Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32332d3233203d3e20323637333236.roa
File:                     34352e3233332e3138362e302f32332d3233203d3e20323637333236.roa (raw, json)
Hash identifier:          E6D1gk4OqwBtsZQ1sBm6H2GM7TH3AJuTxgTqzKJg3yM=
Subject key identifier:   0D:E8:96:B0:D7:A9:E5:DD:55:02:5C:60:24:79:23:27:AC:81:29:70
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       04DFBFF464D3AEEECE0E24B4A3798656E79B065E
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32332d3233203d3e20323637333236.roa
Signing time:             Wed 30 Sep 2026 18:14:30 +0000
ROA not before:           Wed 30 Sep 2026 18:09:30 +0000
ROA not after:            Wed 29 Sep 2027 18:14:30 +0000
asID:                     267326
IP address blocks:        45.233.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:df:bf:f4:64:d3:ae:ee:ce:0e:24:b4:a3:79:86:56:e7:9b:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Sep 30 18:09:30 2026 GMT
            Not After : Sep 29 18:14:30 2027 GMT
        Subject: CN=0DE896B0D7A9E5DD55025C6024792327AC812970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:bc:e6:82:5d:11:1e:7e:d1:9d:fd:b4:a7:
                    2a:58:bc:32:cc:ef:27:fd:97:27:c4:62:bd:42:5d:
                    f2:a3:f2:dd:23:4a:94:58:74:a1:89:f6:c5:78:52:
                    94:e4:d6:bd:fe:1f:44:49:79:06:32:2b:18:8c:85:
                    88:f3:eb:9e:07:7e:7f:19:56:fa:30:28:ec:53:1b:
                    16:b6:e3:2c:fc:29:57:0b:9a:84:c3:76:53:93:64:
                    7b:b4:62:3e:c6:67:42:a3:f9:7e:61:a6:55:4f:3c:
                    93:5e:fc:f7:08:6f:ba:d1:52:59:de:eb:57:41:6c:
                    5a:2f:61:d9:ea:28:fa:c5:fa:21:af:3d:84:2c:5d:
                    24:86:5d:8f:cc:8d:13:b0:7d:6e:82:ad:38:9f:b6:
                    94:dd:1c:49:b9:50:83:75:a7:87:2c:e3:ce:7d:a6:
                    62:80:d4:0c:b4:34:74:d8:82:0d:70:ad:2c:df:62:
                    b2:fa:33:ea:fe:40:ad:eb:da:91:c2:25:6a:d5:05:
                    da:19:20:5f:4e:38:fe:75:07:13:5e:65:ac:cd:2a:
                    db:b5:f5:fb:80:40:d9:e2:2d:17:c7:fa:e5:37:6a:
                    1c:cc:2b:0d:21:ea:4c:f1:ab:d1:fc:6f:e4:45:03:
                    00:85:c0:4b:11:2e:bd:8b:c6:98:c3:3e:c3:70:24:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:96:B0:D7:A9:E5:DD:55:02:5C:60:24:79:23:27:AC:81:29:70
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/34352e3233332e3138362e302f32332d3233203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:91:bf:b0:de:e1:80:6c:87:c5:26:5d:fb:89:a3:b9:5d:a6:
         21:a4:8e:ae:3e:3e:47:81:ad:81:1a:17:59:cb:09:d3:6f:4b:
         f5:3e:15:f8:6e:fc:72:23:7b:0f:89:95:7b:27:95:8c:f0:f0:
         83:35:1d:42:6a:7a:8d:b8:d6:9e:89:89:d0:93:71:a7:d0:68:
         cf:f5:74:e7:44:dd:88:b2:c2:e2:be:03:4e:97:9f:15:75:60:
         50:e8:76:a9:3e:ef:b2:16:63:bf:ed:31:51:9c:36:64:15:a9:
         2d:42:e0:1d:8a:d4:41:50:d7:06:f1:98:81:bc:fe:27:ff:c6:
         9b:97:92:99:69:e7:ec:af:8c:5a:11:b6:49:fa:d8:5a:9d:30:
         c2:6f:d9:4b:88:f2:04:5a:a5:3b:fd:7c:95:ac:b5:ae:ca:18:
         63:49:4e:93:b3:ed:87:26:a2:b4:59:fb:f1:11:8e:81:89:63:
         99:97:ea:9d:84:3c:cc:f8:3d:a3:7f:a3:87:c9:b6:c1:c4:bd:
         03:4d:c8:7a:6b:79:cf:c9:12:e7:7b:38:8a:b6:43:ba:60:52:
         a5:e4:f2:8e:c5:5c:e1:64:4e:4e:31:9d:dd:e5:2c:cc:fa:d7:
         9d:16:d6:91:ba:07:05:83:b6:e9:b0:84:33:61:db:1f:ca:2b:
         a5:7e:e0:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBN+/9GTTru7ODiS0o3mGVuebBl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3QzgyRkNEOTFBMTFDRTVBOTVEQ0Y4MDcwNjk5MkNG
OUQyOTJFQzAeFw0yNjA5MzAxODA5MzBaFw0yNzA5MjkxODE0MzBaMDMxMTAvBgNV
BAMTKDBERTg5NkIwRDdBOUU1REQ1NTAyNUM2MDI0NzkyMzI3QUM4MTI5NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+rzmgl0RHn7Rnf20pypYvDLM
7yf9lyfEYr1CXfKj8t0jSpRYdKGJ9sV4UpTk1r3+H0RJeQYyKxiMhYjz654Hfn8Z
VvowKOxTGxa24yz8KVcLmoTDdlOTZHu0Yj7GZ0Kj+X5hplVPPJNe/PcIb7rRUlne
61dBbFovYdnqKPrF+iGvPYQsXSSGXY/MjROwfW6CrTiftpTdHEm5UIN1p4cs4859
pmKA1Ay0NHTYgg1wrSzfYrL6M+r+QK3r2pHCJWrVBdoZIF9OOP51BxNeZazNKtu1
9fuAQNniLRfH+uU3ahzMKw0h6kzxq9H8b+RFAwCFwEsRLr2LxpjDPsNwJIVnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDeiWsNep5d1VAlxgJHkjJ6yBKXAwHwYDVR0j
BBgwFoAUvnyC/NkaEc5aldz4BwaZLPnSkuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzZkU4UzQ0ZjcxR01nN1FrajVKWEFrWG1kbXZHaFljTFo4c3pvQ2JE
OGMvMS9CRTdDODJGQ0Q5MUExMUNFNUE5NURDRjgwNzA2OTkyQ0Y5RDI5MkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFN0M4MkZDRDkxQTExQ0U1
QTk1RENGODA3MDY5OTJDRjlEMjkyRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2ZFOFM0NGY3MUdNZzdRa2o1SlhBa1htZG12R2hZY0xaOHN6b0NiRDhjLzEv
MzQzNTJlMzIzMzMzMmUzMTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6bowDQYJKoZIhvcNAQELBQADggEBAL2Rv7De
4YBsh8UmXfuJo7ldpiGkjq4+PkeBrYEaF1nLCdNvS/U+Ffhu/HIjew+JlXsnlYzw
8IM1HUJqeo241p6JidCTcafQaM/1dOdE3YiywuK+A06XnxV1YFDodqk+77IWY7/t
MVGcNmQVqS1C4B2K1EFQ1wbxmIG8/if/xpuXkplp5+yvjFoRtkn62FqdMMJv2UuI
8gRapTv9fJWsta7KGGNJTpOz7YcmorRZ+/ERjoGJY5mX6p2EPMz4PaN/o4fJtsHE
vQNNyHprec/JEud7OIq2Q7pgUqXk8o7FXOFkTk4xnd3lLMz6150W1pG6BwWDtumw
hDNh2x/KK6V+4PI=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:31:21 2026 by rpki-client