Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
File:                     34352e3138342e34342e302f32322d3234203d3e20323639333131.roa (raw, json)
Hash identifier:          EtCIVE+feqPfsf9K9PYLZpbVHy9PuX/O4lTCMDABpks=
Subject key identifier:   F2:73:EE:2D:C6:F1:9C:79:A1:87:92:E5:98:95:16:B4:14:31:1F:D6
Certificate issuer:       /CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
Certificate serial:       3E27E00BA45D57941D490DD5189497C8916ED36F
Authority key identifier: 0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
Signing time:             Tue 27 Oct 2026 14:30:21 +0000
ROA not before:           Tue 27 Oct 2026 14:25:21 +0000
ROA not after:            Tue 26 Oct 2027 14:30:21 +0000
asID:                     269311
IP address blocks:        45.184.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl
                          rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:27:e0:0b:a4:5d:57:94:1d:49:0d:d5:18:94:97:c8:91:6e:d3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0
        Validity
            Not Before: Oct 27 14:25:21 2026 GMT
            Not After : Oct 26 14:30:21 2027 GMT
        Subject: CN=F273EE2DC6F19C79A18792E5989516B414311FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:61:3b:1b:6f:3c:b4:12:db:e6:38:78:49:
                    35:34:d9:b8:ef:c6:8c:3f:91:9b:5c:ab:4b:fb:4b:
                    af:fc:64:82:b9:3a:b6:28:6a:b4:2f:06:a4:2f:6b:
                    8b:31:ba:7e:81:64:c9:5b:31:f0:9e:1e:58:74:03:
                    a3:8e:e5:bb:c9:db:4a:8b:17:93:97:a4:4d:fb:99:
                    57:9e:85:b0:6d:5b:19:9c:01:5a:03:3f:e4:42:e5:
                    fa:c6:c0:fa:7a:dd:dd:29:68:a4:45:16:26:a3:b1:
                    32:e9:11:af:bd:4f:6a:0c:d6:dd:01:87:39:37:1a:
                    95:b0:ef:4e:55:5d:d3:5b:6a:e4:d0:75:38:ef:63:
                    1d:f7:73:89:70:a5:04:44:74:8d:1d:a7:7b:a8:c5:
                    cf:80:26:75:8a:d9:9a:8d:e1:c4:76:a2:fb:f0:cb:
                    f4:69:be:0e:6c:e6:c4:1d:9e:f5:ec:ae:1d:dd:8b:
                    85:f7:ba:db:69:bf:dd:6d:7f:7a:b7:75:6b:6d:27:
                    ef:65:65:18:18:2c:5a:5e:6d:40:e4:e1:d7:01:2a:
                    39:e7:4a:ba:c8:19:b4:25:e1:d9:da:c2:c1:29:e3:
                    6a:52:88:e8:8a:ea:f7:0b:aa:04:0e:8d:3b:c5:d2:
                    b3:ad:74:da:4d:53:42:df:5d:22:8b:8c:a7:26:57:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:EE:2D:C6:F1:9C:79:A1:87:92:E5:98:95:16:B4:14:31:1F:D6
            X509v3 Authority Key Identifier:
                keyid:0B:BB:8C:95:10:D2:6F:2B:B6:EB:AC:9B:A8:9E:52:4E:3C:A6:6A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BBB8C9510D26F2BB6EBAC9BA89E524E3CA66AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:6d:73:de:84:ad:a2:c3:5f:02:02:6c:1e:7a:18:ab:51:2d:
         86:f9:a3:b7:0c:20:be:13:a7:f3:01:59:76:59:82:2c:7c:3b:
         c3:48:d7:92:83:86:9a:87:32:94:0c:be:82:0e:0c:46:58:16:
         72:dc:cd:1c:e7:02:31:4e:a4:9b:51:84:d6:65:d5:15:78:e3:
         03:1d:d4:10:63:f4:3d:e2:9f:96:17:f9:25:de:47:45:93:43:
         5b:3d:8b:3e:f3:34:97:8e:eb:5c:19:9b:be:c5:0f:b0:8c:be:
         4b:5e:be:bb:2a:29:24:8c:54:16:12:54:ea:12:39:9f:ca:95:
         a1:1b:3b:e8:8a:24:3c:8b:b2:33:a7:84:0f:1c:ca:42:39:fb:
         3f:7d:80:06:84:6f:06:c3:21:9a:92:71:24:5e:d6:15:d5:52:
         b5:99:87:88:1d:4a:b3:94:7f:c8:11:8a:70:b9:a0:e4:2a:06:
         42:05:f3:d0:6d:5f:aa:66:c9:c2:a3:25:cf:9e:fe:46:7e:78:
         0a:ef:06:53:c3:06:47:a0:f4:df:07:d6:22:80:eb:ad:c4:fd:
         34:89:0f:ae:00:30:8f:c3:dc:d9:24:8b:b5:63:d1:0d:13:ed:
         e8:71:33:0c:e7:d2:bc:9f:2d:cb:5a:eb:d8:60:c6:6b:54:b9:
         3d:29:16:71
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPifgC6RdV5QdSQ3VGJSXyJFu028wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJCQjhDOTUxMEQyNkYyQkI2RUJBQzlCQTg5RTUyNEUz
Q0E2NkFEMDAeFw0yNjEwMjcxNDI1MjFaFw0yNzEwMjYxNDMwMjFaMDMxMTAvBgNV
BAMTKEYyNzNFRTJEQzZGMTlDNzlBMTg3OTJFNTk4OTUxNkI0MTQzMTFGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0WE7G288tBLb5jh4STU02bjv
xow/kZtcq0v7S6/8ZIK5OrYoarQvBqQva4sxun6BZMlbMfCeHlh0A6OO5bvJ20qL
F5OXpE37mVeehbBtWxmcAVoDP+RC5frGwPp63d0paKRFFiajsTLpEa+9T2oM1t0B
hzk3GpWw705VXdNbauTQdTjvYx33c4lwpQREdI0dp3uoxc+AJnWK2ZqN4cR2ovvw
y/Rpvg5s5sQdnvXsrh3di4X3uttpv91tf3q3dWttJ+9lZRgYLFpebUDk4dcBKjnn
SrrIGbQl4dnawsEp42pSiOiK6vcLqgQOjTvF0rOtdNpNU0LfXSKLjKcmV2VxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8nPuLcbxnHmhh5LlmJUWtBQxH9YwHwYDVR0j
BBgwFoAUC7uMlRDSbyu266ybqJ5STjymatAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkE3dkRZWTJWZGo5TGNDdG9peGN0MmdtUG9xZWdMWXA5bUV1VDE4TXBX
WXMvMC8wQkJCOEM5NTEwRDI2RjJCQjZFQkFDOUJBODlFNTI0RTNDQTY2QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCQkI4Qzk1MTBEMjZGMkJC
NkVCQUM5QkE4OUU1MjRFM0NBNjZBRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JBN3ZEWVkyVmRqOUxjQ3RvaXhjdDJnbVBvcWVnTFlwOW1FdVQxOE1wV1lzLzAv
MzQzNTJlMzEzODM0MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbgsMA0GCSqGSIb3DQEBCwUAA4IBAQCvbXPehK2i
w18CAmweehirUS2G+aO3DCC+E6fzAVl2WYIsfDvDSNeSg4aahzKUDL6CDgxGWBZy
3M0c5wIxTqSbUYTWZdUVeOMDHdQQY/Q94p+WF/kl3kdFk0NbPYs+8zSXjutcGZu+
xQ+wjL5LXr67KikkjFQWElTqEjmfypWhGzvoiiQ8i7Izp4QPHMpCOfs/fYAGhG8G
wyGaknEkXtYV1VK1mYeIHUqzlH/IEYpwuaDkKgZCBfPQbV+qZsnCoyXPnv5GfngK
7wZTwwZHoPTfB9YigOutxP00iQ+uADCPw9zZJIu1Y9ENE+3ocTMM59K8ny3LWuvY
YMZrVLk9KRZx
-----END CERTIFICATE-----
Generated at Mon Nov 2 00:55:54 2026 by rpki-client