Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
File:                     34352e362e33322e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          jo2o4x3wRmpCFddNC2jul6/UDORmMQxXGEHzD/mpPnA=
Subject key identifier:   B5:1E:0A:EE:0D:E6:EE:C9:7C:44:AE:9B:CA:5A:64:A3:6F:F7:16:3E
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       3A919731F9A10CB8D455EDD81EFD7903FB60C89F
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:49:57 +0000
ROA not before:           Mon 28 Sep 2026 17:44:57 +0000
ROA not after:            Mon 27 Sep 2027 17:49:57 +0000
asID:                     270814
IP address blocks:        45.6.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 19:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:91:97:31:f9:a1:0c:b8:d4:55:ed:d8:1e:fd:79:03:fb:60:c8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:44:57 2026 GMT
            Not After : Sep 27 17:49:57 2027 GMT
        Subject: CN=B51E0AEE0DE6EEC97C44AE9BCA5A64A36FF7163E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:12:fd:0f:2c:37:b3:6f:d9:c9:12:13:61:
                    d8:0f:23:4b:de:a6:20:13:da:1c:27:5a:30:3a:47:
                    8d:ec:cf:73:13:8b:12:ce:27:0a:72:c7:61:b1:3d:
                    e3:df:91:f1:e1:0a:df:b4:fe:72:5f:84:df:d9:68:
                    c3:36:71:e9:b3:52:cf:2c:d3:7b:cb:65:2b:8e:a1:
                    5b:d1:fa:19:ad:7d:e6:81:8d:b9:02:12:d9:fc:de:
                    60:4f:be:3b:37:5b:89:6f:5f:e4:d7:5a:ef:94:06:
                    d4:99:47:92:c9:80:45:31:44:f8:fd:a1:50:67:77:
                    f0:b6:50:9e:45:43:e8:1a:e9:12:15:1a:7b:56:30:
                    68:87:bd:40:75:59:1a:53:b6:81:23:23:3f:03:1b:
                    cc:35:37:b7:52:d0:e5:74:86:bc:c6:ab:1d:83:ca:
                    c0:8c:3c:62:8b:d3:d0:a3:79:01:00:d6:d2:b7:24:
                    a5:be:a1:7d:29:7d:5c:97:48:91:4d:ae:99:94:28:
                    b0:7d:c8:c9:3a:aa:b0:3d:d6:31:be:bd:55:d9:c5:
                    70:a7:5e:c4:66:db:66:b1:e5:48:c3:90:44:ef:e4:
                    13:25:dc:a4:6f:bf:23:a5:a5:a8:53:6d:f7:e7:3b:
                    8e:2c:3c:e2:42:b8:b2:b6:6b:7b:0b:1f:48:7e:34:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:0A:EE:0D:E6:EE:C9:7C:44:AE:9B:CA:5A:64:A3:6F:F7:16:3E
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:ee:17:4c:ed:c1:26:e0:4b:c6:3d:00:aa:b8:ff:66:19:
         46:cb:a1:8f:6b:31:74:28:c8:de:32:f0:9e:c5:ee:60:a4:e5:
         69:e9:bb:e8:18:c0:d4:33:b7:22:97:9f:8e:9a:59:53:c7:73:
         20:f9:ce:76:44:e6:ee:20:ea:66:77:53:cd:71:b1:9d:41:51:
         72:ba:37:10:91:86:b5:75:92:79:cc:f8:1f:fd:fb:71:fc:83:
         78:85:da:44:9b:4a:06:a5:3d:ef:f6:b9:27:2a:64:c0:d4:a1:
         f4:db:5a:59:99:1e:5f:5e:08:d5:f7:23:b0:b2:92:5e:e3:73:
         b0:68:a8:57:3e:00:d2:0c:77:ce:25:ff:c1:87:b0:6c:fd:84:
         39:66:e4:b9:ac:7f:a4:7f:22:93:32:51:80:21:73:14:f5:16:
         a3:a5:3d:5b:01:2c:91:11:4c:4b:4f:43:74:45:f3:10:24:52:
         69:01:cd:73:37:34:88:6d:b7:32:d6:bc:6e:c2:18:c6:06:1d:
         a6:66:18:08:f2:f2:80:3a:93:b8:16:d6:07:4f:2c:43:51:df:
         68:8b:92:d2:e0:ae:e0:9b:10:85:82:4b:58:f6:43:9d:db:56:
         9e:d3:92:f4:0e:3c:20:62:7e:e7:e6:9a:e3:60:78:c5:3b:f7:
         24:37:9c:85
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUOpGXMfmhDLjUVe3YHv15A/tgyJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy
MjUwMDhGOTAeFw0yNjA5MjgxNzQ0NTdaFw0yNzA5MjcxNzQ5NTdaMDMxMTAvBgNV
BAMTKEI1MUUwQUVFMERFNkVFQzk3QzQ0QUU5QkNBNUE2NEEzNkZGNzE2M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kxL9Dyw3s2/ZyRITYdgPI0ve
piAT2hwnWjA6R43sz3MTixLOJwpyx2GxPePfkfHhCt+0/nJfhN/ZaMM2cemzUs8s
03vLZSuOoVvR+hmtfeaBjbkCEtn83mBPvjs3W4lvX+TXWu+UBtSZR5LJgEUxRPj9
oVBnd/C2UJ5FQ+ga6RIVGntWMGiHvUB1WRpTtoEjIz8DG8w1N7dS0OV0hrzGqx2D
ysCMPGKL09CjeQEA1tK3JKW+oX0pfVyXSJFNrpmUKLB9yMk6qrA91jG+vVXZxXCn
XsRm22ax5UjDkETv5BMl3KRvvyOlpahTbffnO44sPOJCuLK2a3sLH0h+NFzLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUtR4K7g3m7sl8RK6bylpko2/3Fj4wHwYDVR0j
BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC
Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzQzNTJlMzYyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzODMx
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBiAwDQYJKoZIhvcNAQELBQADggEBAA1O7hdM7cEm4EvG
PQCquP9mGUbLoY9rMXQoyN4y8J7F7mCk5Wnpu+gYwNQztyKXn46aWVPHcyD5znZE
5u4g6mZ3U81xsZ1BUXK6NxCRhrV1knnM+B/9+3H8g3iF2kSbSgalPe/2uScqZMDU
ofTbWlmZHl9eCNX3I7Cykl7jc7BoqFc+ANIMd84l/8GHsGz9hDlm5Lmsf6R/IpMy
UYAhcxT1FqOlPVsBLJERTEtPQ3RF8xAkUmkBzXM3NIhttzLWvG7CGMYGHaZmGAjy
8oA6k7gW1gdPLENR32iLktLgruCbEIWCS1j2Q53bVp7TkvQOPCBifufmmuNgeMU7
9yQ3nIU=
-----END CERTIFICATE-----
Generated at Fri Oct 30 01:37:26 2026 by rpki-client