Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa
File:                     34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa (raw, json)
Hash identifier:          K/+eRRZ4Fm22Ng8IR+O01jBiSafFkBggBdlpfxtDmeg=
Subject key identifier:   08:AC:23:E9:FE:9D:93:99:18:6E:B9:C8:8C:3E:36:80:26:55:C8:B4
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       5785460824BAFECFA102FE8E68B4B13209AFD79D
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:10 +0000
ROA not before:           Sat 09 May 2026 02:42:10 +0000
ROA not after:            Sat 08 May 2027 02:47:10 +0000
asID:                     267350
IP address blocks:        45.233.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:46:08:24:ba:fe:cf:a1:02:fe:8e:68:b4:b1:32:09:af:d7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:10 2026 GMT
            Not After : May  8 02:47:10 2027 GMT
        Subject: CN=08AC23E9FE9D9399186EB9C88C3E36802655C8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:32:3d:de:97:a9:41:30:43:2a:01:77:6e:
                    88:f0:59:08:00:e5:cd:f3:34:5b:cc:d6:39:55:8d:
                    90:bd:19:c0:34:ec:b4:34:d9:32:78:b7:8b:e0:ff:
                    fc:50:2c:0d:2c:c3:20:27:d1:3a:ff:14:15:4a:55:
                    43:f3:49:c3:5c:63:59:a6:d7:e3:74:2a:4b:61:ed:
                    83:74:9f:ac:2d:38:67:87:84:34:ec:40:26:01:ca:
                    c7:7a:62:a3:b8:a1:9a:50:b7:e5:0f:f8:22:73:ba:
                    91:ab:32:3f:c3:82:ff:f0:44:b0:a5:d7:62:c7:18:
                    91:0e:c7:03:87:2a:93:a6:dd:c9:19:13:b9:c0:61:
                    9c:31:a1:79:d7:d5:e6:ba:a0:c8:bc:37:e8:00:cf:
                    07:74:a7:77:47:a4:b7:05:89:b9:5c:04:bc:23:ac:
                    c4:80:3a:cf:8c:4d:ab:42:f1:4e:e4:58:09:87:ea:
                    ac:fa:ca:60:0d:9b:89:cf:f5:48:e0:b8:0f:e2:82:
                    aa:7f:c0:b2:7a:da:00:05:48:f2:fe:14:d4:bc:99:
                    f0:8a:e3:0a:20:1c:7b:20:3c:9e:f9:ad:f6:44:a1:
                    0c:97:db:89:c1:c6:2a:86:07:cf:95:08:92:43:1a:
                    fd:05:c6:7c:d0:7a:c1:41:cf:af:77:4b:94:f9:7e:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:23:E9:FE:9D:93:99:18:6E:B9:C8:8C:3E:36:80:26:55:C8:B4
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32322d3232203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:de:89:90:19:6f:54:07:80:80:51:81:55:b6:c4:73:b8:
         02:88:e3:af:f2:26:cb:4e:6a:64:e9:7a:7c:c2:fb:38:3f:a7:
         3e:cc:0d:65:10:1b:11:8d:84:7f:2b:a1:11:65:82:22:22:ad:
         83:4c:9c:cf:24:8f:61:50:5e:2c:4a:05:07:3e:a8:3e:9a:ba:
         96:14:62:fc:56:b9:87:ca:7c:8d:11:74:fe:a2:c2:5c:5a:78:
         5f:02:ce:bb:f4:8a:09:fc:aa:6d:04:9d:cf:f6:0d:fb:4f:f3:
         14:68:72:c0:f0:4f:9a:31:47:d9:46:8a:e6:a2:9a:4c:90:f8:
         93:b4:8e:25:a8:3c:fb:09:2a:6b:fe:3b:6a:15:99:d1:94:d9:
         4c:5c:3f:2b:35:8e:d4:db:8e:d2:e4:8b:81:db:3b:46:42:b0:
         eb:85:05:4a:3c:10:27:11:97:65:df:4b:c6:ea:35:13:b6:70:
         e0:cb:b8:b1:a6:84:83:b1:a4:9c:bb:77:b5:e6:44:19:80:ea:
         87:e5:22:d5:aa:6e:0a:67:ec:cd:67:33:8e:13:cd:d7:47:09:
         8a:5f:cf:43:ed:b0:cc:6d:74:14:ef:17:6f:b5:8f:c3:7d:04:
         f0:d9:2f:ab:9b:8c:44:50:fc:61:aa:c2:2f:b7:4e:d3:b4:df:
         47:48:27:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV4VGCCS6/s+hAv6OaLSxMgmv150wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCNEFGMEEyNzVDMEQwNzQyQzc0M0E4QkU4QkNERjU2
QjAzREE3RjAeFw0yNjA1MDkwMjQyMTBaFw0yNzA1MDgwMjQ3MTBaMDMxMTAvBgNV
BAMTKDA4QUMyM0U5RkU5RDkzOTkxODZFQjlDODhDM0UzNjgwMjY1NUM4QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahzI93pepQTBDKgF3bojwWQgA
5c3zNFvM1jlVjZC9GcA07LQ02TJ4t4vg//xQLA0swyAn0Tr/FBVKVUPzScNcY1mm
1+N0Kkth7YN0n6wtOGeHhDTsQCYBysd6YqO4oZpQt+UP+CJzupGrMj/Dgv/wRLCl
12LHGJEOxwOHKpOm3ckZE7nAYZwxoXnX1ea6oMi8N+gAzwd0p3dHpLcFiblcBLwj
rMSAOs+MTatC8U7kWAmH6qz6ymANm4nP9UjguA/igqp/wLJ62gAFSPL+FNS8mfCK
4wogHHsgPJ75rfZEoQyX24nBxiqGB8+VCJJDGv0FxnzQesFBz693S5T5fkGbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCKwj6f6dk5kYbrnIjD42gCZVyLQwHwYDVR0j
BBgwFoAU0bSvCidcDQdCx0OovovN9WsD2n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk3bWk4bThhUzRmVkFja2dWNDZiYk1KalBINXlBYldLYUhrQ2V4c1hQ
ekUvMC9EMUI0QUYwQTI3NUMwRDA3NDJDNzQzQThCRThCQ0RGNTZCMDNEQTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjRBRjBBMjc1QzBEMDc0
MkM3NDNBOEJFOEJDREY1NkIwM0RBN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpN21pOG04YVM0ZlZBY2tnVjQ2YmJNSmpQSDV5QWJXS2FIa0NleHNYUHpFLzAv
MzQzNTJlMzIzMzMzMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6eQwDQYJKoZIhvcNAQELBQADggEBAFzT3omQ
GW9UB4CAUYFVtsRzuAKI46/yJstOamTpenzC+zg/pz7MDWUQGxGNhH8roRFlgiIi
rYNMnM8kj2FQXixKBQc+qD6aupYUYvxWuYfKfI0RdP6iwlxaeF8Czrv0ign8qm0E
nc/2DftP8xRocsDwT5oxR9lGiuaimkyQ+JO0jiWoPPsJKmv+O2oVmdGU2UxcPys1
jtTbjtLki4HbO0ZCsOuFBUo8ECcRl2XfS8bqNRO2cODLuLGmhIOxpJy7d7XmRBmA
6oflItWqbgpn7M1nM44TzddHCYpfz0PtsMxtdBTvF2+1j8N9BPDZL6ubjERQ/GGq
wi+3TtO030dIJ28=
-----END CERTIFICATE-----
Generated at Wed May 13 19:46:12 2026 by rpki-client