Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e332e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          5mdwPedWFRyN9ZLPaIaE4kz+iM6ckSdGZBQZOKz9BGU=
Subject key identifier:   89:FA:CD:5E:69:9B:10:B7:32:56:7A:31:F0:59:B6:1E:2D:40:BA:E0
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       33CA641F7800A613B63BC4D26F17206AB069FB77
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa
Signing time:             Sun 04 Oct 2026 14:04:08 +0000
ROA not before:           Sun 04 Oct 2026 13:59:08 +0000
ROA not after:            Sun 03 Oct 2027 14:04:08 +0000
asID:                     269502
IP address blocks:        45.186.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:64:1f:78:00:a6:13:b6:3b:c4:d2:6f:17:20:6a:b0:69:fb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Oct  4 13:59:08 2026 GMT
            Not After : Oct  3 14:04:08 2027 GMT
        Subject: CN=89FACD5E699B10B732567A31F059B61E2D40BAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:21:14:e1:2b:89:04:da:3f:d3:33:22:dd:8f:
                    e3:71:aa:12:62:2b:b9:7f:29:4c:fc:34:d0:fb:8c:
                    c5:93:5d:e4:89:a5:8c:02:5b:7a:a4:f3:a3:82:e8:
                    fe:03:72:83:89:05:8a:d0:6b:02:ea:5f:94:32:6e:
                    67:0f:3d:4d:d7:4b:b9:c3:89:0c:7d:eb:c0:f0:e1:
                    10:c7:d4:9d:72:30:12:64:31:b0:08:61:52:cc:b5:
                    14:0e:f9:fb:9e:a9:8b:27:a4:0f:a6:ff:cc:86:07:
                    a2:ff:e8:a0:52:73:86:22:38:dd:d6:f2:a6:ac:f7:
                    61:92:86:fc:f8:c7:1b:38:16:5a:26:7e:2b:a2:6c:
                    98:c0:4d:cd:b9:2c:6b:7d:a9:6e:f3:d7:20:13:33:
                    31:12:35:65:c1:93:1e:03:dd:13:05:60:7c:80:99:
                    6d:92:c3:c5:02:d1:51:26:dd:51:0b:b5:fc:74:15:
                    18:6f:e5:31:ba:55:db:af:83:1e:53:e8:40:f8:70:
                    23:c0:64:c7:b4:63:72:63:41:60:3c:83:77:1c:86:
                    d9:e6:dc:6b:4b:f4:8c:9f:cf:9c:59:5f:dc:10:e3:
                    18:55:3a:ad:39:51:45:1f:0f:a5:45:bf:c0:63:37:
                    28:b7:62:1b:a6:28:eb:15:52:ee:bf:d0:ac:8c:76:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FA:CD:5E:69:9B:10:B7:32:56:7A:31:F0:59:B6:1E:2D:40:BA:E0
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e332e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:92:b0:6d:1d:73:38:bc:43:43:5f:27:23:7e:a6:f5:1c:
         ad:d9:1d:25:d1:6a:11:16:b8:73:03:b7:72:29:bb:cf:e5:08:
         de:3f:ef:30:c3:6b:55:62:dd:52:9d:a9:7b:98:71:67:7b:77:
         70:37:c4:08:7a:a2:35:fa:d8:89:da:bb:74:3b:1a:a0:45:0f:
         1a:f9:d9:b9:2a:5d:40:d2:cf:1d:ff:5e:28:18:cb:3c:59:9a:
         db:0d:15:3e:ea:d1:3f:d3:ad:84:fe:96:5c:f6:86:e2:5b:95:
         6d:40:73:05:84:a9:18:5b:69:2e:51:91:d9:9b:9c:ee:f7:71:
         a2:0e:33:b8:49:de:ed:ac:3f:91:b0:b3:00:e4:4a:73:83:8e:
         11:22:da:b8:47:52:a3:78:9e:c8:83:4d:4a:bf:f7:cb:1b:5a:
         f0:f5:b5:80:85:56:c4:a5:ad:ea:f6:bc:a1:37:7e:46:7d:0b:
         3a:7c:a8:83:1a:c4:e1:b9:d3:32:32:d8:88:40:88:57:f8:17:
         c5:4b:bd:35:f9:3d:97:70:8f:39:f8:28:e4:ee:17:fd:72:a4:
         32:eb:7e:b8:9d:ef:c8:7c:c0:2d:ae:cd:ab:39:ae:fa:02:2d:
         4e:a0:f1:6d:c6:67:7c:6a:d8:25:e6:09:bb:bf:26:e6:e9:a5:
         ef:f9:03:76
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUM8pkH3gAphO2O8TSbxcgarBp+3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY1RTdERjA1NTM4RTAyNUU1RUYwNTMzRTQwMUI5N0E0
NDU4QkY4QzAeFw0yNjEwMDQxMzU5MDhaFw0yNzEwMDMxNDA0MDhaMDMxMTAvBgNV
BAMTKDg5RkFDRDVFNjk5QjEwQjczMjU2N0EzMUYwNTlCNjFFMkQ0MEJBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIIRThK4kE2j/TMyLdj+NxqhJi
K7l/KUz8NND7jMWTXeSJpYwCW3qk86OC6P4DcoOJBYrQawLqX5QybmcPPU3XS7nD
iQx968Dw4RDH1J1yMBJkMbAIYVLMtRQO+fueqYsnpA+m/8yGB6L/6KBSc4YiON3W
8qas92GShvz4xxs4FlomfiuibJjATc25LGt9qW7z1yATMzESNWXBkx4D3RMFYHyA
mW2Sw8UC0VEm3VELtfx0FRhv5TG6Vduvgx5T6ED4cCPAZMe0Y3JjQWA8g3cchtnm
3GtL9Iyfz5xZX9wQ4xhVOq05UUUfD6VFv8BjNyi3YhumKOsVUu6/0KyMdl9DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUifrNXmmbELcyVnox8Fm2Hi1AuuAwHwYDVR0j
BBgwFoAUtl598FU44CXl7wUz5AG5ekRYv4wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJyOUhLVDhFRTlKVFpMalJpVUJxU0ZGOWdNV1RhZWRBcm5TeURBcTVi
SmsvMC9CNjVFN0RGMDU1MzhFMDI1RTVFRjA1MzNFNDAxQjk3QTQ0NThCRjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2NUU3REYwNTUzOEUwMjVF
NUVGMDUzM0U0MDFCOTdBNDQ1OEJGOEMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JScjlIS1Q4RUU5SlRaTGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzAv
MzQzNTJlMzEzODM2MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM1
MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC26AzANBgkqhkiG9w0BAQsFAAOCAQEATt+SsG0dczi8
Q0NfJyN+pvUcrdkdJdFqERa4cwO3cim7z+UI3j/vMMNrVWLdUp2pe5hxZ3t3cDfE
CHqiNfrYidq7dDsaoEUPGvnZuSpdQNLPHf9eKBjLPFma2w0VPurRP9OthP6WXPaG
4luVbUBzBYSpGFtpLlGR2Zuc7vdxog4zuEne7aw/kbCzAORKc4OOESLauEdSo3ie
yINNSr/3yxta8PW1gIVWxKWt6va8oTd+Rn0LOnyogxrE4bnTMjLYiECIV/gXxUu9
Nfk9l3CPOfgo5O4X/XKkMut+uJ3vyHzALa7Nqzmu+gItTqDxbcZnfGrYJeYJu78m
5uml7/kDdg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:33:16 2026 by rpki-client