Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa
File:                     34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa (raw, json)
Hash identifier:          7qFABfJjXxtbFx2oBRDxFNIM2+zaqPaZAeu/HSYRmj0=
Subject key identifier:   34:58:FB:9C:C5:D8:23:36:2C:6E:AB:C5:18:E5:F7:15:FB:B5:3E:78
Certificate issuer:       /CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
Certificate serial:       301E1E719784F46A6F98B9F5FB7EEF1B2C25D9D5
Authority key identifier: 12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa
Signing time:             Tue 15 Sep 2026 03:59:49 +0000
ROA not before:           Tue 15 Sep 2026 03:54:49 +0000
ROA not after:            Tue 14 Sep 2027 03:59:49 +0000
asID:                     267020
IP address blocks:        45.226.98.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl
                          rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 02:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1e:1e:71:97:84:f4:6a:6f:98:b9:f5:fb:7e:ef:1b:2c:25:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1264AC4645C5D468F6F578F2BECD4FAA697E7333
        Validity
            Not Before: Sep 15 03:54:49 2026 GMT
            Not After : Sep 14 03:59:49 2027 GMT
        Subject: CN=3458FB9CC5D823362C6EABC518E5F715FBB53E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:ba:52:5f:f7:1a:87:ae:42:70:39:a1:a6:
                    b4:37:c5:ad:68:e8:24:2a:33:f1:83:72:b7:92:77:
                    22:00:20:af:ff:fb:d9:e3:35:e9:d6:eb:2f:93:ee:
                    ae:47:36:6a:28:96:76:31:6e:12:17:90:ae:9c:32:
                    c7:fc:f6:03:83:13:90:78:6a:8e:e7:10:0e:fc:60:
                    70:92:6b:3d:1e:d7:92:d4:72:f0:08:db:79:ea:ac:
                    26:28:14:97:fd:ca:20:5b:da:2b:6d:23:7e:33:8e:
                    41:09:b9:79:bd:51:24:eb:0c:3e:17:5c:03:fd:75:
                    5c:e3:ce:66:10:e4:1a:df:fb:e3:9f:e7:d6:62:8f:
                    2e:e4:ea:3d:2b:3c:ae:7c:9a:b4:16:15:08:22:17:
                    3f:21:e9:f0:73:03:05:14:90:a7:fa:65:06:14:f8:
                    f2:7f:7c:ab:bd:7e:28:70:78:51:6b:73:b3:76:b7:
                    34:f0:3b:bb:db:57:3c:19:2f:70:3a:f0:9e:93:c3:
                    0c:70:dc:58:dd:23:0e:77:1c:43:6d:b8:2b:ba:0d:
                    43:e4:37:98:89:d6:53:72:14:cf:ef:35:f8:0b:70:
                    14:ad:b6:6c:a9:5d:7b:35:40:e9:a3:e4:da:20:8d:
                    2c:b2:48:22:bd:9c:a5:66:15:5c:de:12:f2:ea:b4:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:FB:9C:C5:D8:23:36:2C:6E:AB:C5:18:E5:F7:15:FB:B5:3E:78
            X509v3 Authority Key Identifier:
                keyid:12:64:AC:46:45:C5:D4:68:F6:F5:78:F2:BE:CD:4F:AA:69:7E:73:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1264AC4645C5D468F6F578F2BECD4FAA697E7333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLLKmVtJyaMHZ6oASPB9Uk2moS5GmjWakRvv5DqC9m8H/1/34352e3232362e39382e3132382f32352d3235203d3e20323637303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.98.128/25

