Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa
File:                     34352e3136342e33382e302f32342d3234203d3e20323638363232.roa (raw, json)
Hash identifier:          c40FUVjAtCFQdwpHD5ZqBDIMa7JWKM0bgkyA23QXnlc=
Subject key identifier:   D2:8A:FC:F7:DB:AE:F1:CB:36:2B:14:34:09:7E:3F:5E:DE:07:7B:FC
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       38E59EF8C2E19E67E6166EE60769BF6CA5FADA66
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa
Signing time:             Mon 07 Sep 2026 19:17:43 +0000
ROA not before:           Mon 07 Sep 2026 19:12:43 +0000
ROA not after:            Mon 06 Sep 2027 19:17:43 +0000
asID:                     268622
IP address blocks:        45.164.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 00:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:9e:f8:c2:e1:9e:67:e6:16:6e:e6:07:69:bf:6c:a5:fa:da:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Sep  7 19:12:43 2026 GMT
            Not After : Sep  6 19:17:43 2027 GMT
        Subject: CN=D28AFCF7DBAEF1CB362B1434097E3F5EDE077BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:72:88:58:ee:dd:39:9f:c2:e6:0d:b3:f5:
                    39:84:2f:96:0d:91:2b:86:72:5d:42:7d:2e:bc:29:
                    cf:15:d9:11:8b:ab:eb:6f:53:38:46:1d:d3:6e:c4:
                    3d:62:1f:1b:72:73:11:7f:be:5b:c1:67:ef:93:fe:
                    59:66:3f:02:92:95:1a:92:cd:50:73:bb:1b:05:17:
                    48:0e:f1:72:6d:09:20:dd:45:ea:24:8f:c6:4a:04:
                    93:f1:6b:22:0e:d9:08:8f:06:d3:0f:23:40:59:2a:
                    4a:b9:41:ed:ac:8e:aa:04:d9:54:f6:1f:53:7e:cb:
                    55:6e:6c:d4:56:62:bf:47:93:24:88:5d:20:e3:24:
                    1f:3f:b3:57:87:f3:3a:ca:89:1c:e1:71:0e:62:4a:
                    97:e1:42:d4:bc:6b:00:fc:34:56:cd:f0:27:4a:f9:
                    17:f2:e9:e4:f0:12:36:09:32:b1:fc:53:21:8e:9c:
                    6f:9e:2d:57:bc:f0:37:a3:25:f9:69:6e:e3:a3:53:
                    00:30:89:1e:5f:63:cf:79:2f:9f:af:ad:fb:8e:6a:
                    7e:e2:08:e0:d5:b3:cf:f9:e4:1c:a1:1e:3e:f5:d6:
                    12:71:03:01:e1:6c:d9:91:7d:60:63:6a:a7:b5:c4:
                    65:c9:b2:6b:62:ae:3e:fb:1c:51:7d:53:4d:18:e0:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8A:FC:F7:DB:AE:F1:CB:36:2B:14:34:09:7E:3F:5E:DE:07:7B:FC
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33382e302f32342d3234203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:5e:76:39:bc:5f:bd:e6:1f:a8:c1:1e:e3:97:6a:0a:0a:
         63:10:05:34:fa:e3:3b:89:b3:15:3b:71:b2:97:82:93:73:58:
