Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/34352e3137382e3132342e302f32322d3232203d3e20323633323736.roa
File:                     34352e3137382e3132342e302f32322d3232203d3e20323633323736.roa (raw, json)
Hash identifier:          toHKcF7qbjAbnvUgW5Iy9fdUo8kAyuajbAsr/pYL8No=
Subject key identifier:   BF:FB:F1:BC:4F:1D:1D:23:8F:C0:C2:F6:58:07:B4:B3:F1:85:AB:91
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       5563AE2D2820501350626260EEF888CE696A2CE5
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/34352e3137382e3132342e302f32322d3232203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:17 +0000
ROA not before:           Fri 10 Jul 2026 14:24:17 +0000
ROA not after:            Fri 09 Jul 2027 14:29:17 +0000
asID:                     263276
IP address blocks:        45.178.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:ae:2d:28:20:50:13:50:62:62:60:ee:f8:88:ce:69:6a:2c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:17 2026 GMT
            Not After : Jul  9 14:29:17 2027 GMT
        Subject: CN=BFFBF1BC4F1D1D238FC0C2F65807B4B3F185AB91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:a2:94:69:57:a6:9d:02:59:20:22:77:f3:
                    02:9c:b0:82:e2:81:ec:a9:c9:15:b0:fa:9f:8e:9a:
                    0e:86:dc:67:78:44:53:95:38:98:30:52:5d:2a:58:
                    5c:f9:da:6e:be:d3:85:a3:4f:5d:76:0b:fc:ba:90:
                    a6:d7:e8:09:4e:02:ce:63:c1:25:da:17:28:c4:b3:
                    14:9d:4b:2d:5c:90:3e:33:23:af:78:bb:df:8e:98:
                    76:29:d8:e6:41:d4:ec:59:6a:44:3e:c9:7f:5d:df:
                    cb:ef:fe:66:15:62:ba:88:7b:8b:da:60:e9:df:2a:
                    53:76:52:3a:f3:f8:fe:34:30:d3:b9:8e:db:c8:d8:
                    6c:ef:27:56:46:32:cc:5f:1b:57:d8:4f:41:cf:92:
                    6a:38:4a:0c:23:ab:ac:05:82:00:9c:29:29:61:77:
                    13:c9:8e:15:f1:39:ff:6d:9f:68:90:46:88:33:7f:
                    11:c5:90:ae:3a:a9:dd:2d:32:c0:6b:66:bd:9c:2d:
                    d7:41:a9:8b:9d:c2:db:c0:3e:c2:72:7d:78:82:16:
                    c3:f9:73:bc:48:50:4e:f4:bd:df:93:a5:5b:67:08:
                    0a:cf:ac:16:f4:c1:5a:1d:15:c8:49:5e:03:ed:b7:
                    eb:96:39:1a:b1:fa:1b:e3:d2:a9:6e:c4:7b:97:ea:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FB:F1:BC:4F:1D:1D:23:8F:C0:C2:F6:58:07:B4:B3:F1:85:AB:91
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/34352e3137382e3132342e302f32322d3232203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:fd:b7:53:1a:d4:3d:ff:c1:3a:47:b6:99:00:57:6d:69:81:
