Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32342d3234203d3e20323637333834.roa
File:                     34352e3233342e3139382e302f32342d3234203d3e20323637333834.roa (raw, json)
Hash identifier:          Lzl40Ap6GlJ2BbUq24OVOQ3AfllBVP/+493kJtjnYUU=
Subject key identifier:   C7:FB:C4:4D:8B:88:89:79:B8:32:C7:58:4E:3D:7F:C9:0C:A3:55:DE
Certificate issuer:       /CN=9E59DF3AA037619983782349ADD1B34802F0330A
Certificate serial:       4F1A18182A438B59A98C8379D32B853631B23FB0
Authority key identifier: 9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32342d3234203d3e20323637333834.roa
Signing time:             Tue 09 Jun 2026 17:28:44 +0000
ROA not before:           Tue 09 Jun 2026 17:23:44 +0000
ROA not after:            Tue 08 Jun 2027 17:28:44 +0000
asID:                     267384
IP address blocks:        45.234.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl
                          rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1a:18:18:2a:43:8b:59:a9:8c:83:79:d3:2b:85:36:31:b2:3f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E59DF3AA037619983782349ADD1B34802F0330A
        Validity
            Not Before: Jun  9 17:23:44 2026 GMT
            Not After : Jun  8 17:28:44 2027 GMT
        Subject: CN=C7FBC44D8B888979B832C7584E3D7FC90CA355DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:3c:c2:63:6d:3b:3e:33:97:67:b0:78:89:
                    19:a4:fc:8f:19:65:2e:dd:ec:8b:45:f4:40:81:da:
                    2b:2e:4e:5b:bc:c3:bd:f2:10:16:b6:a2:4d:c7:28:
                    bf:29:0f:49:63:21:8e:fc:8a:ce:75:40:b8:ce:d2:
                    91:cd:65:09:da:89:52:15:63:eb:e0:70:ea:47:41:
                    7e:3f:66:3d:f6:2f:51:73:da:34:5f:cf:83:50:ce:
                    1a:5e:a4:f5:90:8a:91:bb:f9:02:a3:bb:e7:ac:3a:
                    12:de:b3:45:be:8f:76:4e:9f:ed:8c:0a:2b:1f:7b:
                    2e:d5:c1:60:2c:4f:00:b4:a6:db:5b:2b:c2:dc:90:
                    9b:dc:10:0f:99:a7:c9:29:da:c5:2a:74:33:2e:a4:
                    19:ee:a7:00:b2:b7:28:bc:a0:61:d9:07:2e:b3:3c:
                    36:ba:0c:8c:9d:92:f7:65:ec:ea:a4:15:0f:ab:f7:
                    46:73:67:5f:d3:4d:f9:f1:5a:69:c6:46:bd:56:5a:
                    2f:41:a0:3a:0a:0e:78:6f:02:3f:d1:b9:10:62:e7:
                    de:80:aa:4f:0c:5d:13:72:8f:a5:8d:80:f9:70:d7:
                    f5:23:d3:17:66:56:68:5e:27:67:0b:db:5e:6a:ff:
                    50:42:a5:a1:47:23:e8:ca:3f:2c:08:37:80:73:7a:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:C4:4D:8B:88:89:79:B8:32:C7:58:4E:3D:7F:C9:0C:A3:55:DE
            X509v3 Authority Key Identifier:
                keyid:9E:59:DF:3A:A0:37:61:99:83:78:23:49:AD:D1:B3:48:02:F0:33:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/9E59DF3AA037619983782349ADD1B34802F0330A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E59DF3AA037619983782349ADD1B34802F0330A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/34352e3233342e3139382e302f32342d3234203d3e20323637333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:8c:1d:44:a3:73:96:d9:fb:6d:63:fb:b9:6c:99:94:f1:
         d4:8e:1e:c8:d4:e5:27:2c:9d:44:38:a9:a6:63:52:ea:d7:49:
         da:4f:f1:7b:91:9c:e1:b1:4e:fc:93:7a:a2:fe:31:ac:ed:58:
         89:58:9c:b5:b8:33:a4:5b:9b:89:6e:62:20:65:db:1d:11:b4:
         90:da:56:e9:fe:fc:be:ca:f6:d5:b3:16:28:fd:6a:2b:ef:34:
         90:83:4b:00:a3:45:bf:f6:a1:73:f3:d7:6d:d5:de:31:03:70:
         4e:81:70:13:43:c0:97:8a:1c:b8:6a:b0:f1:29:cf:4a:48:49:
         3e:b0:da:2c:6b:59:fa:d8:8b:00:de:49:ef:42:2f:c2:99:e6:
         bd:33:f4:12:1d:12:67:49:93:2d:a1:dd:94:e8:b0:46:4d:47:
         ca:5a:87:cf:73:25:bc:70:5d:f2:93:d7:ab:df:88:0c:38:b3:
         9d:e8:40:fd:23:42:6e:7f:74:b7:c0:aa:89:c2:01:c0:d7:d3:
         9c:b5:23:3d:19:e1:b4:5a:37:bf:47:88:71:4e:5c:3a:68:06:
         1e:28:5d:c6:2c:c2:f7:9b:bd:c8:d8:7e:c1:f6:e2:dd:80:b7:
         d6:be:a7:e1:c5:f7:f5:6c:3d:b0:49:34:b9:78:2c:b0:75:6a:
         c7:4f:65:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTxoYGCpDi1mpjIN50yuFNjGyP7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1OURGM0FBMDM3NjE5OTgzNzgyMzQ5QUREMUIzNDgw
MkYwMzMwQTAeFw0yNjA2MDkxNzIzNDRaFw0yNzA2MDgxNzI4NDRaMDMxMTAvBgNV
BAMTKEM3RkJDNDREOEI4ODg5NzlCODMyQzc1ODRFM0Q3RkM5MENBMzU1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyszzCY207PjOXZ7B4iRmk/I8Z
ZS7d7ItF9ECB2isuTlu8w73yEBa2ok3HKL8pD0ljIY78is51QLjO0pHNZQnaiVIV
Y+vgcOpHQX4/Zj32L1Fz2jRfz4NQzhpepPWQipG7+QKju+esOhLes0W+j3ZOn+2M
Cisfey7VwWAsTwC0pttbK8LckJvcEA+Zp8kp2sUqdDMupBnupwCytyi8oGHZBy6z
PDa6DIydkvdl7OqkFQ+r90ZzZ1/TTfnxWmnGRr1WWi9BoDoKDnhvAj/RuRBi596A
qk8MXRNyj6WNgPlw1/Uj0xdmVmheJ2cL215q/1BCpaFHI+jKPywIN4BzeprPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx/vETYuIiXm4MsdYTj1/yQyjVd4wHwYDVR0j
BBgwFoAUnlnfOqA3YZmDeCNJrdGzSALwMwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5VejRpYWthbnkyeXh2VWtlWnpMUnhvV3dDQ3Z4S05TQ2JCQW9Lc25i
a24vMC85RTU5REYzQUEwMzc2MTk5ODM3ODIzNDlBREQxQjM0ODAyRjAzMzBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFNTlERjNBQTAzNzYxOTk4
Mzc4MjM0OUFERDFCMzQ4MDJGMDMzMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOVXo0aWFrYW55Mnl4dlVrZVp6TFJ4b1d3Q0N2eEtOU0NiQkFvS3NuYmtuLzAv
MzQzNTJlMzIzMzM0MmUzMTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6sYwDQYJKoZIhvcNAQELBQADggEBAGJ6jB1E
o3OW2fttY/u5bJmU8dSOHsjU5ScsnUQ4qaZjUurXSdpP8XuRnOGxTvyTeqL+Mazt
WIlYnLW4M6Rbm4luYiBl2x0RtJDaVun+/L7K9tWzFij9aivvNJCDSwCjRb/2oXPz
123V3jEDcE6BcBNDwJeKHLhqsPEpz0pIST6w2ixrWfrYiwDeSe9CL8KZ5r0z9BId
EmdJky2h3ZTosEZNR8pah89zJbxwXfKT16vfiAw4s53oQP0jQm5/dLfAqonCAcDX
05y1Iz0Z4bRaN79HiHFOXDpoBh4oXcYswvebvcjYfsH24t2At9a+p+HF9/VsPbBJ
NLl4LLB1asdPZV4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:38 2026 by rpki-client