Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
File:                     34352e37302e3137362e302f32322d3234203d3e20323637353736.roa (raw, json)
Hash identifier:          XYK82lKE+VyvbLRLtzsh2r8em299PUk4ubbVIBReF8I=
Subject key identifier:   3E:9A:81:96:18:87:2B:3E:64:83:28:1A:2D:DB:3D:09:46:28:72:72
Certificate issuer:       /CN=6DFABD8FDE54E8AAAE1481D6AE498255CE20984E
Certificate serial:       4F3D2A23BA6F6DF7B8080D4263B894B619370068
Authority key identifier: 6D:FA:BD:8F:DE:54:E8:AA:AE:14:81:D6:AE:49:82:55:CE:20:98:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa
Signing time:             Thu 10 Sep 2026 19:32:07 +0000
ROA not before:           Thu 10 Sep 2026 19:27:07 +0000
ROA not after:            Thu 09 Sep 2027 19:32:07 +0000
asID:                     267576
IP address blocks:        45.70.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.crl
                          rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 22:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3d:2a:23:ba:6f:6d:f7:b8:08:0d:42:63:b8:94:b6:19:37:00:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFABD8FDE54E8AAAE1481D6AE498255CE20984E
        Validity
            Not Before: Sep 10 19:27:07 2026 GMT
            Not After : Sep  9 19:32:07 2027 GMT
        Subject: CN=3E9A819618872B3E6483281A2DDB3D0946287272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:f3:fa:88:bd:b4:21:e5:6e:39:69:df:ef:
                    1a:84:9a:b3:ec:37:50:39:dc:6f:86:b1:69:a1:fe:
                    df:94:1d:be:a2:31:0c:44:71:53:ad:53:16:2f:91:
                    fe:0c:fe:50:c6:ed:8d:d6:57:81:e6:64:d9:a5:c5:
                    13:e7:30:93:fc:c0:5e:54:7e:82:76:ae:fd:8e:d2:
                    cf:94:7d:77:a4:24:4b:cf:84:c0:8a:eb:e8:26:1a:
                    38:a1:73:d9:a8:9f:e9:b9:1e:23:6a:40:d5:94:16:
                    c3:55:99:1e:7e:88:67:23:2d:4a:fa:03:0c:cd:12:
                    cf:3c:8f:2a:f9:7d:83:55:6b:37:a3:fc:fb:bb:71:
                    f8:8e:1f:80:de:92:33:42:15:3d:e3:f1:8b:ac:eb:
                    25:f9:09:17:cc:00:23:48:74:9e:0e:c4:af:e0:3f:
                    5c:bf:12:a3:a1:f6:b5:f7:8c:2e:7c:bc:d3:b0:ce:
                    b4:36:05:76:3e:84:dd:61:aa:13:b1:77:77:be:63:
                    70:3a:5e:d1:40:17:dc:7d:ed:65:e6:68:67:c5:62:
                    e2:d5:0f:57:f4:47:48:a8:4e:ac:bd:9a:41:b4:16:
                    b8:d3:e8:b6:46:ea:c3:3d:45:2c:e3:57:d6:5b:d6:
                    7c:65:bd:7f:3d:cf:03:a5:f5:af:c4:70:f7:c9:6e:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:81:96:18:87:2B:3E:64:83:28:1A:2D:DB:3D:09:46:28:72:72
            X509v3 Authority Key Identifier:
                keyid:6D:FA:BD:8F:DE:54:E8:AA:AE:14:81:D6:AE:49:82:55:CE:20:98:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFABD8FDE54E8AAAE1481D6AE498255CE20984E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hwomm6ctXQo8AqtnYaGVFkvxTHkw3a9eHSV7ymu1EFUA/0/34352e37302e3137362e302f32322d3234203d3e20323637353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:7c:3f:0f:3f:62:07:e7:61:ed:1d:18:14:73:4b:45:04:
         2f:df:9c:ba:51:81:a5:01:d9:d5:41:51:67:52:c8:65:6b:c0:
         1f:e6:6c:f4:56:26:a0:e6:ed:97:a9:d1:af:3d:39:c0:a1:f9:
         ef:a1:ed:d8:ef:3c:51:eb:49:76:60:5b:f0:5c:af:d3:35:aa:
         ff:0f:ef:b4:40:e9:29:4d:91:3a:8f:f5:47:28:3f:0b:11:f0:
         a9:98:11:33:8d:58:6f:82:17:33:61:75:a5:0d:91:18:33:e0:
         75:67:cd:c2:ca:68:59:6b:75:e5:4e:f5:3c:31:88:5e:6c:b2:
         14:c3:a9:08:42:74:1c:44:d2:ff:3d:52:0c:4c:d8:25:34:51:
         d3:7b:56:b8:0d:75:c6:79:24:8c:e9:e7:d0:4e:15:50:f3:36:
         6c:08:53:a1:d9:34:cc:14:f3:09:e1:77:69:4c:43:a8:6e:f5:
         c5:c6:b8:50:d3:c8:20:b1:48:84:8c:70:39:34:9f:7e:46:6e:
         c1:f2:b4:7f:06:54:df:36:ac:f1:20:ef:57:40:90:5a:cb:a1:
         f8:2c:bc:f5:83:ad:34:2a:6e:fe:3a:e7:cb:e0:41:5c:31:8e:
         02:d6:be:12:1e:86:15:38:7a:8c:86:a8:56:ab:9a:f6:77:f6:
         15:0e:79:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTz0qI7pvbfe4CA1CY7iUthk3AGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRGQUJEOEZERTU0RThBQUFFMTQ4MUQ2QUU0OTgyNTVD
RTIwOTg0RTAeFw0yNjA5MTAxOTI3MDdaFw0yNzA5MDkxOTMyMDdaMDMxMTAvBgNV
BAMTKDNFOUE4MTk2MTg4NzJCM0U2NDgzMjgxQTJEREIzRDA5NDYyODcyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gvP6iL20IeVuOWnf7xqEmrPs
N1A53G+GsWmh/t+UHb6iMQxEcVOtUxYvkf4M/lDG7Y3WV4HmZNmlxRPnMJP8wF5U
foJ2rv2O0s+UfXekJEvPhMCK6+gmGjihc9mon+m5HiNqQNWUFsNVmR5+iGcjLUr6
AwzNEs88jyr5fYNVazej/Pu7cfiOH4DekjNCFT3j8Yus6yX5CRfMACNIdJ4OxK/g
P1y/EqOh9rX3jC58vNOwzrQ2BXY+hN1hqhOxd3e+Y3A6XtFAF9x97WXmaGfFYuLV
D1f0R0ioTqy9mkG0FrjT6LZG6sM9RSzjV9Zb1nxlvX89zwOl9a/EcPfJbkD3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPpqBlhiHKz5kgygaLds9CUYocnIwHwYDVR0j
BBgwFoAUbfq9j95U6KquFIHWrkmCVc4gmE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdvbW02Y3RYUW84QXF0bllhR1ZGa3Z4VEhrdzNhOWVIU1Y3eW11MUVG
VUEvMC82REZBQkQ4RkRFNTRFOEFBQUUxNDgxRDZBRTQ5ODI1NUNFMjA5ODRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZERkFCRDhGREU1NEU4QUFB
RTE0ODFENkFFNDk4MjU1Q0UyMDk4NEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3b21tNmN0WFFvOEFxdG5ZYUdWRmt2eFRIa3czYTllSFNWN3ltdTFFRlVBLzAv
MzQzNTJlMzczMDJlMzEzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUawMA0GCSqGSIb3DQEBCwUAA4IBAQB12Xw/Dz9i
B+dh7R0YFHNLRQQv35y6UYGlAdnVQVFnUshla8Af5mz0Viag5u2XqdGvPTnAofnv
oe3Y7zxR60l2YFvwXK/TNar/D++0QOkpTZE6j/VHKD8LEfCpmBEzjVhvghczYXWl
DZEYM+B1Z83CymhZa3XlTvU8MYhebLIUw6kIQnQcRNL/PVIMTNglNFHTe1a4DXXG
eSSM6efQThVQ8zZsCFOh2TTMFPMJ4XdpTEOobvXFxrhQ08ggsUiEjHA5NJ9+Rm7B
8rR/BlTfNqzxIO9XQJBay6H4LLz1g600Km7+OufL4EFcMY4C1r4SHoYVOHqMhqhW
q5r2d/YVDnlZ
-----END CERTIFICATE-----
Generated at Sat Oct 31 07:59:31 2026 by rpki-client