Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3234203d3e20323638303734.roa
File:                     34352e3136372e3133322e302f32332d3234203d3e20323638303734.roa (raw, json)
Hash identifier:          iG+cp3zTVozXnj0M9Ais3QJWigF6dP+s0guyIOfWCRM=
Subject key identifier:   B2:F1:8C:41:3C:8C:E1:91:76:05:69:F8:9A:4B:51:27:9F:EE:87:49
Certificate issuer:       /CN=31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9
Certificate serial:       1D6DBEF382137BB2AB770A70A216F122D530D0F7
Authority key identifier: 31:BF:BB:CD:0E:B9:ED:82:EE:67:55:5D:CB:AD:07:78:AD:BF:DE:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3234203d3e20323638303734.roa
Signing time:             Mon 18 Aug 2025 20:13:48 +0000
ROA not before:           Mon 18 Aug 2025 20:08:48 +0000
ROA not after:            Mon 17 Aug 2026 20:13:48 +0000
asID:                     268074
IP address blocks:        45.167.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.crl
                          rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:be:f3:82:13:7b:b2:ab:77:0a:70:a2:16:f1:22:d5:30:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9
        Validity
            Not Before: Aug 18 20:08:48 2025 GMT
            Not After : Aug 17 20:13:48 2026 GMT
        Subject: CN=B2F18C413C8CE191760569F89A4B51279FEE8749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:2f:fb:1d:16:23:da:26:17:be:26:f5:66:
                    7d:00:a7:00:ce:90:aa:cb:30:02:68:87:0b:13:17:
                    6e:ab:2d:3f:fa:bd:e9:2b:9e:29:99:57:bd:7e:49:
                    68:7d:f5:93:9b:56:56:04:b4:19:19:aa:99:7c:1c:
                    db:15:3b:1c:c8:74:b9:91:eb:dc:02:5c:3d:5d:8f:
                    f5:02:b1:75:67:7a:9e:69:f1:f3:9b:10:c6:85:18:
                    28:7b:9c:ed:ca:d1:7a:67:53:fd:08:30:18:2b:f1:
                    1e:ce:9d:14:ce:b2:59:04:8d:71:9e:03:4b:70:c0:
                    28:3f:0b:34:a9:a9:59:5c:09:91:81:32:db:1f:11:
                    9c:df:6c:f0:d5:8c:6a:32:c3:70:5c:69:89:36:77:
                    aa:b9:64:0f:f6:55:8a:89:11:fe:e4:2a:fe:0c:5a:
                    18:59:2c:9a:0b:03:66:38:32:1a:48:88:d2:4b:cc:
                    42:cf:98:90:01:4d:44:0f:db:e7:05:8d:ab:f8:ab:
                    90:b5:28:e0:c1:47:bb:c9:84:5c:44:e2:76:0c:dc:
                    0e:9a:dc:73:67:94:87:d6:04:ad:d5:21:db:e4:2a:
                    4e:92:23:05:5f:ef:7b:70:81:54:d4:8b:4b:28:24:
                    07:fb:99:61:d1:65:6b:7f:31:4c:9e:0a:cd:b5:78:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:8C:41:3C:8C:E1:91:76:05:69:F8:9A:4B:51:27:9F:EE:87:49
            X509v3 Authority Key Identifier:
