Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
File:                     34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa (raw, json)
Hash identifier:          LtH1npRubJPfCD0dTFJ+QL7XZclFrlUXK5wIhF1zuXo=
Subject key identifier:   80:E2:6A:67:7E:71:8A:D2:86:2E:C2:41:32:19:5A:85:9A:C2:26:A5
Certificate issuer:       /CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
Certificate serial:       1C97BAA42BBDD9475EBD00E4013DF84E4A2F3586
Authority key identifier: E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa
Signing time:             Thu 12 Mar 2026 17:24:22 +0000
ROA not before:           Thu 12 Mar 2026 17:19:22 +0000
ROA not after:            Thu 11 Mar 2027 17:24:22 +0000
asID:                     269096
IP address blocks:        45.175.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl
                          rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:97:ba:a4:2b:bd:d9:47:5e:bd:00:e4:01:3d:f8:4e:4a:2f:35:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
        Validity
            Not Before: Mar 12 17:19:22 2026 GMT
            Not After : Mar 11 17:24:22 2027 GMT
        Subject: CN=80E26A677E718AD2862EC24132195A859AC226A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:d3:6d:d2:9f:d8:e2:c7:fa:2f:18:f0:35:
                    bf:6a:a9:be:09:16:2c:2a:c1:17:4e:be:e5:b4:fb:
                    8c:86:20:8d:1a:ad:ac:98:82:ce:4c:99:e0:77:be:
                    97:b8:07:8e:ad:97:de:4d:8d:56:bb:56:ad:a7:1d:
                    6d:31:3b:01:ad:da:7e:ac:54:79:6a:ec:b7:d2:f7:
                    05:cc:a7:26:5d:68:34:61:53:42:d6:98:32:fd:04:
                    ed:6b:b6:e1:f2:f4:17:58:0b:58:bd:3a:e1:63:91:
                    0b:ea:c6:b6:d4:16:73:8c:11:ab:74:ec:20:be:3e:
                    88:f5:73:11:f1:68:81:97:83:f0:d4:2c:67:55:04:
                    77:0f:31:59:40:ca:3d:6d:ce:86:28:77:cf:16:00:
                    2e:84:f1:eb:bd:40:b2:ab:77:1e:0f:40:0e:9e:8c:
                    8f:66:29:e4:a5:f3:51:c7:a3:9f:24:54:bb:07:76:
                    6d:76:04:06:5c:36:b8:e6:2b:48:50:17:25:f7:14:
                    a7:83:3e:fb:36:13:3c:98:3c:e4:02:2c:06:58:9a:
                    32:ae:3b:ef:79:18:3e:85:02:6f:74:58:62:3d:d0:
                    6d:97:c6:2d:51:3a:c2:4f:6f:d9:77:8b:c9:ca:ec:
                    a2:b6:99:e2:2e:15:4e:ef:4d:a0:31:43:85:ca:b4:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E2:6A:67:7E:71:8A:D2:86:2E:C2:41:32:19:5A:85:9A:C2:26:A5
            X509v3 Authority Key Identifier:
                keyid:E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3332203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:61:89:d4:b5:40:9f:cd:e3:d6:00:70:67:1b:7b:29:db:04:
         cf:c7:7f:fe:af:36:48:51:2f:3f:eb:91:59:d8:8c:da:94:3c:
         fb:41:23:8e:9a:41:15:c9:5e:1c:76:a3:c4:2f:71:a9:9e:20:
         60:c0:84:21:92:6e:17:48:9b:55:4f:f6:54:0e:03:7f:72:66:
         16:e7:5f:ff:dc:a2:54:33:c7:af:cb:18:e5:e7:cf:77:fb:92:
         0f:88:24:a6:39:a5:e8:0b:20:e4:d6:e4:91:ff:88:3e:5b:7f:
         e2:b0:a3:4c:a3:86:5a:d4:05:51:94:b6:76:7a:21:d7:9e:e6:
         39:14:db:ba:e6:03:66:8b:65:d7:cb:34:ed:88:4b:b2:9b:43:
         be:f1:d0:e6:2f:29:e3:b2:85:f4:04:56:fe:42:8a:85:3f:ce:
         77:61:a8:72:88:45:68:95:59:e1:69:71:09:43:c6:93:a7:b4:
         f1:48:a9:96:86:2f:0a:9f:70:22:de:ad:fa:82:78:d6:de:77:
         60:6e:ad:0e:cb:3c:d1:4f:17:c1:7d:fd:13:4b:dc:01:e5:f9:
         82:fa:06:0a:cb:62:a4:82:5b:95:4c:c1:29:df:2d:94:c7:b6:
         19:6c:80:ef:0f:92:e9:b3:3a:d4:55:c6:a7:f2:8f:8b:f7:00:
         83:1f:b0:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHJe6pCu92UdevQDkAT34TkovNYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5RERBNUZGNjgyRTRENEIyNjQzQTI3MUM1RDQ5RUI5
RERDNEUyMDAeFw0yNjAzMTIxNzE5MjJaFw0yNzAzMTExNzI0MjJaMDMxMTAvBgNV
BAMTKDgwRTI2QTY3N0U3MThBRDI4NjJFQzI0MTMyMTk1QTg1OUFDMjI2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbsdNt0p/Y4sf6LxjwNb9qqb4J
FiwqwRdOvuW0+4yGII0arayYgs5MmeB3vpe4B46tl95NjVa7Vq2nHW0xOwGt2n6s
VHlq7LfS9wXMpyZdaDRhU0LWmDL9BO1rtuHy9BdYC1i9OuFjkQvqxrbUFnOMEat0
7CC+Poj1cxHxaIGXg/DULGdVBHcPMVlAyj1tzoYod88WAC6E8eu9QLKrdx4PQA6e
jI9mKeSl81HHo58kVLsHdm12BAZcNrjmK0hQFyX3FKeDPvs2EzyYPOQCLAZYmjKu
O+95GD6FAm90WGI90G2Xxi1ROsJPb9l3i8nK7KK2meIuFU7vTaAxQ4XKtEq1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgOJqZ35xitKGLsJBMhlahZrCJqUwHwYDVR0j
BBgwFoAU6J3aX/aC5NSyZDonHF1J653cTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMC9FODlEREE1RkY2ODJFNEQ0QjI2NDNBMjcxQzVENDlFQjlEREM0RTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4OUREQTVGRjY4MkU0RDRC
MjY0M0EyNzFDNUQ0OUVCOUREQzRFMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzAv
MzQzNTJlMzEzNzM1MmUzMjM0MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr/gwDQYJKoZIhvcNAQELBQADggEBADdhidS1
QJ/N49YAcGcbeynbBM/Hf/6vNkhRLz/rkVnYjNqUPPtBI46aQRXJXhx2o8Qvcame
IGDAhCGSbhdIm1VP9lQOA39yZhbnX//colQzx6/LGOXnz3f7kg+IJKY5pegLIOTW
5JH/iD5bf+Kwo0yjhlrUBVGUtnZ6Idee5jkU27rmA2aLZdfLNO2IS7KbQ77x0OYv
KeOyhfQEVv5CioU/zndhqHKIRWiVWeFpcQlDxpOntPFIqZaGLwqfcCLerfqCeNbe
d2BurQ7LPNFPF8F9/RNL3AHl+YL6BgrLYqSCW5VMwSnfLZTHthlsgO8PkumzOtRV
xqfyj4v3AIMfsNc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:16:32 2026 by rpki-client