Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36332e302f32342d3234203d3e20323639363230.roa
File:                     34352e3139302e36332e302f32342d3234203d3e20323639363230.roa (raw, json)
Hash identifier:          vlLHXFdCZa/lI3tF4v//Cbf3MuuAti9QNmQ9HgahWOQ=
Subject key identifier:   B9:85:80:3B:F9:66:4F:9C:64:D4:2B:77:F3:3C:34:7F:5D:26:36:F3
Certificate issuer:       /CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
Certificate serial:       04E7CE47C3B4D202F395502FB0F55A81736CD814
Authority key identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36332e302f32342d3234203d3e20323639363230.roa
Signing time:             Thu 10 Sep 2026 16:26:23 +0000
ROA not before:           Thu 10 Sep 2026 16:21:23 +0000
ROA not after:            Thu 09 Sep 2027 16:26:23 +0000
asID:                     269620
IP address blocks:        45.190.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl
                          rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:ce:47:c3:b4:d2:02:f3:95:50:2f:b0:f5:5a:81:73:6c:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
        Validity
            Not Before: Sep 10 16:21:23 2026 GMT
            Not After : Sep  9 16:26:23 2027 GMT
        Subject: CN=B985803BF9664F9C64D42B77F33C347F5D2636F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:0a:d3:aa:a2:3b:a7:99:59:df:cb:5f:cd:
                    b0:ed:49:38:06:b9:84:a3:3a:bf:c6:dc:66:03:5a:
                    7b:ec:ec:e3:23:e7:3b:4d:17:49:60:c9:3c:9b:65:
                    bc:8b:64:98:93:07:3b:d8:74:7d:c5:ec:16:b6:7b:
                    94:59:b8:37:e1:b6:db:65:18:3c:97:96:b4:c1:b0:
                    e9:27:9a:66:a7:dc:5b:33:22:4a:d7:c8:d1:29:16:
                    df:ab:03:b3:bd:00:57:a8:4d:cc:4d:98:83:0c:e7:
                    02:82:cd:ed:2f:1f:1a:88:91:88:0a:3a:14:c7:5d:
                    a9:7f:89:2b:32:c4:67:99:8f:9e:24:fa:2f:87:e2:
                    cc:85:72:ec:c0:7f:83:48:ba:b4:09:82:00:2e:e9:
                    98:1f:69:d9:9b:c3:e4:8b:7b:cd:c1:ae:55:28:d0:
                    b7:3b:eb:19:b6:45:08:cd:96:f5:95:6c:e0:44:a1:
                    3d:4e:ce:77:37:51:c9:83:fc:27:04:27:d4:b2:fd:
                    10:54:d1:58:64:49:b4:b7:76:cb:38:e4:22:d9:af:
                    a7:26:2f:91:0b:10:69:e2:de:6a:d2:bc:7a:2f:7d:
                    9d:41:c9:b6:96:ed:cf:51:d9:fc:2f:58:ad:e6:fc:
                    04:37:04:0a:23:de:07:0c:30:34:f8:94:6c:5b:9c:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:80:3B:F9:66:4F:9C:64:D4:2B:77:F3:3C:34:7F:5D:26:36:F3
            X509v3 Authority Key Identifier:
                keyid:39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/34352e3139302e36332e302f32342d3234203d3e20323639363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:63:3b:69:93:38:1a:a1:fd:1e:a1:f3:d3:ab:08:95:84:
         93:47:31:49:fd:87:2f:03:2f:59:f4:c2:23:0e:65:94:25:ca:
         5e:de:51:b7:03:62:d3:9b:66:d5:f5:87:fb:0b:97:04:6f:77:
         58:6d:40:d5:85:bf:a1:ed:6b:00:72:04:cb:0e:91:d6:6f:7e:
         7b:2c:0a:2f:f3:c6:43:f9:56:1e:e1:72:26:d8:20:bc:8f:d7:
         de:03:49:c3:93:ff:93:82:56:39:0e:86:3e:b8:5c:c0:bc:81:
         18:99:25:5f:e0:5c:a8:26:7e:11:06:3c:73:f6:96:f6:4b:3f:
         d8:24:5e:9c:83:6a:e9:67:d1:e0:91:1f:9e:74:dc:d4:e7:16:
         9c:22:71:55:1c:88:66:a1:ec:9b:c2:f6:a2:1a:6b:37:79:9b:
         fc:90:91:0e:e4:62:c2:97:33:8a:57:a3:70:c8:58:ec:22:94:
         ba:49:4d:0a:53:55:f9:71:78:26:8a:33:06:46:43:e2:73:5d:
         ed:ca:e6:8d:4e:fc:45:bf:28:55:84:95:c8:31:df:e3:b3:35:
         1c:22:10:bb:81:77:73:6e:96:db:92:41:c9:07:fe:07:0e:b9:
         70:48:a0:be:4c:9f:4f:bf:1a:8f:27:20:cb:c5:dd:00:a9:e3:
         0d:7f:2a:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBOfOR8O00gLzlVAvsPVagXNs2BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NzMxNjA2RUI0QzBERDBERkFDMkI0NzNGQzJGNzBG
RkRCOUQ0NzAeFw0yNjA5MTAxNjIxMjNaFw0yNzA5MDkxNjI2MjNaMDMxMTAvBgNV
BAMTKEI5ODU4MDNCRjk2NjRGOUM2NEQ0MkI3N0YzM0MzNDdGNUQyNjM2RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0ArTqqI7p5lZ38tfzbDtSTgG
uYSjOr/G3GYDWnvs7OMj5ztNF0lgyTybZbyLZJiTBzvYdH3F7Ba2e5RZuDfhtttl
GDyXlrTBsOknmman3FszIkrXyNEpFt+rA7O9AFeoTcxNmIMM5wKCze0vHxqIkYgK
OhTHXal/iSsyxGeZj54k+i+H4syFcuzAf4NIurQJggAu6Zgfadmbw+SLe83BrlUo
0Lc76xm2RQjNlvWVbOBEoT1Oznc3UcmD/CcEJ9Sy/RBU0VhkSbS3dss45CLZr6cm
L5ELEGni3mrSvHovfZ1BybaW7c9R2fwvWK3m/AQ3BAoj3gcMMDT4lGxbnBlxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuYWAO/lmT5xk1Ct38zw0f10mNvMwHwYDVR0j
BBgwFoAUOYcxYG60wN0N+sK0c/wvcP/bnUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdR
aFIvMC8zOTg3MzE2MDZFQjRDMEREMERGQUMyQjQ3M0ZDMkY3MEZGREI5RDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5ODczMTYwNkVCNEMwREQw
REZBQzJCNDczRkMyRjcwRkZEQjlENDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqVW1VMW44RFA4eTJHTE16b0dNYjlvbzRReE14TmNqSGlOSjljMkxXUWhSLzAv
MzQzNTJlMzEzOTMwMmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb4/MA0GCSqGSIb3DQEBCwUAA4IBAQBOeWM7aZM4
GqH9HqHz06sIlYSTRzFJ/YcvAy9Z9MIjDmWUJcpe3lG3A2LTm2bV9Yf7C5cEb3dY
bUDVhb+h7WsAcgTLDpHWb357LAov88ZD+VYe4XIm2CC8j9feA0nDk/+TglY5DoY+
uFzAvIEYmSVf4FyoJn4RBjxz9pb2Sz/YJF6cg2rpZ9HgkR+edNzU5xacInFVHIhm
oeybwvaiGms3eZv8kJEO5GLClzOKV6NwyFjsIpS6SU0KU1X5cXgmijMGRkPic13t
yuaNTvxFvyhVhJXIMd/jszUcIhC7gXdzbpbbkkHJB/4HDrlwSKC+TJ9PvxqPJyDL
xd0AqeMNfyrH
-----END CERTIFICATE-----