Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134372e302f32342d3234203d3e20323639303232.roa
File:                     34352e3137382e3134372e302f32342d3234203d3e20323639303232.roa (raw, json)
Hash identifier:          fNIyjlHyTEuNNoGKBvDKt1iOmQPsyLSXwF1r0H7/NB8=
Subject key identifier:   D7:80:BF:9E:9A:F6:63:98:B4:1F:09:E5:3A:E4:65:4F:05:F0:92:74
Certificate issuer:       /CN=CDCD83F4405AFD2B52943F9838374A340858512F
Certificate serial:       6E360875301C7A533DCBEC1DA27B9F490D8F2F92
Authority key identifier: CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134372e302f32342d3234203d3e20323639303232.roa
Signing time:             Mon 02 Mar 2026 15:54:23 +0000
ROA not before:           Mon 02 Mar 2026 15:49:23 +0000
ROA not after:            Mon 01 Mar 2027 15:54:23 +0000
asID:                     269022
IP address blocks:        45.178.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl
                          rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:36:08:75:30:1c:7a:53:3d:cb:ec:1d:a2:7b:9f:49:0d:8f:2f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDCD83F4405AFD2B52943F9838374A340858512F
        Validity
            Not Before: Mar  2 15:49:23 2026 GMT
            Not After : Mar  1 15:54:23 2027 GMT
        Subject: CN=D780BF9E9AF66398B41F09E53AE4654F05F09274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:91:1c:62:17:64:cf:92:4b:52:83:b4:60:9e:
                    78:e2:86:99:c0:3d:2e:ee:54:04:b2:54:b9:e1:a2:
                    09:b3:2d:d6:5f:81:95:aa:39:74:0e:51:9b:84:a7:
                    7b:d0:7a:a6:42:ce:64:0e:7e:0b:78:5a:96:54:22:
                    cf:84:70:90:c5:c2:af:87:2e:4e:70:aa:df:69:3c:
                    aa:75:61:f7:bf:0b:b1:c6:91:1e:18:3a:3a:bf:e5:
                    4e:c8:7d:6f:c4:c0:10:94:e3:da:4b:ac:c9:f2:0d:
                    ad:0c:2f:46:76:d1:4b:b7:cd:97:20:e9:7d:d8:06:
                    44:74:fe:48:ec:df:31:30:73:ae:68:b4:51:66:eb:
                    05:34:34:6c:d9:d5:c5:34:43:4e:58:44:00:4f:49:
                    c7:0e:3b:28:d0:96:87:fd:c3:07:2c:b2:92:3f:09:
                    10:f9:92:16:65:95:12:ae:19:2d:e0:68:5c:b6:c4:
                    6a:ef:85:ec:65:e0:30:f5:d5:1d:97:a5:d5:7a:4e:
                    5f:d5:17:5b:cd:05:69:28:54:9b:a4:62:84:96:0b:
                    3c:97:2c:cd:0b:97:d8:83:38:f8:45:bb:1a:34:79:
                    43:14:d7:c3:3a:77:f6:29:ab:32:bd:73:a4:c5:e9:
                    c7:7b:80:2f:ca:06:3c:b0:2b:5c:d7:11:d3:da:6a:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:80:BF:9E:9A:F6:63:98:B4:1F:09:E5:3A:E4:65:4F:05:F0:92:74
            X509v3 Authority Key Identifier:
