Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa
File:                     34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          07rnsbDhj59/JawOj0qlxi2sqrSAT3IOfi/atiO2xLI=
Subject key identifier:   60:31:59:8E:33:BC:FB:EF:98:12:FE:C8:E5:E9:1E:99:69:7F:70:0F
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       3CA7DF0B8E8705214396D802C77CED4513A334B4
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa
Signing time:             Wed 28 Oct 2026 18:41:17 +0000
ROA not before:           Wed 28 Oct 2026 18:36:17 +0000
ROA not after:            Wed 27 Oct 2027 18:41:17 +0000
asID:                     268452
IP address blocks:        45.160.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 07:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a7:df:0b:8e:87:05:21:43:96:d8:02:c7:7c:ed:45:13:a3:34:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Oct 28 18:36:17 2026 GMT
            Not After : Oct 27 18:41:17 2027 GMT
        Subject: CN=6031598E33BCFBEF9812FEC8E5E91E99697F700F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:87:5b:5f:80:f6:02:81:f3:80:fa:62:68:
                    70:9e:4c:c7:89:96:5b:39:a3:28:4a:7c:ba:93:14:
                    f8:de:6a:a9:09:33:e5:48:a0:f1:dd:d7:0f:ba:19:
                    6a:07:41:df:36:64:3f:0a:92:bc:54:bc:2b:ab:42:
                    56:13:65:58:ca:b2:71:7d:7c:ae:2e:47:4b:b5:b2:
                    af:e6:f1:ea:02:52:41:0f:9d:28:6e:7d:ac:84:c4:
                    2d:b0:58:22:d1:b1:e8:7c:20:b8:dc:0c:f6:2f:e7:
                    cb:c2:07:2b:3f:cd:99:65:81:09:25:7f:33:32:bd:
                    98:c0:b7:e3:0d:e7:87:00:78:c3:4c:c6:a0:3c:d8:
                    d3:e1:71:fa:9c:86:6c:b1:ed:3c:bc:f4:c3:a5:12:
                    9b:8f:43:79:16:de:03:36:ee:ff:7d:86:3a:60:d4:
                    eb:5c:d7:31:63:69:10:a7:08:6f:7a:9f:66:b1:de:
                    f2:c6:52:fa:bb:38:4d:a9:b6:c2:ad:34:c4:3c:40:
                    f5:fd:aa:08:e6:e7:fb:74:fd:45:94:16:74:d7:96:
                    1f:a6:a2:20:c6:97:75:30:a1:1e:36:52:64:b3:47:
                    0a:58:16:15:bf:eb:c1:e6:2e:88:e5:63:1b:1a:f3:
                    69:46:7f:38:e5:4a:67:75:cb:f6:28:5e:17:5e:c2:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:31:59:8E:33:BC:FB:EF:98:12:FE:C8:E5:E9:1E:99:69:7F:70:0F
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/34352e3136302e3234372e302f32342d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:20:d4:96:6c:18:de:9e:ef:e6:2f:79:c1:66:b7:6c:73:47:
         de:dd:8d:8b:1c:c8:6a:eb:6c:52:a1:6d:a3:70:9b:f5:65:99:
         57:2d:37:85:be:72:52:61:cf:a8:29:bb:ad:ba:15:77:6b:51:
         93:40:11:4e:b1:50:f8:4e:10:96:cc:7d:49:a1:3a:7b:54:87:
         3f:3e:c6:b2:af:79:16:1c:b6:c9:c1:dc:5b:95:ae:43:33:16:
         c2:1c:e5:aa:19:33:13:75:6f:ae:fa:a6:99:1e:37:44:4f:19:
         1c:19:ce:b5:13:40:20:90:45:b9:29:b0:57:a2:7b:00:7c:7a:
         a2:b3:d0:f6:24:c1:94:b8:7b:ac:a1:a1:49:b1:8d:e7:cb:77:
         e3:6e:da:3a:5a:d2:43:bc:29:30:c6:a3:cc:61:f1:b2:14:fa:
         96:50:71:15:67:30:c7:5f:a0:28:79:c0:0e:5e:06:51:02:b3:
         74:a4:3c:16:8a:22:ac:a6:f1:ec:52:ba:9f:90:4b:2d:eb:85:
         6b:95:4c:9c:d1:b1:99:23:08:b2:e0:40:3b:00:d5:9a:b6:f6:
         03:20:45:10:6a:f8:dc:91:18:58:57:7e:92:8f:7b:3c:e6:77:
         83:25:49:d2:99:77:59:6c:dd:74:c7:44:53:fa:36:d2:4e:cd:
         bf:e3:28:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPKffC46HBSFDltgCx3ztRROjNLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzOTg5NzYzMjI2OTE5ODhDQUJBNjQwQkJCMjg1NEFF
Q0RGNkI4NzAeFw0yNjEwMjgxODM2MTdaFw0yNzEwMjcxODQxMTdaMDMxMTAvBgNV
BAMTKDYwMzE1OThFMzNCQ0ZCRUY5ODEyRkVDOEU1RTkxRTk5Njk3RjcwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieYdbX4D2AoHzgPpiaHCeTMeJ
lls5oyhKfLqTFPjeaqkJM+VIoPHd1w+6GWoHQd82ZD8KkrxUvCurQlYTZVjKsnF9
fK4uR0u1sq/m8eoCUkEPnShufayExC2wWCLRseh8ILjcDPYv58vCBys/zZllgQkl
fzMyvZjAt+MN54cAeMNMxqA82NPhcfqchmyx7Ty89MOlEpuPQ3kW3gM27v99hjpg
1Otc1zFjaRCnCG96n2ax3vLGUvq7OE2ptsKtNMQ8QPX9qgjm5/t0/UWUFnTXlh+m
oiDGl3UwoR42UmSzRwpYFhW/68HmLojlYxsa82lGfzjlSmd1y/YoXhdewgnVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYDFZjjO8+++YEv7I5ekemWl/cA8wHwYDVR0j
BBgwFoAUhDmJdjImkZiMq6ZAu7KFSuzfa4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMS84NDM5ODk3NjMyMjY5MTk4OENBQkE2NDBCQkIyODU0QUVDREY2Qjg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0Mzk4OTc2MzIyNjkxOTg4
Q0FCQTY0MEJCQjI4NTRBRUNERjZCODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZISDlzaUFnQzk2SEYyWE5QWTYyWXRWUE1aSEhMMzEyMjFDRG44Y1hKZjM1LzEv
MzQzNTJlMzEzNjMwMmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoPcwDQYJKoZIhvcNAQELBQADggEBACQg1JZs
GN6e7+YvecFmt2xzR97djYscyGrrbFKhbaNwm/VlmVctN4W+clJhz6gpu626FXdr
UZNAEU6xUPhOEJbMfUmhOntUhz8+xrKveRYctsnB3FuVrkMzFsIc5aoZMxN1b676
ppkeN0RPGRwZzrUTQCCQRbkpsFeiewB8eqKz0PYkwZS4e6yhoUmxjefLd+Nu2jpa
0kO8KTDGo8xh8bIU+pZQcRVnMMdfoCh5wA5eBlECs3SkPBaKIqym8exSup+QSy3r
hWuVTJzRsZkjCLLgQDsA1Zq29gMgRRBq+NyRGFhXfpKPezzmd4MlSdKZd1ls3XTH
RFP6NtJOzb/jKNs=
-----END CERTIFICATE-----
Generated at Fri Oct 30 17:13:57 2026 by rpki-client