                keyid:31:BF:BB:CD:0E:B9:ED:82:EE:67:55:5D:CB:AD:07:78:AD:BF:DE:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BFBBCD0EB9ED82EE67555DCBAD0778ADBFDEF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/34352e3136372e3133322e302f32332d3234203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:9f:cf:09:11:4f:6a:8e:dd:25:95:5b:2b:01:ad:04:80:
         89:eb:07:05:b9:89:55:47:1c:94:46:59:9a:fa:21:2b:6e:30:
         77:9c:0c:1e:ea:f2:d7:fd:e7:2e:a6:d8:97:50:49:65:c4:20:
         e5:db:b4:60:dd:b4:43:93:27:18:61:6f:41:cd:f7:eb:0d:44:
         4c:70:ae:bb:2b:32:1c:75:8c:4e:45:d1:9c:f2:54:10:29:19:
         09:e5:ed:f6:02:9a:ea:96:ef:bf:53:2d:de:4a:ed:6b:fe:4e:
         8d:d2:b4:f7:87:33:aa:43:e6:47:0c:a2:d7:87:77:a5:b6:01:
         83:22:c6:25:e7:d8:40:69:79:2f:3c:d3:cb:54:15:ec:45:0c:
         f3:7f:57:69:55:0f:c2:33:7a:0e:b8:0c:84:b9:b5:44:04:80:
         ed:91:a0:33:66:a5:2a:25:70:de:20:10:ec:b9:0f:f4:0b:2a:
         b8:2f:bc:ee:49:39:fa:2e:f6:3d:a7:14:7d:d7:b7:3c:b9:a8:
         63:fc:f8:7c:1e:2f:de:6f:16:45:97:2c:3d:fe:0d:a1:01:4f:
         ea:ad:d3:39:bf:08:2e:b1:04:e8:c2:c9:58:a4:85:dc:c6:09:
         93:7a:6e:77:3c:11:7b:1e:a2:8e:e3:c4:59:34:fb:fe:64:83:
         b8:5d:6d:60
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHW2+84ITe7KrdwpwohbxItUw0PcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCRkJCQ0QwRUI5RUQ4MkVFNjc1NTVEQ0JBRDA3NzhB
REJGREVGOTAeFw0yNTA4MTgyMDA4NDhaFw0yNjA4MTcyMDEzNDhaMDMxMTAvBgNV
BAMTKEIyRjE4QzQxM0M4Q0UxOTE3NjA1NjlGODlBNEI1MTI3OUZFRTg3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHky/7HRYj2iYXvib1Zn0ApwDO
kKrLMAJohwsTF26rLT/6vekrnimZV71+SWh99ZObVlYEtBkZqpl8HNsVOxzIdLmR
69wCXD1dj/UCsXVnep5p8fObEMaFGCh7nO3K0XpnU/0IMBgr8R7OnRTOslkEjXGe
A0twwCg/CzSpqVlcCZGBMtsfEZzfbPDVjGoyw3BcaYk2d6q5ZA/2VYqJEf7kKv4M
WhhZLJoLA2Y4MhpIiNJLzELPmJABTUQP2+cFjav4q5C1KODBR7vJhFxE4nYM3A6a
3HNnlIfWBK3VIdvkKk6SIwVf73twgVTUi0soJAf7mWHRZWt/MUyeCs21eILnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsvGMQTyM4ZF2BWn4mktRJ5/uh0kwHwYDVR0j
BBgwFoAUMb+7zQ657YLuZ1Vdy60HeK2/3vkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZmallVTllFdVF5bzEzS2o3UWJ3WHlNYk5Rdkg0b0tkcWRHMlRKR3lK
RnUvMC8zMUJGQkJDRDBFQjlFRDgyRUU2NzU1NURDQkFEMDc3OEFEQkZERUY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQkZCQkNEMEVCOUVEODJF
RTY3NTU1RENCQUQwNzc4QURCRkRFRjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2ZmpZVU5ZRXVReW8xM0tqN1Fid1h5TWJOUXZING9LZHFkRzJUSkd5SkZ1LzAv
MzQzNTJlMzEzNjM3MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtp4QwDQYJKoZIhvcNAQELBQADggEBAJegn88J
EU9qjt0llVsrAa0EgInrBwW5iVVHHJRGWZr6IStuMHecDB7q8tf95y6m2JdQSWXE
IOXbtGDdtEOTJxhhb0HN9+sNRExwrrsrMhx1jE5F0ZzyVBApGQnl7fYCmuqW779T
Ld5K7Wv+To3StPeHM6pD5kcMoteHd6W2AYMixiXn2EBpeS8808tUFexFDPN/V2lV
D8Izeg64DIS5tUQEgO2RoDNmpSolcN4gEOy5D/QLKrgvvO5JOfou9j2nFH3Xtzy5
qGP8+HweL95vFkWXLD3+DaEBT+qt0zm/CC6xBOjCyVikhdzGCZN6bnc8EXseoo7j
xFk0+/5kg7hdbWA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:22 2025 by rpki-client