Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
File:                     34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa (raw, json)
Hash identifier:          9/r0dR9Bls9pJKsfbKH5+Y5fktVzUON734ZOZyJRbIo=
Subject key identifier:   4E:63:06:EC:E8:B8:52:B8:58:CA:15:6B:5C:88:E3:BE:2D:55:68:88
Certificate issuer:       /CN=3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1
Certificate serial:       533612BF24692910E5EBBD07A19AD7EE7E1D2D89
Authority key identifier: 3F:1D:B1:2C:95:AE:94:14:C2:E2:8B:BF:BE:61:6B:2B:A5:1D:CC:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa
Signing time:             Mon 20 Jul 2026 13:33:56 +0000
ROA not before:           Mon 20 Jul 2026 13:28:56 +0000
ROA not after:            Mon 19 Jul 2027 13:33:56 +0000
asID:                     269595
IP address blocks:        45.188.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.crl
                          rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:12:bf:24:69:29:10:e5:eb:bd:07:a1:9a:d7:ee:7e:1d:2d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1
        Validity
            Not Before: Jul 20 13:28:56 2026 GMT
            Not After : Jul 19 13:33:56 2027 GMT
        Subject: CN=4E6306ECE8B852B858CA156B5C88E3BE2D556888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:dd:b8:e1:f1:56:81:3c:79:b9:ec:d8:80:
                    a3:af:74:c9:2e:40:ca:7d:dc:26:59:6e:62:3b:f1:
                    d9:05:75:87:98:8e:fc:47:35:81:54:db:5c:d8:9f:
                    ce:28:a9:8b:48:b9:0a:79:93:70:cd:02:c2:c6:3d:
                    8f:bb:96:ba:c3:b7:57:b6:f9:89:ea:ff:3b:5d:36:
                    ac:8f:c2:31:23:91:71:6a:75:4e:de:04:6b:39:d8:
                    0e:89:71:3e:2e:c1:d3:a0:1b:c3:ca:fc:18:9d:e5:
                    bf:29:6d:55:3f:e7:fe:18:30:c1:56:52:eb:9d:6d:
                    f3:7a:ee:65:55:c2:a7:42:4f:42:a6:c6:b0:fc:17:
                    9d:98:44:6b:bb:71:3e:05:15:25:c6:d5:9e:0f:37:
                    f0:89:47:48:f6:d3:6d:e3:bb:4a:d2:76:71:e2:b5:
                    8f:45:f0:8f:f0:a3:a6:74:c9:5c:67:3c:f6:82:4a:
                    44:b7:e2:ee:84:2b:69:b4:ab:a7:69:bc:c2:15:30:
                    6c:cb:8a:9b:24:00:79:6b:ca:c0:f2:50:6a:d9:f6:
                    4e:3a:60:3e:56:80:aa:06:72:4f:5d:8f:ae:05:cd:
                    83:d1:de:70:72:84:e2:2f:47:a1:c5:d6:48:72:7b:
                    60:14:8e:d9:e7:8a:97:4e:6b:a3:e1:54:86:0c:14:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:63:06:EC:E8:B8:52:B8:58:CA:15:6B:5C:88:E3:BE:2D:55:68:88
            X509v3 Authority Key Identifier:
                keyid:3F:1D:B1:2C:95:AE:94:14:C2:E2:8B:BF:BE:61:6B:2B:A5:1D:CC:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F1DB12C95AE9414C2E28BBFBE616B2BA51DCCA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/34352e3138382e3233372e302f32342d3234203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:34:ac:ce:a0:73:e5:59:20:6c:0d:20:e3:a8:5b:92:aa:10:
         9e:96:1c:28:e9:f7:af:06:5a:f7:f2:6d:0b:cc:68:61:b0:4f:
         b2:66:08:ea:c1:d1:3a:ef:7f:d1:de:ec:ca:93:fd:d1:26:c2:
         c9:29:63:c7:63:0f:c8:7a:74:a9:f7:cf:22:2e:eb:eb:23:34:
         a8:c7:61:2a:4d:b0:8c:cd:b8:c5:51:90:cc:03:38:ea:58:7d:
         f7:e7:52:71:e7:65:96:e7:2f:c2:fc:b9:53:38:45:c3:7f:26:
         5d:a8:60:57:2c:82:dd:7e:fd:58:b3:80:1f:fb:2a:5b:9d:8c:
         b9:52:07:75:04:74:f5:1c:77:12:06:08:b8:0f:a6:66:39:14:
         a8:62:3a:23:96:5a:6a:b7:31:ba:86:32:71:19:18:e5:31:fe:
         8f:f2:c2:dd:6d:85:5a:11:fa:d2:11:81:c9:9c:fc:6f:30:72:
         0b:85:7f:79:05:fd:be:e7:4f:db:a6:05:09:f4:d2:54:cc:ac:
         65:a3:a0:a4:60:db:0b:c4:f8:de:a4:d0:3b:70:2c:9e:c9:90:
         88:0f:15:ff:47:6b:be:43:72:6d:ce:90:df:33:98:45:95:3e:
         90:ef:a7:3b:f9:a1:f5:bb:10:fb:c1:83:93:60:87:ae:6f:68:
         b6:ad:a1:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUzYSvyRpKRDl670HoZrX7n4dLYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxREIxMkM5NUFFOTQxNEMyRTI4QkJGQkU2MTZCMkJB
NTFEQ0NBMTAeFw0yNjA3MjAxMzI4NTZaFw0yNzA3MTkxMzMzNTZaMDMxMTAvBgNV
BAMTKDRFNjMwNkVDRThCODUyQjg1OENBMTU2QjVDODhFM0JFMkQ1NTY4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrN244fFWgTx5uezYgKOvdMku
QMp93CZZbmI78dkFdYeYjvxHNYFU21zYn84oqYtIuQp5k3DNAsLGPY+7lrrDt1e2
+Ynq/ztdNqyPwjEjkXFqdU7eBGs52A6JcT4uwdOgG8PK/Bid5b8pbVU/5/4YMMFW
UuudbfN67mVVwqdCT0KmxrD8F52YRGu7cT4FFSXG1Z4PN/CJR0j2023ju0rSdnHi
tY9F8I/wo6Z0yVxnPPaCSkS34u6EK2m0q6dpvMIVMGzLipskAHlrysDyUGrZ9k46
YD5WgKoGck9dj64FzYPR3nByhOIvR6HF1khye2AUjtnnipdOa6PhVIYMFDRBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTmMG7Oi4UrhYyhVrXIjjvi1VaIgwHwYDVR0j
BBgwFoAUPx2xLJWulBTC4ou/vmFrK6UdzKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdEQ2lyZ2hRdkJhSlg5cldrSzF3UlBnNUE2UXI5N281QmRKYlFUbVlk
UDYvMC8zRjFEQjEyQzk1QUU5NDE0QzJFMjhCQkZCRTYxNkIyQkE1MURDQ0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMURCMTJDOTVBRTk0MTRD
MkUyOEJCRkJFNjE2QjJCQTUxRENDQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHRENpcmdoUXZCYUpYOXJXa0sxd1JQZzVBNlFyOTdvNUJkSmJRVG1ZZFA2LzAv
MzQzNTJlMzEzODM4MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvO0wDQYJKoZIhvcNAQELBQADggEBAMo0rM6g
c+VZIGwNIOOoW5KqEJ6WHCjp968GWvfybQvMaGGwT7JmCOrB0Trvf9He7MqT/dEm
wskpY8djD8h6dKn3zyIu6+sjNKjHYSpNsIzNuMVRkMwDOOpYfffnUnHnZZbnL8L8
uVM4RcN/Jl2oYFcsgt1+/VizgB/7KludjLlSB3UEdPUcdxIGCLgPpmY5FKhiOiOW
Wmq3MbqGMnEZGOUx/o/ywt1thVoR+tIRgcmc/G8wcguFf3kF/b7nT9umBQn00lTM
rGWjoKRg2wvE+N6k0DtwLJ7JkIgPFf9Ha75Dcm3OkN8zmEWVPpDvpzv5ofW7EPvB
g5Ngh65vaLatoX8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:48 2026 by rpki-client