         7a:e6:91:6e:bd:23:a1:92:8b:87:4e:aa:e7:fc:ac:be:2e:45:
         ba:55:b1:06:94:ef:23:f7:f1:56:17:98:96:cf:b2:31:5e:cf:
         b3:46:b0:56:bb:7b:b9:27:b9:37:dc:d9:4b:c0:eb:f3:d6:a6:
         3b:d4:2d:5d:87:22:96:db:17:93:b9:1c:a1:83:f1:56:91:77:
         c8:f7:4a:f1:e2:57:d9:71:39:5a:d6:bd:d3:e8:1a:28:cc:08:
         b6:aa:8e:68:39:59:95:83:0e:b1:b0:15:80:09:a2:08:08:c7:
         6a:cb:bb:21:04:96:59:82:c3:c6:d2:d6:29:38:c8:70:17:1c:
         39:11:60:c2:d7:ec:41:03:13:5e:00:80:df:32:44:7f:4f:76:
         cd:71:32:0c:d2:b8:dd:a1:67:72:ff:be:07:c6:c7:09:90:ba:
         38:22:d7:3c:7c:7e:50:73:91:01:44:fb:f8:15:1a:7d:7d:d8:
         c3:b6:86:a2:b1:bc:4a:99:3a:66:06:08:86:15:00:5f:42:db:
         04:2a:45:ba:69:eb:53:f7:94:46:67:94:b7:07:66:00:56:65:
         8a:69:63:56:96:f5:70:a9:6e:01:9e:26:1a:34:4c:fa:36:0f:
         90:2b:92:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVWOuLSggUBNQYmJg7viIzmlqLOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwOTlEODk0MTI2QUM0Q0FEOTQxMUU0MzA4RUU2ODlB
NzY3NjA5QTAeFw0yNjA3MTAxNDI0MTdaFw0yNzA3MDkxNDI5MTdaMDMxMTAvBgNV
BAMTKEJGRkJGMUJDNEYxRDFEMjM4RkMwQzJGNjU4MDdCNEIzRjE4NUFCOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32KKUaVemnQJZICJ38wKcsILi
geypyRWw+p+Omg6G3Gd4RFOVOJgwUl0qWFz52m6+04WjT112C/y6kKbX6AlOAs5j
wSXaFyjEsxSdSy1ckD4zI694u9+OmHYp2OZB1OxZakQ+yX9d38vv/mYVYrqIe4va
YOnfKlN2Ujrz+P40MNO5jtvI2GzvJ1ZGMsxfG1fYT0HPkmo4Sgwjq6wFggCcKSlh
dxPJjhXxOf9tn2iQRogzfxHFkK46qd0tMsBrZr2cLddBqYudwtvAPsJyfXiCFsP5
c7xIUE70vd+TpVtnCArPrBb0wVodFchJXgPtt+uWORqx+hvj0qluxHuX6sW9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv/vxvE8dHSOPwML2WAe0s/GFq5EwHwYDVR0j
BBgwFoAUsQmdiUEmrEytlBHkMI7miadnYJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZBcFdyY2pHV1k0Q215YThydXlNQnFvTm1FYWl1VjYxZmpLbjFjanVz
ZWkvMC9CMTA5OUQ4OTQxMjZBQzRDQUQ5NDExRTQzMDhFRTY4OUE3Njc2MDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMDk5RDg5NDEyNkFDNENB
RDk0MTFFNDMwOEVFNjg5QTc2NzYwOUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2QXBXcmNqR1dZNENteWE4cnV5TUJxb05tRWFpdVY2MWZqS24xY2p1c2VpLzAv
MzQzNTJlMzEzNzM4MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsnwwDQYJKoZIhvcNAQELBQADggEBAIb9t1Ma
1D3/wTpHtpkAV21pgXrmkW69I6GSi4dOquf8rL4uRbpVsQaU7yP38VYXmJbPsjFe
z7NGsFa7e7knuTfc2UvA6/PWpjvULV2HIpbbF5O5HKGD8VaRd8j3SvHiV9lxOVrW
vdPoGijMCLaqjmg5WZWDDrGwFYAJoggIx2rLuyEEllmCw8bS1ik4yHAXHDkRYMLX
7EEDE14AgN8yRH9Pds1xMgzSuN2hZ3L/vgfGxwmQujgi1zx8flBzkQFE+/gVGn19
2MO2hqKxvEqZOmYGCIYVAF9C2wQqRbpp61P3lEZnlLcHZgBWZYppY1aW9XCpbgGe
Jho0TPo2D5ArksI=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:40 2026 by rpki-client