Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/34352e3137312e38332e302f32342d3234203d3e20323638373434.roa
File:                     34352e3137312e38332e302f32342d3234203d3e20323638373434.roa (raw, json)
Hash identifier:          S44SxTXdA8i9anZ9K66fZF/H99rMdvb4M4wKRyPWVKU=
Subject key identifier:   B8:91:F9:5E:37:8A:12:77:C7:B1:33:72:0D:AB:DE:BD:45:7D:D8:06
Certificate issuer:       /CN=9D3C0781953986EE7D81A95463A85608A458DC6F
Certificate serial:       4834619D09C671929EF6FE319598BF8C0A39144C
Authority key identifier: 9D:3C:07:81:95:39:86:EE:7D:81:A9:54:63:A8:56:08:A4:58:DC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/34352e3137312e38332e302f32342d3234203d3e20323638373434.roa
Signing time:             Thu 10 Sep 2026 11:24:05 +0000
ROA not before:           Thu 10 Sep 2026 11:19:05 +0000
ROA not after:            Thu 09 Sep 2027 11:24:05 +0000
asID:                     268744
IP address blocks:        45.171.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.crl
                          rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:34:61:9d:09:c6:71:92:9e:f6:fe:31:95:98:bf:8c:0a:39:14:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3C0781953986EE7D81A95463A85608A458DC6F
        Validity
            Not Before: Sep 10 11:19:05 2026 GMT
            Not After : Sep  9 11:24:05 2027 GMT
        Subject: CN=B891F95E378A1277C7B133720DABDEBD457DD806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:d1:d6:b9:62:ee:27:6b:ce:d8:20:c0:43:
                    fb:ba:d7:c3:af:ec:5a:1d:12:31:43:fd:f2:be:63:
                    72:a2:13:52:a2:c7:fe:c7:ac:6b:94:e7:f6:ff:ee:
                    23:91:1a:33:a1:82:2a:69:1d:99:41:d4:0b:c2:a4:
                    a0:4a:cb:e3:c5:9f:20:03:0f:b8:8c:43:81:29:e2:
                    6c:d8:9a:bc:7d:7d:a6:54:3f:f0:59:bd:4b:02:71:
                    f5:35:10:69:b2:fe:de:23:ac:60:e9:90:f0:1f:e0:
                    a9:dc:0f:35:50:b6:2a:ee:9e:f8:af:9c:c7:24:cb:
                    d8:34:b2:b4:42:f8:3d:eb:a6:0e:04:8f:31:44:17:
                    d6:8e:bb:03:83:75:c5:6b:b4:ba:9b:ca:8d:b8:fb:
                    06:f5:85:4e:e2:ec:6b:6f:85:e8:82:28:2f:e8:f9:
                    3f:5f:57:fb:12:67:7d:06:c8:01:69:dc:59:d8:12:
                    9b:2b:a1:fb:99:ee:2d:26:0c:ae:2d:6d:d7:64:a1:
                    21:0a:65:c7:49:86:66:99:f5:e8:46:3b:3f:9b:64:
                    5b:30:5d:f1:9a:2a:9b:00:90:f8:05:6e:f8:e0:8d:
                    ae:fb:c0:fe:26:7b:57:22:5c:2f:e8:ec:7c:55:73:
                    9f:47:a9:b0:df:75:c2:8e:0f:01:c0:a6:71:ad:4b:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:F9:5E:37:8A:12:77:C7:B1:33:72:0D:AB:DE:BD:45:7D:D8:06
            X509v3 Authority Key Identifier:
