Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
File:                     34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (raw, json)
Hash identifier:          C4luBKFLpt/AxKj4LeuNKUIt1Gx1K/ckGbksOyY3xd8=
Subject key identifier:   97:43:F2:33:61:D2:58:6C:FB:FC:20:74:16:F4:37:54:BC:7A:FF:E1
Certificate issuer:       /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial:       35762529D995383F891950CC56F7BB9C205D7E2D
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa
Signing time:             Mon 27 Apr 2026 14:00:27 +0000
ROA not before:           Mon 27 Apr 2026 13:55:27 +0000
ROA not after:            Mon 26 Apr 2027 14:00:27 +0000
asID:                     268668
IP address blocks:        45.164.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:76:25:29:d9:95:38:3f:89:19:50:cc:56:f7:bb:9c:20:5d:7e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF3BD981631E49037509A952007559286688690
        Validity
            Not Before: Apr 27 13:55:27 2026 GMT
            Not After : Apr 26 14:00:27 2027 GMT
        Subject: CN=9743F23361D2586CFBFC207416F43754BC7AFFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:c9:fb:5b:3b:a2:d7:20:d2:d0:21:b1:fa:
                    26:cb:5f:bf:b0:49:b0:b7:a7:75:fc:e7:b2:0a:85:
                    e2:71:06:d1:7a:b4:5e:3d:bd:04:08:8c:77:48:5a:
                    a5:d9:69:38:5c:ff:ad:3a:38:4b:ac:81:58:28:1b:
                    f3:91:c8:db:d2:7a:89:04:fb:34:d0:54:1d:ef:b8:
                    05:a3:ad:0b:26:d5:02:3e:a6:cf:e4:8c:2a:a7:75:
                    00:59:a2:fc:10:5c:c1:6a:ad:90:f5:83:48:19:31:
                    b9:ad:33:0e:3a:49:60:4a:8b:ad:ab:61:a6:b3:fd:
                    7c:4c:f5:7d:5b:c0:4d:9d:ed:aa:e7:d6:2a:ba:bc:
                    68:7b:52:8f:05:fb:84:06:bf:fc:4e:b6:17:fc:81:
                    9c:be:0e:c2:a9:88:8b:81:87:01:39:d0:50:cf:6a:
                    b8:ae:2a:87:06:2f:de:12:ce:5c:96:86:82:6a:ba:
                    1c:27:29:45:ab:ba:4f:a9:25:a9:a2:f7:ad:49:fb:
                    cd:6a:33:42:c5:c3:18:8f:a9:98:03:e1:d6:05:cc:
                    ac:d8:53:d8:f1:69:55:4a:b7:90:43:06:af:0e:62:
                    4c:63:28:c1:da:e3:26:0e:f0:bf:dd:f7:e8:48:c1:
                    76:21:ca:d1:2a:72:70:c6:fa:ae:a0:c6:c4:7d:c3:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:F2:33:61:D2:58:6C:FB:FC:20:74:16:F4:37:54:BC:7A:FF:E1
            X509v3 Authority Key Identifier:
                keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:da:74:5d:d2:a3:34:d9:dd:a2:0d:cc:09:0e:b2:6f:17:
         02:78:55:64:3d:a4:cc:09:66:50:53:2f:80:93:25:6c:3e:75:
