Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa
File:                     34352e3136362e35302e302f32342d3234203d3e20323637393532.roa (raw, json)
Hash identifier:          76x46KuH4KfTi+RZe3ZqcKoNW1iQHmLGSwRGZtZ5XE0=
Subject key identifier:   83:14:6C:1B:26:FF:79:33:A5:A0:68:EC:2C:FA:C8:F8:31:E0:80:65
Certificate issuer:       /CN=2124AAA7D0FC397516525A2092F690A62F40A18E
Certificate serial:       460EDCBDD771A1C3FBB435305C6194F75C1C5CF0
Authority key identifier: 21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa
Signing time:             Thu 08 Oct 2026 17:57:41 +0000
ROA not before:           Thu 08 Oct 2026 17:52:41 +0000
ROA not after:            Thu 07 Oct 2027 17:57:41 +0000
asID:                     267952
IP address blocks:        45.166.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl
                          rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 15:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0e:dc:bd:d7:71:a1:c3:fb:b4:35:30:5c:61:94:f7:5c:1c:5c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2124AAA7D0FC397516525A2092F690A62F40A18E
        Validity
            Not Before: Oct  8 17:52:41 2026 GMT
            Not After : Oct  7 17:57:41 2027 GMT
        Subject: CN=83146C1B26FF7933A5A068EC2CFAC8F831E08065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:3d:24:0b:95:ee:0a:69:2d:59:a0:96:3d:
                    77:d2:2e:6f:9c:08:0a:77:41:d0:d4:e5:49:d7:66:
                    63:29:4c:5b:90:5b:03:69:20:83:10:1d:40:5f:d7:
                    82:dc:a7:e4:16:c2:52:a1:a5:2b:a3:69:33:35:ac:
                    3e:4b:76:22:42:3e:2f:18:b9:a6:26:eb:a5:18:49:
                    b6:96:1e:1a:80:36:9b:d8:5a:d9:1e:ac:b3:74:48:
                    bb:d7:b8:4f:51:73:8d:b1:d8:8b:9b:d8:a5:6d:9c:
                    f4:ab:2d:3d:d4:92:e4:6e:db:5a:ee:87:97:ff:a9:
                    a2:f4:05:9b:4b:30:72:58:19:62:80:d5:a0:26:1f:
                    4d:21:ea:ed:70:b1:78:8b:f5:53:82:cd:f7:6d:c2:
                    fe:f0:08:8c:1e:22:4c:21:40:ef:06:97:d9:d9:ad:
                    ab:5d:58:24:57:db:d8:26:96:13:06:cd:33:95:42:
                    d6:4d:17:4a:f7:55:c1:23:51:c1:07:13:25:ea:1b:
                    22:c0:43:7e:d7:e1:a9:98:71:e0:85:2e:b7:b2:4d:
                    3f:b4:83:e3:eb:9a:86:32:85:7b:f4:44:a5:99:e4:
                    d0:cf:16:f0:40:38:a5:cb:63:a9:d6:63:43:67:ab:
                    7c:9b:88:ed:a2:42:26:4e:c7:90:8e:34:ea:23:32:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:14:6C:1B:26:FF:79:33:A5:A0:68:EC:2C:FA:C8:F8:31:E0:80:65
            X509v3 Authority Key Identifier:
                keyid:21:24:AA:A7:D0:FC:39:75:16:52:5A:20:92:F6:90:A6:2F:40:A1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2124AAA7D0FC397516525A2092F690A62F40A18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AAA7D0FC397516525A2092F690A62F40A18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e35302e302f32342d3234203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:a3:5d:2e:b8:44:12:ce:94:82:2e:1e:99:db:22:d8:d7:
         c9:f3:23:96:82:c0:92:eb:57:a9:51:55:8a:91:d0:27:22:67:
         fa:18:b6:e0:d3:d5:90:e3:f8:24:63:8e:ee:4f:2d:60:df:8f:
         68:60:18:17:b6:79:63:2e:44:50:38:cc:0b:7e:d1:bd:cc:a5:
         28:c2:0f:1b:38:80:a5:63:99:26:38:7b:3b:3b:db:d6:2d:a0:
         b5:17:f0:2a:25:70:c6:90:84:88:85:79:1e:d7:17:71:97:f8:
         3d:e2:59:f8:94:93:8f:65:9d:fd:75:8b:11:27:f7:f7:f4:3e:
         7a:00:3e:3d:ad:42:80:6a:64:be:2b:19:ae:0f:32:d3:2d:15:
         50:3e:88:20:c1:15:64:03:de:ec:1a:38:8a:d4:a8:9a:a5:17:
         68:9d:48:eb:b2:da:b7:ba:9b:e2:34:74:9e:4e:c7:f3:5e:2b:
         cc:ad:32:8c:a4:12:27:76:90:aa:5e:73:26:3d:54:fe:19:ee:
         db:07:ab:49:a1:82:80:77:e4:92:7a:70:14:17:fa:77:4f:ea:
         18:84:0a:c0:21:c3:10:cc:3a:08:96:5d:68:77:25:06:1b:96:
         66:ba:66:95:e7:10:10:9a:44:e1:3d:6f:2c:b5:cb:a9:81:68:
         7b:9c:ff:26
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURg7cvddxocP7tDUwXGGU91wcXPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjEyNEFBQTdEMEZDMzk3NTE2NTI1QTIwOTJGNjkwQTYy
RjQwQTE4RTAeFw0yNjEwMDgxNzUyNDFaFw0yNzEwMDcxNzU3NDFaMDMxMTAvBgNV
BAMTKDgzMTQ2QzFCMjZGRjc5MzNBNUEwNjhFQzJDRkFDOEY4MzFFMDgwNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvT0kC5XuCmktWaCWPXfSLm+c
CAp3QdDU5UnXZmMpTFuQWwNpIIMQHUBf14Lcp+QWwlKhpSujaTM1rD5LdiJCPi8Y
uaYm66UYSbaWHhqANpvYWtkerLN0SLvXuE9Rc42x2Iub2KVtnPSrLT3UkuRu21ru
h5f/qaL0BZtLMHJYGWKA1aAmH00h6u1wsXiL9VOCzfdtwv7wCIweIkwhQO8Gl9nZ
ratdWCRX29gmlhMGzTOVQtZNF0r3VcEjUcEHEyXqGyLAQ37X4amYceCFLreyTT+0
g+PrmoYyhXv0RKWZ5NDPFvBAOKXLY6nWY0Nnq3ybiO2iQiZOx5CONOojMthRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgxRsGyb/eTOloGjsLPrI+DHggGUwHwYDVR0j
BBgwFoAUISSqp9D8OXUWUlogkvaQpi9AoY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMC8yMTI0QUFBN0QwRkMzOTc1MTY1MjVBMjA5MkY2OTBBNjJGNDBBMThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMjRBQUE3RDBGQzM5NzUx
NjUyNUEyMDkyRjY5MEE2MkY0MEExOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzAv
MzQzNTJlMzEzNjM2MmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaYyMA0GCSqGSIb3DQEBCwUAA4IBAQA+26NdLrhE
Es6Ugi4emdsi2NfJ8yOWgsCS61epUVWKkdAnImf6GLbg09WQ4/gkY47uTy1g349o
YBgXtnljLkRQOMwLftG9zKUowg8bOIClY5kmOHs7O9vWLaC1F/AqJXDGkISIhXke
1xdxl/g94ln4lJOPZZ39dYsRJ/f39D56AD49rUKAamS+KxmuDzLTLRVQPoggwRVk
A97sGjiK1KiapRdonUjrstq3upviNHSeTsfzXivMrTKMpBIndpCqXnMmPVT+Ge7b
B6tJoYKAd+SSenAUF/p3T+oYhArAIcMQzDoIll1odyUGG5ZmumaV5xAQmkThPW8s
tcupgWh7nP8m
-----END CERTIFICATE-----
Generated at Wed Nov 4 21:14:57 2026 by rpki-client