                keyid:CD:CD:83:F4:40:5A:FD:2B:52:94:3F:98:38:37:4A:34:08:58:51:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/CDCD83F4405AFD2B52943F9838374A340858512F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCD83F4405AFD2B52943F9838374A340858512F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/2/34352e3137382e3134372e302f32342d3234203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:77:c9:86:be:21:42:d0:11:61:b0:af:e5:c0:3d:a2:76:
         bc:c8:a9:8b:b4:da:60:7e:52:b6:f4:d1:23:ed:5f:47:bf:a6:
         6e:66:2d:d0:92:be:25:22:6f:3b:8e:e3:ce:ce:1b:d4:99:2e:
         56:cf:2d:a9:34:3d:7c:08:46:0b:bc:f3:69:b6:83:76:79:fe:
         e1:41:5f:a9:47:69:0c:8b:ac:c1:61:da:70:e5:c7:d4:a6:ff:
         fa:53:cc:60:e0:3b:cd:43:0f:66:be:e7:68:91:80:e3:63:12:
         e4:be:66:09:63:5e:5b:b0:86:10:84:45:3f:a5:c2:ec:2e:b2:
         58:18:d4:d5:57:a9:ba:0d:17:33:81:e9:4b:35:45:dc:07:6e:
         88:a2:83:bd:55:fb:1f:8d:a0:a0:81:ce:db:cb:c6:97:b6:bb:
         3e:8d:5d:01:2c:99:df:56:07:92:73:e5:2a:12:98:7f:10:9e:
         7d:6e:bf:f7:c1:81:ce:57:3f:95:eb:9a:97:ba:31:c9:f4:b3:
         4c:39:97:e7:16:25:7d:9d:f6:86:7c:5c:d4:a3:64:f0:1c:38:
         ac:4e:21:de:70:b8:18:5f:ed:79:7b:d5:6f:f2:20:4b:03:8a:
         55:22:6b:a6:e2:83:b8:19:7b:4e:8d:74:47:23:97:a8:cc:3c:
         9a:d0:52:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbjYIdTAcelM9y+wdonufSQ2PL5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RDRDgzRjQ0MDVBRkQyQjUyOTQzRjk4MzgzNzRBMzQw
ODU4NTEyRjAeFw0yNjAzMDIxNTQ5MjNaFw0yNzAzMDExNTU0MjNaMDMxMTAvBgNV
BAMTKEQ3ODBCRjlFOUFGNjYzOThCNDFGMDlFNTNBRTQ2NTRGMDVGMDkyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4kRxiF2TPkktSg7RgnnjihpnA
PS7uVASyVLnhogmzLdZfgZWqOXQOUZuEp3vQeqZCzmQOfgt4WpZUIs+EcJDFwq+H
Lk5wqt9pPKp1Yfe/C7HGkR4YOjq/5U7IfW/EwBCU49pLrMnyDa0ML0Z20Uu3zZcg
6X3YBkR0/kjs3zEwc65otFFm6wU0NGzZ1cU0Q05YRABPSccOOyjQlof9wwcsspI/
CRD5khZllRKuGS3gaFy2xGrvhexl4DD11R2XpdV6Tl/VF1vNBWkoVJukYoSWCzyX
LM0Ll9iDOPhFuxo0eUMU18M6d/YpqzK9c6TF6cd7gC/KBjywK1zXEdPaaqITAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU14C/npr2Y5i0HwnlOuRlTwXwknQwHwYDVR0j
BBgwFoAUzc2D9EBa/StSlD+YODdKNAhYUS8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdWRUdIcFBzQnVHZndZMUQ5eFZCTkRDUjZ3UjZ3NmVpaHRhWjZORDND
eDgvMi9DRENEODNGNDQwNUFGRDJCNTI5NDNGOTgzODM3NEEzNDA4NTg1MTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0Q4M0Y0NDA1QUZEMkI1
Mjk0M0Y5ODM4Mzc0QTM0MDg1ODUxMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3VkVHSHBQc0J1R2Z3WTFEOXhWQk5EQ1I2d1I2dzZlaWh0YVo2TkQzQ3g4LzIv
MzQzNTJlMzEzNzM4MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtspMwDQYJKoZIhvcNAQELBQADggEBAF5id8mG
viFC0BFhsK/lwD2idrzIqYu02mB+Urb00SPtX0e/pm5mLdCSviUibzuO487OG9SZ
LlbPLak0PXwIRgu882m2g3Z5/uFBX6lHaQyLrMFh2nDlx9Sm//pTzGDgO81DD2a+
52iRgONjEuS+ZgljXluwhhCERT+lwuwuslgY1NVXqboNFzOB6Us1RdwHboiig71V
+x+NoKCBztvLxpe2uz6NXQEsmd9WB5Jz5SoSmH8Qnn1uv/fBgc5XP5Xrmpe6Mcn0
s0w5l+cWJX2d9oZ8XNSjZPAcOKxOId5wuBhf7Xl71W/yIEsDilUia6big7gZe06N
dEcjl6jMPJrQUk8=
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:11 2026 by rpki-client