Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/34352e3138302e32382e302f32322d3234203d3e20323639313134.roa
File:                     34352e3138302e32382e302f32322d3234203d3e20323639313134.roa (raw, json)
Hash identifier:          6iR08oYFUlcfBJ6AUUeQG1kpEHhfIwRpIrLfBohCSW8=
Subject key identifier:   35:AE:F9:D8:A2:C3:B5:38:A3:0B:FB:BC:2C:E8:D7:39:A9:15:BC:DC
Certificate issuer:       /CN=468FA81CA7EA7737E96A534E0B0E4607D730A871
Certificate serial:       08F813057CB380BE624BEE97CE69C830304D0CC0
Authority key identifier: 46:8F:A8:1C:A7:EA:77:37:E9:6A:53:4E:0B:0E:46:07:D7:30:A8:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/468FA81CA7EA7737E96A534E0B0E4607D730A871.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/34352e3138302e32382e302f32322d3234203d3e20323639313134.roa
Signing time:             Thu 08 Oct 2026 18:12:10 +0000
ROA not before:           Thu 08 Oct 2026 18:07:10 +0000
ROA not after:            Thu 07 Oct 2027 18:12:10 +0000
asID:                     269114
IP address blocks:        45.180.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/468FA81CA7EA7737E96A534E0B0E4607D730A871.crl
                          rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/468FA81CA7EA7737E96A534E0B0E4607D730A871.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/468FA81CA7EA7737E96A534E0B0E4607D730A871.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 07:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f8:13:05:7c:b3:80:be:62:4b:ee:97:ce:69:c8:30:30:4d:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468FA81CA7EA7737E96A534E0B0E4607D730A871
        Validity
            Not Before: Oct  8 18:07:10 2026 GMT
            Not After : Oct  7 18:12:10 2027 GMT
        Subject: CN=35AEF9D8A2C3B538A30BFBBC2CE8D739A915BCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:51:e7:78:16:97:bc:6a:22:04:84:a3:7c:
                    a0:08:9a:fd:9b:c2:d3:82:c5:85:17:d3:d4:80:08:
                    38:a6:04:86:50:25:ff:68:73:be:eb:58:05:74:83:
                    85:85:17:1a:1c:77:91:5e:c3:15:b7:29:40:33:26:
                    f9:fd:29:45:83:50:1d:04:7e:4e:a4:d5:e0:61:bd:
                    22:c0:15:66:c0:37:62:6c:59:d7:fd:d9:6a:50:05:
                    b4:6c:be:eb:10:88:4b:e8:f8:23:aa:bd:fb:81:37:
                    07:74:59:78:c0:d7:3b:58:47:a4:6f:e9:5e:b8:0e:
                    00:5b:ec:1f:3e:65:06:60:9b:dc:62:1f:96:5a:68:
                    5d:fc:b3:e8:d5:1b:af:45:8e:01:52:a0:23:b5:91:
                    0e:9f:64:53:23:fe:d7:06:b5:43:7a:ec:35:6c:ad:
                    13:99:bb:bf:76:27:02:c5:c4:6c:41:5e:9e:a0:f8:
                    51:ca:aa:ce:e6:6d:45:4b:35:a2:74:98:ab:26:30:
                    7d:63:e1:4a:a0:6b:50:5c:3e:1f:90:21:16:f4:b0:
                    c8:86:d9:e7:b3:bc:28:f2:ba:a8:40:36:7e:0b:b7:
                    be:4c:10:1a:86:75:ff:f8:93:07:d6:9d:9f:f3:cd:
                    96:c5:36:2f:da:ce:90:35:9e:5b:1d:dd:3a:60:4c:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AE:F9:D8:A2:C3:B5:38:A3:0B:FB:BC:2C:E8:D7:39:A9:15:BC:DC
            X509v3 Authority Key Identifier:
                keyid:46:8F:A8:1C:A7:EA:77:37:E9:6A:53:4E:0B:0E:46:07:D7:30:A8:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/468FA81CA7EA7737E96A534E0B0E4607D730A871.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/468FA81CA7EA7737E96A534E0B0E4607D730A871.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NoxCVubG3X6KymSNVX87WEFnMzXotMt3gbGohv6PMtV/0/34352e3138302e32382e302f32322d3234203d3e20323639313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:3f:18:0c:91:ac:20:29:07:55:04:ab:77:f9:9a:5a:bc:
         8c:65:6d:92:b0:89:98:75:d8:20:43:d0:91:eb:62:fe:62:f7:
         e4:b5:48:52:40:c0:64:d2:5e:f9:f7:38:8e:b9:84:04:6f:5e:
         f4:d3:9e:ab:af:67:0a:74:50:ef:2e:55:e3:94:cc:f8:3f:e2:
         3f:3e:0e:6d:61:a8:83:9d:ff:29:a4:01:ec:52:95:aa:96:ad:
         fb:3b:2d:8d:b1:85:d0:91:fa:45:dd:2c:8e:ed:e5:a4:66:01:
         07:74:54:fc:ea:7d:c2:bd:40:55:da:6b:7d:74:ab:70:9d:5d:
         71:2d:a2:33:d8:03:ff:31:01:ca:09:08:57:70:6d:7c:46:a4:
         08:ec:08:e0:8c:ed:58:8f:d6:79:dc:b7:31:de:50:48:c8:98:
         0a:c6:0b:6f:4f:c7:27:22:de:a7:d0:7c:ae:e1:2b:d6:a7:49:
         fe:cc:82:ac:42:0e:1d:95:3c:11:95:cc:1b:14:29:55:3c:08:
         5a:79:2c:dd:8c:08:fa:5f:1e:a7:74:ff:52:07:52:55:82:b3:
         2c:a8:ee:12:b1:d7:4b:61:c0:60:60:71:44:1a:fe:78:67:ab:
         26:e9:14:5d:85:26:31:35:4e:fc:60:7d:22:5b:0c:ee:b6:99:
         64:76:94:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCPgTBXyzgL5iS+6XzmnIMDBNDMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4RkE4MUNBN0VBNzczN0U5NkE1MzRFMEIwRTQ2MDdE
NzMwQTg3MTAeFw0yNjEwMDgxODA3MTBaFw0yNzEwMDcxODEyMTBaMDMxMTAvBgNV
BAMTKDM1QUVGOUQ4QTJDM0I1MzhBMzBCRkJCQzJDRThENzM5QTkxNUJDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZ1HneBaXvGoiBISjfKAImv2b
wtOCxYUX09SACDimBIZQJf9oc77rWAV0g4WFFxocd5FewxW3KUAzJvn9KUWDUB0E
fk6k1eBhvSLAFWbAN2JsWdf92WpQBbRsvusQiEvo+COqvfuBNwd0WXjA1ztYR6Rv
6V64DgBb7B8+ZQZgm9xiH5ZaaF38s+jVG69FjgFSoCO1kQ6fZFMj/tcGtUN67DVs
rROZu792JwLFxGxBXp6g+FHKqs7mbUVLNaJ0mKsmMH1j4Uqga1BcPh+QIRb0sMiG
2eezvCjyuqhANn4Lt75MEBqGdf/4kwfWnZ/zzZbFNi/azpA1nlsd3TpgTEodAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNa752KLDtTijC/u8LOjXOakVvNwwHwYDVR0j
BBgwFoAURo+oHKfqdzfpalNOCw5GB9cwqHEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE5veENWdWJHM1g2S3ltU05WWDg3V0VGbk16WG90TXQzZ2JHb2h2NlBN
dFYvMC80NjhGQTgxQ0E3RUE3NzM3RTk2QTUzNEUwQjBFNDYwN0Q3MzBBODcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2OEZBODFDQTdFQTc3MzdF
OTZBNTM0RTBCMEU0NjA3RDczMEE4NzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhOb3hDVnViRzNYNkt5bVNOVlg4N1dFRm5NelhvdE10M2diR29odjZQTXRWLzAv
MzQzNTJlMzEzODMwMmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbQcMA0GCSqGSIb3DQEBCwUAA4IBAQBOZj8YDJGs
ICkHVQSrd/maWryMZW2SsImYddggQ9CR62L+YvfktUhSQMBk0l759ziOuYQEb170
056rr2cKdFDvLlXjlMz4P+I/Pg5tYaiDnf8ppAHsUpWqlq37Oy2NsYXQkfpF3SyO
7eWkZgEHdFT86n3CvUBV2mt9dKtwnV1xLaIz2AP/MQHKCQhXcG18RqQI7AjgjO1Y
j9Z53Lcx3lBIyJgKxgtvT8cnIt6n0Hyu4SvWp0n+zIKsQg4dlTwRlcwbFClVPAha
eSzdjAj6Xx6ndP9SB1JVgrMsqO4SsddLYcBgYHFEGv54Z6sm6RRdhSYxNU78YH0i
WwzutplkdpTt
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:08:16 2026 by rpki-client