Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
File:                     34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (raw, json)
Hash identifier:          qZcD+SdGxEDDQ7deoplsrKdOcEm+RGgBPv6nIEdE/2I=
Subject key identifier:   21:10:B3:D2:40:E6:BD:D6:D9:83:F9:49:57:CB:82:F2:75:79:68:68
Certificate issuer:       /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial:       4B0C5F05E1EACC4BC0DDA0263909C396D5B668CA
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
Signing time:             Fri 15 May 2026 19:06:04 +0000
ROA not before:           Fri 15 May 2026 19:01:04 +0000
ROA not after:            Fri 14 May 2027 19:06:04 +0000
asID:                     269188
IP address blocks:        45.181.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
                          rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:5f:05:e1:ea:cc:4b:c0:dd:a0:26:39:09:c3:96:d5:b6:68:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
        Validity
            Not Before: May 15 19:01:04 2026 GMT
            Not After : May 14 19:06:04 2027 GMT
        Subject: CN=2110B3D240E6BDD6D983F94957CB82F275796868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:02:7b:a9:0f:d8:e9:21:ad:20:c8:00:ca:
                    b8:7c:21:28:dd:ee:8f:2e:06:17:91:e2:10:cf:bb:
                    79:3c:18:c3:be:96:d8:7f:41:92:53:39:84:0e:f7:
                    08:9e:12:02:09:3b:dd:7f:97:ee:11:c7:0f:ed:d0:
                    52:c4:9a:28:ee:8b:ef:86:d2:51:63:1f:a1:3e:c7:
                    65:21:18:28:da:55:c4:e5:9f:d1:e7:eb:e9:24:fe:
                    60:6c:d3:c1:1b:e4:86:be:32:15:45:04:ed:32:fe:
                    da:67:98:c6:9b:7a:30:60:f0:5c:8c:0d:a0:28:53:
                    b0:bb:fe:41:c7:f9:b1:e6:5a:c9:e9:ac:bc:3c:94:
                    9f:b6:21:94:56:90:1d:7b:82:32:c1:17:9b:c3:e8:
                    8e:0d:5b:ed:85:e4:4b:86:7c:c4:2f:3b:a6:39:6c:
                    fe:06:d3:4b:58:4d:09:01:2b:38:a1:51:31:24:99:
                    2f:6e:d1:f7:e7:8f:9a:56:ae:4a:2d:4a:9d:e0:a7:
                    ba:e0:05:64:90:53:a7:74:35:bc:8c:fe:6d:c5:87:
                    ef:e7:62:4b:7a:37:cf:c7:a3:06:17:86:88:f6:e3:
                    fa:33:c5:ee:d1:69:2e:8f:ce:6f:2c:43:3a:b0:33:
                    a6:57:4e:33:4a:33:df:61:2e:c3:a6:ec:32:aa:ae:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:B3:D2:40:E6:BD:D6:D9:83:F9:49:57:CB:82:F2:75:79:68:68
            X509v3 Authority Key Identifier:
                keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:ba:19:1a:0c:d4:a3:53:ba:24:82:89:19:c3:80:7c:cd:
