Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3233203d3e20323638373633.roa
File:                     34352e3137322e3130342e302f32322d3233203d3e20323638373633.roa (raw, json)
Hash identifier:          P1zWXSpiWx61+FiYIewL9cZQg7Axs6gPiERC5imMFYo=
Subject key identifier:   C6:7F:79:CB:A6:06:01:48:48:2B:B9:20:44:AB:1E:16:9D:B7:AF:AD
Certificate issuer:       /CN=9FF6257C8058D8893E09E1ED1203A54463A36192
Certificate serial:       618901A9A5E4A9DF7D404C232C771FAFAB2AD029
Authority key identifier: 9F:F6:25:7C:80:58:D8:89:3E:09:E1:ED:12:03:A5:44:63:A3:61:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FF6257C8058D8893E09E1ED1203A54463A36192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3233203d3e20323638373633.roa
Signing time:             Tue 01 Sep 2026 01:03:54 +0000
ROA not before:           Tue 01 Sep 2026 00:58:54 +0000
ROA not after:            Tue 31 Aug 2027 01:03:54 +0000
asID:                     268763
IP address blocks:        45.172.104.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/9FF6257C8058D8893E09E1ED1203A54463A36192.crl
                          rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/9FF6257C8058D8893E09E1ED1203A54463A36192.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FF6257C8058D8893E09E1ED1203A54463A36192.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:89:01:a9:a5:e4:a9:df:7d:40:4c:23:2c:77:1f:af:ab:2a:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FF6257C8058D8893E09E1ED1203A54463A36192
        Validity
            Not Before: Sep  1 00:58:54 2026 GMT
            Not After : Aug 31 01:03:54 2027 GMT
        Subject: CN=C67F79CBA6060148482BB92044AB1E169DB7AFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:cc:44:83:00:14:38:45:9e:52:c2:95:fb:
                    47:f5:59:83:f7:d0:9e:0a:0a:09:39:91:34:3f:8f:
                    04:6a:0f:85:7a:90:80:91:bc:a9:7d:1d:cf:51:06:
                    6c:ae:f8:6d:0c:53:98:27:92:de:08:f3:3e:b4:d2:
                    e2:e7:ea:7b:1b:67:4d:32:5c:18:d0:48:87:67:d2:
                    1a:4d:9d:90:08:27:31:93:0c:3c:be:ee:f7:d6:0a:
                    86:a0:96:18:30:ae:27:4e:c9:fe:0a:9b:ba:ea:fb:
                    b3:ea:97:51:16:63:c3:70:76:8e:23:81:94:7b:a9:
                    16:19:08:9f:48:4c:55:9f:bd:d0:04:4e:84:8d:6a:
                    67:2b:4c:37:11:8b:a6:af:79:99:0a:42:6c:4e:3f:
                    05:2b:49:64:2b:12:d7:69:66:7c:e9:c7:c4:56:c8:
                    46:88:e5:cc:52:5d:20:d3:16:52:c3:63:18:9d:67:
                    ac:02:bb:84:d8:c7:e5:43:8c:3a:9e:34:86:1e:cc:
                    39:ee:1e:58:2f:f2:28:2a:9e:75:48:00:24:88:95:
                    80:de:4b:62:3e:0a:e3:9a:37:11:ea:b2:b5:43:39:
                    31:e0:66:37:c5:24:c0:a9:6d:ff:24:5a:b8:20:ea:
                    46:01:be:e9:50:d9:ef:99:5f:0c:a5:d1:62:ba:6b:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:79:CB:A6:06:01:48:48:2B:B9:20:44:AB:1E:16:9D:B7:AF:AD
            X509v3 Authority Key Identifier:
                keyid:9F:F6:25:7C:80:58:D8:89:3E:09:E1:ED:12:03:A5:44:63:A3:61:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/9FF6257C8058D8893E09E1ED1203A54463A36192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FF6257C8058D8893E09E1ED1203A54463A36192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EbBijx4WC4fwVo7GzPikXEukzrwetXi1VRoBhrZiBpi/0/34352e3137322e3130342e302f32322d3233203d3e20323638373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:31:7f:9d:a1:95:35:6d:50:1c:86:5a:57:d0:0e:a8:5b:91:
         ed:96:1e:48:d3:f7:6c:c7:9b:53:24:3e:4a:fc:b7:f9:2b:01:
         87:26:90:ee:e6:29:c6:82:55:fd:3d:f7:48:7f:6d:6b:24:01:
         c6:3d:e9:83:53:d5:e9:4e:d7:f0:a4:2a:ec:0f:27:24:61:27:
         66:b5:ab:33:24:d4:4d:84:29:d0:42:ee:60:87:aa:25:a3:f2:
         34:1f:cf:74:73:2b:2e:71:c8:9e:4d:c9:81:30:b9:ed:44:ad:
         aa:63:26:a1:58:f0:06:4a:20:f7:b8:18:84:f9:ec:60:a0:88:
         86:34:28:25:02:8e:02:10:d9:f3:57:74:1a:5c:24:1e:0e:f0:
         96:1a:61:16:fd:0f:48:5b:f5:27:b6:62:7e:d2:47:70:d2:f0:
         a0:b8:28:19:27:c5:c3:71:87:61:b7:9f:08:78:6c:ef:a9:05:
         ac:02:dd:1f:fc:c3:15:27:68:34:fa:92:ce:2e:21:29:33:cf:
         95:33:39:67:0d:ee:e1:4a:74:5a:be:10:1b:38:1a:6e:45:0f:
         7b:69:f5:24:81:8a:a2:45:30:af:63:6f:b5:0e:f3:85:3c:0f:
         38:05:58:2d:9a:0c:34:87:24:36:5a:3a:e9:ee:d6:a9:c6:51:
         34:4a:ee:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYYkBqaXkqd99QEwjLHcfr6sq0CkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZGNjI1N0M4MDU4RDg4OTNFMDlFMUVEMTIwM0E1NDQ2
M0EzNjE5MjAeFw0yNjA5MDEwMDU4NTRaFw0yNzA4MzEwMTAzNTRaMDMxMTAvBgNV
BAMTKEM2N0Y3OUNCQTYwNjAxNDg0ODJCQjkyMDQ0QUIxRTE2OURCN0FGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmycxEgwAUOEWeUsKV+0f1WYP3
0J4KCgk5kTQ/jwRqD4V6kICRvKl9Hc9RBmyu+G0MU5gnkt4I8z600uLn6nsbZ00y
XBjQSIdn0hpNnZAIJzGTDDy+7vfWCoaglhgwridOyf4Km7rq+7Pql1EWY8Nwdo4j
gZR7qRYZCJ9ITFWfvdAEToSNamcrTDcRi6aveZkKQmxOPwUrSWQrEtdpZnzpx8RW
yEaI5cxSXSDTFlLDYxidZ6wCu4TYx+VDjDqeNIYezDnuHlgv8igqnnVIACSIlYDe
S2I+CuOaNxHqsrVDOTHgZjfFJMCpbf8kWrgg6kYBvulQ2e+ZXwyl0WK6a9adAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxn95y6YGAUhIK7kgRKseFp23r60wHwYDVR0j
BBgwFoAUn/YlfIBY2Ik+CeHtEgOlRGOjYZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEViQmlqeDRXQzRmd1ZvN0d6UGlrWEV1a3pyd2V0WGkxVlJvQmhyWmlC
cGkvMC85RkY2MjU3QzgwNThEODg5M0UwOUUxRUQxMjAzQTU0NDYzQTM2MTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGRjYyNTdDODA1OEQ4ODkz
RTA5RTFFRDEyMDNBNTQ0NjNBMzYxOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFYkJpang0V0M0ZndWbzdHelBpa1hFdWt6cndldFhpMVZSb0JoclppQnBpLzAv
MzQzNTJlMzEzNzMyMmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNzM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrGgwDQYJKoZIhvcNAQELBQADggEBAA0xf52h
lTVtUByGWlfQDqhbke2WHkjT92zHm1MkPkr8t/krAYcmkO7mKcaCVf0990h/bWsk
AcY96YNT1elO1/CkKuwPJyRhJ2a1qzMk1E2EKdBC7mCHqiWj8jQfz3RzKy5xyJ5N
yYEwue1ErapjJqFY8AZKIPe4GIT57GCgiIY0KCUCjgIQ2fNXdBpcJB4O8JYaYRb9
D0hb9Se2Yn7SR3DS8KC4KBknxcNxh2G3nwh4bO+pBawC3R/8wxUnaDT6ks4uISkz
z5UzOWcN7uFKdFq+EBs4Gm5FD3tp9SSBiqJFMK9jb7UO84U8DzgFWC2aDDSHJDZa
Ounu1qnGUTRK7kI=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:25 2026 by rpki-client