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:ec:46:ba:cb:72:72:f4:dc:28:57:d9:0d:72:ee:e2:e7:
         2f:f0:a3:32:06:64:59:a5:c3:7d:9a:77:a6:91:38:97:a8:0a:
         f6:b9:aa:bd:0d:9f:39:4b:6f:f3:6f:ff:4a:0a:c1:8c:4d:fc:
         b1:a3:d4:6b:7d:51:96:18:ee:d7:11:3a:e8:02:74:e0:14:7c:
         e1:4b:9d:26:59:34:03:b5:8c:77:fa:99:c1:c7:a9:b9:72:6f:
         69:d8:cd:11:fd:08:1f:b8:0f:ac:10:c0:27:09:56:1a:da:72:
         05:4d:78:cc:1a:5a:04:9e:ab:1c:74:86:7a:ce:08:53:88:c3:
         40:48:45:dc:84:bc:c5:1a:c3:be:63:81:5e:20:de:40:0d:95:
         bf:bd:39:95:ce:3f:c5:e6:dc:57:8b:54:a8:7f:f0:f9:a9:52:
         05:2c:36:e0:e8:7c:76:74:67:c0:79:8b:3b:f1:8e:3c:54:8b:
         e6:85:7c:af:5c:f8:57:03:07:dc:7f:ca:8f:41:eb:a2:67:f2:
         8a:7c:ca:89:7e:20:2b:1c:dc:cb:0d:c4:6e:54:db:97:bb:90:
         f6:e6:57:e4:8a:ae:e0:81:08:d1:e4:7b:9d:2c:30:2a:79:2d:
         10:3f:b8:43:ab:bd:d9:b2:a1:1d:8d:e5:2e:24:e6:47:f0:41:
         54:8e:6c:9b
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUMB4ecZeE9GpvmLn1+37vGywl2dUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2NEFDNDY0NUM1RDQ2OEY2RjU3OEYyQkVDRDRGQUE2
OTdFNzMzMzAeFw0yNjA5MTUwMzU0NDlaFw0yNzA5MTQwMzU5NDlaMDMxMTAvBgNV
BAMTKDM0NThGQjlDQzVEODIzMzYyQzZFQUJDNTE4RTVGNzE1RkJCNTNFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtLpSX/cah65CcDmhprQ3xa1o
6CQqM/GDcreSdyIAIK//+9njNenW6y+T7q5HNmoolnYxbhIXkK6cMsf89gODE5B4
ao7nEA78YHCSaz0e15LUcvAI23nqrCYoFJf9yiBb2ittI34zjkEJuXm9USTrDD4X
XAP9dVzjzmYQ5Brf++Of59Zijy7k6j0rPK58mrQWFQgiFz8h6fBzAwUUkKf6ZQYU
+PJ/fKu9fihweFFrc7N2tzTwO7vbVzwZL3A68J6Twwxw3FjdIw53HENtuCu6DUPk
N5iJ1lNyFM/vNfgLcBSttmypXXs1QOmj5NogjSyySCK9nKVmFVzeEvLqtHOvAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUNFj7nMXYIzYsbqvFGOX3Ffu1PngwHwYDVR0j
BBgwFoAUEmSsRkXF1Gj29Xjyvs1Pqml+czMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExMS21WdEp5YU1IWjZvQVNQQjlVazJtb1M1R21qV2FrUnZ2NURxQzlt
OEgvMS8xMjY0QUM0NjQ1QzVENDY4RjZGNTc4RjJCRUNENEZBQTY5N0U3MzMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyNjRBQzQ2NDVDNUQ0NjhG
NkY1NzhGMkJFQ0Q0RkFBNjk3RTczMzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMTEttVnRKeWFNSFo2b0FTUEI5VWsybW9TNUdtaldha1J2djVEcUM5bThILzEv
MzQzNTJlMzIzMjM2MmUzOTM4MmUzMTMyMzgyZjMyMzUyZDMyMzUyMDNkM2UyMDMy
MzYzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEF
BQcBBwEB/wQRMA8wDQQCAAEwBwMFBy3iYoAwDQYJKoZIhvcNAQELBQADggEBAC3o
7Ea6y3Jy9NwoV9kNcu7i5y/wozIGZFmlw32ad6aROJeoCva5qr0NnzlLb/Nv/0oK
wYxN/LGj1Gt9UZYY7tcROugCdOAUfOFLnSZZNAO1jHf6mcHHqblyb2nYzRH9CB+4
D6wQwCcJVhracgVNeMwaWgSeqxx0hnrOCFOIw0BIRdyEvMUaw75jgV4g3kANlb+9
OZXOP8Xm3FeLVKh/8PmpUgUsNuDofHZ0Z8B5izvxjjxUi+aFfK9c+FcDB9x/yo9B
66Jn8op8yol+ICsc3MsNxG5U25e7kPbmV+SKruCBCNHke50sMCp5LRA/uEOrvdmy
oR2N5S4k5kfwQVSObJs=
-----END CERTIFICATE-----
Generated at Fri Oct 16 11:47:39 2026 by rpki-client