Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/34352e3136312e39362e302f32322d3234203d3e20323638343633.roa
File:                     34352e3136312e39362e302f32322d3234203d3e20323638343633.roa (raw, json)
Hash identifier:          M9xzLWDJ7VY02jBtmgDHDofevG8eLJJ+IkzVQSqMBpc=
Subject key identifier:   6D:E1:25:68:D0:1C:B8:11:65:A7:8B:46:DD:51:1B:8C:44:52:7E:59
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       2B49B3C5F218BEC220C33DF74C2857BBFFD649E1
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/34352e3136312e39362e302f32322d3234203d3e20323638343633.roa
Signing time:             Tue 22 Sep 2026 13:34:21 +0000
ROA not before:           Tue 22 Sep 2026 13:29:21 +0000
ROA not after:            Tue 21 Sep 2027 13:34:21 +0000
asID:                     268463
IP address blocks:        45.161.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 08:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:49:b3:c5:f2:18:be:c2:20:c3:3d:f7:4c:28:57:bb:ff:d6:49:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Sep 22 13:29:21 2026 GMT
            Not After : Sep 21 13:34:21 2027 GMT
        Subject: CN=6DE12568D01CB81165A78B46DD511B8C44527E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:6f:3c:0f:e0:a7:94:1c:2d:5a:51:fc:0e:
                    bd:d8:ea:23:75:6c:2e:2d:68:cf:8c:cd:72:e4:b6:
                    c5:c2:a0:61:ed:2b:1b:06:53:8c:c5:82:9e:44:8d:
                    f5:07:17:3c:a3:5d:58:08:f3:15:b9:50:97:66:20:
                    78:7d:75:5d:53:c7:35:2c:55:70:0a:bb:04:f2:da:
                    4b:bf:b1:6b:f7:3f:d3:b8:b8:30:0b:2a:94:bf:54:
                    ee:a0:4a:a9:5c:6e:c5:c9:68:26:c5:e1:ea:d9:cf:
                    7f:11:3c:8d:e4:14:ff:c6:17:2a:7e:0c:ff:ac:4b:
                    85:73:ce:fc:59:3b:80:7c:9a:71:11:9f:45:76:d4:
                    49:e6:65:9e:08:c8:61:37:97:19:0b:d4:9a:56:b0:
                    b0:57:56:8d:60:18:a8:15:40:96:d0:be:0e:58:f0:
                    c5:c1:2d:12:fe:80:c7:8c:40:ef:0b:9b:0b:ea:4e:
                    ea:66:0d:c5:58:7c:90:e0:b3:ee:e5:4b:01:66:e8:
                    86:eb:ab:30:3d:74:d3:77:da:11:42:b5:0a:b8:20:
                    c8:c2:1d:ec:cc:81:d2:79:4f:5d:d0:59:e0:6c:27:
                    e1:67:cb:29:de:ff:34:77:4c:6f:59:53:32:54:4b:
                    4a:c2:cc:7e:8d:47:b9:46:07:87:6f:f1:97:ae:04:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:25:68:D0:1C:B8:11:65:A7:8B:46:DD:51:1B:8C:44:52:7E:59
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/34352e3136312e39362e302f32322d3234203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:4b:8b:d0:85:8e:6b:4f:3c:1b:2f:15:b9:11:dc:17:71:
         62:4f:49:13:d6:07:0d:8d:16:a7:1a:16:bd:97:3e:0e:56:24:
         9c:e6:3a:a9:ea:e9:d1:be:33:dc:08:4f:b7:13:e4:96:b2:91:
         29:3c:61:02:b7:31:c4:e6:6e:e6:62:0a:f1:5e:9f:f2:7a:b0:
         94:60:55:4e:1b:db:8f:47:81:6c:08:9a:82:d7:cf:c8:83:94:
         cd:c3:c9:97:4d:40:0e:58:aa:35:cb:d2:f3:13:3f:d7:81:2b:
         08:c8:ff:4d:0b:6f:e3:6e:b1:71:b6:a4:4a:e9:06:a5:3a:30:
         e2:a5:55:05:c9:b1:fa:9c:4a:71:41:36:8f:76:6f:d5:9e:40:
         44:0b:5d:86:36:65:5c:6b:cb:26:88:e2:94:18:78:44:ef:db:
         c0:ee:6a:f9:72:87:da:a2:76:e4:05:b8:64:c2:2c:88:ac:58:
         45:c4:5a:32:06:5d:3d:23:3a:b6:62:ff:cc:ef:5e:a4:15:b2:
         74:9e:7e:f7:b6:f2:7a:12:70:e4:3b:15:08:06:ab:81:5d:1f:
         a2:88:9d:71:3b:10:09:c1:a4:20:e4:7f:8b:c7:9d:67:a2:a2:
         81:83:85:fa:7f:47:1f:ff:2b:13:82:61:f7:81:0b:e4:36:3c:
         00:39:ff:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK0mzxfIYvsIgwz33TChXu//WSeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIyNjI1NTYzRDVDNzc2QUZEOTFGQzcyNjcxMTMxNTI2
MDVGMjk5RDAeFw0yNjA5MjIxMzI5MjFaFw0yNzA5MjExMzM0MjFaMDMxMTAvBgNV
BAMTKDZERTEyNTY4RDAxQ0I4MTE2NUE3OEI0NkRENTExQjhDNDQ1MjdFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDns288D+CnlBwtWlH8Dr3Y6iN1
bC4taM+MzXLktsXCoGHtKxsGU4zFgp5EjfUHFzyjXVgI8xW5UJdmIHh9dV1TxzUs
VXAKuwTy2ku/sWv3P9O4uDALKpS/VO6gSqlcbsXJaCbF4erZz38RPI3kFP/GFyp+
DP+sS4VzzvxZO4B8mnERn0V21EnmZZ4IyGE3lxkL1JpWsLBXVo1gGKgVQJbQvg5Y
8MXBLRL+gMeMQO8LmwvqTupmDcVYfJDgs+7lSwFm6IbrqzA9dNN32hFCtQq4IMjC
HezMgdJ5T13QWeBsJ+Fnyyne/zR3TG9ZUzJUS0rCzH6NR7lGB4dv8ZeuBHfJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbeElaNAcuBFlp4tG3VEbjERSflkwHwYDVR0j
BBgwFoAUQiYlVj1cd2r9kfxyZxExUmBfKZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG
TU4vMC80MjI2MjU1NjNENUM3NzZBRkQ5MUZDNzI2NzExMzE1MjYwNUYyOTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMjYyNTU2M0Q1Qzc3NkFG
RDkxRkM3MjY3MTEzMTUyNjA1RjI5OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDWHZGVVl2ODQ3TThLTkFIRkRKaW91VHFKQnQyVlFOcW1FTlRxTXhYRk1OLzAv
MzQzNTJlMzEzNjMxMmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaFgMA0GCSqGSIb3DQEBCwUAA4IBAQBSz0uL0IWO
a088Gy8VuRHcF3FiT0kT1gcNjRanGha9lz4OViSc5jqp6unRvjPcCE+3E+SWspEp
PGECtzHE5m7mYgrxXp/yerCUYFVOG9uPR4FsCJqC18/Ig5TNw8mXTUAOWKo1y9Lz
Ez/XgSsIyP9NC2/jbrFxtqRK6QalOjDipVUFybH6nEpxQTaPdm/VnkBEC12GNmVc
a8smiOKUGHhE79vA7mr5cofaonbkBbhkwiyIrFhFxFoyBl09Izq2Yv/M716kFbJ0
nn73tvJ6EnDkOxUIBquBXR+iiJ1xOxAJwaQg5H+Lx51noqKBg4X6f0cf/ysTgmH3
gQvkNjwAOf/W
-----END CERTIFICATE-----
Generated at Wed Oct 14 18:11:04 2026 by rpki-client