Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          jME0cLTP3p8O66C2uBRUmhuuVoakQkAsVi7Vk3gpIyA=
Subject key identifier:   46:E3:7B:F4:CF:63:E2:6F:54:A8:57:E3:35:A7:79:EB:24:DB:34:C0
Certificate issuer:       /CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
Certificate serial:       43EA6641E42C171BBC834F253C8EA9BDF9D90B19
Authority key identifier: AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa
Signing time:             Wed 22 Apr 2026 20:42:55 +0000
ROA not before:           Wed 22 Apr 2026 20:37:55 +0000
ROA not after:            Wed 21 Apr 2027 20:42:55 +0000
asID:                     269595
IP address blocks:        45.188.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:66:41:e4:2c:17:1b:bc:83:4f:25:3c:8e:a9:bd:f9:d9:0b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD81180ED014F2365CDAF7461678A5A8D2038CFA
        Validity
            Not Before: Apr 22 20:37:55 2026 GMT
            Not After : Apr 21 20:42:55 2027 GMT
        Subject: CN=46E37BF4CF63E26F54A857E335A779EB24DB34C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:29:df:c1:27:dd:df:57:8a:50:25:4d:27:
                    0e:81:3a:ae:7b:25:09:3c:9e:f1:e9:f8:12:5f:33:
                    66:4d:80:f8:3b:ca:84:62:aa:23:93:eb:1a:68:97:
                    ac:da:16:cc:67:0f:c6:42:b9:2f:73:2b:76:7a:f3:
                    3c:3b:ef:60:1f:7a:ce:cf:24:11:d7:d3:2f:c0:a6:
                    ea:77:4e:87:f4:70:02:9d:80:a3:3c:b4:37:1f:c5:
                    1c:19:f9:06:ce:bd:9b:87:a3:58:d6:f7:4d:a9:0a:
                    d4:7a:3f:36:bf:50:9f:8a:e1:8e:68:4e:b6:16:31:
                    8e:2f:ec:1c:56:b8:63:ce:c2:c2:af:90:8f:0d:fb:
                    c9:d0:2b:34:9e:75:93:8b:c6:54:bd:dd:44:b4:6b:
                    de:e0:a9:05:20:66:c2:d6:5f:b7:b9:64:c7:38:88:
                    b6:78:d0:66:84:82:ff:5e:b7:80:52:69:40:0e:3e:
                    b8:b9:d8:18:73:77:63:8c:cc:2b:9d:3b:17:8a:20:
                    2f:e8:04:cb:71:af:68:2c:f6:4d:b9:b9:ed:16:b5:
                    48:5c:ab:b4:1e:dd:42:e5:9d:8a:cf:20:33:99:6a:
                    47:7e:34:e9:3b:24:07:73:d9:fb:e5:d3:b0:d0:61:
                    e9:ac:4c:d7:c3:6a:8d:31:11:aa:d3:aa:d8:d7:5b:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E3:7B:F4:CF:63:E2:6F:54:A8:57:E3:35:A7:79:EB:24:DB:34:C0
            X509v3 Authority Key Identifier:
                keyid:AD:81:18:0E:D0:14:F2:36:5C:DA:F7:46:16:78:A5:A8:D2:03:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/AD81180ED014F2365CDAF7461678A5A8D2038CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD81180ED014F2365CDAF7461678A5A8D2038CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233392e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1f:4a:cd:6c:c1:f7:74:1b:89:bf:58:bb:fc:b4:72:4f:54:
         f3:b1:45:17:ba:5a:3c:d1:f7:6a:1e:0f:1d:3a:00:6d:30:db:
         b9:c7:a0:b9:d6:92:02:02:24:42:03:94:9f:20:3c:ca:2f:20:
         44:0c:45:03:58:f2:8e:4a:33:28:45:ee:a7:81:b1:e7:9b:11:
         3c:50:b6:a5:c6:36:62:32:37:86:b6:99:2a:30:f2:4b:a3:c3:
         bf:89:45:04:ed:42:3e:20:fa:5f:87:a7:54:d0:6d:6f:65:de:
         dd:b5:39:69:03:73:df:6b:b5:39:5f:9a:c8:25:5a:a9:b8:8c:
         cc:25:06:4b:7c:56:63:7f:3a:78:9f:28:dd:a2:ec:19:1a:02:
         3e:ae:94:f9:d2:29:73:55:37:d1:05:e5:10:f1:f5:82:bd:19:
         2b:bb:76:f5:00:09:f8:2c:7a:17:03:90:85:c2:52:a9:45:77:
         60:92:c1:80:9e:24:20:dc:38:36:37:dd:7f:41:f6:c2:9a:96:
         cf:d6:93:1d:c7:0a:3d:41:e1:26:89:77:ee:28:ff:78:be:7f:
         26:4f:d7:c4:b0:97:cf:d1:e1:ca:f0:70:1a:77:d2:5f:4f:64:
         ca:be:25:7f:16:4a:4d:5d:c7:26:9c:73:e2:bd:f1:ea:13:f8:
         f7:f5:ab:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ+pmQeQsFxu8g08lPI6pvfnZCxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ4MTE4MEVEMDE0RjIzNjVDREFGNzQ2MTY3OEE1QThE
MjAzOENGQTAeFw0yNjA0MjIyMDM3NTVaFw0yNzA0MjEyMDQyNTVaMDMxMTAvBgNV
BAMTKDQ2RTM3QkY0Q0Y2M0UyNkY1NEE4NTdFMzM1QTc3OUVCMjREQjM0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLCnfwSfd31eKUCVNJw6BOq57
JQk8nvHp+BJfM2ZNgPg7yoRiqiOT6xpol6zaFsxnD8ZCuS9zK3Z68zw772Afes7P
JBHX0y/Apup3Tof0cAKdgKM8tDcfxRwZ+QbOvZuHo1jW902pCtR6Pza/UJ+K4Y5o
TrYWMY4v7BxWuGPOwsKvkI8N+8nQKzSedZOLxlS93US0a97gqQUgZsLWX7e5ZMc4
iLZ40GaEgv9et4BSaUAOPri52Bhzd2OMzCudOxeKIC/oBMtxr2gs9k25ue0WtUhc
q7Qe3ULlnYrPIDOZakd+NOk7JAdz2fvl07DQYemsTNfDao0xEarTqtjXWxZhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURuN79M9j4m9UqFfjNad56yTbNMAwHwYDVR0j
BBgwFoAUrYEYDtAU8jZc2vdGFnilqNIDjPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdEQ2lyZ2hRdkJhSlg5cldrSzF3UlBnNUE2UXI5N281QmRKYlFUbVlk
UDYvMC9BRDgxMTgwRUQwMTRGMjM2NUNEQUY3NDYxNjc4QTVBOEQyMDM4Q0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEODExODBFRDAxNEYyMzY1
Q0RBRjc0NjE2NzhBNUE4RDIwMzhDRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHRENpcmdoUXZCYUpYOXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzAv
MzQzNTJlMzEzODM4MmUzMjMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvO8wDQYJKoZIhvcNAQELBQADggEBAF8fSs1s
wfd0G4m/WLv8tHJPVPOxRRe6WjzR92oeDx06AG0w27nHoLnWkgICJEIDlJ8gPMov
IEQMRQNY8o5KMyhF7qeBseebETxQtqXGNmIyN4a2mSow8kujw7+JRQTtQj4g+l+H
p1TQbW9l3t21OWkDc99rtTlfmsglWqm4jMwlBkt8VmN/OnifKN2i7BkaAj6ulPnS
KXNVN9EF5RDx9YK9GSu7dvUACfgsehcDkIXCUqlFd2CSwYCeJCDcODY33X9B9sKa
ls/Wkx3HCj1B4SaJd+4o/3i+fyZP18Swl8/R4crwcBp30l9PZMq+JX8WSk1dxyac
c+K98eoT+Pf1qw0=
-----END CERTIFICATE-----
Generated at Wed May 13 18:52:36 2026 by rpki-client