         7e:53:cc:eb:9e:f5:db:e4:c8:61:55:b6:99:70:eb:29:0d:c5:
         52:e9:82:68:61:50:b0:d5:e6:86:ef:d8:6d:78:2e:37:d7:b9:
         fd:25:47:a5:46:5d:bc:17:9e:d6:95:7c:43:ba:32:f1:fa:f9:
         55:3e:c7:79:8d:2f:ea:08:21:01:88:f2:23:75:bd:62:75:72:
         ab:87:8b:28:8e:d3:93:74:4b:4a:d7:5e:1b:f0:45:d0:9a:ea:
         eb:95:08:86:42:17:0f:97:74:a7:6d:61:88:56:f7:ad:68:fb:
         a9:5d:0e:23:cd:ec:c5:6a:62:31:da:61:78:a1:3e:b5:8d:3e:
         8e:7f:2b:fc:0e:66:66:c4:7c:4b:25:96:3f:ba:47:82:96:96:
         69:7d:ad:2f:d1:d1:13:bc:af:29:b0:0e:90:79:46:7c:0f:02:
         84:47:cb:33:1f:55:11:4b:e9:29:af:12:4e:1a:5a:0f:e3:0e:
         13:97:28:fb:9f:47:a9:82:4c:c0:f8:16:b8:e5:e9:58:72:3b:
         67:99:86:42:91:9e:c0:9a:68:6f:05:5f:bb:38:5b:66:86:94:
         66:2c:6b:7d:14:86:81:81:f7:b2:79:37:72:c9:ae:3f:9f:86:
         5f:90:73:b4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSwxfBeHqzEvA3aAmOQnDltW2aMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI0ODFEMTRGQUUxMzdGQzY5QzIwMDI5MDBFOEUxMzNG
OTE0Qzk5MDAeFw0yNjA1MTUxOTAxMDRaFw0yNzA1MTQxOTA2MDRaMDMxMTAvBgNV
BAMTKDIxMTBCM0QyNDBFNkJERDZEOTgzRjk0OTU3Q0I4MkYyNzU3OTY4NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebwJ7qQ/Y6SGtIMgAyrh8ISjd
7o8uBheR4hDPu3k8GMO+lth/QZJTOYQO9wieEgIJO91/l+4Rxw/t0FLEmijui++G
0lFjH6E+x2UhGCjaVcTln9Hn6+kk/mBs08Eb5Ia+MhVFBO0y/tpnmMabejBg8FyM
DaAoU7C7/kHH+bHmWsnprLw8lJ+2IZRWkB17gjLBF5vD6I4NW+2F5EuGfMQvO6Y5
bP4G00tYTQkBKzihUTEkmS9u0ffnj5pWrkotSp3gp7rgBWSQU6d0NbyM/m3Fh+/n
Ykt6N8/HowYXhoj24/ozxe7RaS6Pzm8sQzqwM6ZXTjNKM99hLsOm7DKqrrXvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIRCz0kDmvdbZg/lJV8uC8nV5aGgwHwYDVR0j
BBgwFoAUokgdFPrhN/xpwgApAOjhM/kUyZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFqMkUxVzFGQXhrY2I1TkpYTkR0eEN1Z1NUYXZtVkx3dVI4TktTYXZh
Zm8vMC9BMjQ4MUQxNEZBRTEzN0ZDNjlDMjAwMjkwMEU4RTEzM0Y5MTRDOTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNDgxRDE0RkFFMTM3RkM2
OUMyMDAyOTAwRThFMTMzRjkxNEM5OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxajJFMVcxRkF4a2NiNU5KWE5EdHhDdWdTVGF2bVZMd3VSOE5LU2F2YWZvLzAv
MzQzNTJlMzEzODMxMmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbVIMA0GCSqGSIb3DQEBCwUAA4IBAQAUe7oZGgzU
o1O6JIKJGcOAfM1+U8zrnvXb5MhhVbaZcOspDcVS6YJoYVCw1eaG79hteC4317n9
JUelRl28F57WlXxDujLx+vlVPsd5jS/qCCEBiPIjdb1idXKrh4sojtOTdEtK114b
8EXQmurrlQiGQhcPl3SnbWGIVvetaPupXQ4jzezFamIx2mF4oT61jT6Ofyv8DmZm
xHxLJZY/ukeClpZpfa0v0dETvK8psA6QeUZ8DwKER8szH1URS+kprxJOGloP4w4T
lyj7n0epgkzA+Ba45elYcjtnmYZCkZ7AmmhvBV+7OFtmhpRmLGt9FIaBgfeyeTdy
ya4/n4ZfkHO0
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:50:20 2026 by rpki-client