Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31352e302f32342d3234203d3e20323637323837.roa
File:                     34352e3233332e31352e302f32342d3234203d3e20323637323837.roa (raw, json)
Hash identifier:          xDCBIQykqc5ujY6x1BxakP/0i5Jh25sU0Dd2WZW+ho0=
Subject key identifier:   61:56:CD:23:64:08:AB:E7:B0:FF:6B:28:E4:45:8C:C6:4A:20:D6:E6
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       124990A3B9FBDA54AF34B52DB690BDB649BA0BE9
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31352e302f32342d3234203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 21:33:29 +0000
ROA not before:           Tue 08 Sep 2026 21:28:29 +0000
ROA not after:            Tue 07 Sep 2027 21:33:29 +0000
asID:                     267287
IP address blocks:        45.233.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 00:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:49:90:a3:b9:fb:da:54:af:34:b5:2d:b6:90:bd:b6:49:ba:0b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:28:29 2026 GMT
            Not After : Sep  7 21:33:29 2027 GMT
        Subject: CN=6156CD236408ABE7B0FF6B28E4458CC64A20D6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:5e:12:20:d9:76:ca:48:fe:fd:5f:2a:56:
                    d1:8e:c5:78:54:e6:15:04:16:dc:b3:99:40:69:5e:
                    84:38:b7:06:61:81:65:82:ae:e7:ff:79:ee:db:4e:
                    43:17:68:ee:29:41:93:19:c6:b7:94:58:e9:e7:09:
                    34:13:d7:50:23:b3:ab:87:f1:f6:11:24:1d:ac:4a:
                    a0:53:32:f9:b7:bc:ef:79:93:6e:dc:45:fa:2a:f4:
                    94:8a:79:75:72:1f:0b:7e:0c:e9:58:29:23:1c:5a:
                    ec:1d:50:03:2b:ee:5f:80:20:14:b6:f2:b1:7b:b4:
                    08:d5:dd:2b:04:fa:ce:f9:ec:55:89:75:73:0e:dc:
                    e1:4e:09:69:96:a9:d9:43:6e:28:e4:9c:60:f3:d9:
                    ed:a3:de:f8:e0:8b:cc:7b:57:36:67:39:8a:76:c0:
                    34:7d:59:3d:58:68:3d:63:6a:0f:01:88:6f:90:3f:
                    1e:c8:2d:70:1e:c9:7b:3e:ee:75:a4:38:67:3e:bc:
                    07:6b:d7:54:e4:d3:36:18:a5:75:8f:57:03:4e:c9:
                    a6:a0:99:e5:1a:33:04:be:88:17:74:72:f8:10:1b:
                    8a:62:a7:f4:b2:14:d9:ce:e1:bc:32:d6:16:d2:8a:
                    15:4a:17:2e:02:72:10:4a:12:5c:a6:53:0f:bc:27:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:CD:23:64:08:AB:E7:B0:FF:6B:28:E4:45:8C:C6:4A:20:D6:E6
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31352e302f32342d3234203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:53:fe:8f:ea:de:60:31:62:4c:43:69:da:61:04:4c:6c:ff:
         e1:c0:bc:b5:1b:95:1c:0d:09:3d:45:b2:4f:77:b6:f6:6b:84:
         bf:c8:f6:55:23:d8:00:88:e5:6f:75:d8:74:e2:96:d6:f1:72:
         5b:94:05:6e:85:b6:83:40:b7:a4:74:36:68:d4:fe:6d:00:61:
         58:dd:ef:c5:85:2e:b7:80:04:d4:42:47:e3:56:bd:49:bf:00:
         b9:ed:65:1e:05:f0:96:19:ae:73:c0:cf:2e:76:da:26:e5:b7:
         a7:e0:26:49:10:8c:66:8c:6c:75:15:0a:c4:61:cb:ec:f4:9f:
         f8:59:46:3b:a8:82:d6:aa:20:72:e9:fc:2b:55:3a:c1:23:f1:
         c9:fe:e9:28:6d:33:35:20:3b:23:61:35:55:58:27:a1:d2:e2:
         d0:ac:d2:6e:47:e0:db:9e:f6:3f:3f:19:63:93:b1:b8:20:b7:
         ec:13:d3:46:01:cf:06:2b:37:9e:c9:35:10:6e:56:c8:b8:3c:
         fc:cc:73:28:94:77:1f:87:58:d3:64:0e:68:52:a0:9c:45:15:
         51:5f:e8:17:01:d3:97:85:3f:3c:22:13:e8:be:88:1e:4d:a6:
         e0:b2:a4:73:f7:a9:94:4f:dd:4c:02:d8:7e:f9:de:31:11:bd:
         56:b6:14:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEkmQo7n72lSvNLUttpC9tkm6C+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJEMzU1QzNFOUUyNDU1NUUwMjFERDRDMzBFQzA4NEY1
QzU3RUMzMjAeFw0yNjA5MDgyMTI4MjlaFw0yNzA5MDcyMTMzMjlaMDMxMTAvBgNV
BAMTKDYxNTZDRDIzNjQwOEFCRTdCMEZGNkIyOEU0NDU4Q0M2NEEyMEQ2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUl4SINl2ykj+/V8qVtGOxXhU
5hUEFtyzmUBpXoQ4twZhgWWCruf/ee7bTkMXaO4pQZMZxreUWOnnCTQT11Ajs6uH
8fYRJB2sSqBTMvm3vO95k27cRfoq9JSKeXVyHwt+DOlYKSMcWuwdUAMr7l+AIBS2
8rF7tAjV3SsE+s757FWJdXMO3OFOCWmWqdlDbijknGDz2e2j3vjgi8x7VzZnOYp2
wDR9WT1YaD1jag8BiG+QPx7ILXAeyXs+7nWkOGc+vAdr11Tk0zYYpXWPVwNOyaag
meUaMwS+iBd0cvgQG4pip/SyFNnO4bwy1hbSihVKFy4CchBKElymUw+8J33lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYVbNI2QIq+ew/2so5EWMxkog1uYwHwYDVR0j
BBgwFoAU29NVw+niRVXgId1MMOwIT1xX7DIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk52U0d0U0ZCYzh1azhEbTRqR212NHpZMTVLUE5YU2Z0aG8yTFRXdmdG
eGIvMC9EQkQzNTVDM0U5RTI0NTU1RTAyMURENEMzMEVDMDg0RjVDNTdFQzMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRDM1NUMzRTlFMjQ1NTVF
MDIxREQ0QzMwRUMwODRGNUM1N0VDMzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOdlNHdFNGQmM4dWs4RG00akdtdjR6WTE1S1BOWFNmdGhvMkxUV3ZnRnhiLzAv
MzQzNTJlMzIzMzMzMmUzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALekPMA0GCSqGSIb3DQEBCwUAA4IBAQByU/6P6t5g
MWJMQ2naYQRMbP/hwLy1G5UcDQk9RbJPd7b2a4S/yPZVI9gAiOVvddh04pbW8XJb
lAVuhbaDQLekdDZo1P5tAGFY3e/FhS63gATUQkfjVr1JvwC57WUeBfCWGa5zwM8u
dtom5ben4CZJEIxmjGx1FQrEYcvs9J/4WUY7qILWqiBy6fwrVTrBI/HJ/ukobTM1
IDsjYTVVWCeh0uLQrNJuR+DbnvY/Pxljk7G4ILfsE9NGAc8GKzeeyTUQblbIuDz8
zHMolHcfh1jTZA5oUqCcRRVRX+gXAdOXhT88IhPovogeTabgsqRz96mUT91MAth+
+d4xEb1WthR7
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:21 2026 by rpki-client