Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/34352e352e3136382e302f32322d3234203d3e20323636313739.roa
File:                     34352e352e3136382e302f32322d3234203d3e20323636313739.roa (raw, json)
Hash identifier:          9XzwcoK90FEkKHH51fy5Nlh7aTQpAqVLBm9twLnGCXM=
Subject key identifier:   27:76:75:83:8B:13:CD:0D:A5:F7:C4:89:47:0A:F0:5A:1F:F9:26:15
Certificate issuer:       /CN=1D3A9E88344B3F84CB891F5AE97177DA6E42B63C
Certificate serial:       0E2CA325D3DDDF1A6D45744F313AE66830F42C37
Authority key identifier: 1D:3A:9E:88:34:4B:3F:84:CB:89:1F:5A:E9:71:77:DA:6E:42:B6:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/34352e352e3136382e302f32322d3234203d3e20323636313739.roa
Signing time:             Thu 26 Feb 2026 12:16:01 +0000
ROA not before:           Thu 26 Feb 2026 12:11:01 +0000
ROA not after:            Thu 25 Feb 2027 12:16:01 +0000
asID:                     266179
IP address blocks:        45.5.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.crl
                          rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2c:a3:25:d3:dd:df:1a:6d:45:74:4f:31:3a:e6:68:30:f4:2c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3A9E88344B3F84CB891F5AE97177DA6E42B63C
        Validity
            Not Before: Feb 26 12:11:01 2026 GMT
            Not After : Feb 25 12:16:01 2027 GMT
        Subject: CN=277675838B13CD0DA5F7C489470AF05A1FF92615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:0c:12:80:1e:fb:a2:95:e0:ec:02:b6:29:
                    3f:58:c0:62:5e:00:ed:ad:7b:c2:61:5b:72:97:31:
                    04:1d:e1:15:d9:e3:c0:76:a7:40:b4:14:22:2a:43:
                    e6:2e:ee:46:97:95:ef:d9:ba:16:b0:3b:0d:b1:29:
                    26:d4:bd:2b:19:b3:7f:f6:1a:d0:5e:01:f8:50:68:
                    84:f6:a3:6b:74:d6:ff:f0:a9:73:00:36:ce:15:f4:
                    22:a3:e1:47:f4:e2:d9:e6:3d:d7:ad:96:47:ba:76:
                    0f:80:14:da:20:67:db:b6:6f:47:b6:6a:c4:68:81:
                    0f:7b:ef:48:35:36:93:a2:6b:62:5c:e2:f8:25:ec:
                    ac:90:e2:b9:58:9b:47:d0:5b:56:c9:59:1d:3c:28:
                    09:52:39:a6:d3:46:87:2e:73:2c:7a:11:8b:76:bf:
                    80:9f:fb:96:31:bb:7a:c7:5f:6b:07:6d:e2:52:6b:
                    f5:47:f7:a3:8f:de:50:2f:39:d6:5c:a4:17:fd:c2:
                    7c:d7:3c:42:ff:f6:70:00:43:a6:50:75:ab:af:17:
                    f9:ae:6b:57:55:43:02:78:37:3c:e4:fc:10:06:5e:
                    bb:69:3f:04:a9:e3:ed:70:aa:08:06:60:06:c3:64:
                    fd:25:fd:ae:64:a6:0e:b9:fa:96:07:ca:13:b9:3c:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:75:83:8B:13:CD:0D:A5:F7:C4:89:47:0A:F0:5A:1F:F9:26:15
            X509v3 Authority Key Identifier:
                keyid:1D:3A:9E:88:34:4B:3F:84:CB:89:1F:5A:E9:71:77:DA:6E:42:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3A9E88344B3F84CB891F5AE97177DA6E42B63C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2w6jWMNqRy5531kmHdbbjtXb34AdTS5RBu1G34MFbPM/0/34352e352e3136382e302f32322d3234203d3e20323636313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:fc:ca:f7:5b:2a:76:69:71:a8:dd:b9:a4:79:8b:30:a1:
         6d:f4:30:b2:f5:32:19:73:30:ec:c2:c6:de:c7:92:25:22:6d:
         36:66:2c:19:ff:e7:18:30:19:f4:cf:4f:bf:72:a2:2c:7c:5d:
         42:e3:3a:03:96:64:9b:c4:f6:0b:78:7f:a5:93:fc:a3:c6:52:
         c1:79:6e:78:8d:04:d5:57:e8:78:81:e4:ee:69:25:17:b8:2a:
         27:41:e3:4e:eb:49:03:a0:a0:d1:53:50:4c:0e:22:2d:42:1a:
         08:71:fd:d8:59:d6:af:4e:53:7a:af:b8:3b:07:0a:bc:44:d7:
         a5:be:ad:78:32:c7:97:60:f6:a8:c0:b0:a3:7b:69:fa:5a:dd:
         0a:be:66:9e:37:00:a6:f6:f8:fb:ba:d4:73:8b:23:6d:96:b7:
         3b:c0:2d:87:15:01:e5:b4:61:a1:22:5a:42:72:7b:38:9b:7a:
         ce:a8:dd:d5:2c:36:23:60:e0:24:66:6f:cd:13:f6:7d:d9:d2:
         20:a6:4b:ff:c8:a4:ec:dd:72:f6:36:4a:a1:b2:d1:68:aa:d6:
         87:21:86:3b:a2:88:c5:1f:d1:44:08:4c:f2:0e:f7:17:7a:49:
         80:42:5d:fa:a9:49:1b:c8:ae:de:23:5d:a4:65:df:ae:99:4d:
         52:42:56:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDiyjJdPd3xptRXRPMTrmaDD0LDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQzQTlFODgzNDRCM0Y4NENCODkxRjVBRTk3MTc3REE2
RTQyQjYzQzAeFw0yNjAyMjYxMjExMDFaFw0yNzAyMjUxMjE2MDFaMDMxMTAvBgNV
BAMTKDI3NzY3NTgzOEIxM0NEMERBNUY3QzQ4OTQ3MEFGMDVBMUZGOTI2MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0wwSgB77opXg7AK2KT9YwGJe
AO2te8JhW3KXMQQd4RXZ48B2p0C0FCIqQ+Yu7kaXle/ZuhawOw2xKSbUvSsZs3/2
GtBeAfhQaIT2o2t01v/wqXMANs4V9CKj4Uf04tnmPdetlke6dg+AFNogZ9u2b0e2
asRogQ9770g1NpOia2Jc4vgl7KyQ4rlYm0fQW1bJWR08KAlSOabTRocucyx6EYt2
v4Cf+5Yxu3rHX2sHbeJSa/VH96OP3lAvOdZcpBf9wnzXPEL/9nAAQ6ZQdauvF/mu
a1dVQwJ4Nzzk/BAGXrtpPwSp4+1wqggGYAbDZP0l/a5kpg65+pYHyhO5PMcNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJ3Z1g4sTzQ2l98SJRwrwWh/5JhUwHwYDVR0j
BBgwFoAUHTqeiDRLP4TLiR9a6XF32m5CtjwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJ3NmpXTU5xUnk1NTMxa21IZGJianRYYjM0QWRUUzVSQnUxRzM0TUZi
UE0vMC8xRDNBOUU4ODM0NEIzRjg0Q0I4OTFGNUFFOTcxNzdEQTZFNDJCNjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEM0E5RTg4MzQ0QjNGODRD
Qjg5MUY1QUU5NzE3N0RBNkU0MkI2M0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cydzZqV01OcVJ5NTUzMWttSGRiYmp0WGIzNEFkVFM1UkJ1MUczNE1GYlBNLzAv
MzQzNTJlMzUyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0FqDANBgkqhkiG9w0BAQsFAAOCAQEAfHL8yvdbKnZp
cajduaR5izChbfQwsvUyGXMw7MLG3seSJSJtNmYsGf/nGDAZ9M9Pv3KiLHxdQuM6
A5Zkm8T2C3h/pZP8o8ZSwXlueI0E1VfoeIHk7mklF7gqJ0HjTutJA6Cg0VNQTA4i
LUIaCHH92FnWr05Teq+4OwcKvETXpb6teDLHl2D2qMCwo3tp+lrdCr5mnjcApvb4
+7rUc4sjbZa3O8AthxUB5bRhoSJaQnJ7OJt6zqjd1Sw2I2DgJGZvzRP2fdnSIKZL
/8ik7N1y9jZKobLRaKrWhyGGO6KIxR/RRAhM8g73F3pJgEJd+qlJG8iu3iNdpGXf
rplNUkJWKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:46:25 2026 by rpki-client