Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/34352e3137352e342e302f32322d3332203d3e20323638383732.roa
File:                     34352e3137352e342e302f32322d3332203d3e20323638383732.roa (raw, json)
Hash identifier:          MmvmeTfC8/IGmPCDql8oeZxC286GSeNDqGfOMcPtFQI=
Subject key identifier:   FB:35:A5:9C:BE:81:19:8B:AE:49:7A:3D:50:2B:84:23:12:FC:54:FC
Certificate issuer:       /CN=E022BA9B6C64C3F4D7DA81565E3EC832773CD959
Certificate serial:       6780B893C50EC76F019D1594E803371C9E5C82F0
Authority key identifier: E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/34352e3137352e342e302f32322d3332203d3e20323638383732.roa
Signing time:             Mon 21 Sep 2026 14:08:00 +0000
ROA not before:           Mon 21 Sep 2026 14:03:00 +0000
ROA not after:            Mon 20 Sep 2027 14:08:00 +0000
asID:                     268872
IP address blocks:        45.175.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.crl
                          rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 06:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:80:b8:93:c5:0e:c7:6f:01:9d:15:94:e8:03:37:1c:9e:5c:82:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E022BA9B6C64C3F4D7DA81565E3EC832773CD959
        Validity
            Not Before: Sep 21 14:03:00 2026 GMT
            Not After : Sep 20 14:08:00 2027 GMT
        Subject: CN=FB35A59CBE81198BAE497A3D502B842312FC54FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:89:45:d9:32:17:61:97:1b:22:c3:d2:53:
                    e4:8c:ac:37:a7:66:01:82:6b:bb:eb:af:b8:15:3b:
                    71:10:9f:95:f1:59:55:67:38:04:00:ef:57:17:71:
                    08:2f:60:c9:86:7d:d1:04:96:75:ea:e4:21:50:be:
                    21:78:fd:83:e9:b5:ab:9c:3e:6d:3c:72:74:66:fd:
                    a6:47:14:13:b3:7b:3c:b8:7d:1a:a1:de:2a:81:c2:
                    5d:d3:8a:33:de:fd:c5:c8:35:50:37:b6:6f:bf:2c:
                    d8:3a:3a:7c:73:95:56:99:fa:d7:97:66:93:e2:4f:
                    72:09:5e:d7:2f:9e:c3:a8:92:66:3e:6b:ca:88:d7:
                    54:27:b2:10:8e:ec:fb:14:29:f6:9b:55:79:92:60:
                    99:0a:3b:b7:14:94:2e:8d:c9:d0:e4:1c:b1:30:f9:
                    b8:f7:95:71:0c:fe:4d:b3:36:de:e1:b9:3a:33:6c:
                    ea:ed:50:c3:b9:cd:c1:5e:13:9d:82:a7:23:47:5c:
                    51:08:58:ac:e0:fd:d2:db:28:c1:60:00:4f:51:16:
                    c6:c5:a6:a9:8c:6c:65:df:4f:c7:65:de:c1:a8:0d:
                    26:2a:6e:b1:bb:76:f8:86:1f:a2:2d:ed:d6:ac:37:
                    a0:85:72:28:2c:eb:04:9f:34:3b:0d:95:9f:15:a4:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:A5:9C:BE:81:19:8B:AE:49:7A:3D:50:2B:84:23:12:FC:54:FC
            X509v3 Authority Key Identifier:
                keyid:E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/34352e3137352e342e302f32322d3332203d3e20323638383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:51:13:9f:a4:c4:fb:0c:45:71:ee:fd:62:1c:d7:2a:32:db:
         9c:26:e6:76:d3:a8:78:0a:7f:24:ec:c1:79:58:8b:8c:e2:4d:
         ba:5c:f3:33:3b:cf:07:98:a9:1b:84:31:be:34:fa:b0:0e:04:
         0e:ac:78:ee:69:64:2e:d7:23:e8:fe:40:c7:77:09:71:80:91:
         af:61:d0:e5:fd:3a:cc:c3:10:86:be:42:53:39:3d:8b:9e:7e:
         4b:94:75:af:b7:9e:a6:63:26:eb:e6:e4:c7:10:a0:25:17:0b:
         c0:5a:8d:01:76:39:f5:5c:a1:03:f5:e4:43:8c:49:ba:cc:9a:
         8a:f4:68:b3:d0:dc:d9:f9:7b:d5:a5:d2:8f:b3:0e:96:ff:f5:
         24:43:a3:6b:cc:57:88:1f:db:35:c9:f6:bc:af:ce:26:a0:2d:
         21:5f:3e:fa:a8:fb:4f:14:14:e4:ca:e6:c2:fa:dc:9b:7e:02:
         ee:db:d1:17:db:d5:89:6a:26:76:65:de:65:21:1c:25:f1:c9:
         7c:46:00:41:82:40:92:d7:11:c8:bc:8c:42:45:69:8b:84:55:
         6f:1b:e1:14:28:8b:2b:ac:5b:f6:bd:2c:83:5c:42:07:fc:f7:
         29:06:59:f8:8e:8f:87:e9:e5:71:98:2f:f9:e1:2b:12:35:b2:
         c0:9f:f7:4a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZ4C4k8UOx28BnRWU6AM3HJ5cgvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyMkJBOUI2QzY0QzNGNEQ3REE4MTU2NUUzRUM4MzI3
NzNDRDk1OTAeFw0yNjA5MjExNDAzMDBaFw0yNzA5MjAxNDA4MDBaMDMxMTAvBgNV
BAMTKEZCMzVBNTlDQkU4MTE5OEJBRTQ5N0EzRDUwMkI4NDIzMTJGQzU0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QYlF2TIXYZcbIsPSU+SMrDen
ZgGCa7vrr7gVO3EQn5XxWVVnOAQA71cXcQgvYMmGfdEElnXq5CFQviF4/YPptauc
Pm08cnRm/aZHFBOzezy4fRqh3iqBwl3TijPe/cXINVA3tm+/LNg6OnxzlVaZ+teX
ZpPiT3IJXtcvnsOokmY+a8qI11QnshCO7PsUKfabVXmSYJkKO7cUlC6NydDkHLEw
+bj3lXEM/k2zNt7huTozbOrtUMO5zcFeE52CpyNHXFEIWKzg/dLbKMFgAE9RFsbF
pqmMbGXfT8dl3sGoDSYqbrG7dviGH6It7dasN6CFcigs6wSfNDsNlZ8VpD9TAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+zWlnL6BGYuuSXo9UCuEIxL8VPwwHwYDVR0j
BBgwFoAU4CK6m2xkw/TX2oFWXj7IMnc82VkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3N4Z3BjZjVGSkExeFlVUFdWNzdpdkR6eVVGZjZYbml3M0xBaFh2VHZx
SGQvMC9FMDIyQkE5QjZDNjRDM0Y0RDdEQTgxNTY1RTNFQzgzMjc3M0NEOTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMjJCQTlCNkM2NEMzRjRE
N0RBODE1NjVFM0VDODMyNzczQ0Q5NTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzeGdwY2Y1RkpBMXhZVVBXVjc3aXZEenlVRmY2WG5pdzNMQWhYdlR2cUhkLzAv
MzQzNTJlMzEzNzM1MmUzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzODM4
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2vBDANBgkqhkiG9w0BAQsFAAOCAQEAR1ETn6TE+wxF
ce79YhzXKjLbnCbmdtOoeAp/JOzBeViLjOJNulzzMzvPB5ipG4QxvjT6sA4EDqx4
7mlkLtcj6P5Ax3cJcYCRr2HQ5f06zMMQhr5CUzk9i55+S5R1r7eepmMm6+bkxxCg
JRcLwFqNAXY59VyhA/XkQ4xJusyaivRos9Dc2fl71aXSj7MOlv/1JEOja8xXiB/b
Ncn2vK/OJqAtIV8++qj7TxQU5Mrmwvrcm34C7tvRF9vViWomdmXeZSEcJfHJfEYA
QYJAktcRyLyMQkVpi4RVbxvhFCiLK6xb9r0sg1xCB/z3KQZZ+I6Ph+nlcZgv+eEr
EjWywJ/3Sg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:42:49 2026 by rpki-client