         89:43:0c:83:28:61:ee:8b:20:13:92:17:af:38:ca:e2:23:cd:
         07:92:f9:0d:a2:74:9f:83:8b:2d:a5:a9:0c:eb:92:c1:81:32:
         71:10:69:a6:fd:6b:88:36:86:d9:b6:8d:ad:ce:ad:06:e2:3e:
         ab:6b:63:12:d6:1d:89:a6:64:c0:17:b1:6a:5c:53:9b:7e:71:
         69:00:73:9b:a3:8e:74:58:20:01:08:1f:9d:52:a6:ed:52:28:
         45:37:e8:94:c5:f8:b6:df:ba:dd:22:62:df:de:96:90:66:29:
         43:d2:bc:8c:b6:84:06:9f:6d:5d:8b:31:7c:92:e4:2f:9a:1f:
         2d:66:6b:88:70:af:5e:51:ff:79:c9:af:bf:37:af:a1:6b:bd:
         66:c2:f7:24:78:aa:81:24:c6:be:2c:a0:90:ad:a0:3d:36:39:
         00:7c:54:ee:18:65:0f:48:be:68:ac:9e:e0:6a:1e:e2:ba:9b:
         d0:49:03:77:d8:e4:17:13:c1:76:90:1b:25:da:2c:a4:b0:2d:
         a8:16:b3:11:ae:55:cd:c1:92:a9:e8:29:e4:80:4f:f8:73:bb:
         0b:dd:2d:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNXYlKdmVOD+JGVDMVve7nCBdfi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZGM0JEOTgxNjMxRTQ5MDM3NTA5QTk1MjAwNzU1OTI4
NjY4ODY5MDAeFw0yNjA0MjcxMzU1MjdaFw0yNzA0MjYxNDAwMjdaMDMxMTAvBgNV
BAMTKDk3NDNGMjMzNjFEMjU4NkNGQkZDMjA3NDE2RjQzNzU0QkM3QUZGRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsMn7Wzui1yDS0CGx+ibLX7+w
SbC3p3X857IKheJxBtF6tF49vQQIjHdIWqXZaThc/606OEusgVgoG/ORyNvSeokE
+zTQVB3vuAWjrQsm1QI+ps/kjCqndQBZovwQXMFqrZD1g0gZMbmtMw46SWBKi62r
Yaaz/XxM9X1bwE2d7arn1iq6vGh7Uo8F+4QGv/xOthf8gZy+DsKpiIuBhwE50FDP
ariuKocGL94SzlyWhoJquhwnKUWruk+pJami961J+81qM0LFwxiPqZgD4dYFzKzY
U9jxaVVKt5BDBq8OYkxjKMHa4yYO8L/d9+hIwXYhytEqcnDG+q6gxsR9w5llAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUl0PyM2HSWGz7/CB0FvQ3VLx6/+EwHwYDVR0j
BBgwFoAUL/O9mBYx5JA3UJqVIAdVkoZohpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt
Q1kvMC8yRkYzQkQ5ODE2MzFFNDkwMzc1MDlBOTUyMDA3NTU5Mjg2Njg4NjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjNCRDk4MTYzMUU0OTAz
NzUwOUE5NTIwMDc1NTkyODY2ODg2OTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyakJmY2NmSE1yNVROc3E1UUNmNUN3R2JFVmtLZnNKN3BkRnFtZ2tMbUNZLzAv
MzQzNTJlMzEzNjM0MmUzMjMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNjM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpNwwDQYJKoZIhvcNAQELBQADggEBAAvp2nRd
0qM02d2iDcwJDrJvFwJ4VWQ9pMwJZlBTL4CTJWw+dYlDDIMoYe6LIBOSF684yuIj
zQeS+Q2idJ+Diy2lqQzrksGBMnEQaab9a4g2htm2ja3OrQbiPqtrYxLWHYmmZMAX
sWpcU5t+cWkAc5ujjnRYIAEIH51Spu1SKEU36JTF+Lbfut0iYt/elpBmKUPSvIy2
hAafbV2LMXyS5C+aHy1ma4hwr15R/3nJr783r6FrvWbC9yR4qoEkxr4soJCtoD02
OQB8VO4YZQ9IvmisnuBqHuK6m9BJA3fY5BcTwXaQGyXaLKSwLagWsxGuVc3Bkqno
KeSAT/hzuwvdLZE=
-----END CERTIFICATE-----
Generated at Wed May 13 19:21:13 2026 by rpki-client