Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136322e38372e302f32342d3234203d3e20323732343336.roa
File:                     34352e3136322e38372e302f32342d3234203d3e20323732343336.roa (raw, json)
Hash identifier:          zHMEVhb4HbCNFMWdGJ/1rB/njvFJL1tkTjCK1hCP9QM=
Subject key identifier:   35:31:31:3B:92:8D:8D:44:7E:E5:75:9F:69:DB:89:23:24:E0:10:07
Certificate issuer:       /CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
Certificate serial:       15C705599B7C94BD1565F941F1CBB466EFD6DF53
Authority key identifier: 25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136322e38372e302f32342d3234203d3e20323732343336.roa
Signing time:             Tue 24 Mar 2026 00:04:39 +0000
ROA not before:           Mon 23 Mar 2026 23:59:39 +0000
ROA not after:            Tue 23 Mar 2027 00:04:39 +0000
asID:                     272436
IP address blocks:        45.162.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl
                          rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:05:59:9b:7c:94:bd:15:65:f9:41:f1:cb:b4:66:ef:d6:df:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4
        Validity
            Not Before: Mar 23 23:59:39 2026 GMT
            Not After : Mar 23 00:04:39 2027 GMT
        Subject: CN=3531313B928D8D447EE5759F69DB892324E01007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:88:27:96:34:fd:6d:4d:73:c8:bc:c1:0a:8a:
                    8a:3f:67:73:10:64:ee:fe:75:5f:e1:61:bc:a7:51:
                    7d:e9:5c:40:92:a8:13:ae:6f:f8:7d:b6:d6:33:f1:
                    b5:56:4c:41:ca:4a:be:b7:03:ce:b1:88:56:98:86:
                    0d:93:26:24:78:2e:e8:cc:65:42:9f:fe:1b:36:a1:
                    f7:1c:93:b9:2d:e7:81:f3:d7:3c:9e:24:86:71:0d:
                    ea:3e:b0:a0:43:24:7e:ab:e3:3c:9f:6c:da:7d:6c:
                    1f:28:a2:89:51:78:1d:3e:03:61:6b:dc:fe:09:6e:
                    2b:cf:ca:2c:fc:9e:24:04:41:51:72:b8:eb:c4:88:
                    f2:7f:91:ec:33:a9:23:ed:bf:14:9c:4b:18:b0:50:
                    40:5c:a6:00:a1:5f:53:f7:02:d1:90:43:42:99:08:
                    ba:69:cd:3f:99:6c:89:80:ea:d2:8a:d9:3f:1a:d2:
                    23:54:39:4d:43:22:f1:2d:9f:9b:f5:ec:63:3f:3e:
                    7c:fe:b4:85:94:9e:19:f7:36:1e:67:17:b2:7c:44:
                    86:57:70:62:d1:5c:28:e8:ab:f0:6f:54:ae:c7:43:
                    4a:53:d9:15:3d:8d:c8:c1:3a:90:16:75:91:c8:c7:
                    b8:66:4a:16:2c:b4:39:c5:75:46:cf:8e:de:8a:20:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:31:31:3B:92:8D:8D:44:7E:E5:75:9F:69:DB:89:23:24:E0:10:07
            X509v3 Authority Key Identifier:
                keyid:25:B6:4C:4B:D8:E8:30:CE:14:7F:6E:BC:47:19:9B:EA:E7:E6:3B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25B64C4BD8E830CE147F6EBC47199BEAE7E63BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22CHehGUxpdMhhPGg3uwC6x16Mdgr4B9iiN8H6dabxnK/0/34352e3136322e38372e302f32342d3234203d3e20323732343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:27:e8:b4:49:ce:f0:2b:83:a6:c6:11:ea:aa:8a:56:b6:af:
         19:87:46:0f:fe:b9:51:5b:39:f6:bc:11:b3:9a:06:28:b9:d2:
         ec:5c:cc:7b:d8:70:c9:a9:ec:08:ac:95:f4:fb:e5:b6:4f:a2:
         cd:8c:45:d2:7f:dd:bc:f3:77:6d:9c:17:92:a9:ec:ca:2b:bb:
         76:48:c7:9b:f1:11:08:2b:1e:b2:04:1d:50:1d:f2:74:fc:07:
         15:19:15:2d:86:4c:72:a6:f8:5e:a7:a7:bc:89:56:fb:ff:0d:
         2f:c3:f3:4c:c3:9f:4a:2f:94:30:b1:66:bc:54:98:e9:36:75:
         7d:d7:1d:28:62:96:9d:a0:fe:a4:48:98:88:d5:b4:d6:f8:7a:
         74:15:30:b8:20:58:97:ff:c5:2b:61:f0:53:e2:4a:60:58:26:
         78:ec:32:d3:1a:bc:5f:1b:a4:4f:1a:02:f5:77:d7:1e:96:02:
         1f:1a:89:5a:49:20:55:05:1b:64:85:85:ba:7d:92:ac:8e:2e:
         c3:a0:e9:1b:c9:08:ea:91:01:62:37:e0:0d:fd:b0:d4:75:4a:
         34:64:b6:e9:14:15:0a:80:c1:da:73:7b:fa:56:ab:4a:d1:62:
         e2:08:01:41:7e:f9:3c:f1:f5:b7:9b:2f:46:54:35:2f:75:b3:
         5c:08:61:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFccFWZt8lL0VZflB8cu0Zu/W31MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVCNjRDNEJEOEU4MzBDRTE0N0Y2RUJDNDcxOTlCRUFF
N0U2M0JCNDAeFw0yNjAzMjMyMzU5MzlaFw0yNzAzMjMwMDA0MzlaMDMxMTAvBgNV
BAMTKDM1MzEzMTNCOTI4RDhENDQ3RUU1NzU5RjY5REI4OTIzMjRFMDEwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJiCeWNP1tTXPIvMEKioo/Z3MQ
ZO7+dV/hYbynUX3pXECSqBOub/h9ttYz8bVWTEHKSr63A86xiFaYhg2TJiR4LujM
ZUKf/hs2ofcck7kt54Hz1zyeJIZxDeo+sKBDJH6r4zyfbNp9bB8ooolReB0+A2Fr
3P4JbivPyiz8niQEQVFyuOvEiPJ/kewzqSPtvxScSxiwUEBcpgChX1P3AtGQQ0KZ
CLppzT+ZbImA6tKK2T8a0iNUOU1DIvEtn5v17GM/Pnz+tIWUnhn3Nh5nF7J8RIZX
cGLRXCjoq/BvVK7HQ0pT2RU9jcjBOpAWdZHIx7hmShYstDnFdUbPjt6KIBTnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNTExO5KNjUR+5XWfaduJIyTgEAcwHwYDVR0j
BBgwFoAUJbZMS9joMM4Uf268Rxmb6ufmO7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJDSGVoR1V4cGRNaGhQR2czdXdDNngxNk1kZ3I0QjlpaU44SDZkYWJ4
bksvMC8yNUI2NEM0QkQ4RTgzMENFMTQ3RjZFQkM0NzE5OUJFQUU3RTYzQkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QjY0QzRCRDhFODMwQ0Ux
NDdGNkVCQzQ3MTk5QkVBRTdFNjNCQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIyQ0hlaEdVeHBkTWhoUEdnM3V3QzZ4MTZNZGdyNEI5aWlOOEg2ZGFieG5LLzAv
MzQzNTJlMzEzNjMyMmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaJXMA0GCSqGSIb3DQEBCwUAA4IBAQBWJ+i0Sc7w
K4OmxhHqqopWtq8Zh0YP/rlRWzn2vBGzmgYoudLsXMx72HDJqewIrJX0++W2T6LN
jEXSf92883dtnBeSqezKK7t2SMeb8REIKx6yBB1QHfJ0/AcVGRUthkxypvhep6e8
iVb7/w0vw/NMw59KL5QwsWa8VJjpNnV91x0oYpadoP6kSJiI1bTW+Hp0FTC4IFiX
/8UrYfBT4kpgWCZ47DLTGrxfG6RPGgL1d9celgIfGolaSSBVBRtkhYW6fZKsji7D
oOkbyQjqkQFiN+AN/bDUdUo0ZLbpFBUKgMHac3v6VqtK0WLiCAFBfvk88fW3my9G
VDUvdbNcCGHT
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:57 2026 by rpki-client