Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
File:                     34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (raw, json)
Hash identifier:          SH/H79dhq9ZDRW6z+pRdV00UqWxGpL2yEZFuewPOr+4=
Subject key identifier:   E4:50:25:18:9C:C1:0A:F8:59:F0:D1:B0:F7:F1:58:78:C2:11:CE:BD
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       696E7D79B2C64B820181E442B819D7CA42998DDC
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa
Signing time:             Wed 02 Sep 2026 13:21:45 +0000
ROA not before:           Wed 02 Sep 2026 13:16:45 +0000
ROA not after:            Wed 01 Sep 2027 13:21:45 +0000
asID:                     269014
IP address blocks:        45.176.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6e:7d:79:b2:c6:4b:82:01:81:e4:42:b8:19:d7:ca:42:99:8d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Sep  2 13:16:45 2026 GMT
            Not After : Sep  1 13:21:45 2027 GMT
        Subject: CN=E45025189CC10AF859F0D1B0F7F15878C211CEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:d2:3c:b1:d1:75:bf:4e:49:34:9f:eb:6f:
                    d4:11:95:d2:be:74:bf:39:f7:3d:57:35:ae:9e:ef:
                    c8:ec:cc:dc:10:44:42:52:c5:e5:74:9d:19:99:78:
                    7e:82:b5:f8:86:23:00:ca:3d:d4:8c:cc:ff:75:5e:
                    3e:49:37:35:cb:c4:5a:be:b7:5d:40:f6:db:c5:30:
                    07:57:c1:b5:93:f8:0b:75:4d:40:2b:fa:f8:c4:78:
                    a6:50:07:94:15:d2:8b:dc:47:1b:ac:e0:c7:0f:25:
                    02:0b:28:bb:a3:18:d2:68:59:27:68:24:3e:e4:0f:
                    da:48:4d:cd:a9:d7:9f:25:3f:b5:d3:83:7c:9d:06:
                    3a:2c:39:bf:27:51:6e:28:e0:84:96:08:66:35:7e:
                    43:a9:19:bc:ec:6b:e0:cd:af:ba:b5:ea:fd:ec:4b:
                    d7:42:dc:05:9a:d5:fd:0d:bc:5d:ab:4d:13:7f:c8:
                    ab:61:1d:b3:57:e6:ae:b8:19:05:2e:17:b1:22:ba:
                    20:35:d5:43:58:76:2f:b5:75:5f:b7:04:55:a3:c9:
                    ba:fb:b7:58:9f:d3:d6:4f:14:77:7c:54:b2:33:26:
                    87:9f:bb:e7:65:a2:67:3b:a2:42:7d:e6:b2:ef:9f:
                    e7:be:1f:14:cd:18:42:3e:22:55:c2:19:3c:34:7a:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:25:18:9C:C1:0A:F8:59:F0:D1:B0:F7:F1:58:78:C2:11:CE:BD
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:6b:c9:0c:41:d8:5c:79:a1:a7:61:7c:27:8e:03:cc:95:
         98:84:83:48:f8:c0:cc:a0:52:94:c8:d5:43:4f:58:c0:d4:f5:
         18:a7:ea:ec:47:15:b8:bf:ec:5c:8f:12:46:6d:30:8f:d1:0c:
         99:0a:e6:06:7d:e0:bc:a8:92:66:41:d6:5f:e5:be:a4:8e:68:
         46:bb:fb:29:fe:70:43:8c:47:66:f5:f2:00:42:3c:4f:f5:85:
         fb:61:fd:71:b5:80:57:54:aa:28:a4:09:e3:a3:71:af:ee:9f:
         08:da:b3:64:56:eb:04:27:c3:7d:36:c8:9c:b1:39:15:56:0a:
         ea:7b:98:3c:86:98:03:91:d9:ec:14:f3:61:31:f3:85:67:01:
         a7:05:ba:1e:f8:90:4b:5f:f0:f6:a2:a5:06:11:97:cc:1a:14:
         cf:07:2f:60:08:b7:cf:09:86:be:76:e0:0c:99:b2:68:a4:77:
         cd:b7:88:f7:e3:1e:1d:78:b1:9c:d6:7d:15:d1:10:1f:99:48:
         3b:12:cf:40:81:8f:5a:d1:47:15:1a:35:52:27:28:2e:91:ef:
         bd:a3:68:11:dc:fc:8f:97:86:b0:45:79:8e:62:a1:fd:e8:aa:
         bd:66:2b:fe:68:81:4d:6c:54:8d:cf:c5:fc:8b:fd:00:40:b2:
         45:a1:fe:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaW59ebLGS4IBgeRCuBnXykKZjdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0
MzEzQUZFRTAeFw0yNjA5MDIxMzE2NDVaFw0yNzA5MDExMzIxNDVaMDMxMTAvBgNV
BAMTKEU0NTAyNTE4OUNDMTBBRjg1OUYwRDFCMEY3RjE1ODc4QzIxMUNFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYStI8sdF1v05JNJ/rb9QRldK+
dL859z1XNa6e78jszNwQREJSxeV0nRmZeH6CtfiGIwDKPdSMzP91Xj5JNzXLxFq+
t11A9tvFMAdXwbWT+At1TUAr+vjEeKZQB5QV0ovcRxus4McPJQILKLujGNJoWSdo
JD7kD9pITc2p158lP7XTg3ydBjosOb8nUW4o4ISWCGY1fkOpGbzsa+DNr7q16v3s
S9dC3AWa1f0NvF2rTRN/yKthHbNX5q64GQUuF7EiuiA11UNYdi+1dV+3BFWjybr7
t1if09ZPFHd8VLIzJoefu+dlomc7okJ95rLvn+e+HxTNGEI+IlXCGTw0ekYhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5FAlGJzBCvhZ8NGw9/FYeMIRzr0wHwYDVR0j
BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY
V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF
NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4VEtFNkwxNEZIZlNMcm5CMWtRMmI1amh0Y2lmNlB4dGhORTlaVDRUWFdQLzAv
MzQzNTJlMzEzNzM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsNwwDQYJKoZIhvcNAQELBQADggEBAIMua8kM
QdhceaGnYXwnjgPMlZiEg0j4wMygUpTI1UNPWMDU9Rin6uxHFbi/7FyPEkZtMI/R
DJkK5gZ94LyokmZB1l/lvqSOaEa7+yn+cEOMR2b18gBCPE/1hfth/XG1gFdUqiik
CeOjca/unwjas2RW6wQnw302yJyxORVWCup7mDyGmAOR2ewU82Ex84VnAacFuh74
kEtf8PaipQYRl8waFM8HL2AIt88Jhr524AyZsmikd823iPfjHh14sZzWfRXREB+Z
SDsSz0CBj1rRRxUaNVInKC6R772jaBHc/I+XhrBFeY5iof3oqr1mK/5ogU1sVI3P
xfyL/QBAskWh/sU=
-----END CERTIFICATE-----