Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/34352e3139302e33322e302f32322d3332203d3e20323639363232.roa
File:                     34352e3139302e33322e302f32322d3332203d3e20323639363232.roa (raw, json)
Hash identifier:          LbanYVDbbu02EXW3F/ZTriBeANqeZaF7EXGv7/bGCl0=
Subject key identifier:   BB:F2:36:16:F0:FF:5C:B4:CE:82:32:27:8C:EF:00:A5:C6:71:3F:6E
Certificate issuer:       /CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
Certificate serial:       55835C614697421E821B84661721C2B084165429
Authority key identifier: 53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/34352e3139302e33322e302f32322d3332203d3e20323639363232.roa
Signing time:             Thu 27 Aug 2026 20:51:47 +0000
ROA not before:           Thu 27 Aug 2026 20:46:47 +0000
ROA not after:            Thu 26 Aug 2027 20:51:47 +0000
asID:                     269622
IP address blocks:        45.190.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl
                          rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 15:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:83:5c:61:46:97:42:1e:82:1b:84:66:17:21:c2:b0:84:16:54:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C092812661ADDEB8F46FEE239AB18C9F9DE631
        Validity
            Not Before: Aug 27 20:46:47 2026 GMT
            Not After : Aug 26 20:51:47 2027 GMT
        Subject: CN=BBF23616F0FF5CB4CE8232278CEF00A5C6713F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:ff:b6:4e:6f:e6:26:65:26:5d:33:2c:f4:
                    bf:85:c6:b4:2f:25:99:d9:ff:35:53:df:29:2c:5e:
                    f9:66:80:4f:d9:10:2f:11:a8:f6:08:c7:b6:40:14:
                    15:de:97:72:8a:e9:83:24:32:83:ec:46:f4:cd:14:
                    99:d5:69:31:db:0e:99:c6:9e:6a:71:18:92:6c:41:
                    76:b8:be:9e:02:7a:4c:3c:4a:07:c1:0c:38:12:0e:
                    54:bb:67:2b:a3:37:24:f0:fa:9f:fe:88:df:f9:42:
                    0b:f8:96:4b:32:93:26:97:be:6f:0b:03:86:c9:9d:
                    b7:c0:85:19:ce:3f:30:cf:65:d1:17:2f:e8:6b:92:
                    9c:7b:ec:a9:74:2d:47:56:10:52:0c:88:2c:0b:55:
                    c4:1f:27:dc:27:e3:09:47:17:d8:e0:97:3b:0f:d9:
                    52:a2:f6:e8:82:62:be:48:0f:8a:cf:48:71:bf:14:
                    6c:68:db:a4:75:df:c6:19:19:60:b3:ba:84:71:db:
                    f0:d8:cc:d9:4e:bd:a1:ad:5b:a8:76:bf:17:c1:e1:
                    92:b3:5a:71:8b:a6:a7:68:3c:03:86:13:a0:27:ec:
                    db:91:24:d2:8f:d7:46:c6:00:bc:fd:1b:22:b7:57:
                    14:31:c6:b2:1a:95:50:60:0b:ad:21:2d:c6:1c:43:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:36:16:F0:FF:5C:B4:CE:82:32:27:8C:EF:00:A5:C6:71:3F:6E
            X509v3 Authority Key Identifier:
                keyid:53:C0:92:81:26:61:AD:DE:B8:F4:6F:EE:23:9A:B1:8C:9F:9D:E6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/53C092812661ADDEB8F46FEE239AB18C9F9DE631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C092812661ADDEB8F46FEE239AB18C9F9DE631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQEQLyYYobPTfnVBAK5SpCETMMoyE6Qe4XJ6ci2biWDt/0/34352e3139302e33322e302f32322d3332203d3e20323639363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:61:cd:f7:1c:dd:51:cb:4a:33:0c:e2:7f:f8:87:c6:6f:42:
         e9:95:2d:73:a3:f3:a4:45:fc:c2:2c:7f:c5:ca:fa:f0:65:25:
         20:a9:c1:49:76:be:23:72:d8:9f:9d:52:0f:22:4b:5f:24:34:
         9b:4b:e3:4b:0f:58:f9:cf:be:10:97:24:4d:04:9a:f3:84:f0:
         4b:68:80:2d:8d:a9:4c:5e:d7:80:53:33:16:c3:35:fd:2c:64:
         91:3b:09:e9:34:bd:98:ca:f0:9a:45:37:3f:a4:38:04:a5:37:
         8f:3b:4b:18:97:a3:12:6f:98:9c:07:0c:4a:fd:f2:a4:6a:1b:
         44:1f:3b:27:f5:4d:f8:1c:d3:2a:84:ba:f4:21:c7:b4:59:d8:
         1a:a2:8e:78:5a:ad:55:85:e8:11:3c:20:c6:46:03:c9:82:54:
         91:b9:68:23:c7:62:38:45:8f:d9:02:02:b0:5d:6a:4b:e3:a1:
         0f:bc:7a:31:96:a0:23:f3:01:28:a6:76:81:56:e6:c5:84:61:
         e5:3b:ac:43:bf:87:ac:b0:cb:b4:30:a8:d5:f4:fc:b4:81:26:
         8b:08:c7:e0:af:21:bf:da:1c:27:71:41:52:2b:11:5b:e5:98:
         0c:99:1c:47:19:28:d5:40:c2:25:70:ff:3b:d4:17:10:8a:e6:
         27:74:b2:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVYNcYUaXQh6CG4RmFyHCsIQWVCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNDMDkyODEyNjYxQURERUI4RjQ2RkVFMjM5QUIxOEM5
RjlERTYzMTAeFw0yNjA4MjcyMDQ2NDdaFw0yNzA4MjYyMDUxNDdaMDMxMTAvBgNV
BAMTKEJCRjIzNjE2RjBGRjVDQjRDRTgyMzIyNzhDRUYwMEE1QzY3MTNGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjv+2Tm/mJmUmXTMs9L+FxrQv
JZnZ/zVT3yksXvlmgE/ZEC8RqPYIx7ZAFBXel3KK6YMkMoPsRvTNFJnVaTHbDpnG
nmpxGJJsQXa4vp4Cekw8SgfBDDgSDlS7ZyujNyTw+p/+iN/5Qgv4lksykyaXvm8L
A4bJnbfAhRnOPzDPZdEXL+hrkpx77Kl0LUdWEFIMiCwLVcQfJ9wn4wlHF9jglzsP
2VKi9uiCYr5ID4rPSHG/FGxo26R138YZGWCzuoRx2/DYzNlOvaGtW6h2vxfB4ZKz
WnGLpqdoPAOGE6An7NuRJNKP10bGALz9GyK3VxQxxrIalVBgC60hLcYcQ96lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUu/I2FvD/XLTOgjInjO8ApcZxP24wHwYDVR0j
BBgwFoAUU8CSgSZhrd649G/uI5qxjJ+d5jEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFFUUx5WVlvYlBUZm5WQkFLNVNwQ0VUTU1veUU2UWU0WEo2Y2kyYmlX
RHQvMC81M0MwOTI4MTI2NjFBRERFQjhGNDZGRUUyMzlBQjE4QzlGOURFNjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQzA5MjgxMjY2MUFEREVC
OEY0NkZFRTIzOUFCMThDOUY5REU2MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRRVFMeVlZb2JQVGZuVkJBSzVTcENFVE1Nb3lFNlFlNFhKNmNpMmJpV0R0LzAv
MzQzNTJlMzEzOTMwMmUzMzMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb4gMA0GCSqGSIb3DQEBCwUAA4IBAQCcYc33HN1R
y0ozDOJ/+IfGb0LplS1zo/OkRfzCLH/FyvrwZSUgqcFJdr4jctifnVIPIktfJDSb
S+NLD1j5z74QlyRNBJrzhPBLaIAtjalMXteAUzMWwzX9LGSROwnpNL2YyvCaRTc/
pDgEpTePO0sYl6MSb5icBwxK/fKkahtEHzsn9U34HNMqhLr0Ice0Wdgaoo54Wq1V
hegRPCDGRgPJglSRuWgjx2I4RY/ZAgKwXWpL46EPvHoxlqAj8wEopnaBVubFhGHl
O6xDv4essMu0MKjV9Py0gSaLCMfgryG/2hwncUFSKxFb5ZgMmRxHGSjVQMIlcP87
1BcQiuYndLIX
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:38:41 2026 by rpki-client