Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e372e302f32342d3234203d3e20323639333535.roa
File:                     34352e3138352e372e302f32342d3234203d3e20323639333535.roa (raw, json)
Hash identifier:          MHcUTpA1iNF7byJb4oFDfe4zEtNY1LniYqr5MoTeIfA=
Subject key identifier:   02:0E:5A:56:D2:9B:47:E3:94:41:D3:B2:2E:B4:16:13:9B:AA:02:0F
Certificate issuer:       /CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
Certificate serial:       44016F24D68BAD8ED765C431AB86D7692D25590C
Authority key identifier: 71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e372e302f32342d3234203d3e20323639333535.roa
Signing time:             Mon 20 Jul 2026 22:58:09 +0000
ROA not before:           Mon 20 Jul 2026 22:53:09 +0000
ROA not after:            Mon 19 Jul 2027 22:58:09 +0000
asID:                     269355
IP address blocks:        45.185.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:6f:24:d6:8b:ad:8e:d7:65:c4:31:ab:86:d7:69:2d:25:59:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
        Validity
            Not Before: Jul 20 22:53:09 2026 GMT
            Not After : Jul 19 22:58:09 2027 GMT
        Subject: CN=020E5A56D29B47E39441D3B22EB416139BAA020F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:18:15:d8:db:42:40:e4:bd:d6:3e:b6:ec:
                    fc:ee:3a:a4:8c:e0:75:26:91:e7:24:ea:b2:cb:9e:
                    32:3f:67:04:13:5a:fa:f6:2a:fd:1f:5b:fc:d2:a9:
                    67:83:8d:62:47:85:79:82:de:4c:27:7f:e9:88:0d:
                    02:fd:04:9f:12:fa:46:ec:bb:c6:13:0a:51:a0:63:
                    60:f0:c1:5a:46:48:9d:4c:92:ae:34:11:76:a8:8a:
                    f5:e9:7c:4f:e0:4e:bc:4e:3b:5f:10:a4:47:01:32:
                    3e:7e:d5:6c:53:d3:14:cc:d3:c6:c6:87:64:8b:30:
                    50:9f:87:ba:6f:80:a5:d5:3e:2e:7b:1b:75:5a:e9:
                    d6:47:da:85:19:a5:08:c3:a7:9f:a8:35:39:5e:b0:
                    94:59:55:58:cd:43:4c:62:a1:72:b5:16:23:69:9a:
                    f9:f0:10:6f:d7:6d:b8:09:3b:be:67:7d:75:43:8f:
                    fa:45:f3:6a:9a:44:71:d2:7a:80:04:ef:67:d2:7a:
                    97:81:a9:cb:30:d5:4b:f4:24:47:65:c7:14:2a:fa:
                    7d:c4:2d:d6:4b:f7:42:88:cd:b3:25:7d:e2:04:40:
                    1f:1e:ab:76:5b:7e:1e:e3:73:c2:90:27:e3:b5:ef:
                    36:3f:01:bb:b8:be:a3:8d:a0:97:6e:aa:37:49:8f:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:5A:56:D2:9B:47:E3:94:41:D3:B2:2E:B4:16:13:9B:AA:02:0F
            X509v3 Authority Key Identifier:
                keyid:71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/34352e3138352e372e302f32342d3234203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:44:fd:64:38:c9:f2:48:67:95:78:25:70:69:7d:13:bd:0b:
         84:50:79:ee:88:40:bf:78:54:4e:1a:12:df:98:03:e8:ad:bf:
         9f:e8:57:74:ad:48:dd:90:bd:24:89:28:b0:97:e0:50:99:39:
         fe:be:93:8f:9d:f0:49:0e:bd:0b:fc:18:26:6a:22:28:ef:30:
         07:8a:1a:7f:72:54:d0:af:f8:e2:12:c6:b4:1f:64:9c:10:45:
         05:bd:cc:5a:e3:e2:b8:86:03:62:c7:5f:b1:3d:bd:b2:09:64:
         a1:09:41:80:79:08:3c:a9:0f:60:b4:42:25:f3:bb:d7:d5:fb:
         82:a1:42:9c:dc:ce:57:14:36:a0:c4:fd:61:e4:72:63:7c:e7:
         ee:af:87:6e:ef:c1:78:dd:fe:ff:f5:1d:a8:42:0b:68:70:a4:
         9e:95:f7:1a:ab:d6:08:42:d8:45:96:6d:1a:80:eb:ed:3d:52:
         9b:34:64:d3:7b:51:f3:ea:4b:67:fc:a6:3a:37:5a:6b:45:ef:
         ad:4c:3a:1c:27:e6:b4:fe:28:0e:1a:c0:b5:4d:99:ed:0e:26:
         8c:45:27:7a:a8:78:35:e9:84:e9:dc:ca:7b:80:5f:08:a6:a8:
         d7:7f:aa:41:6d:93:09:b2:d6:c8:b8:cd:84:50:fb:c4:29:81:
         68:4d:3b:57
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURAFvJNaLrY7XZcQxq4bXaS0lWQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5MUY5RjMxRkNBRTZFRDE0MTdCMzQ4NTdGNjZCNEI1
MjI3OTdCRDAeFw0yNjA3MjAyMjUzMDlaFw0yNzA3MTkyMjU4MDlaMDMxMTAvBgNV
BAMTKDAyMEU1QTU2RDI5QjQ3RTM5NDQxRDNCMjJFQjQxNjEzOUJBQTAyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6hgV2NtCQOS91j627PzuOqSM
4HUmkeck6rLLnjI/ZwQTWvr2Kv0fW/zSqWeDjWJHhXmC3kwnf+mIDQL9BJ8S+kbs
u8YTClGgY2DwwVpGSJ1Mkq40EXaoivXpfE/gTrxOO18QpEcBMj5+1WxT0xTM08bG
h2SLMFCfh7pvgKXVPi57G3Va6dZH2oUZpQjDp5+oNTlesJRZVVjNQ0xioXK1FiNp
mvnwEG/XbbgJO75nfXVDj/pF82qaRHHSeoAE72fSepeBqcsw1Uv0JEdlxxQq+n3E
LdZL90KIzbMlfeIEQB8eq3Zbfh7jc8KQJ+O17zY/Abu4vqONoJduqjdJj09pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAg5aVtKbR+OUQdOyLrQWE5uqAg8wHwYDVR0j
BBgwFoAUcZH58x/K5u0UF7NIV/ZrS1Inl70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMi83MTkxRjlGMzFGQ0FFNkVEMTQxN0IzNDg1N0Y2NkI0QjUyMjc5N0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxOTFGOUYzMUZDQUU2RUQx
NDE3QjM0ODU3RjY2QjRCNTIyNzk3QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzIv
MzQzNTJlMzEzODM1MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTMz
MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC25BzANBgkqhkiG9w0BAQsFAAOCAQEASUT9ZDjJ8khn
lXglcGl9E70LhFB57ohAv3hUThoS35gD6K2/n+hXdK1I3ZC9JIkosJfgUJk5/r6T
j53wSQ69C/wYJmoiKO8wB4oaf3JU0K/44hLGtB9knBBFBb3MWuPiuIYDYsdfsT29
sglkoQlBgHkIPKkPYLRCJfO719X7gqFCnNzOVxQ2oMT9YeRyY3zn7q+Hbu/BeN3+
//UdqEILaHCknpX3GqvWCELYRZZtGoDr7T1SmzRk03tR8+pLZ/ymOjdaa0XvrUw6
HCfmtP4oDhrAtU2Z7Q4mjEUneqh4NemE6dzKe4BfCKao13+qQW2TCbLWyLjNhFD7
xCmBaE07Vw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:21:05 2026 by rpki-client