Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32322d3232203d3e20323637323837.roa
File:                     34352e3233332e31322e302f32322d3232203d3e20323637323837.roa (raw, json)
Hash identifier:          o1BPjbcHqygUd61atQqMRuD7jMPj5IU8k3G4M1hJiuA=
Subject key identifier:   4B:BB:DF:92:4C:BE:ED:1D:22:A0:1C:EB:FD:D8:4D:5C:BB:4B:07:D2
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       032EB28A5E16DF640843F9DE980E72F72FF220AA
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32322d3232203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 21:33:21 +0000
ROA not before:           Tue 08 Sep 2026 21:28:21 +0000
ROA not after:            Tue 07 Sep 2027 21:33:21 +0000
asID:                     267287
IP address blocks:        45.233.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 00:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2e:b2:8a:5e:16:df:64:08:43:f9:de:98:0e:72:f7:2f:f2:20:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:28:21 2026 GMT
            Not After : Sep  7 21:33:21 2027 GMT
        Subject: CN=4BBBDF924CBEED1D22A01CEBFDD84D5CBB4B07D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5b:f1:83:a7:6a:ff:25:66:1a:a1:73:7a:2d:
                    1f:01:2b:e4:46:8f:7b:73:64:c4:a0:a3:73:43:26:
                    fe:76:21:86:90:f8:83:69:87:90:89:56:26:a5:88:
                    51:40:45:a0:b3:66:a0:8e:cd:a0:2d:ae:0a:cb:41:
                    5d:2d:e7:76:d8:8c:3b:e8:b8:83:77:b6:b1:41:ea:
                    ef:78:b4:86:c7:2c:3e:2a:81:21:5d:70:e4:b3:b4:
                    0c:83:e2:94:03:4b:bf:a4:16:72:af:a9:5b:71:2b:
                    57:6b:f5:5f:df:2f:c4:69:91:9d:64:54:f2:3d:fd:
                    e6:fe:5f:7e:67:bd:27:20:ae:d8:4d:ba:9f:bb:60:
                    6d:9b:a5:03:d6:a5:14:06:71:a5:95:0c:95:86:c7:
                    fb:85:8e:fc:12:01:8a:73:b1:94:ca:13:62:57:b7:
                    5f:d6:44:91:24:4e:53:b5:2a:0e:55:ee:e2:bb:66:
                    47:64:ff:f3:3e:f6:54:cc:82:7a:9e:8c:fc:95:0e:
                    36:49:ee:88:64:be:27:3b:df:51:c6:92:de:a4:d6:
                    fd:03:1d:97:53:85:41:e4:09:50:9a:43:ab:47:49:
                    79:ff:23:8b:ef:8d:43:e4:72:68:c5:be:5a:da:d3:
                    cb:d2:c4:c9:a8:ee:ff:cb:b3:a1:c0:8f:4f:fe:02:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:DF:92:4C:BE:ED:1D:22:A0:1C:EB:FD:D8:4D:5C:BB:4B:07:D2
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32322d3232203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:15:7f:11:1d:4e:2e:22:d3:48:7d:52:1c:91:1a:b1:7d:
         be:ef:95:03:d9:05:af:aa:3a:c5:74:1d:60:f5:7d:74:c3:3d:
         02:6f:d3:00:68:40:7b:b3:c6:44:69:4b:30:68:b5:03:48:e0:
         60:d4:8a:b8:aa:22:4d:95:2e:3a:f7:94:c0:13:53:39:9d:fa:
         d3:f0:5c:36:97:7d:05:b0:15:79:24:f0:30:f6:f5:ba:46:af:
         45:52:b2:b1:67:18:4d:6f:1e:4b:7d:d6:1d:e8:a0:98:df:f3:
         b1:3f:ca:a0:33:24:a4:9e:c9:05:5b:f7:5f:b5:ed:bb:bb:c6:
         f4:8b:a9:c5:51:a6:11:c1:72:3b:f1:a8:a6:85:21:0f:bd:4e:
         43:9c:71:30:f2:a7:61:60:25:94:c4:59:99:cd:4e:86:fb:f3:
         e8:99:85:1f:ac:9e:22:1a:79:aa:67:48:21:35:83:ce:bf:a0:
         f2:78:14:03:95:15:3e:19:70:35:75:c9:8b:83:b2:e1:e4:04:
         99:7d:6d:c4:65:2a:f3:05:9f:97:25:64:8d:85:11:48:d3:0b:
         b4:57:eb:f1:25:07:e5:46:ba:cb:95:f2:6c:38:b1:df:77:b2:
         ba:6d:2a:40:b6:39:6c:4e:c5:b3:8f:94:48:6c:09:a2:6d:d0:
         4d:f4:d1:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAy6yil4W32QIQ/nemA5y9y/yIKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJEMzU1QzNFOUUyNDU1NUUwMjFERDRDMzBFQzA4NEY1
QzU3RUMzMjAeFw0yNjA5MDgyMTI4MjFaFw0yNzA5MDcyMTMzMjFaMDMxMTAvBgNV
BAMTKDRCQkJERjkyNENCRUVEMUQyMkEwMUNFQkZERDg0RDVDQkI0QjA3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8W/GDp2r/JWYaoXN6LR8BK+RG
j3tzZMSgo3NDJv52IYaQ+INph5CJVialiFFARaCzZqCOzaAtrgrLQV0t53bYjDvo
uIN3trFB6u94tIbHLD4qgSFdcOSztAyD4pQDS7+kFnKvqVtxK1dr9V/fL8RpkZ1k
VPI9/eb+X35nvScgrthNup+7YG2bpQPWpRQGcaWVDJWGx/uFjvwSAYpzsZTKE2JX
t1/WRJEkTlO1Kg5V7uK7Zkdk//M+9lTMgnqejPyVDjZJ7ohkvic731HGkt6k1v0D
HZdThUHkCVCaQ6tHSXn/I4vvjUPkcmjFvlra08vSxMmo7v/Ls6HAj0/+AgIfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUS7vfkky+7R0ioBzr/dhNXLtLB9IwHwYDVR0j
BBgwFoAU29NVw+niRVXgId1MMOwIT1xX7DIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk52U0d0U0ZCYzh1azhEbTRqR212NHpZMTVLUE5YU2Z0aG8yTFRXdmdG
eGIvMC9EQkQzNTVDM0U5RTI0NTU1RTAyMURENEMzMEVDMDg0RjVDNTdFQzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRDM1NUMzRTlFMjQ1NTVF
MDIxREQ0QzMwRUMwODRGNUM1N0VDMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOdlNHdFNGQmM4dWs4RG00akdtdjR6WTE1S1BOWFNmdGhvMkxUV3ZnRnhiLzAv
MzQzNTJlMzIzMzMzMmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLekMMA0GCSqGSIb3DQEBCwUAA4IBAQBvqxV/ER1O
LiLTSH1SHJEasX2+75UD2QWvqjrFdB1g9X10wz0Cb9MAaEB7s8ZEaUswaLUDSOBg
1Iq4qiJNlS4695TAE1M5nfrT8Fw2l30FsBV5JPAw9vW6Rq9FUrKxZxhNbx5LfdYd
6KCY3/OxP8qgMySknskFW/dfte27u8b0i6nFUaYRwXI78aimhSEPvU5DnHEw8qdh
YCWUxFmZzU6G+/PomYUfrJ4iGnmqZ0ghNYPOv6DyeBQDlRU+GXA1dcmLg7Lh5ASZ
fW3EZSrzBZ+XJWSNhRFI0wu0V+vxJQflRrrLlfJsOLHfd7K6bSpAtjlsTsWzj5RI
bAmibdBN9NF6
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:57 2026 by rpki-client