Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32332d3233203d3e20323638363336.roa
File:                     34352e3136342e3138322e302f32332d3233203d3e20323638363336.roa (raw, json)
Hash identifier:          Soxgeu0Aw06MbF12uy3SqBuu2GKfjZrxAhGmc+z0yWQ=
Subject key identifier:   5B:16:F6:B7:F3:83:8B:5F:14:E4:BE:84:F8:43:50:BC:39:23:A5:51
Certificate issuer:       /CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
Certificate serial:       6D6197F05CE36347CBDBC97AA21DCEDB950DCE3F
Authority key identifier: BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32332d3233203d3e20323638363336.roa
Signing time:             Tue 28 Apr 2026 13:14:34 +0000
ROA not before:           Tue 28 Apr 2026 13:09:34 +0000
ROA not after:            Tue 27 Apr 2027 13:14:34 +0000
asID:                     268636
IP address blocks:        45.164.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl
                          rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:97:f0:5c:e3:63:47:cb:db:c9:7a:a2:1d:ce:db:95:0d:ce:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E
        Validity
            Not Before: Apr 28 13:09:34 2026 GMT
            Not After : Apr 27 13:14:34 2027 GMT
        Subject: CN=5B16F6B7F3838B5F14E4BE84F84350BC3923A551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:98:3f:17:0e:28:75:e3:eb:62:82:b1:ad:
                    da:2d:17:64:6a:d3:eb:a5:d2:f5:db:5e:d7:c7:f0:
                    19:28:27:8f:a3:97:c6:fe:81:74:cb:3d:d9:97:b8:
                    1e:12:60:10:60:de:74:79:f7:78:5a:19:23:39:03:
                    7c:39:bc:65:30:a6:03:84:66:33:b0:ac:b2:ba:bf:
                    0c:f6:49:da:c6:7e:62:8e:d4:32:1a:a1:8d:24:cc:
                    dd:0d:79:46:84:00:6a:b6:4b:10:48:87:c7:36:b9:
                    87:07:a2:7a:a5:fe:51:11:69:3c:5f:e4:4f:2b:b4:
                    28:36:85:47:d9:32:ac:10:5c:1f:d5:0c:87:ca:83:
                    1b:bd:f0:65:24:12:a4:5c:ef:99:15:f2:75:e2:c5:
                    dd:a8:2a:48:d1:30:2e:5f:8b:f0:6b:46:14:30:30:
                    f3:b1:d0:a3:c4:bc:8c:a6:36:ac:d2:44:a5:fb:ef:
                    62:3d:8c:26:b1:15:b5:23:91:a2:6b:5e:3e:ce:48:
                    38:59:0d:8d:9e:94:eb:5d:10:98:30:dc:26:30:2d:
                    53:ec:2c:90:06:c7:bc:a4:08:ba:eb:26:b0:da:5e:
                    d6:18:de:65:3f:2f:c9:ef:ba:2d:c9:e1:db:ac:fa:
                    70:c8:d7:c2:a5:de:e5:dd:f7:6b:bc:3f:97:f4:ab:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:F6:B7:F3:83:8B:5F:14:E4:BE:84:F8:43:50:BC:39:23:A5:51
            X509v3 Authority Key Identifier:
                keyid:BB:90:58:7B:B2:4E:47:FC:1B:4E:0B:AF:AA:1C:24:D2:EC:55:10:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB90587BB24E47FC1B4E0BAFAA1C24D2EC55109E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/1/34352e3136342e3138322e302f32332d3233203d3e20323638363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:cb:a3:90:d8:0d:96:68:85:ef:fe:ef:20:e7:36:4f:99:
         be:e0:a6:f8:3c:e9:8c:81:4b:b3:2f:1b:a4:d5:f6:2b:4a:ad:
         e4:e6:66:44:3e:47:e5:1f:ac:d2:82:0b:85:ae:4a:ea:39:6b:
         64:e5:2b:a7:e2:4a:a5:11:41:c4:94:c9:8e:87:f4:38:0a:58:
         e9:08:54:1c:c2:e7:99:bd:56:97:1c:b4:af:a7:6a:a9:86:b6:
         58:63:46:25:f3:d3:13:4c:be:3f:c8:5c:8a:6d:36:a5:a5:64:
         4c:0d:45:77:28:17:f4:59:46:b4:e3:37:ab:27:2c:89:c0:55:
         4f:31:1b:b3:87:77:a6:16:c9:87:6e:0c:16:d9:79:64:14:87:
         37:f1:33:8c:d5:bb:b0:65:8f:a8:4b:9a:cc:12:9b:01:f8:74:
         b6:bf:c5:96:b1:f5:a5:69:ab:f2:85:4b:88:25:31:cd:11:18:
         f7:19:8f:e4:4d:6a:19:40:af:82:f1:18:58:41:8e:18:d2:8f:
         0a:60:2d:1d:8e:92:b7:a2:6d:6f:a1:19:69:19:42:ee:80:81:
         cf:c0:c6:d7:60:d1:09:77:46:1f:13:70:4c:cc:d0:3d:c1:98:
         4c:cf:b5:d6:2b:4e:d9:c1:37:1c:56:03:8e:af:74:9a:64:ad:
         90:c4:ec:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbWGX8FzjY0fL28l6oh3O25UNzj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI5MDU4N0JCMjRFNDdGQzFCNEUwQkFGQUExQzI0RDJF
QzU1MTA5RTAeFw0yNjA0MjgxMzA5MzRaFw0yNzA0MjcxMzE0MzRaMDMxMTAvBgNV
BAMTKDVCMTZGNkI3RjM4MzhCNUYxNEU0QkU4NEY4NDM1MEJDMzkyM0E1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCpg/Fw4odePrYoKxrdotF2Rq
0+ul0vXbXtfH8BkoJ4+jl8b+gXTLPdmXuB4SYBBg3nR593haGSM5A3w5vGUwpgOE
ZjOwrLK6vwz2SdrGfmKO1DIaoY0kzN0NeUaEAGq2SxBIh8c2uYcHonql/lERaTxf
5E8rtCg2hUfZMqwQXB/VDIfKgxu98GUkEqRc75kV8nXixd2oKkjRMC5fi/BrRhQw
MPOx0KPEvIymNqzSRKX772I9jCaxFbUjkaJrXj7OSDhZDY2elOtdEJgw3CYwLVPs
LJAGx7ykCLrrJrDaXtYY3mU/L8nvui3J4dus+nDI18Kl3uXd92u8P5f0q+r1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWxb2t/ODi18U5L6E+ENQvDkjpVEwHwYDVR0j
BBgwFoAUu5BYe7JOR/wbTguvqhwk0uxVEJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJaaGpqRDJDemZEVHpQdjdoaHRnWU1Ub1JCWm9jV0Z1TVA3dEY4M2tu
UEQvMS9CQjkwNTg3QkIyNEU0N0ZDMUI0RTBCQUZBQTFDMjREMkVDNTUxMDlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOTA1ODdCQjI0RTQ3RkMx
QjRFMEJBRkFBMUMyNEQyRUM1NTEwOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyWmhqakQyQ3pmRFR6UHY3aGh0Z1lNVG9SQlpvY1dGdU1QN3RGODNrblBELzEv
MzQzNTJlMzEzNjM0MmUzMTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpLYwDQYJKoZIhvcNAQELBQADggEBAB8ky6OQ
2A2WaIXv/u8g5zZPmb7gpvg86YyBS7MvG6TV9itKreTmZkQ+R+UfrNKCC4WuSuo5
a2TlK6fiSqURQcSUyY6H9DgKWOkIVBzC55m9VpcctK+naqmGtlhjRiXz0xNMvj/I
XIptNqWlZEwNRXcoF/RZRrTjN6snLInAVU8xG7OHd6YWyYduDBbZeWQUhzfxM4zV
u7Blj6hLmswSmwH4dLa/xZax9aVpq/KFS4glMc0RGPcZj+RNahlAr4LxGFhBjhjS
jwpgLR2OkreibW+hGWkZQu6Agc/Axtdg0Ql3Rh8TcEzM0D3BmEzPtdYrTtnBNxxW
A46vdJpkrZDE7Ao=
-----END CERTIFICATE-----
Generated at Wed May 13 20:11:43 2026 by rpki-client