Route Origin Authorization

$ rpki-client -vvf rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
File:                     34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa (raw, json)
Hash identifier:          L4tBdHg0F4r+IQz2aB2bht/B4ra7Hp1kKxvaU44liBk=
Subject key identifier:   B3:F7:ED:13:EA:AE:71:FB:F8:7B:1B:AA:18:A3:81:06:07:3F:AB:7D
Certificate issuer:       /CN=B775879547BAC5F677A7B482DDB82E88568B21AE
Certificate serial:       720795F9F2972717A304DB56D30369A08B1560A9
Authority key identifier: B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
Subject info access:      rsync://rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa
Signing time:             Wed 25 Mar 2026 01:10:06 +0000
ROA not before:           Wed 25 Mar 2026 01:05:06 +0000
ROA not after:            Wed 24 Mar 2027 01:10:06 +0000
asID:                     269115
IP address blocks:        45.178.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl
                          rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.mft
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.crl
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FCFFF20FD7DAAFBAC583DB0991203A48E54F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:07:95:f9:f2:97:27:17:a3:04:db:56:d3:03:69:a0:8b:15:60:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B775879547BAC5F677A7B482DDB82E88568B21AE
        Validity
            Not Before: Mar 25 01:05:06 2026 GMT
            Not After : Mar 24 01:10:06 2027 GMT
        Subject: CN=B3F7ED13EAAE71FBF87B1BAA18A38106073FAB7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:ad:de:d2:08:83:6b:42:66:a0:44:0b:04:
                    c4:7f:21:5e:f9:7c:21:4c:e1:53:35:61:2a:02:6e:
                    ad:e8:c5:11:e5:46:da:83:be:78:a0:6d:1b:85:27:
                    75:e7:dd:4e:4b:09:c9:2f:f3:c9:a8:f6:37:74:3b:
                    3e:67:92:d8:c2:a1:db:28:26:07:e2:bb:0d:99:4a:
                    1f:3f:73:38:da:95:f2:51:a0:92:31:c2:96:64:47:
                    d0:da:df:82:8c:0b:ec:f7:c4:b5:2c:b2:45:da:0b:
                    6b:67:e0:8f:8f:97:f8:44:4f:a4:55:5e:03:6f:14:
                    84:9b:83:97:bd:fe:e1:2d:68:3d:8d:f5:cb:38:83:
                    43:7d:e1:2d:9b:81:40:6e:36:99:ad:db:f8:08:ed:
                    de:a1:d9:72:2b:b6:d2:8e:5f:72:96:53:4e:41:89:
                    a5:d8:5b:2f:50:26:7e:bd:f2:3b:00:8e:36:62:4a:
                    fd:3e:47:1c:da:ca:da:dc:21:a8:b0:8f:94:cf:32:
                    ab:c0:74:94:05:4f:c8:c7:c5:43:12:71:35:00:43:
                    b3:b1:a1:6d:04:0e:09:4b:12:d8:ed:35:a8:b2:62:
                    54:f4:75:c1:c1:51:20:42:22:ec:63:d3:8d:c1:fd:
                    0f:72:f2:ae:56:02:fd:ab:d4:e5:98:36:e4:b3:5d:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F7:ED:13:EA:AE:71:FB:F8:7B:1B:AA:18:A3:81:06:07:3F:AB:7D
            X509v3 Authority Key Identifier:
                keyid:B7:75:87:95:47:BA:C5:F6:77:A7:B4:82:DD:B8:2E:88:56:8B:21:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.nex3.com.br/repo/AS269115/0/B775879547BAC5F677A7B482DDB82E88568B21AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/B775879547BAC5F677A7B482DDB82E88568B21AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS269115/0/34352e3137382e3234302e302f32332d3234203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:e6:f2:7f:c4:06:53:e6:0f:24:2b:73:68:cb:ce:fb:6b:62:
         d7:c7:25:2f:22:59:68:dd:9f:bd:10:f1:bd:a1:f6:2f:d0:98:
         f5:15:63:72:08:09:a8:73:25:7a:a7:17:75:a8:01:3b:fc:85:
         d1:09:11:05:a0:6c:c4:2a:e2:eb:0d:20:84:a7:3e:a7:7c:bb:
         ea:a2:1a:40:8c:8d:75:d0:04:13:f3:30:df:c7:e2:7b:71:34:
         d2:58:f3:46:df:0c:34:67:ca:c7:db:6b:4a:65:cb:0e:7f:c4:
         fc:52:6c:16:44:2f:c0:3b:78:24:f4:f2:b5:47:4e:9f:e2:b5:
         fa:8f:9e:03:4f:fb:1e:d5:40:8d:0b:31:64:85:45:6c:9d:9b:
         89:e4:96:e2:b4:06:a6:c1:78:7a:ae:da:c5:4b:84:54:72:68:
         1d:a6:90:d5:3d:ba:3e:d5:b9:a1:1c:c0:87:ee:8b:2c:25:35:
         f0:2a:e1:69:b3:43:84:b6:0b:15:69:3a:2c:fd:df:e5:7b:57:
         df:65:bd:c2:51:08:98:48:22:85:d8:c3:7e:69:b3:9c:97:51:
         32:9f:22:2c:e4:a2:c5:e8:a3:fa:31:fc:33:28:f5:64:74:7d:
         0f:46:ec:ea:c7:06:9d:ce:e8:58:70:7a:07:35:18:72:14:46:
         da:fc:e3:82
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcgeV+fKXJxejBNtW0wNpoIsVYKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc3NTg3OTU0N0JBQzVGNjc3QTdCNDgyRERCODJFODg1
NjhCMjFBRTAeFw0yNjAzMjUwMTA1MDZaFw0yNzAzMjQwMTEwMDZaMDMxMTAvBgNV
BAMTKEIzRjdFRDEzRUFBRTcxRkJGODdCMUJBQTE4QTM4MTA2MDczRkFCN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNK3e0giDa0JmoEQLBMR/IV75
fCFM4VM1YSoCbq3oxRHlRtqDvnigbRuFJ3Xn3U5LCckv88mo9jd0Oz5nktjCodso
Jgfiuw2ZSh8/czjalfJRoJIxwpZkR9Da34KMC+z3xLUsskXaC2tn4I+Pl/hET6RV
XgNvFISbg5e9/uEtaD2N9cs4g0N94S2bgUBuNpmt2/gI7d6h2XIrttKOX3KWU05B
iaXYWy9QJn698jsAjjZiSv0+RxzaytrcIaiwj5TPMqvAdJQFT8jHxUMScTUAQ7Ox
oW0EDglLEtjtNaiyYlT0dcHBUSBCIuxj043B/Q9y8q5WAv2r1OWYNuSzXZSTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUs/ftE+qucfv4exuqGKOBBgc/q30wHwYDVR0j
BBgwFoAUt3WHlUe6xfZ3p7SC3bguiFaLIa4wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnN5bmMubmV4My5jb20uYnIvcmVwby9BUzI2
OTExNS8wL0I3NzU4Nzk1NDdCQUM1RjY3N0E3QjQ4MkREQjgyRTg4NTY4QjIxQUUu
Y3JsMIGdBggrBgEFBQcBAQSBkDCBjTCBigYIKwYBBQUHMAKGfnJzeW5jOi8vcnBr
aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2hoakdBWmlhRmphMTJxTFpzZ1I5TkdM
cUxaWWhQck1IcW9XUzlHNVRBUG4vMC9CNzc1ODc5NTQ3QkFDNUY2NzdBN0I0ODJE
REI4MkU4ODU2OEIyMUFFLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzAL
hmZyc3luYzovL3JzeW5jLm5leDMuY29tLmJyL3JlcG8vQVMyNjkxMTUvMC8zNDM1
MmUzMTM3MzgyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzOTMx
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2y8DANBgkqhkiG9w0BAQsFAAOCAQEAv+byf8QGU+YP
JCtzaMvO+2ti18clLyJZaN2fvRDxvaH2L9CY9RVjcggJqHMleqcXdagBO/yF0QkR
BaBsxCri6w0ghKc+p3y76qIaQIyNddAEE/Mw38fie3E00ljzRt8MNGfKx9trSmXL
Dn/E/FJsFkQvwDt4JPTytUdOn+K1+o+eA0/7HtVAjQsxZIVFbJ2bieSW4rQGpsF4
eq7axUuEVHJoHaaQ1T26PtW5oRzAh+6LLCU18CrhabNDhLYLFWk6LP3f5XtX32W9
wlEImEgihdjDfmmznJdRMp8iLOSixeij+jH8Myj1ZHR9D0bs6scGnc7oWHB6BzUY
chRG2vzjgg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:11 2026 by rpki-client