Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa
File:                     34352e372e3231382e302f32342d3234203d3e20323636363139.roa (raw, json)
Hash identifier:          I/e1TnPH+ONNKHQOBPs01R0eg4BURLI8UAOoavM/gw0=
Subject key identifier:   43:EE:D3:9A:09:0E:FA:32:BB:19:C2:BD:1C:8C:8E:79:BC:CF:E5:5B
Certificate issuer:       /CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
Certificate serial:       44A2B33E06CA037877252B00BFAA538F70EAE7FC
Authority key identifier: D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa
Signing time:             Thu 11 Jun 2026 15:48:44 +0000
ROA not before:           Thu 11 Jun 2026 15:43:44 +0000
ROA not after:            Thu 10 Jun 2027 15:48:44 +0000
asID:                     266619
IP address blocks:        45.7.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl
                          rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a2:b3:3e:06:ca:03:78:77:25:2b:00:bf:aa:53:8f:70:ea:e7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
        Validity
            Not Before: Jun 11 15:43:44 2026 GMT
            Not After : Jun 10 15:48:44 2027 GMT
        Subject: CN=43EED39A090EFA32BB19C2BD1C8C8E79BCCFE55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:6c:e0:45:dd:64:e8:2b:e3:69:76:bf:53:
                    79:c3:d7:ba:63:73:a2:51:37:15:11:63:be:93:1d:
                    3a:59:dd:68:d9:d8:ae:7a:21:56:59:92:40:41:6b:
                    13:53:d3:9c:ca:14:e8:ed:d9:75:28:91:8a:cd:1d:
                    08:b0:dc:2c:6c:dc:5e:29:ad:d3:e4:ea:80:e8:02:
                    d2:89:91:a6:9e:ed:ec:4d:fb:97:83:68:a0:52:66:
                    2a:f2:02:5d:cb:89:30:7d:71:33:f2:b1:72:60:b2:
                    24:f3:57:9a:9b:16:c0:dd:86:d2:33:48:ca:53:92:
                    3d:62:4d:bf:a0:f2:87:4c:d7:c4:fc:ea:85:3a:ab:
                    20:85:69:55:b5:75:e6:d4:e4:6d:8d:51:06:f2:55:
                    f7:ae:d6:32:b8:ab:10:8a:b3:96:82:df:d6:83:9d:
                    4a:57:cc:13:20:3e:09:3a:dc:db:42:76:c9:78:07:
                    89:77:d9:bc:18:0f:99:a1:12:e5:53:7d:83:0c:7c:
                    44:79:29:6d:e7:d7:80:e5:57:a6:a2:f4:69:f8:97:
                    c9:33:ab:d1:cf:97:e4:2c:2b:5b:bc:67:b3:2f:92:
                    20:ae:52:01:af:ef:e8:c5:1f:fe:69:ee:3b:f7:ea:
                    48:3e:f0:bc:31:7c:31:12:0e:5c:47:85:78:16:8e:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:D3:9A:09:0E:FA:32:BB:19:C2:BD:1C:8C:8E:79:BC:CF:E5:5B
            X509v3 Authority Key Identifier:
                keyid:D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:08:84:71:3b:64:b1:5c:a3:97:cc:21:66:57:f9:a2:10:
         1d:3f:03:48:da:2c:4f:25:00:57:ee:af:23:da:25:6a:07:28:
         60:6b:03:52:fd:e0:a8:0c:5d:c8:d1:4d:2b:a4:7e:c0:5e:84:
         9e:10:b8:c4:b5:e2:3f:fc:cb:ef:f4:1a:18:6b:b2:a1:69:b9:
         74:6f:3a:76:45:37:13:17:5a:85:b0:d2:43:c9:20:14:60:59:
         40:cf:a0:70:a3:9d:63:ec:9f:0f:bb:f6:27:d3:0b:fd:a9:2b:
         3d:ce:58:1a:23:94:44:4d:b6:30:79:b4:b5:c9:0b:c1:da:17:
         9a:76:0e:8e:d6:e5:63:5b:c2:5f:2b:77:85:82:79:67:e1:64:
         a7:b2:0d:16:f7:3c:9f:f1:3e:03:cc:e5:ea:fc:c9:64:a1:de:
         59:13:1c:6a:e2:fc:7c:dc:94:1a:57:04:82:3b:ba:c3:d4:b2:
         6f:b2:d5:8d:3b:7a:b8:b9:fc:25:9c:03:bc:d0:e0:cd:72:72:
         d5:f9:50:8a:26:24:24:88:a5:81:ea:f6:69:dc:9f:90:b1:db:
         94:a3:d2:96:ba:a0:80:7c:d5:e8:e3:ed:1e:25:78:eb:87:3c:
         15:3a:a0:0b:8f:d6:06:93:69:17:84:7c:23:70:96:d7:70:1c:
         53:9f:f1:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURKKzPgbKA3h3JSsAv6pTj3Dq5/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCNEU5QTIyNUM0MEQzNEY5M0U0N0U4OTk4MkVCN0M1
QzkxRDc0MjAeFw0yNjA2MTExNTQzNDRaFw0yNzA2MTAxNTQ4NDRaMDMxMTAvBgNV
BAMTKDQzRUVEMzlBMDkwRUZBMzJCQjE5QzJCRDFDOEM4RTc5QkNDRkU1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gWzgRd1k6CvjaXa/U3nD17pj
c6JRNxURY76THTpZ3WjZ2K56IVZZkkBBaxNT05zKFOjt2XUokYrNHQiw3Cxs3F4p
rdPk6oDoAtKJkaae7exN+5eDaKBSZiryAl3LiTB9cTPysXJgsiTzV5qbFsDdhtIz
SMpTkj1iTb+g8odM18T86oU6qyCFaVW1debU5G2NUQbyVfeu1jK4qxCKs5aC39aD
nUpXzBMgPgk63NtCdsl4B4l32bwYD5mhEuVTfYMMfER5KW3n14DlV6ai9Gn4l8kz
q9HPl+QsK1u8Z7MvkiCuUgGv7+jFH/5p7jv36kg+8LwxfDESDlxHhXgWjhVNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQ+7TmgkO+jK7GcK9HIyOebzP5VswHwYDVR0j
BBgwFoAU07TpoiXEDTT5PkfomYLrfFyR10IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4
MlYvMC9EM0I0RTlBMjI1QzQwRDM0RjkzRTQ3RTg5OTgyRUI3QzVDOTFENzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQjRFOUEyMjVDNDBEMzRG
OTNFNDdFODk5ODJFQjdDNUM5MUQ3NDIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzOVl2dmNoQnRtSnpBYzNOM3lGQXhhbU5kQmVEb25yWGFrNHgycThkeDJWLzAv
MzQzNTJlMzcyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0H2jANBgkqhkiG9w0BAQsFAAOCAQEADDEIhHE7ZLFc
o5fMIWZX+aIQHT8DSNosTyUAV+6vI9olagcoYGsDUv3gqAxdyNFNK6R+wF6EnhC4
xLXiP/zL7/QaGGuyoWm5dG86dkU3ExdahbDSQ8kgFGBZQM+gcKOdY+yfD7v2J9ML
/akrPc5YGiOURE22MHm0tckLwdoXmnYOjtblY1vCXyt3hYJ5Z+Fkp7INFvc8n/E+
A8zl6vzJZKHeWRMcauL8fNyUGlcEgju6w9Syb7LVjTt6uLn8JZwDvNDgzXJy1flQ
iiYkJIilger2adyfkLHblKPSlrqggHzV6OPtHiV464c8FTqgC4/WBpNpF4R8I3CW
13AcU5/xQA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:37:45 2026 by rpki-client