                keyid:9D:3C:07:81:95:39:86:EE:7D:81:A9:54:63:A8:56:08:A4:58:DC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/34352e3137312e38332e302f32342d3234203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:89:4f:ce:14:da:18:29:06:09:be:29:0f:51:e2:68:50:
         a8:57:82:82:88:d1:a7:98:cc:b4:33:31:99:2d:5a:6a:c8:fa:
         6a:77:40:55:4e:26:7c:02:b2:80:3e:ff:41:54:0e:c7:3a:1d:
         d8:57:28:c6:4d:e8:95:b9:4f:64:a7:c8:b3:fb:a5:81:21:9a:
         ed:08:6b:eb:67:31:e3:48:68:53:ce:3a:59:2f:4f:1f:b0:c4:
         01:1e:5f:be:e8:22:e4:fc:48:5c:5c:4a:c9:46:d9:3e:43:52:
         a8:01:db:93:1e:af:c3:fc:46:29:be:7d:82:02:02:59:20:75:
         79:d1:8e:ef:09:99:4a:6d:bc:0c:2d:13:a9:b4:a9:1a:f3:05:
         4f:dc:2b:39:5a:97:13:1d:54:17:4f:a5:32:1d:89:f2:6a:6a:
         d2:2e:d0:30:0e:d6:87:ce:d0:aa:cb:b8:ab:66:08:80:19:c2:
         d5:05:7f:de:3a:ee:1a:52:c3:b9:7b:26:89:b8:52:be:36:af:
         4d:af:ce:31:b9:62:6b:1a:5e:64:47:38:9d:e9:7c:4e:fd:fa:
         75:00:8c:ed:fc:ca:5a:06:16:fc:69:43:98:be:80:ce:50:74:
         b2:96:14:20:9c:03:60:a6:ce:bb:cd:e4:a7:e5:cd:4d:19:c9:
         cc:0e:a4:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSDRhnQnGcZKe9v4xlZi/jAo5FEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzQzA3ODE5NTM5ODZFRTdEODFBOTU0NjNBODU2MDhB
NDU4REM2RjAeFw0yNjA5MTAxMTE5MDVaFw0yNzA5MDkxMTI0MDVaMDMxMTAvBgNV
BAMTKEI4OTFGOTVFMzc4QTEyNzdDN0IxMzM3MjBEQUJERUJENDU3REQ4MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADdHWuWLuJ2vO2CDAQ/u618Ov
7FodEjFD/fK+Y3KiE1Kix/7HrGuU5/b/7iORGjOhgippHZlB1AvCpKBKy+PFnyAD
D7iMQ4Ep4mzYmrx9faZUP/BZvUsCcfU1EGmy/t4jrGDpkPAf4KncDzVQtirunviv
nMcky9g0srRC+D3rpg4EjzFEF9aOuwODdcVrtLqbyo24+wb1hU7i7GtvheiCKC/o
+T9fV/sSZ30GyAFp3FnYEpsrofuZ7i0mDK4tbddkoSEKZcdJhmaZ9ehGOz+bZFsw
XfGaKpsAkPgFbvjgja77wP4me1ciXC/o7HxVc59HqbDfdcKODwHApnGtS8oFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuJH5XjeKEnfHsTNyDavevUV92AYwHwYDVR0j
BBgwFoAUnTwHgZU5hu59galUY6hWCKRY3G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVg2dVVQRFBib3FMYnNaTnhkN3BucnNkNFFYampNVEhjVVJNcXRqdkdh
UFovMC85RDNDMDc4MTk1Mzk4NkVFN0Q4MUE5NTQ2M0E4NTYwOEE0NThEQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEM0MwNzgxOTUzOTg2RUU3
RDgxQTk1NDYzQTg1NjA4QTQ1OERDNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYNnVVUERQYm9xTGJzWk54ZDdwbnJzZDRRWGpqTVRIY1VSTXF0anZHYVBaLzAv
MzQzNTJlMzEzNzMxMmUzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzczNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALatTMA0GCSqGSIb3DQEBCwUAA4IBAQAPAIlPzhTa
GCkGCb4pD1HiaFCoV4KCiNGnmMy0MzGZLVpqyPpqd0BVTiZ8ArKAPv9BVA7HOh3Y
VyjGTeiVuU9kp8iz+6WBIZrtCGvrZzHjSGhTzjpZL08fsMQBHl++6CLk/EhcXErJ
Rtk+Q1KoAduTHq/D/EYpvn2CAgJZIHV50Y7vCZlKbbwMLROptKka8wVP3Cs5WpcT
HVQXT6UyHYnyamrSLtAwDtaHztCqy7irZgiAGcLVBX/eOu4aUsO5eyaJuFK+Nq9N
r84xuWJrGl5kRzid6XxO/fp1AIzt/MpaBhb8aUOYvoDOUHSylhQgnANgps67zeSn
5c1NGcnMDqRS
-----END CERTIFICATE-----
Generated at Fri Oct 16 12:24:51 2026 by rpki-client