         68:39:64:b5:49:47:61:49:65:03:08:4d:2a:ac:c4:34:f0:9a:
         1c:67:b4:1f:e8:8b:bf:9e:44:f6:cb:df:a1:c0:93:31:a0:f3:
         06:3c:b7:09:1e:d7:6a:f0:9a:7c:5b:02:f9:d2:e3:45:7c:2f:
         99:94:a7:e3:42:97:46:00:a0:04:10:39:f4:b5:ec:b8:6b:50:
         6d:65:e1:c9:6d:ac:37:61:4b:d0:b5:66:ae:6d:be:97:1f:77:
         aa:ad:6c:c5:b5:5e:8c:48:08:71:e6:c2:07:6e:31:bc:13:43:
         98:dc:15:5b:dc:89:a7:90:c2:45:e0:4b:b1:78:6a:86:12:b1:
         4b:13:83:52:86:70:f1:09:8d:b8:b9:34:9d:ce:12:60:26:bb:
         cd:6d:bb:71:d3:af:5c:80:16:c4:bd:a9:d0:b2:7c:73:ff:f3:
         ed:04:a0:7a:d9:fc:ba:5b:4e:ac:19:3b:3e:36:3b:7e:10:ba:
         d0:0b:ab:d9:b6:c7:73:bc:17:25:ef:3d:ee:ad:5b:20:3d:96:
         13:a6:7f:2c:88:83:63:26:8e:2e:61:fc:68:4f:3f:7b:00:aa:
         88:08:80:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOOWe+MLhnmfmFm7mB2m/bKX62mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFDMzI0RTk1RERFODEwN0Q2QzlGQ0Y5Qzc5MzFEODM2
ODQzRjRBNDAeFw0yNjA5MDcxOTEyNDNaFw0yNzA5MDYxOTE3NDNaMDMxMTAvBgNV
BAMTKEQyOEFGQ0Y3REJBRUYxQ0IzNjJCMTQzNDA5N0UzRjVFREUwNzdCRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZaHKIWO7dOZ/C5g2z9TmEL5YN
kSuGcl1CfS68Kc8V2RGLq+tvUzhGHdNuxD1iHxtycxF/vlvBZ++T/llmPwKSlRqS
zVBzuxsFF0gO8XJtCSDdReokj8ZKBJPxayIO2QiPBtMPI0BZKkq5Qe2sjqoE2VT2
H1N+y1VubNRWYr9HkySIXSDjJB8/s1eH8zrKiRzhcQ5iSpfhQtS8awD8NFbN8CdK
+Rfy6eTwEjYJMrH8UyGOnG+eLVe88DejJflpbuOjUwAwiR5fY895L5+vrfuOan7i
CODVs8/55ByhHj711hJxAwHhbNmRfWBjaqe1xGXJsmtirj77HFF9U00Y4N3ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0or899uu8cs2KxQ0CX4/Xt4He/wwHwYDVR0j
BBgwFoAUCsMk6V3egQfWyfz5x5Mdg2hD9KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2U0cUVOSmY4QzNFVnJZNVJQWGNNY0pMaGYyVWJmSmFoeVdkSkhDVGZX
a3EvMC8wQUMzMjRFOTVEREU4MTA3RDZDOUZDRjlDNzkzMUQ4MzY4NDNGNEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQzMyNEU5NURERTgxMDdE
NkM5RkNGOUM3OTMxRDgzNjg0M0Y0QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlNHFFTkpmOEMzRVZyWTVSUFhjTWNKTGhmMlViZkphaHlXZEpIQ1RmV2txLzAv
MzQzNTJlMzEzNjM0MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaQmMA0GCSqGSIb3DQEBCwUAA4IBAQAF7l52Obxf
veYfqMEe45dqCgpjEAU0+uM7ibMVO3Gyl4KTc1hoOWS1SUdhSWUDCE0qrMQ08Joc
Z7Qf6Iu/nkT2y9+hwJMxoPMGPLcJHtdq8Jp8WwL50uNFfC+ZlKfjQpdGAKAEEDn0
tey4a1BtZeHJbaw3YUvQtWaubb6XH3eqrWzFtV6MSAhx5sIHbjG8E0OY3BVb3Imn
kMJF4EuxeGqGErFLE4NShnDxCY24uTSdzhJgJrvNbbtx069cgBbEvanQsnxz//Pt
BKB62fy6W06sGTs+Njt+ELrQC6vZtsdzvBcl7z3urVsgPZYTpn8siINjJo4uYfxo
Tz97AKqICICD
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:22:41 2026 by rpki-client