Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3332203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (raw, json)
Hash identifier:          EP6fEFbxyNVV8XwoLaIZ43aN8O7cKWi+tPjEBDMCmJ0=
Subject key identifier:   32:61:C9:6D:2A:C1:8E:F3:D4:0A:A0:35:C1:C8:A8:6B:C7:5C:EB:78
Certificate issuer:       /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial:       75705FD507E809B86033480132E986A3BF111A69
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3332203d3e20323638323037.roa
Signing time:             Wed 27 May 2026 16:56:43 +0000
ROA not before:           Wed 27 May 2026 16:51:43 +0000
ROA not after:            Wed 26 May 2027 16:56:43 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl
                          rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:70:5f:d5:07:e8:09:b8:60:33:48:01:32:e9:86:a3:bf:11:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
        Validity
            Not Before: May 27 16:51:43 2026 GMT
            Not After : May 26 16:56:43 2027 GMT
        Subject: CN=3261C96D2AC18EF3D40AA035C1C8A86BC75CEB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:02:ba:03:e2:1e:05:d7:aa:fc:79:cc:7d:
                    88:41:59:5e:b7:58:62:14:58:b6:4e:40:39:44:ac:
                    70:80:1a:5e:f1:e3:1b:0a:ab:33:92:67:31:05:5f:
                    7f:3d:a8:e5:5d:96:ac:47:27:6d:fd:56:d4:63:c5:
                    37:df:c9:78:81:76:21:4b:d2:9c:c4:cd:3c:2e:24:
                    fc:2b:98:03:f1:c3:07:a0:fc:df:3e:3a:54:08:19:
                    24:7f:ed:c7:a9:04:56:8b:1c:c4:ba:16:96:37:29:
                    ca:dc:34:01:6c:fe:c3:2e:a9:74:0d:8a:93:1a:39:
                    8c:01:aa:e4:49:c0:8b:c8:02:27:35:aa:27:ce:c7:
                    92:26:7e:a0:c8:67:53:cc:d8:97:ba:fd:21:dc:5d:
                    3b:8c:e9:c6:3b:d9:38:43:f8:a0:35:ac:92:fb:7b:
                    53:46:29:3f:67:cb:eb:88:29:f9:cd:47:ed:4f:77:
                    e4:1f:32:b3:67:12:c0:40:f4:26:3c:32:5c:64:99:
                    3e:28:7a:3e:5d:e6:7e:c8:09:83:70:d4:cc:ee:a3:
                    79:33:ba:f9:c7:2b:74:44:82:e6:74:e6:dd:fa:80:
                    65:7a:41:17:4e:78:a8:b7:a1:bc:f2:d8:9e:5d:1f:
                    48:38:63:af:f3:8e:dd:1c:ca:6e:4d:66:18:ee:a4:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:C9:6D:2A:C1:8E:F3:D4:0A:A0:35:C1:C8:A8:6B:C7:5C:EB:78
            X509v3 Authority Key Identifier:
                keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3332203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:5d:2a:ab:bb:70:f6:b9:2b:90:51:30:5b:53:f6:31:cc:
         ad:ac:0b:b2:e0:a7:d0:2b:c2:11:ec:c8:0b:98:35:b1:cd:9c:
         5c:b3:b3:9b:51:57:ad:92:85:75:86:8b:79:9d:78:46:67:48:
         b2:d5:f5:6f:1b:8e:45:31:37:a3:b1:21:87:bc:ea:36:15:d8:
         4c:91:2b:15:8e:76:5d:09:f3:f6:b8:54:ab:f1:4f:26:b8:0e:
         9c:45:c4:db:33:03:8a:08:d2:5e:0e:9d:f0:03:fb:ab:f3:8e:
         d5:59:e8:2c:8e:d6:25:c5:6b:63:5e:19:b3:4a:0c:92:00:f1:
         ba:64:80:cd:2b:2c:8c:15:1f:aa:2d:6e:f5:e3:15:d1:1c:81:
         9f:e1:4a:64:4e:72:56:7e:5d:57:2d:84:09:6f:04:b5:42:a8:
         a7:c2:b5:40:19:96:1a:c0:6e:48:09:17:f8:c5:b2:ef:38:c2:
         87:d0:00:c9:da:83:9f:af:51:40:fe:8f:61:b5:b6:f2:f5:e1:
         cf:ad:09:93:1f:e9:d8:07:97:b3:9b:72:85:ad:4a:07:b8:a3:
         de:57:eb:87:6b:e4:25:47:67:b2:bc:03:5d:ba:30:db:ce:06:
         bb:18:5c:20:b9:73:00:cb:96:e7:75:b0:05:ae:ac:8a:8d:21:
         71:5e:46:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdXBf1QfoCbhgM0gBMumGo78RGmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3
QTdENEQ5NzAeFw0yNjA1MjcxNjUxNDNaFw0yNzA1MjYxNjU2NDNaMDMxMTAvBgNV
BAMTKDMyNjFDOTZEMkFDMThFRjNENDBBQTAzNUMxQzhBODZCQzc1Q0VCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+wK6A+IeBdeq/HnMfYhBWV63
WGIUWLZOQDlErHCAGl7x4xsKqzOSZzEFX389qOVdlqxHJ239VtRjxTffyXiBdiFL
0pzEzTwuJPwrmAPxwweg/N8+OlQIGSR/7cepBFaLHMS6FpY3KcrcNAFs/sMuqXQN
ipMaOYwBquRJwIvIAic1qifOx5ImfqDIZ1PM2Je6/SHcXTuM6cY72ThD+KA1rJL7
e1NGKT9ny+uIKfnNR+1Pd+QfMrNnEsBA9CY8MlxkmT4oej5d5n7ICYNw1Mzuo3kz
uvnHK3REguZ05t36gGV6QRdOeKi3obzy2J5dH0g4Y6/zjt0cym5NZhjupDRVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMmHJbSrBjvPUCqA1wcioa8dc63gwHwYDVR0j
BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM
QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC
NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czcDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzIv
MzQzNTJlMzIzMzM1MmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLes0MA0GCSqGSIb3DQEBCwUAA4IBAQAne10qq7tw
9rkrkFEwW1P2McytrAuy4KfQK8IR7MgLmDWxzZxcs7ObUVetkoV1hot5nXhGZ0iy
1fVvG45FMTejsSGHvOo2FdhMkSsVjnZdCfP2uFSr8U8muA6cRcTbMwOKCNJeDp3w
A/ur847VWegsjtYlxWtjXhmzSgySAPG6ZIDNKyyMFR+qLW714xXRHIGf4UpkTnJW
fl1XLYQJbwS1QqinwrVAGZYawG5ICRf4xbLvOMKH0ADJ2oOfr1FA/o9htbby9eHP
rQmTH+nYB5ezm3KFrUoHuKPeV+uHa+QlR2eyvANdujDbzga7GFwguXMAy5bndbAF
rqyKjSFxXkbr
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:15:44 2026 by rpki-client