Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          FpWvDhQT6XKwrvAFWKJJD8AfakR69e57rrSwsMdD4tA=
Subject key identifier:   D0:6E:0A:0D:B5:84:55:E8:D7:43:91:E6:F7:AE:04:89:4E:94:D1:8E
Certificate issuer:       /CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
Certificate serial:       357DDBF1B041312736722FADFB1D7220BACFF5C3
Authority key identifier: 90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa
Signing time:             Fri 10 Jul 2026 21:21:08 +0000
ROA not before:           Fri 10 Jul 2026 21:16:08 +0000
ROA not after:            Fri 09 Jul 2027 21:21:08 +0000
asID:                     268248
IP address blocks:        45.236.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl
                          rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7d:db:f1:b0:41:31:27:36:72:2f:ad:fb:1d:72:20:ba:cf:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
        Validity
            Not Before: Jul 10 21:16:08 2026 GMT
            Not After : Jul  9 21:21:08 2027 GMT
        Subject: CN=D06E0A0DB58455E8D74391E6F7AE04894E94D18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:35:23:e4:5d:89:74:4b:93:61:cc:b5:09:
                    0e:22:b5:93:0e:c9:65:db:d3:b8:1a:92:3c:58:89:
                    ee:7b:70:19:fd:d8:43:63:94:e2:50:d1:a4:6d:fb:
                    be:9f:19:7f:4e:07:36:72:be:a4:8d:bd:e4:0a:e5:
                    db:b5:cf:20:92:aa:95:6a:6b:f8:b1:e3:49:c2:63:
                    e6:a5:b0:b5:66:7b:c6:3f:6d:a0:6c:ea:c9:eb:65:
                    a8:d0:8a:15:da:d2:8a:52:c4:6b:e5:9f:fa:fd:1e:
                    7e:03:43:ee:16:88:84:a1:1a:96:a8:de:ae:f0:d9:
                    63:15:c6:be:29:77:5e:13:5c:73:de:04:5b:11:82:
                    24:88:83:f5:df:aa:bf:2f:a3:31:eb:69:01:07:4e:
                    4c:f2:ea:ac:b9:94:e4:a3:6a:e1:0b:36:a2:f6:fa:
                    99:31:68:4e:6b:e6:60:ab:4a:22:2d:db:e3:5f:fd:
                    fe:e3:43:4d:4b:6b:f9:b3:34:6b:ac:4a:4d:e2:7c:
                    cc:ab:08:bb:f9:ac:17:ff:ef:fc:ed:91:d0:c3:d2:
                    65:60:1a:20:ee:5a:04:81:ff:dc:eb:15:32:64:33:
                    ba:b5:46:be:cc:21:ab:b3:88:74:39:e8:ee:ed:19:
                    6d:89:f6:54:15:94:d2:f6:47:df:6b:a4:4a:03:03:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:0A:0D:B5:84:55:E8:D7:43:91:E6:F7:AE:04:89:4E:94:D1:8E
            X509v3 Authority Key Identifier:
                keyid:90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232312e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:09:d0:e8:5e:53:77:46:42:bf:81:8c:8c:95:a4:8d:26:
