Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
File:                     34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa (raw, json)
Hash identifier:          lK6H0MBJdx6ee8fI47mHeANRMQseVbcmsnfVVnMILmw=
Subject key identifier:   19:02:47:DF:F7:94:B0:26:98:61:5B:AC:0B:F2:3B:0E:5C:3D:FE:ED
Certificate issuer:       /CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
Certificate serial:       1DBD96403E13C96F503B78584EFCC669EB874C14
Authority key identifier: 22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa
Signing time:             Thu 17 Sep 2026 01:31:22 +0000
ROA not before:           Thu 17 Sep 2026 01:26:22 +0000
ROA not after:            Thu 16 Sep 2027 01:31:22 +0000
asID:                     268360
IP address blocks:        45.238.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl
                          rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 15:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bd:96:40:3e:13:c9:6f:50:3b:78:58:4e:fc:c6:69:eb:87:4c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2282EBAD824556FEB9D1B0FA380BC1AB9CED0627
        Validity
            Not Before: Sep 17 01:26:22 2026 GMT
            Not After : Sep 16 01:31:22 2027 GMT
        Subject: CN=190247DFF794B02698615BAC0BF23B0E5C3DFEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:09:41:c9:54:7d:de:a1:d6:e9:46:be:77:
                    3b:00:d3:96:d4:9e:96:a4:b3:ce:77:4f:75:01:85:
                    2b:88:d5:b9:f6:53:4c:6c:16:a5:4c:dd:38:bd:60:
                    dd:42:59:69:d4:cf:b6:03:da:7d:a7:72:a0:a6:9e:
                    1c:48:88:f1:ff:de:b2:72:48:f6:e7:8e:25:f6:1e:
                    2e:ee:b4:4a:d4:68:b1:1a:62:95:f3:48:8f:33:9f:
                    d7:34:75:8b:a4:be:1b:32:85:39:81:45:48:6a:8d:
                    72:20:ad:f4:70:06:e1:84:56:79:bf:d4:f8:fa:44:
                    44:31:36:f0:8c:47:ab:39:b3:2e:eb:6b:9e:4d:b4:
                    dd:14:89:1e:7d:75:8b:75:d5:b6:5f:a2:78:02:fd:
                    a2:55:f4:fb:f8:b1:dc:bf:31:c2:46:33:57:f4:99:
                    71:a5:5d:3e:93:36:6a:57:7a:3c:a7:de:e9:1e:3c:
                    81:5f:e8:82:91:29:06:2a:8c:e7:63:7c:a7:6c:cb:
                    49:c4:ab:1a:e7:2b:4b:0b:c2:82:df:70:e0:f3:e1:
                    ab:7f:ec:13:f9:1d:68:d7:49:7a:83:e2:c4:81:86:
                    51:94:11:15:bb:7f:a4:89:c7:e7:81:d2:70:62:9d:
                    2a:c3:93:e3:ed:f1:fa:9d:ed:f3:43:11:9e:c2:2b:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:02:47:DF:F7:94:B0:26:98:61:5B:AC:0B:F2:3B:0E:5C:3D:FE:ED
            X509v3 Authority Key Identifier:
                keyid:22:82:EB:AD:82:45:56:FE:B9:D1:B0:FA:38:0B:C1:AB:9C:ED:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2282EBAD824556FEB9D1B0FA380BC1AB9CED0627.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RHJpc7fhDLLuJTQrQh5GgFA3VacBhVwbinZMVtdWYrE/0/34352e3233382e3230302e302f32322d3234203d3e20323638333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:b0:0e:14:12:92:67:33:e8:ce:59:9e:38:a5:d4:d3:f6:cd:
         14:58:a6:ab:9b:ed:7a:c6:6c:ed:18:ff:e0:db:54:43:b0:fe:
         b9:c5:21:06:a0:e3:eb:ff:d0:db:5b:42:1a:ae:c0:b7:ef:27:
         69:62:ee:a6:0b:73:e3:3a:66:c4:be:3a:aa:48:56:40:f9:44:
         5c:d6:7d:09:14:f6:8c:a5:44:92:cb:a7:f9:50:a4:a9:f0:ce:
         7a:83:dc:5a:b2:dd:9b:20:5f:f6:ed:6c:51:1e:a2:20:59:8e:
         2b:01:36:a7:2d:76:84:18:13:eb:f7:1b:fe:d2:b9:6e:d4:e5:
         e7:3f:79:79:65:8c:a3:21:73:51:57:47:bf:a0:57:39:d4:10:
         e6:e0:83:15:0f:d6:91:dd:85:e2:f4:a8:b6:d6:c0:1e:ff:a0:
         61:da:b4:13:08:e1:b2:e8:d8:3b:d4:8c:c0:0f:64:04:95:60:
         6e:ad:fa:db:dc:08:75:1e:6c:98:15:1c:8f:2f:7c:70:8d:e0:
         ca:54:ac:87:ce:65:03:a3:c0:69:7e:f2:ce:b5:d7:09:e5:4a:
         bf:9e:cf:c4:1c:78:68:10:e6:f9:75:be:d0:9c:32:a3:ef:42:
         3e:c5:81:0c:8c:b0:46:44:45:c3:a5:f4:6b:46:43:a2:54:34:
         25:96:79:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHb2WQD4TyW9QO3hYTvzGaeuHTBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4MkVCQUQ4MjQ1NTZGRUI5RDFCMEZBMzgwQkMxQUI5
Q0VEMDYyNzAeFw0yNjA5MTcwMTI2MjJaFw0yNzA5MTYwMTMxMjJaMDMxMTAvBgNV
BAMTKDE5MDI0N0RGRjc5NEIwMjY5ODYxNUJBQzBCRjIzQjBFNUMzREZFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aAlByVR93qHW6Ua+dzsA05bU
npaks853T3UBhSuI1bn2U0xsFqVM3Ti9YN1CWWnUz7YD2n2ncqCmnhxIiPH/3rJy
SPbnjiX2Hi7utErUaLEaYpXzSI8zn9c0dYukvhsyhTmBRUhqjXIgrfRwBuGEVnm/
1Pj6REQxNvCMR6s5sy7ra55NtN0UiR59dYt11bZfongC/aJV9Pv4sdy/McJGM1f0
mXGlXT6TNmpXejyn3ukePIFf6IKRKQYqjOdjfKdsy0nEqxrnK0sLwoLfcODz4at/
7BP5HWjXSXqD4sSBhlGUERW7f6SJx+eB0nBinSrDk+Pt8fqd7fNDEZ7CK9/LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGQJH3/eUsCaYYVusC/I7Dlw9/u0wHwYDVR0j
BBgwFoAUIoLrrYJFVv650bD6OAvBq5ztBicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJISnBjN2ZoRExMdUpUUXJRaDVHZ0ZBM1ZhY0JoVndiaW5aTVZ0ZFdZ
ckUvMC8yMjgyRUJBRDgyNDU1NkZFQjlEMUIwRkEzODBCQzFBQjlDRUQwNjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyODJFQkFEODI0NTU2RkVC
OUQxQjBGQTM4MEJDMUFCOUNFRDA2MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSSEpwYzdmaERMTHVKVFFyUWg1R2dGQTNWYWNCaFZ3YmluWk1WdGRXWXJFLzAv
MzQzNTJlMzIzMzM4MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7sgwDQYJKoZIhvcNAQELBQADggEBAK2wDhQS
kmcz6M5Znjil1NP2zRRYpqub7XrGbO0Y/+DbVEOw/rnFIQag4+v/0NtbQhquwLfv
J2li7qYLc+M6ZsS+OqpIVkD5RFzWfQkU9oylRJLLp/lQpKnwznqD3Fqy3ZsgX/bt
bFEeoiBZjisBNqctdoQYE+v3G/7SuW7U5ec/eXlljKMhc1FXR7+gVznUEObggxUP
1pHdheL0qLbWwB7/oGHatBMI4bLo2DvUjMAPZASVYG6t+tvcCHUebJgVHI8vfHCN
4MpUrIfOZQOjwGl+8s611wnlSr+ez8QceGgQ5vl1vtCcMqPvQj7FgQyMsEZERcOl
9GtGQ6JUNCWWef8=
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:52:17 2026 by rpki-client