Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/34352e3136352e37362e302f32322d3332203d3e20323638363631.roa
File:                     34352e3136352e37362e302f32322d3332203d3e20323638363631.roa (raw, json)
Hash identifier:          gIV1eN1iIC+bT3Hk7sb+sgIZVsIwZJ713Eqyo3zVbhs=
Subject key identifier:   08:88:5F:48:86:C5:95:32:0F:63:34:DC:D1:B1:47:5C:A4:9B:5D:02
Certificate issuer:       /CN=E2549EE4C1C3504708ABCCD669E240385B291CD0
Certificate serial:       74AB5898E108A45BE84843F06B92C5D23F351622
Authority key identifier: E2:54:9E:E4:C1:C3:50:47:08:AB:CC:D6:69:E2:40:38:5B:29:1C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2549EE4C1C3504708ABCCD669E240385B291CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/34352e3136352e37362e302f32322d3332203d3e20323638363631.roa
Signing time:             Tue 09 Jun 2026 15:54:09 +0000
ROA not before:           Tue 09 Jun 2026 15:49:09 +0000
ROA not after:            Tue 08 Jun 2027 15:54:09 +0000
asID:                     268661
IP address blocks:        45.165.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.crl
                          rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2549EE4C1C3504708ABCCD669E240385B291CD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ab:58:98:e1:08:a4:5b:e8:48:43:f0:6b:92:c5:d2:3f:35:16:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2549EE4C1C3504708ABCCD669E240385B291CD0
        Validity
            Not Before: Jun  9 15:49:09 2026 GMT
            Not After : Jun  8 15:54:09 2027 GMT
        Subject: CN=08885F4886C595320F6334DCD1B1475CA49B5D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:7b:ee:5d:3d:6c:a4:33:33:4a:4e:ab:ed:
                    3c:12:8d:50:d8:10:ab:8a:7c:12:75:da:31:70:61:
                    18:65:1f:6e:16:05:ef:39:b0:19:27:1d:02:df:41:
                    84:df:f4:98:0a:b8:82:e1:84:7e:f3:6e:0b:47:23:
                    c5:78:8b:fe:e9:5d:9f:91:0a:1a:69:19:50:79:32:
                    f2:46:6a:4e:49:c9:19:52:47:da:58:71:f5:be:c0:
                    ed:70:70:04:e3:60:13:a6:d9:18:5b:e5:42:72:7d:
                    2e:0b:36:db:83:92:84:f8:d2:53:61:9e:9c:d7:40:
                    b2:a9:01:b2:ed:8d:75:84:0f:18:14:bc:c5:08:08:
                    67:b2:a7:3f:5f:6d:f6:02:f2:19:db:6b:1a:36:32:
                    84:3b:81:05:1d:5b:3a:11:dd:74:00:f8:61:02:5b:
                    ad:e8:f8:33:83:0b:97:1a:b5:8b:b8:4d:5f:3e:d6:
                    9a:ec:06:08:2c:23:15:42:89:2f:d9:73:10:fe:bd:
                    78:90:d4:05:10:5e:22:59:02:1b:78:5a:e6:90:e5:
                    5e:8b:2d:9d:a6:f6:e2:63:7f:7f:84:49:52:56:49:
                    c0:e8:7b:67:bb:ca:75:13:07:8a:c1:4c:d0:67:3b:
                    d2:18:e1:f6:bb:b2:bf:59:ec:55:a5:40:8d:0f:23:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:5F:48:86:C5:95:32:0F:63:34:DC:D1:B1:47:5C:A4:9B:5D:02
            X509v3 Authority Key Identifier:
                keyid:E2:54:9E:E4:C1:C3:50:47:08:AB:CC:D6:69:E2:40:38:5B:29:1C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/E2549EE4C1C3504708ABCCD669E240385B291CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2549EE4C1C3504708ABCCD669E240385B291CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FumuKNd27Q9EjZcf7zMvR4cLWaG3rtRkDZtk1zrbDEWC/0/34352e3136352e37362e302f32322d3332203d3e20323638363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:36:99:25:3b:5f:54:35:9d:a0:03:53:02:99:85:87:72:e4:
         a6:17:a0:e1:5e:5c:12:bb:ea:6f:32:80:aa:1c:f6:9b:d7:28:
         1b:48:3d:2a:dd:f1:3b:64:bd:aa:08:69:a3:15:f3:c0:fc:d2:
         e2:64:f7:98:01:03:f6:41:f4:22:d8:04:00:c2:c5:ad:fb:af:
         8c:09:d5:ae:fd:f9:c7:10:d0:6c:27:9f:71:4b:91:f9:d0:3b:
         1d:09:50:7a:4f:ba:ec:0e:0c:2c:ef:94:79:b5:f6:8e:09:62:
         b1:fc:0d:79:b2:52:6d:ef:49:6e:67:d5:c4:06:f0:b8:93:5c:
         79:99:26:77:0c:1f:c9:a2:de:80:dd:e7:f8:6b:92:fe:4e:de:
         84:4a:91:0d:98:d5:98:89:f8:dd:47:bc:54:7b:b3:2d:75:6b:
         35:1c:b9:4a:fb:c3:e5:44:a3:84:da:35:d6:62:f6:7a:0e:d4:
         05:a0:16:fa:9a:65:99:a6:aa:e2:f0:6f:a1:86:02:fd:03:c5:
         88:6f:de:ca:9e:cc:ff:8d:ba:4c:0c:35:2e:8c:47:4c:8d:84:
         50:3a:79:00:c9:af:d2:98:2b:ae:43:b1:fa:2c:64:11:8b:21:
         f1:37:34:89:5e:a1:f4:b6:41:d6:36:20:05:aa:1b:58:64:d5:
         b7:68:13:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdKtYmOEIpFvoSEPwa5LF0j81FiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1NDlFRTRDMUMzNTA0NzA4QUJDQ0Q2NjlFMjQwMzg1
QjI5MUNEMDAeFw0yNjA2MDkxNTQ5MDlaFw0yNzA2MDgxNTU0MDlaMDMxMTAvBgNV
BAMTKDA4ODg1RjQ4ODZDNTk1MzIwRjYzMzREQ0QxQjE0NzVDQTQ5QjVEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX03vuXT1spDMzSk6r7TwSjVDY
EKuKfBJ12jFwYRhlH24WBe85sBknHQLfQYTf9JgKuILhhH7zbgtHI8V4i/7pXZ+R
ChppGVB5MvJGak5JyRlSR9pYcfW+wO1wcATjYBOm2Rhb5UJyfS4LNtuDkoT40lNh
npzXQLKpAbLtjXWEDxgUvMUICGeypz9fbfYC8hnbaxo2MoQ7gQUdWzoR3XQA+GEC
W63o+DODC5catYu4TV8+1prsBggsIxVCiS/ZcxD+vXiQ1AUQXiJZAht4WuaQ5V6L
LZ2m9uJjf3+ESVJWScDoe2e7ynUTB4rBTNBnO9IY4fa7sr9Z7FWlQI0PIxepAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCIhfSIbFlTIPYzTc0bFHXKSbXQIwHwYDVR0j
BBgwFoAU4lSe5MHDUEcIq8zWaeJAOFspHNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVtdUtOZDI3UTlFalpjZjd6TXZSNGNMV2FHM3J0UmtEWnRrMXpyYkRF
V0MvMC9FMjU0OUVFNEMxQzM1MDQ3MDhBQkNDRDY2OUUyNDAzODVCMjkxQ0QwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNTQ5RUU0QzFDMzUwNDcw
OEFCQ0NENjY5RTI0MDM4NUIyOTFDRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z1bXVLTmQyN1E5RWpaY2Y3ek12UjRjTFdhRzNydFJrRFp0azF6cmJERVdDLzAv
MzQzNTJlMzEzNjM1MmUzNzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzYzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaVMMA0GCSqGSIb3DQEBCwUAA4IBAQApNpklO19U
NZ2gA1MCmYWHcuSmF6DhXlwSu+pvMoCqHPab1ygbSD0q3fE7ZL2qCGmjFfPA/NLi
ZPeYAQP2QfQi2AQAwsWt+6+MCdWu/fnHENBsJ59xS5H50DsdCVB6T7rsDgws75R5
tfaOCWKx/A15slJt70luZ9XEBvC4k1x5mSZ3DB/Jot6A3ef4a5L+Tt6ESpENmNWY
ifjdR7xUe7MtdWs1HLlK+8PlRKOE2jXWYvZ6DtQFoBb6mmWZpqri8G+hhgL9A8WI
b97Knsz/jbpMDDUujEdMjYRQOnkAya/SmCuuQ7H6LGQRiyHxNzSJXqH0tkHWNiAF
qhtYZNW3aBN+
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:47:32 2026 by rpki-client