         37:7f:16:b1:39:08:ed:fc:1a:87:4e:a7:f4:eb:83:a5:f3:6a:
         1a:15:b2:6f:27:f5:98:93:9f:69:d2:0d:02:cf:29:89:8c:97:
         c6:3e:eb:4e:be:46:8e:3b:13:42:75:84:f6:e3:6c:2c:33:e6:
         fd:c4:75:4d:a0:20:e6:e9:0e:92:e7:cf:3b:cc:95:c8:89:02:
         c9:bd:7b:96:7f:66:2e:c9:98:3a:63:8d:51:6d:16:40:d1:a0:
         6e:0f:0f:d7:d9:5b:d8:de:96:d4:8e:42:72:2b:4d:45:c5:cd:
         e8:2e:9c:71:1d:4d:79:4b:ec:f1:52:41:dc:e6:5a:78:83:ad:
         e0:c2:7a:6f:db:11:78:39:17:b2:04:97:80:93:ff:a1:ac:70:
         ea:f1:71:47:7f:d2:e0:95:e1:c0:5e:7e:2d:9e:d9:3f:e2:d3:
         2b:3a:a1:32:c8:62:4b:98:af:6d:a3:da:8e:f4:49:b9:a4:a8:
         4a:db:97:70:50:88:0e:52:d1:bf:44:9e:ef:7f:d4:2e:1d:dc:
         8e:8c:a7:b6:6b:d8:9e:2c:59:89:e7:a9:1b:d5:dd:e2:3a:11:
         be:a4:e3:88:9c:fc:db:c5:0a:92:31:cb:c0:98:24:4e:e3:4d:
         c1:73:89:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNX3b8bBBMSc2ci+t+x1yILrP9cMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDNEJBQ0MyN0JDQ0VFMjlCRTJENzM2OUU5OEE1RUZG
RjlBQzA3OTAeFw0yNjA3MTAyMTE2MDhaFw0yNzA3MDkyMTIxMDhaMDMxMTAvBgNV
BAMTKEQwNkUwQTBEQjU4NDU1RThENzQzOTFFNkY3QUUwNDg5NEU5NEQxOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmzUj5F2JdEuTYcy1CQ4itZMO
yWXb07gakjxYie57cBn92ENjlOJQ0aRt+76fGX9OBzZyvqSNveQK5du1zyCSqpVq
a/ix40nCY+alsLVme8Y/baBs6snrZajQihXa0opSxGvln/r9Hn4DQ+4WiIShGpao
3q7w2WMVxr4pd14TXHPeBFsRgiSIg/Xfqr8vozHraQEHTkzy6qy5lOSjauELNqL2
+pkxaE5r5mCrSiIt2+Nf/f7jQ01La/mzNGusSk3ifMyrCLv5rBf/7/ztkdDD0mVg
GiDuWgSB/9zrFTJkM7q1Rr7MIauziHQ56O7tGW2J9lQVlNL2R99rpEoDA9lHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0G4KDbWEVejXQ5Hm964EiU6U0Y4wHwYDVR0j
BBgwFoAUkMS6zCe8zuKb4tc2npil7/+awHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZWRERaZVA4Skt6QzJtUndhRnVIQXRiMnpuYU5IQ3p4NFU1RUh0VllQ
SEwvMC85MEM0QkFDQzI3QkNDRUUyOUJFMkQ3MzY5RTk4QTVFRkZGOUFDMDc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwQzRCQUNDMjdCQ0NFRTI5
QkUyRDczNjlFOThBNUVGRkY5QUMwNzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWVkREWmVQOEpLekMybVJ3YUZ1SEF0YjJ6bmFOSEN6eDRVNUVIdFZZUEhMLzAv
MzQzNTJlMzIzMzM2MmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7N0wDQYJKoZIhvcNAQELBQADggEBAHULCdDo
XlN3RkK/gYyMlaSNJjd/FrE5CO38GodOp/Trg6XzahoVsm8n9ZiTn2nSDQLPKYmM
l8Y+606+Ro47E0J1hPbjbCwz5v3EdU2gIObpDpLnzzvMlciJAsm9e5Z/Zi7JmDpj
jVFtFkDRoG4PD9fZW9jeltSOQnIrTUXFzegunHEdTXlL7PFSQdzmWniDreDCem/b
EXg5F7IEl4CT/6GscOrxcUd/0uCV4cBefi2e2T/i0ys6oTLIYkuYr22j2o70Sbmk
qErbl3BQiA5S0b9Enu9/1C4d3I6Mp7Zr2J4sWYnnqRvV3eI6Eb6k44ic/NvFCpIx
y8CYJE7jTcFzic4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:43:22 2026 by rpki-client