpXS0V2Z3EyNmdZTmg5WUtQVnBMS1AxSHNDLzEv
MzQzNTJlMzIzMzM1MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt62gwDQYJKoZIhvcNAQELBQADggEBAB7aGHRz
zJaQH9J79JgRxyl/HKncJ0hmvaT7+D8gq054xGfTRpa+FqosBObK4b0voghI2Vi+
Ga/fzWSVOe3CzuhHlZILdSxqyFoo7qvEROH+ocojsKBq7VtTmaUi7vvdICYGSMFK
h9BzWZJH7GoHYnwd8CNarKloeb61EOPYI44Tq4yI7UiO9gE97SjX6V/XOYVrT/kB
jTMgFJUwYws/zXec/3vx8EYcmTBnIf37LX8IWd7IH3X//E/Nn0cvUjF0bVbTXjuR
eIfXzNeA2C1UBvtCg2/o1nH9w+rO9999tqvpdZBW4ENIAENuZs9ZBCGmigXpxvFC
oRQZ5Y8+hdBm32Q=
-----END CERTIFICATE-----
Generated at Tue Mar 3 07:53:09 2026 by rpki-client