Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
File:                     34352e3137312e32352e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier:          cR3B2aAITsu4I1BPZEZx4ZdBEBnblDbAr2E82i+cYEk=
Subject key identifier:   F6:14:9E:40:4A:53:01:09:D6:3A:38:DE:52:67:22:7F:71:2D:49:40
Certificate issuer:       /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial:       5F9E76C85440D614D0A0B95AD45FA323A147CF11
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa
Signing time:             Fri 24 Apr 2026 19:19:21 +0000
ROA not before:           Fri 24 Apr 2026 19:14:21 +0000
ROA not after:            Fri 23 Apr 2027 19:19:21 +0000
asID:                     268183
IP address blocks:        45.171.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
                          rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9e:76:c8:54:40:d6:14:d0:a0:b9:5a:d4:5f:a3:23:a1:47:cf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
        Validity
            Not Before: Apr 24 19:14:21 2026 GMT
            Not After : Apr 23 19:19:21 2027 GMT
        Subject: CN=F6149E404A530109D63A38DE5267227F712D4940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:a4:a0:2a:05:5d:c9:b3:11:a4:1d:05:7c:
                    9f:fe:dd:81:92:15:92:dd:59:a3:fe:ba:ef:bf:d0:
                    11:e8:68:25:45:a0:b7:d2:d9:df:30:c5:f4:1a:59:
                    53:9b:75:ef:f4:3d:59:c8:14:03:a5:b6:78:d9:c9:
                    bc:74:eb:1c:d2:9d:ee:48:2f:f6:a7:3a:cb:9c:8d:
                    82:37:77:75:93:cd:27:c2:be:5a:ca:a0:25:1d:3d:
                    84:45:9b:f5:a5:d7:8e:a0:1f:c9:e5:c7:f4:f5:81:
                    f3:a1:2e:bf:23:85:fa:c2:72:88:44:88:d6:e5:10:
                    f1:f3:6f:16:76:1b:51:e5:49:01:31:76:9c:6d:33:
                    aa:0c:eb:d9:b4:df:17:a6:db:32:ad:28:8f:e8:a3:
                    d4:d6:84:4a:2c:44:25:b3:65:a8:fd:ea:9b:2d:52:
                    44:9e:5c:d9:e6:1c:ae:b5:af:5f:db:8a:5f:a0:de:
                    f6:d5:89:2f:c0:d3:a0:b6:83:2a:01:78:8d:31:da:
                    ea:82:50:58:38:ea:60:9d:3e:c4:8d:b3:2d:3b:1f:
                    96:69:16:c5:2f:8a:ed:27:b9:5a:2f:41:38:1e:6a:
                    a9:dd:86:38:0f:4b:ab:4a:6e:1e:d1:75:84:aa:3e:
                    b5:ab:1b:27:a7:69:cb:18:14:8a:b9:99:56:18:16:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:9E:40:4A:53:01:09:D6:3A:38:DE:52:67:22:7F:71:2D:49:40
            X509v3 Authority Key Identifier:
                keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3137312e32352e302f32342d3234203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:11:de:83:b6:c0:1e:b3:51:0a:09:77:a6:d3:ad:4b:35:2e:
         42:9c:7c:9e:29:3a:18:24:11:21:22:34:9f:d2:15:9c:6c:de:
         8f:df:61:bd:38:00:4a:66:12:f7:e0:cd:37:94:a3:52:5d:c4:
         ab:13:7b:da:5a:fa:fc:4a:57:13:d7:40:f4:76:d8:f3:a9:f2:
         44:c4:45:9b:2f:fb:7d:a8:a2:a5:7a:97:cf:53:0b:7a:28:4b:
         f4:ef:4b:07:ab:09:02:50:25:0e:ce:85:d9:93:c2:a2:28:83:
         e7:97:ab:0b:26:e0:43:cc:12:18:ee:07:ad:2f:49:02:1e:28:
         ff:a5:a0:d5:1d:e5:3f:78:57:b3:b3:c2:62:fb:65:c9:31:21:
         f6:a0:33:e0:92:da:b8:15:35:33:a1:e3:ea:b1:6c:8c:4b:a3:
         c5:2e:17:5b:0c:77:b8:19:fb:c9:c1:ae:2c:50:9c:a1:c1:82:
         59:2b:b6:67:a8:af:21:f3:a3:d8:12:e4:af:51:fc:2b:e9:02:
         b6:b7:5c:16:d4:7e:57:33:5a:57:8e:14:e8:fd:96:13:7c:30:
         07:51:95:42:68:4c:f5:ba:e4:ee:70:fb:d6:71:7a:0d:63:74:
         14:6a:ef:90:9c:3e:9a:d7:9c:93:04:cf:51:15:ad:c7:75:82:
         75:1e:31:48
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX552yFRA1hTQoLla1F+jI6FHzxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwRkI1QkRGNDY1RUI1MjgzNTM2RjU3RkNDQTM3N0I4
MjBCRUQyQTAeFw0yNjA0MjQxOTE0MjFaFw0yNzA0MjMxOTE5MjFaMDMxMTAvBgNV
BAMTKEY2MTQ5RTQwNEE1MzAxMDlENjNBMzhERTUyNjcyMjdGNzEyRDQ5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wqSgKgVdybMRpB0FfJ/+3YGS
FZLdWaP+uu+/0BHoaCVFoLfS2d8wxfQaWVObde/0PVnIFAOltnjZybx06xzSne5I
L/anOsucjYI3d3WTzSfCvlrKoCUdPYRFm/Wl146gH8nlx/T1gfOhLr8jhfrCcohE
iNblEPHzbxZ2G1HlSQExdpxtM6oM69m03xem2zKtKI/oo9TWhEosRCWzZaj96pst
UkSeXNnmHK61r1/bil+g3vbViS/A06C2gyoBeI0x2uqCUFg46mCdPsSNsy07H5Zp
FsUviu0nuVovQTgeaqndhjgPS6tKbh7RdYSqPrWrGyenacsYFIq5mVYYFu9HAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9hSeQEpTAQnWOjjeUmcif3EtSUAwHwYDVR0j
BBgwFoAUQw+1vfRl61KDU29X/Mo3e4IL7SowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWRBZDliZlFoWXN0enBHSFNWdkJSQkFSZ3FnQ0IzM1poczVTY3JHdzRL
YWovMC80MzBGQjVCREY0NjVFQjUyODM1MzZGNTdGQ0NBMzc3QjgyMEJFRDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMEZCNUJERjQ2NUVCNTI4
MzUzNkY1N0ZDQ0EzNzdCODIwQkVEMkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkQWQ5YmZRaFlzdHpwR0hTVnZCUkJBUmdxZ0NCMzNaaHM1U2NyR3c0S2FqLzAv
MzQzNTJlMzEzNzMxMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALasZMA0GCSqGSIb3DQEBCwUAA4IBAQDEEd6DtsAe
s1EKCXem061LNS5CnHyeKToYJBEhIjSf0hWcbN6P32G9OABKZhL34M03lKNSXcSr
E3vaWvr8SlcT10D0dtjzqfJExEWbL/t9qKKlepfPUwt6KEv070sHqwkCUCUOzoXZ
k8KiKIPnl6sLJuBDzBIY7getL0kCHij/paDVHeU/eFezs8Ji+2XJMSH2oDPgktq4
FTUzoePqsWyMS6PFLhdbDHe4GfvJwa4sUJyhwYJZK7ZnqK8h86PYEuSvUfwr6QK2
t1wW1H5XM1pXjhTo/ZYTfDAHUZVCaEz1uuTucPvWcXoNY3QUau+QnD6a15yTBM9R
Fa3HdYJ1HjFI
-----END CERTIFICATE-----
Generated at Wed May 13 17:56:19 2026 by rpki-client