Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa
File:                     34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa (raw, json)
Hash identifier:          xACVkGtWs8rnv/50NdPbsbwmjDMGGYB+8pwE/kwOhwY=
Subject key identifier:   14:6D:3F:6A:2E:71:87:A1:A4:A9:B9:FA:09:22:9C:FC:71:22:96:8B
Certificate issuer:       /CN=53836BEB7A42429EEE86341924926CF42BA1E8A4
Certificate serial:       7D682D41D5D32D932F218A5229670EFD7B2A9FE2
Authority key identifier: 53:83:6B:EB:7A:42:42:9E:EE:86:34:19:24:92:6C:F4:2B:A1:E8:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa
Signing time:             Fri 11 Sep 2026 14:23:21 +0000
ROA not before:           Fri 11 Sep 2026 14:18:21 +0000
ROA not after:            Fri 10 Sep 2027 14:23:21 +0000
asID:                     269044
IP address blocks:        45.178.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 17:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:2d:41:d5:d3:2d:93:2f:21:8a:52:29:67:0e:fd:7b:2a:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53836BEB7A42429EEE86341924926CF42BA1E8A4
        Validity
            Not Before: Sep 11 14:18:21 2026 GMT
            Not After : Sep 10 14:23:21 2027 GMT
        Subject: CN=146D3F6A2E7187A1A4A9B9FA09229CFC7122968B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:27:36:0c:a7:e5:79:7c:03:b1:23:24:89:
                    55:d9:d3:f1:ae:c8:26:1a:1f:e6:95:be:cb:4b:91:
                    74:e9:54:fd:1b:f2:b3:c7:4e:a4:93:69:d3:70:fe:
                    98:46:0e:16:4e:5d:2d:e9:f5:7a:2f:41:e4:c8:de:
                    59:c1:3e:15:ec:47:4a:64:8d:f0:7e:89:b9:11:21:
                    58:05:35:78:10:51:70:fa:89:a1:34:37:a9:b5:43:
                    e1:d2:c8:dc:67:33:92:b9:1c:97:dd:7f:35:59:a6:
                    e5:9e:42:e2:a0:3e:ba:00:5c:44:94:e8:9e:3d:81:
                    46:32:66:46:d5:b4:e1:5d:5c:15:f2:c1:a8:30:47:
                    41:06:7d:35:e9:c9:e3:a1:88:08:4e:96:14:02:fc:
                    5b:ee:3a:c1:60:99:69:d2:bc:65:11:56:2d:4e:ef:
                    62:c9:23:d3:bc:1e:22:d5:5d:b5:cd:0e:b5:28:fd:
                    56:17:99:2e:37:fd:7a:8b:dc:16:1c:93:d1:dc:9a:
                    68:f3:03:23:89:73:c3:8b:c2:55:4c:49:d0:0f:9a:
                    01:78:16:5b:8c:cc:9a:ba:16:42:c8:3a:ca:80:66:
                    88:d1:0e:4a:4c:b0:9d:bd:14:c4:14:42:83:42:a3:
                    5f:b3:0c:be:36:96:a4:6f:56:04:cd:c3:d6:ce:b9:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6D:3F:6A:2E:71:87:A1:A4:A9:B9:FA:09:22:9C:FC:71:22:96:8B
            X509v3 Authority Key Identifier:
                keyid:53:83:6B:EB:7A:42:42:9E:EE:86:34:19:24:92:6C:F4:2B:A1:E8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233322e302f32322d3232203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:3f:a3:16:b9:f5:9f:63:24:7b:46:cc:cd:51:7e:2f:42:f9:
         df:bc:15:89:ab:06:0a:c2:df:a6:04:eb:d4:11:3b:fe:22:38:
         e7:39:60:36:01:c3:15:29:2b:4a:b4:89:ce:d7:2a:35:f1:60:
         fa:43:d4:cf:f2:39:f2:0a:4c:da:5e:58:3c:5d:d0:69:4a:2a:
         f1:fe:3b:ce:68:9e:d9:ec:f8:6c:ab:0d:4d:b8:44:5c:3f:a6:
         c5:7d:65:38:02:59:19:74:35:a2:b3:75:dc:e0:f6:f1:68:35:
         24:e8:ac:ff:33:fb:ef:93:c9:e7:ff:ae:aa:de:92:fd:6d:06:
         ee:e7:5a:64:d0:a1:5f:e5:58:5f:bd:d8:b2:0f:b8:95:06:99:
         77:e7:e8:ac:80:40:65:79:89:96:6c:a7:51:5e:71:2a:e5:d8:
         07:7b:87:ba:68:57:87:19:b3:c1:9e:34:9e:a7:59:8a:c1:55:
         f1:de:8a:fa:0c:02:af:0a:49:7b:5d:0d:3c:51:31:4a:e2:32:
         29:23:48:21:2c:21:14:ea:21:79:36:72:25:e4:f7:2f:dd:4a:
         fa:ea:4a:5c:bc:67:87:fb:74:10:5f:e4:49:0d:f4:c9:ff:1c:
         bc:22:11:01:6b:fe:f9:25:88:81:b8:d0:34:94:97:6a:c2:e9:
         5b:4a:77:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfWgtQdXTLZMvIYpSKWcO/Xsqn+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MzZCRUI3QTQyNDI5RUVFODYzNDE5MjQ5MjZDRjQy
QkExRThBNDAeFw0yNjA5MTExNDE4MjFaFw0yNzA5MTAxNDIzMjFaMDMxMTAvBgNV
BAMTKDE0NkQzRjZBMkU3MTg3QTFBNEE5QjlGQTA5MjI5Q0ZDNzEyMjk2OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBSc2DKfleXwDsSMkiVXZ0/Gu
yCYaH+aVvstLkXTpVP0b8rPHTqSTadNw/phGDhZOXS3p9XovQeTI3lnBPhXsR0pk
jfB+ibkRIVgFNXgQUXD6iaE0N6m1Q+HSyNxnM5K5HJfdfzVZpuWeQuKgProAXESU
6J49gUYyZkbVtOFdXBXywagwR0EGfTXpyeOhiAhOlhQC/FvuOsFgmWnSvGURVi1O
72LJI9O8HiLVXbXNDrUo/VYXmS43/XqL3BYck9HcmmjzAyOJc8OLwlVMSdAPmgF4
FluMzJq6FkLIOsqAZojRDkpMsJ29FMQUQoNCo1+zDL42lqRvVgTNw9bOuUjLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFG0/ai5xh6Gkqbn6CSKc/HEiloswHwYDVR0j
BBgwFoAUU4Nr63pCQp7uhjQZJJJs9Cuh6KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2
ZGgvMC81MzgzNkJFQjdBNDI0MjlFRUU4NjM0MTkyNDkyNkNGNDJCQTFFOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzODM2QkVCN0E0MjQyOUVF
RTg2MzQxOTI0OTI2Q0Y0MkJBMUU4QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4NXFGdVdqZUppNjFxdEF6eDJzWVdVUFU5eUdNeHpLWkdYVzF0SHFqNmRoLzAv
MzQzNTJlMzEzNzM4MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsugwDQYJKoZIhvcNAQELBQADggEBAOU/oxa5
9Z9jJHtGzM1Rfi9C+d+8FYmrBgrC36YE69QRO/4iOOc5YDYBwxUpK0q0ic7XKjXx
YPpD1M/yOfIKTNpeWDxd0GlKKvH+O85ontns+GyrDU24RFw/psV9ZTgCWRl0NaKz
ddzg9vFoNSTorP8z+++Tyef/rqrekv1tBu7nWmTQoV/lWF+92LIPuJUGmXfn6KyA
QGV5iZZsp1FecSrl2Ad7h7poV4cZs8GeNJ6nWYrBVfHeivoMAq8KSXtdDTxRMUri
MikjSCEsIRTqIXk2ciXk9y/dSvrqSly8Z4f7dBBf5EkN9Mn/HLwiEQFr/vkliIG4
0DSUl2rC6VtKdyk=
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:27:18 2026 by rpki-client