Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa
File:                     34352e3233352e36362e302f32332d3233203d3e20323637343132.roa (raw, json)
Hash identifier:          MtV0dlLn6d2CJDGTf9KcJbPGSrjfjWWpGy+yEityRw4=
Subject key identifier:   9F:85:AE:DF:E6:C9:90:6B:E6:31:73:C3:FB:E8:73:91:CA:AC:73:D2
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       4C5546E5031B8C73B8F2B30C7CB3857F7BD349B4
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa
Signing time:             Tue 21 Jul 2026 19:45:29 +0000
ROA not before:           Tue 21 Jul 2026 19:40:29 +0000
ROA not after:            Tue 20 Jul 2027 19:45:29 +0000
asID:                     267412
IP address blocks:        45.235.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:55:46:e5:03:1b:8c:73:b8:f2:b3:0c:7c:b3:85:7f:7b:d3:49:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Jul 21 19:40:29 2026 GMT
            Not After : Jul 20 19:45:29 2027 GMT
        Subject: CN=9F85AEDFE6C9906BE63173C3FBE87391CAAC73D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:10:84:8c:90:97:1c:6e:c0:44:25:d8:c9:
                    79:a1:db:d5:9c:da:cd:40:e3:23:40:08:50:c3:92:
                    17:49:3c:ca:64:12:89:10:b3:93:af:11:9f:ee:36:
                    dc:46:ae:6f:e6:65:79:c1:13:16:f6:49:93:c3:b0:
                    43:6b:56:4b:dc:9d:15:93:a7:24:45:2e:b3:bf:83:
                    d9:0b:0c:32:df:ab:00:f8:dd:b6:47:fa:61:1a:c2:
                    b2:1d:07:bd:9b:70:33:4e:3e:e1:f4:08:f4:50:29:
                    f3:98:c6:2d:ed:36:e8:30:55:c3:ef:0f:df:27:6b:
                    21:6d:75:e5:17:05:e0:d8:86:ff:42:20:92:d4:8e:
                    58:9a:bc:d8:b1:35:62:89:48:00:3a:d4:2f:b7:cd:
                    98:b1:70:de:8f:4e:1c:26:7c:2b:76:08:69:e2:8e:
                    a8:95:0d:99:0f:7d:e0:42:86:87:0a:2c:d6:63:97:
                    2b:ab:21:b6:bc:1b:14:fb:18:38:1e:00:8a:f0:67:
                    a1:71:19:fc:ed:65:9e:16:e2:52:24:b1:d6:38:f2:
                    bd:7d:94:45:95:9e:d8:04:cd:ee:56:02:8b:e0:1a:
                    df:d6:45:ae:3a:4f:15:00:0c:a2:62:9d:c5:90:9a:
                    eb:c2:2d:48:24:ba:22:e5:14:eb:c6:d8:1c:d6:5f:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:85:AE:DF:E6:C9:90:6B:E6:31:73:C3:FB:E8:73:91:CA:AC:73:D2
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36362e302f32332d3233203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:39:a2:66:14:ab:01:5c:5e:d4:ec:c1:21:40:13:a7:69:3b:
         77:be:28:46:e5:0f:13:44:76:da:7b:1b:94:74:64:ee:ad:05:
         ee:88:4e:bb:f1:53:be:75:01:c7:c7:1b:4b:52:13:60:ae:a4:
         66:76:6c:41:3f:4f:37:c7:b8:83:88:bc:b9:94:7c:41:35:7a:
         7c:20:a5:f2:20:1b:23:5f:b4:7b:fd:9b:08:dc:a6:38:10:24:
         ca:49:38:92:27:4f:bd:5f:b5:62:67:a1:32:c3:f2:22:eb:83:
         5e:62:6d:6c:7d:e7:a8:9c:41:80:6b:1e:63:0c:08:5e:0f:cf:
         fc:38:6c:79:6b:94:a7:2f:b7:34:1c:1d:ee:98:e9:4a:70:0d:
         81:f1:4a:5b:0a:46:89:27:f5:80:36:a4:8d:c7:42:ad:13:cc:
         69:05:3b:c3:b0:14:97:9c:88:0b:cb:7d:bf:61:fd:35:6f:d9:
         ee:85:b1:63:71:25:ee:34:27:3a:52:57:1f:19:d3:13:8c:ba:
         6c:6e:23:e3:87:4c:f1:f8:cc:15:78:79:39:23:76:d2:a1:2b:
         f4:47:d0:1f:a9:b7:b7:29:57:5a:bc:54:c6:6e:6b:75:55:8b:
         c6:28:8d:b0:31:5a:00:ef:d8:ce:74:53:99:98:9a:a4:04:16:
         7a:ee:07:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTFVG5QMbjHO48rMMfLOFf3vTSbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM4NEQyQzU5N0U0RkI0QUUwOTI5Q0Y1RkRFMDVCOTlE
REYzMTE3MzAeFw0yNjA3MjExOTQwMjlaFw0yNzA3MjAxOTQ1MjlaMDMxMTAvBgNV
BAMTKDlGODVBRURGRTZDOTkwNkJFNjMxNzNDM0ZCRTg3MzkxQ0FBQzczRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgRCEjJCXHG7ARCXYyXmh29Wc
2s1A4yNACFDDkhdJPMpkEokQs5OvEZ/uNtxGrm/mZXnBExb2SZPDsENrVkvcnRWT
pyRFLrO/g9kLDDLfqwD43bZH+mEawrIdB72bcDNOPuH0CPRQKfOYxi3tNugwVcPv
D98nayFtdeUXBeDYhv9CIJLUjliavNixNWKJSAA61C+3zZixcN6PThwmfCt2CGni
jqiVDZkPfeBChocKLNZjlyurIba8GxT7GDgeAIrwZ6FxGfztZZ4W4lIksdY48r19
lEWVntgEze5WAovgGt/WRa46TxUADKJincWQmuvCLUgkuiLlFOvG2BzWX8l1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn4Wu3+bJkGvmMXPD++hzkcqsc9IwHwYDVR0j
BBgwFoAU04TSxZfk+0rgkpz1/eBbmd3zEXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQ2RkE1dk42VXkzTTFnZzRhYmNScGJKdW44VHlBTDllN0M4ZGhyS2Nh
Q0IvMS9EMzg0RDJDNTk3RTRGQjRBRTA5MjlDRjVGREUwNUI5OURERjMxMTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzODREMkM1OTdFNEZCNEFF
MDkyOUNGNUZERTA1Qjk5RERGMzExNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUNkZBNXZONlV5M00xZ2c0YWJjUnBiSnVuOFR5QUw5ZTdDOGRocktjYUNCLzEv
MzQzNTJlMzIzMzM1MmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLetCMA0GCSqGSIb3DQEBCwUAA4IBAQAzOaJmFKsB
XF7U7MEhQBOnaTt3vihG5Q8TRHbaexuUdGTurQXuiE678VO+dQHHxxtLUhNgrqRm
dmxBP083x7iDiLy5lHxBNXp8IKXyIBsjX7R7/ZsI3KY4ECTKSTiSJ0+9X7ViZ6Ey
w/Ii64NeYm1sfeeonEGAax5jDAheD8/8OGx5a5SnL7c0HB3umOlKcA2B8UpbCkaJ
J/WANqSNx0KtE8xpBTvDsBSXnIgLy32/Yf01b9nuhbFjcSXuNCc6UlcfGdMTjLps
biPjh0zx+MwVeHk5I3bSoSv0R9Afqbe3KVdavFTGbmt1VYvGKI2wMVoA79jOdFOZ
mJqkBBZ67gcp
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:49:22 2026 by rpki-client