Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
File:                     34352e3233352e36352e302f32342d3234203d3e20323637343132.roa (raw, json)
Hash identifier:          AT3HgIPlTWbtAa0NwNfbbxh/AzHKn5U0DY1oO+2wymE=
Subject key identifier:   1F:B0:91:21:75:D0:A9:0A:73:D7:32:26:14:AA:2E:18:DC:D1:5B:F3
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       522177B14A9AF01A10E093C9AB504BDAC296FBA8
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa
Signing time:             Tue 21 Jul 2026 19:45:28 +0000
ROA not before:           Tue 21 Jul 2026 19:40:28 +0000
ROA not after:            Tue 20 Jul 2027 19:45:28 +0000
asID:                     267412
IP address blocks:        45.235.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:21:77:b1:4a:9a:f0:1a:10:e0:93:c9:ab:50:4b:da:c2:96:fb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Jul 21 19:40:28 2026 GMT
            Not After : Jul 20 19:45:28 2027 GMT
        Subject: CN=1FB0912175D0A90A73D7322614AA2E18DCD15BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:1f:38:32:6e:e6:6d:9e:71:ae:0f:39:ec:
                    1b:95:93:57:77:69:e6:d4:7c:0d:5f:ff:3e:93:47:
                    32:bf:4d:dd:de:fe:1f:93:08:1b:0f:b6:11:35:10:
                    aa:4f:cc:ef:c0:ee:78:6f:1a:6b:eb:29:b0:54:33:
                    5e:98:82:fc:af:d9:0c:5a:90:30:38:fd:67:38:f9:
                    1d:fc:02:c8:0f:d4:ff:29:04:cb:4d:e1:3c:70:16:
                    f4:04:fb:0a:ea:80:ac:14:77:18:2b:51:03:2c:c4:
                    de:37:77:ea:fb:cc:fc:fa:99:ed:98:19:0d:c3:ee:
                    b5:37:58:ed:9b:b7:27:42:b0:93:f2:58:00:17:7e:
                    8b:80:3b:e2:3d:3d:da:b9:13:73:e1:11:4a:22:75:
                    5b:a5:79:ff:f3:0d:62:18:b6:92:a5:27:f9:41:99:
                    59:6f:e1:90:b7:f2:e1:5d:dc:9b:c7:d5:f8:18:aa:
                    a2:8c:46:89:2f:d5:1c:f2:82:a5:0b:8b:ec:82:49:
                    18:c7:1a:c0:d4:32:43:b6:eb:46:52:e7:eb:78:04:
                    1a:3b:aa:27:06:5e:87:6c:39:df:20:de:83:d2:07:
                    f0:8c:c5:0f:18:8c:3e:fb:f6:c4:f8:19:57:d7:25:
                    51:34:ab:f4:e0:4f:2a:47:71:fe:6f:f7:07:d3:6c:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B0:91:21:75:D0:A9:0A:73:D7:32:26:14:AA:2E:18:DC:D1:5B:F3
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36352e302f32342d3234203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:26:e2:94:11:9f:6f:6e:1a:f3:9b:c7:4b:78:a4:79:f9:72:
         fa:d0:53:79:b8:ed:60:3b:bc:c7:e5:be:6d:c0:91:0b:28:ad:
         68:8a:c5:4c:a4:ad:ec:14:41:43:2d:d1:77:8f:4e:12:70:ce:
         bc:91:dd:08:cb:06:c3:25:5e:df:78:e5:3c:2f:06:2a:3c:9a:
         96:40:3a:2b:7f:6c:d7:bd:c5:85:15:61:54:f8:ef:e8:f2:a8:
         39:37:0d:5f:b6:09:00:8f:02:84:fe:f8:0b:46:f4:02:80:f8:
         e6:e4:70:a0:0d:32:3d:84:ae:7f:a5:d1:99:7d:88:a4:ff:58:
         fe:40:7f:16:d9:54:dc:93:36:a1:24:fc:86:c0:73:c2:7e:7d:
         89:e9:d3:93:78:43:4e:cb:18:94:0f:29:26:9e:12:9e:55:d7:
         1f:4d:ed:d2:a8:60:65:29:73:be:86:bf:a9:ea:9a:7c:cd:19:
         bd:67:43:5e:2a:53:8e:f3:8b:a9:bb:23:9c:5d:cc:d1:d4:29:
         7a:28:5a:ff:91:d8:7a:d9:17:06:eb:31:57:a1:ca:a5:10:e3:
         db:f7:9f:98:59:51:88:84:db:7e:57:ee:4f:69:3b:a1:94:03:
         b1:04:1e:62:ff:98:a0:a2:50:70:66:1e:48:be:47:86:b0:d8:
         f6:1c:a9:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUiF3sUqa8BoQ4JPJq1BL2sKW+6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM4NEQyQzU5N0U0RkI0QUUwOTI5Q0Y1RkRFMDVCOTlE
REYzMTE3MzAeFw0yNjA3MjExOTQwMjhaFw0yNzA3MjAxOTQ1MjhaMDMxMTAvBgNV
BAMTKDFGQjA5MTIxNzVEMEE5MEE3M0Q3MzIyNjE0QUEyRTE4RENEMTVCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sB84Mm7mbZ5xrg857BuVk1d3
aebUfA1f/z6TRzK/Td3e/h+TCBsPthE1EKpPzO/A7nhvGmvrKbBUM16Ygvyv2Qxa
kDA4/Wc4+R38AsgP1P8pBMtN4TxwFvQE+wrqgKwUdxgrUQMsxN43d+r7zPz6me2Y
GQ3D7rU3WO2btydCsJPyWAAXfouAO+I9Pdq5E3PhEUoidVulef/zDWIYtpKlJ/lB
mVlv4ZC38uFd3JvH1fgYqqKMRokv1RzygqULi+yCSRjHGsDUMkO260ZS5+t4BBo7
qicGXodsOd8g3oPSB/CMxQ8YjD779sT4GVfXJVE0q/TgTypHcf5v9wfTbAI1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUH7CRIXXQqQpz1zImFKouGNzRW/MwHwYDVR0j
BBgwFoAU04TSxZfk+0rgkpz1/eBbmd3zEXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMS9EMzg0RDJDNTk3RTRGQjRBRTA5MjlDRjVGREUwNUI5OURERjMxMTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzODREMkM1OTdFNEZCNEFF
MDkyOUNGNUZERTA1Qjk5RERGMzExNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUNkZBNXZONlV5M00xZ2c0YWJjUnBiSnVuOFR5QUw5ZTdDOGRocktjYUNCLzEv
MzQzNTJlMzIzMzM1MmUzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALetBMA0GCSqGSIb3DQEBCwUAA4IBAQBAJuKUEZ9v
bhrzm8dLeKR5+XL60FN5uO1gO7zH5b5twJELKK1oisVMpK3sFEFDLdF3j04ScM68
kd0IywbDJV7feOU8LwYqPJqWQDorf2zXvcWFFWFU+O/o8qg5Nw1ftgkAjwKE/vgL
RvQCgPjm5HCgDTI9hK5/pdGZfYik/1j+QH8W2VTckzahJPyGwHPCfn2J6dOTeENO
yxiUDykmnhKeVdcfTe3SqGBlKXO+hr+p6pp8zRm9Z0NeKlOO84upuyOcXczR1Cl6
KFr/kdh62RcG6zFXocqlEOPb95+YWVGIhNt+V+5PaTuhlAOxBB5i/5igolBwZh5I
vkeGsNj2HKle
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:37:50 2026 by rpki-client