Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
File:                     34352e3138392e31362e302f32322d3234203d3e20323639353438.roa (raw, json)
Hash identifier:          4zMLSLcOZgPdP3SeG+D2y5zBkxNsPVpzFOUfg6g1YYc=
Subject key identifier:   66:B7:E6:EB:FD:97:85:3E:A3:B4:05:EC:D7:38:9F:D3:6C:85:BF:D2
Certificate issuer:       /CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
Certificate serial:       44A68A6850CFB5D99E328B026313A5D9516D1B2C
Authority key identifier: F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa
Signing time:             Thu 05 Mar 2026 15:52:59 +0000
ROA not before:           Thu 05 Mar 2026 15:47:59 +0000
ROA not after:            Thu 04 Mar 2027 15:52:59 +0000
asID:                     269548
IP address blocks:        45.189.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl
                          rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a6:8a:68:50:cf:b5:d9:9e:32:8b:02:63:13:a5:d9:51:6d:1b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F467F4F197CE6B4A22E157A50E42BA83A46CF57D
        Validity
            Not Before: Mar  5 15:47:59 2026 GMT
            Not After : Mar  4 15:52:59 2027 GMT
        Subject: CN=66B7E6EBFD97853EA3B405ECD7389FD36C85BFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:4c:fa:59:8e:c4:36:81:3c:a5:a7:78:88:
                    74:ba:3c:e5:35:ed:c6:43:b1:bf:fa:e7:2c:3f:1e:
                    2f:87:72:ad:94:e4:7e:53:56:b0:5e:63:66:61:5b:
                    46:d8:45:57:27:52:80:c8:60:a4:91:f1:45:5c:4a:
                    9f:34:be:1e:a8:fa:19:27:2d:6b:0d:f2:c6:70:bd:
                    a4:ac:b8:50:e7:33:e9:ec:c0:22:bf:4c:29:8f:1f:
                    53:98:64:5c:70:fc:6a:47:cb:c6:e3:1d:72:de:24:
                    7f:92:8f:ab:30:6e:75:7b:b0:3f:b8:10:94:ed:7a:
                    db:e2:8a:f8:66:d0:52:a4:f2:1a:90:ef:42:f9:15:
                    35:84:d8:ce:d3:7f:b8:0a:bd:25:74:ba:8c:4d:20:
                    c5:00:19:46:b5:84:01:38:0e:9b:de:b7:f1:38:df:
                    e6:a5:8f:1f:58:10:a7:5f:be:41:56:71:f0:28:ef:
                    30:ca:d4:b6:f0:12:f2:b2:f4:17:5b:96:bf:8d:32:
                    7b:03:c9:16:27:f4:cb:22:f8:8e:93:ff:85:37:66:
                    3b:6a:ad:60:08:d0:85:bf:1b:a4:32:f7:cf:f5:63:
                    62:0a:ff:be:ec:0b:18:1a:4f:40:35:3e:ac:c9:3f:
                    ce:bb:f8:1a:59:3a:8d:2f:5e:ee:f4:3a:7d:f7:ca:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:E6:EB:FD:97:85:3E:A3:B4:05:EC:D7:38:9F:D3:6C:85:BF:D2
            X509v3 Authority Key Identifier:
                keyid:F4:67:F4:F1:97:CE:6B:4A:22:E1:57:A5:0E:42:BA:83:A4:6C:F5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F467F4F197CE6B4A22E157A50E42BA83A46CF57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EjdFufC5zK8hFueP79BSigNNq6Xij9ADMU5giqk5oXJ8/0/34352e3138392e31362e302f32322d3234203d3e20323639353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:33:dc:bf:68:3d:b1:a0:38:81:aa:64:be:6b:7c:81:4b:
         fa:4f:f1:a5:0f:3e:a3:4b:37:10:5e:e5:25:47:72:52:d9:6c:
         da:71:3f:f9:fd:7c:2d:ce:ad:83:07:b8:6c:26:22:f5:47:5a:
         3d:f2:86:7c:a2:bb:b2:9c:42:b4:52:cf:f2:90:d8:c5:59:9b:
         d3:c0:16:25:ca:ea:81:ad:da:f3:72:4d:af:68:10:93:e4:53:
         f2:f9:fe:44:84:4e:6b:30:41:49:f0:9b:b3:80:14:9c:e9:d3:
         39:d1:1c:1a:07:6d:5a:b8:5e:13:ee:b8:59:ad:6a:cc:0b:b9:
         6d:35:73:7b:42:c8:3e:95:47:0b:b4:fc:18:e3:27:bc:93:8b:
         4c:06:81:5b:af:11:d6:cf:2d:a8:92:ca:97:8a:95:5f:95:0b:
         c7:b5:e1:58:84:f5:14:52:20:94:12:70:ff:fa:62:5e:88:6d:
         69:d5:38:2a:0a:d8:a9:d0:5b:ab:81:f6:71:0c:91:d2:6c:cd:
         a9:ba:50:52:f4:96:79:43:99:98:d0:6f:42:3e:c1:20:b8:e5:
         55:e7:b1:e0:60:e7:d0:45:f6:30:5a:da:fd:48:c6:2a:b8:87:
         5a:9c:e1:19:05:04:ba:dc:7a:f7:7d:f4:5c:d2:1c:bf:a0:7b:
         16:92:07:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURKaKaFDPtdmeMosCYxOl2VFtGywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2N0Y0RjE5N0NFNkI0QTIyRTE1N0E1MEU0MkJBODNB
NDZDRjU3RDAeFw0yNjAzMDUxNTQ3NTlaFw0yNzAzMDQxNTUyNTlaMDMxMTAvBgNV
BAMTKDY2QjdFNkVCRkQ5Nzg1M0VBM0I0MDVFQ0Q3Mzg5RkQzNkM4NUJGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/Ez6WY7ENoE8pad4iHS6POU1
7cZDsb/65yw/Hi+Hcq2U5H5TVrBeY2ZhW0bYRVcnUoDIYKSR8UVcSp80vh6o+hkn
LWsN8sZwvaSsuFDnM+nswCK/TCmPH1OYZFxw/GpHy8bjHXLeJH+Sj6swbnV7sD+4
EJTtetviivhm0FKk8hqQ70L5FTWE2M7Tf7gKvSV0uoxNIMUAGUa1hAE4Dpvet/E4
3+aljx9YEKdfvkFWcfAo7zDK1LbwEvKy9Bdblr+NMnsDyRYn9Msi+I6T/4U3Zjtq
rWAI0IW/G6Qy98/1Y2IK/77sCxgaT0A1PqzJP867+BpZOo0vXu70On33ynn9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZrfm6/2XhT6jtAXs1zif02yFv9IwHwYDVR0j
BBgwFoAU9Gf08ZfOa0oi4VelDkK6g6Rs9X0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpkRnVmQzV6SzhoRnVlUDc5QlNpZ05OcTZYaWo5QURNVTVnaXFrNW9Y
SjgvMC9GNDY3RjRGMTk3Q0U2QjRBMjJFMTU3QTUwRTQyQkE4M0E0NkNGNTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NjdGNEYxOTdDRTZCNEEy
MkUxNTdBNTBFNDJCQTgzQTQ2Q0Y1N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqZEZ1ZkM1eks4aEZ1ZVA3OUJTaWdOTnE2WGlqOUFETVU1Z2lxazVvWEo4LzAv
MzQzNTJlMzEzODM5MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb0QMA0GCSqGSIb3DQEBCwUAA4IBAQAenTPcv2g9
saA4gapkvmt8gUv6T/GlDz6jSzcQXuUlR3JS2WzacT/5/Xwtzq2DB7hsJiL1R1o9
8oZ8oruynEK0Us/ykNjFWZvTwBYlyuqBrdrzck2vaBCT5FPy+f5EhE5rMEFJ8Juz
gBSc6dM50RwaB21auF4T7rhZrWrMC7ltNXN7Qsg+lUcLtPwY4ye8k4tMBoFbrxHW
zy2oksqXipVflQvHteFYhPUUUiCUEnD/+mJeiG1p1TgqCtip0FurgfZxDJHSbM2p
ulBS9JZ5Q5mY0G9CPsEguOVV57HgYOfQRfYwWtr9SMYquIdanOEZBQS63Hr3ffRc
0hy/oHsWkgcD
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:31:00 2026 by rpki-client