Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32322d3332203d3e20323639373034.roa
File:                     34352e3139312e3130342e302f32322d3332203d3e20323639373034.roa (raw, json)
Hash identifier:          zagsM9KDt8mIrMhJMbDjPQJzokoVr4DLP8gD/Y6RHaM=
Subject key identifier:   C9:9D:F0:57:59:73:8C:14:18:B4:37:4E:FA:FF:04:CF:CF:A4:E1:10
Certificate issuer:       /CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
Certificate serial:       03C56FCF6C292EC06094EADFAE744F319AAE693B
Authority key identifier: C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32322d3332203d3e20323639373034.roa
Signing time:             Mon 04 May 2026 20:25:25 +0000
ROA not before:           Mon 04 May 2026 20:20:25 +0000
ROA not after:            Mon 03 May 2027 20:25:25 +0000
asID:                     269704
IP address blocks:        45.191.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl
                          rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:6f:cf:6c:29:2e:c0:60:94:ea:df:ae:74:4f:31:9a:ae:69:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C86C47FC39E808F8CF5C00C62D57D80858C738
        Validity
            Not Before: May  4 20:20:25 2026 GMT
            Not After : May  3 20:25:25 2027 GMT
        Subject: CN=C99DF05759738C1418B4374EFAFF04CFCFA4E110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:10:fd:28:da:a0:cc:1d:fe:42:2a:6b:c6:
                    51:20:f5:e5:1c:7f:41:1b:76:1b:aa:0a:28:0d:f0:
                    71:3a:b8:fa:3b:38:13:eb:ed:44:b7:ff:db:50:0a:
                    b9:d2:32:de:a5:0a:6a:63:ab:c6:8a:4b:06:f6:89:
                    d7:dd:4e:94:fc:3b:3c:60:43:f1:d4:99:41:01:46:
                    70:aa:8b:60:ae:95:3c:f3:54:84:fc:aa:fa:52:28:
                    23:40:20:61:d5:e1:58:da:e9:e8:63:ac:06:94:11:
                    49:4d:1e:d2:01:f0:a0:42:df:9b:f2:c0:65:2b:34:
                    3f:cd:5a:7f:89:27:22:47:22:e4:43:ac:12:88:82:
                    42:b0:6a:32:a9:45:c6:81:5d:b3:c4:88:b6:91:e3:
                    06:68:40:ff:20:8e:3a:5b:57:80:ac:4a:85:f8:f9:
                    13:6e:72:01:07:8d:1a:e0:87:89:60:c0:f5:ee:44:
                    fa:07:51:5b:74:7d:cd:fa:83:25:7d:b9:5c:a5:52:
                    45:e9:7a:a3:a7:90:89:ae:70:76:f6:d2:d9:db:b7:
                    59:67:81:d3:8e:0f:db:3b:1e:b5:47:3d:80:a9:a3:
                    5c:5c:b0:f6:14:e0:81:33:a6:01:a1:f9:48:c7:1e:
                    ea:11:60:26:ac:6f:42:06:cd:e9:e2:7f:eb:08:3d:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:F0:57:59:73:8C:14:18:B4:37:4E:FA:FF:04:CF:CF:A4:E1:10
            X509v3 Authority Key Identifier:
                keyid:C2:C8:6C:47:FC:39:E8:08:F8:CF:5C:00:C6:2D:57:D8:08:58:C7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/C2C86C47FC39E808F8CF5C00C62D57D80858C738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C86C47FC39E808F8CF5C00C62D57D80858C738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/0/34352e3139312e3130342e302f32322d3332203d3e20323639373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:33:b5:59:6e:45:da:2e:0e:68:7c:c5:78:b0:a0:4c:b2:aa:
         a6:99:6c:8e:b4:55:51:71:44:5c:a7:94:e6:71:47:46:ba:a7:
         bc:ac:05:fc:ea:97:38:ff:9e:aa:c3:7e:3a:a4:b0:f4:51:ae:
         11:b7:bc:c1:b9:26:ac:52:61:24:9e:65:86:a8:f2:15:45:9a:
         da:76:0e:6c:70:11:84:c2:39:fb:c1:8a:ca:b2:08:02:8b:15:
         91:87:1e:68:c0:aa:f7:e0:51:82:84:8f:da:a9:08:6b:cd:cc:
         3c:b8:57:7b:6b:9c:b9:b0:63:d3:ec:f3:6d:bd:c5:7e:90:bd:
         3d:ba:42:52:da:a9:a3:68:df:9e:a3:39:66:ee:a8:25:29:76:
         f0:03:8e:e7:98:8a:3e:16:f5:6c:27:9d:13:45:2c:00:0e:4a:
         27:db:97:c1:75:fb:d7:51:98:19:06:bd:84:bf:5b:11:39:4e:
         1e:39:36:16:d6:22:e4:21:fe:57:e3:34:a1:fb:3e:1b:b1:17:
         74:cc:65:ef:ea:dc:49:65:58:21:07:31:11:aa:cf:ed:f9:58:
         25:9d:b6:c7:f2:00:7f:20:21:b3:f3:63:a8:7f:b4:bb:9b:8d:
         34:4f:b9:6f:ed:f3:4c:6a:ae:93:c4:b5:82:39:d6:25:60:46:
         3e:ba:50:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA8Vvz2wpLsBglOrfrnRPMZquaTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDODZDNDdGQzM5RTgwOEY4Q0Y1QzAwQzYyRDU3RDgw
ODU4QzczODAeFw0yNjA1MDQyMDIwMjVaFw0yNzA1MDMyMDI1MjVaMDMxMTAvBgNV
BAMTKEM5OURGMDU3NTk3MzhDMTQxOEI0Mzc0RUZBRkYwNENGQ0ZBNEUxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmRD9KNqgzB3+QiprxlEg9eUc
f0EbdhuqCigN8HE6uPo7OBPr7US3/9tQCrnSMt6lCmpjq8aKSwb2idfdTpT8Ozxg
Q/HUmUEBRnCqi2CulTzzVIT8qvpSKCNAIGHV4Vja6ehjrAaUEUlNHtIB8KBC35vy
wGUrND/NWn+JJyJHIuRDrBKIgkKwajKpRcaBXbPEiLaR4wZoQP8gjjpbV4CsSoX4
+RNucgEHjRrgh4lgwPXuRPoHUVt0fc36gyV9uVylUkXpeqOnkImucHb20tnbt1ln
gdOOD9s7HrVHPYCpo1xcsPYU4IEzpgGh+UjHHuoRYCasb0IGzenif+sIPbLRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyZ3wV1lzjBQYtDdO+v8Ez8+k4RAwHwYDVR0j
BBgwFoAUwshsR/w56Aj4z1wAxi1X2AhYxzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1pyaWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZ
Y0EvMC9DMkM4NkM0N0ZDMzlFODA4RjhDRjVDMDBDNjJENTdEODA4NThDNzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyQzg2QzQ3RkMzOUU4MDhG
OENGNUMwMEM2MkQ1N0Q4MDg1OEM3MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNacmlrYTFxVVVQa0VmaTVZTlBWcUY1ZDNZamZmV3YyTmdLRVZzZDJIWWNBLzAv
MzQzNTJlMzEzOTMxMmUzMTMwMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItv2gwDQYJKoZIhvcNAQELBQADggEBABIztVlu
RdouDmh8xXiwoEyyqqaZbI60VVFxRFynlOZxR0a6p7ysBfzqlzj/nqrDfjqksPRR
rhG3vMG5JqxSYSSeZYao8hVFmtp2DmxwEYTCOfvBisqyCAKLFZGHHmjAqvfgUYKE
j9qpCGvNzDy4V3trnLmwY9Ps8229xX6QvT26QlLaqaNo356jOWbuqCUpdvADjueY
ij4W9WwnnRNFLAAOSifbl8F1+9dRmBkGvYS/WxE5Th45NhbWIuQh/lfjNKH7Phux
F3TMZe/q3EllWCEHMRGqz+35WCWdtsfyAH8gIbPzY6h/tLubjTRPuW/t80xqrpPE
tYI51iVgRj66UFc=
-----END CERTIFICATE-----
Generated at Wed May 13 20:57:37 2026 by rpki-client