Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          j3eKLWpTFOaVwXIJkQGIo5yCPB/GL+hPgHIZ9cWSySw=
Subject key identifier:   A3:E9:E5:B8:1F:19:56:E1:70:37:D2:3F:87:0E:17:7D:75:22:F3:FA
Certificate issuer:       /CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
Certificate serial:       1F0FD3DFA9BE1862AC59F54CCECD377D149D27A7
Authority key identifier: 80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa
Signing time:             Fri 11 Sep 2026 17:35:49 +0000
ROA not before:           Fri 11 Sep 2026 17:30:49 +0000
ROA not after:            Fri 10 Sep 2027 17:35:49 +0000
asID:                     268173
IP address blocks:        45.170.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 16:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0f:d3:df:a9:be:18:62:ac:59:f5:4c:ce:cd:37:7d:14:9d:27:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
        Validity
            Not Before: Sep 11 17:30:49 2026 GMT
            Not After : Sep 10 17:35:49 2027 GMT
        Subject: CN=A3E9E5B81F1956E17037D23F870E177D7522F3FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:19:80:c5:a4:5d:3c:64:aa:0d:87:90:22:da:
                    81:00:37:f3:53:e6:00:9b:be:25:73:5d:c8:ba:3d:
                    f1:c7:3f:b2:ee:25:f9:b7:e2:42:88:c0:95:fa:d4:
                    3f:62:4f:94:8d:6e:f5:52:29:89:12:6e:71:38:73:
                    05:25:3c:90:8d:a1:91:b6:10:3f:f3:43:78:ed:99:
                    af:9d:8d:33:2a:7b:87:8e:61:66:8b:4a:64:98:24:
                    c2:67:59:24:ec:cf:cd:59:10:87:56:94:bc:a4:c7:
                    e9:cd:9d:f5:10:8e:74:ef:38:61:96:68:df:74:91:
                    9f:67:86:d5:18:07:a6:aa:7d:da:25:7c:b6:25:3b:
                    fb:e7:fd:17:c7:6a:b4:ff:95:21:5f:9d:b1:95:cd:
                    5a:5c:ce:a6:46:e2:19:a8:bc:73:e3:44:6d:1f:3a:
                    b9:a3:17:de:b7:01:79:fd:a4:6f:49:67:53:a7:c8:
                    cb:f9:a4:2f:e4:fb:00:f6:f8:03:11:5b:5b:3a:df:
                    0a:3e:7f:c8:62:9b:13:ce:1e:72:37:62:52:69:7d:
                    6c:73:ff:5a:a0:1c:f8:8e:ff:e4:41:3a:d3:18:3a:
                    a0:a9:d4:54:11:f2:bd:d0:9d:61:ec:83:2b:64:ce:
                    91:52:41:50:1e:71:4e:30:76:61:82:10:a3:70:d4:
                    9d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:E5:B8:1F:19:56:E1:70:37:D2:3F:87:0E:17:7D:75:22:F3:FA
            X509v3 Authority Key Identifier:
                keyid:80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231392e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:df:06:b3:c8:cc:4d:da:7a:c4:5c:80:97:49:36:1f:77:28:
         d9:bf:d3:b0:a2:09:18:12:d1:d6:e7:c7:b2:ba:3b:69:ca:ae:
         f5:bb:c8:23:c9:11:c7:ec:86:da:3f:12:de:d3:c3:d4:47:f6:
         6a:97:ac:d5:45:88:6d:81:57:9b:50:ce:2b:62:d9:b5:16:1f:
         94:a8:77:71:0c:75:a4:68:80:8c:80:05:63:20:f8:c2:ba:6f:
         3d:8a:3f:67:71:81:23:3a:37:df:89:51:33:0f:a7:02:ae:5e:
         3f:16:ba:bc:15:38:7e:c2:b9:0b:de:e8:dc:47:1a:4f:49:1a:
         8e:7b:42:c2:95:17:82:71:ad:6f:91:3c:45:e1:0a:75:73:f7:
         02:11:f4:a5:e8:26:7c:07:51:5b:ca:c9:5c:86:e9:aa:13:b8:
         65:2d:47:22:4d:eb:2c:30:48:2c:cd:9b:b4:dc:51:ab:06:97:
         37:86:bc:69:b7:7c:33:49:49:25:bb:cb:36:40:70:ee:53:c1:
         27:53:86:8c:e9:0b:5b:75:b5:c6:ae:2e:fc:b8:5a:bd:6c:13:
         80:b1:92:6b:4b:46:68:83:89:d8:21:af:0c:23:57:8d:5d:26:
         00:f6:91:24:98:92:c6:da:c4:2b:00:e2:e7:f0:38:73:af:ab:
         06:cb:7b:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHw/T36m+GGKsWfVMzs03fRSdJ6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyRTBCQzgzN0ZFRjRGMDQ4NTI1NkNGNEJGNDBCRkY1
NTUxRDMzQzAeFw0yNjA5MTExNzMwNDlaFw0yNzA5MTAxNzM1NDlaMDMxMTAvBgNV
BAMTKEEzRTlFNUI4MUYxOTU2RTE3MDM3RDIzRjg3MEUxNzdENzUyMkYzRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGYDFpF08ZKoNh5Ai2oEAN/NT
5gCbviVzXci6PfHHP7LuJfm34kKIwJX61D9iT5SNbvVSKYkSbnE4cwUlPJCNoZG2
ED/zQ3jtma+djTMqe4eOYWaLSmSYJMJnWSTsz81ZEIdWlLykx+nNnfUQjnTvOGGW
aN90kZ9nhtUYB6aqfdolfLYlO/vn/RfHarT/lSFfnbGVzVpczqZG4hmovHPjRG0f
OrmjF963AXn9pG9JZ1OnyMv5pC/k+wD2+AMRW1s63wo+f8himxPOHnI3YlJpfWxz
/1qgHPiO/+RBOtMYOqCp1FQR8r3QnWHsgytkzpFSQVAecU4wdmGCEKNw1J2dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo+nluB8ZVuFwN9I/hw4XfXUi8/owHwYDVR0j
BBgwFoAUgC4LyDf+9PBIUlbPS/QL/1VR0zwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFCVnlpY25xNzE1aExmOUFla1dTWWNjUmFpbWZRTHhiSHBQWkt3QVVG
OFIvMC84MDJFMEJDODM3RkVGNEYwNDg1MjU2Q0Y0QkY0MEJGRjU1NTFEMzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMkUwQkM4MzdGRUY0RjA0
ODUyNTZDRjRCRjQwQkZGNTU1MUQzM0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhQlZ5aWNucTcxNWhMZjlBZWtXU1ljY1JhaW1mUUx4YkhwUFpLd0FVRjhSLzAv
MzQzNTJlMzEzNzMwMmUzMjMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqtswDQYJKoZIhvcNAQELBQADggEBAAvfBrPI
zE3aesRcgJdJNh93KNm/07CiCRgS0dbnx7K6O2nKrvW7yCPJEcfshto/Et7Tw9RH
9mqXrNVFiG2BV5tQziti2bUWH5Sod3EMdaRogIyABWMg+MK6bz2KP2dxgSM6N9+J
UTMPpwKuXj8WurwVOH7CuQve6NxHGk9JGo57QsKVF4JxrW+RPEXhCnVz9wIR9KXo
JnwHUVvKyVyG6aoTuGUtRyJN6ywwSCzNm7TcUasGlzeGvGm3fDNJSSW7yzZAcO5T
wSdThozpC1t1tcauLvy4Wr1sE4CxkmtLRmiDidghrwwjV41dJgD2kSSYksbaxCsA
4ufwOHOvqwbLewg=
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:42:49 2026 by rpki-client