Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
File:                     34352e3233322e36302e302f32322d3332203d3e20323637333136.roa (raw, json)
Hash identifier:          nVo6cCeO+vo9wPIhJHhsCBt/CPNT+zAylYcSBmcPtaI=
Subject key identifier:   35:40:61:A5:75:EA:D6:4F:0A:FC:6E:55:F0:BB:E3:AD:DF:38:06:46
Certificate issuer:       /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial:       2B9650C1AC2283968B4B0DB1B903F92DFD5091B4
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa
Signing time:             Mon 06 Jul 2026 19:39:32 +0000
ROA not before:           Mon 06 Jul 2026 19:34:32 +0000
ROA not after:            Mon 05 Jul 2027 19:39:32 +0000
asID:                     267316
IP address blocks:        45.232.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
                          rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:50:c1:ac:22:83:96:8b:4b:0d:b1:b9:03:f9:2d:fd:50:91:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Validity
            Not Before: Jul  6 19:34:32 2026 GMT
            Not After : Jul  5 19:39:32 2027 GMT
        Subject: CN=354061A575EAD64F0AFC6E55F0BBE3ADDF380646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:14:a9:19:1b:cf:43:9a:6a:2c:b3:b4:d7:
                    e3:0a:34:af:06:2c:8c:2e:b0:60:6a:b8:28:8e:8e:
                    bc:6e:17:4e:8c:71:a4:ce:47:99:7e:bc:8c:80:d4:
                    f0:1a:10:f2:3a:b9:dc:1c:46:53:88:0f:76:62:da:
                    19:ed:46:bd:1b:bf:ff:37:ca:96:41:c9:49:31:f1:
                    af:63:dc:c0:81:c8:e3:da:bb:5d:21:13:e1:cd:da:
                    ee:df:81:4a:d3:bd:69:cd:f5:81:7f:47:1f:68:97:
                    b3:cf:20:02:9c:2a:b3:1b:2b:47:9f:5a:69:b5:89:
                    be:02:35:5d:db:fd:3c:ac:56:db:c7:0e:5c:77:eb:
                    8c:46:0f:1b:42:86:f5:3a:73:bc:15:22:30:d0:03:
                    8b:b1:e0:e1:78:92:f8:5a:25:cb:26:ef:0a:cb:16:
                    1f:6f:50:6a:b1:c9:1b:e4:cf:f4:5b:0a:93:55:30:
                    64:6a:14:77:8c:2d:7e:dc:c8:6e:ca:a8:d1:e3:d8:
                    65:8c:bd:24:40:9e:e6:cd:34:c7:48:7f:64:fa:5a:
                    f8:c8:3a:15:be:51:e8:8e:f5:f4:5c:e6:9c:32:c0:
                    22:d1:42:a0:ce:5f:a7:9d:f6:80:7f:e3:ce:e0:f5:
                    15:3f:89:be:72:f7:2e:1f:ae:38:ff:f0:a3:11:8d:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:61:A5:75:EA:D6:4F:0A:FC:6E:55:F0:BB:E3:AD:DF:38:06:46
            X509v3 Authority Key Identifier:
                keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/34352e3233322e36302e302f32322d3332203d3e20323637333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:3e:4f:4b:92:18:6b:3e:39:fd:bb:eb:4a:23:2f:03:1c:
         79:06:b1:04:40:ea:c1:63:93:9a:a1:1d:8b:2f:3f:eb:27:52:
         ed:75:a6:76:a2:df:50:90:74:30:22:e8:d4:60:86:99:26:e3:
         60:a4:16:34:c9:ab:ec:58:fc:ae:4e:b4:3a:a4:13:69:24:c7:
         f4:3f:df:9d:a3:e0:85:d0:18:3d:18:17:cd:6d:a3:ba:cb:9c:
         a9:69:3c:57:1a:bd:4f:fa:e3:ab:59:51:aa:8d:cb:24:a0:1b:
         a5:f6:75:64:19:81:52:d3:c2:42:25:a3:82:bf:af:10:95:97:
         1c:f6:57:71:53:8c:3a:27:f5:d4:0c:96:94:63:ea:5d:b0:a3:
         ce:a2:fd:8b:32:c1:76:d0:66:b2:ed:c4:f9:4c:83:8c:41:6c:
         3f:f4:39:64:84:33:db:33:40:1a:9c:4d:33:01:cc:85:d3:3c:
         f3:a2:76:1d:63:9f:99:47:2d:14:77:12:a2:a5:d4:f8:75:8f:
         33:2e:16:5c:2f:be:f7:35:ea:5c:df:00:bc:31:85:49:18:08:
         43:5f:07:51:63:be:84:a5:8b:1a:d0:66:42:3e:d5:59:ed:19:
         bc:dd:72:2c:1e:91:8f:b6:b7:a4:84:a6:55:c4:d1:3c:e2:d4:
         72:a4:11:8f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUK5ZQwawig5aLSw2xuQP5Lf1QkbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2
RDMzMTIxQjAeFw0yNjA3MDYxOTM0MzJaFw0yNzA3MDUxOTM5MzJaMDMxMTAvBgNV
BAMTKDM1NDA2MUE1NzVFQUQ2NEYwQUZDNkU1NUYwQkJFM0FEREYzODA2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyThSpGRvPQ5pqLLO01+MKNK8G
LIwusGBquCiOjrxuF06McaTOR5l+vIyA1PAaEPI6udwcRlOID3Zi2hntRr0bv/83
ypZByUkx8a9j3MCByOPau10hE+HN2u7fgUrTvWnN9YF/Rx9ol7PPIAKcKrMbK0ef
Wmm1ib4CNV3b/TysVtvHDlx364xGDxtChvU6c7wVIjDQA4ux4OF4kvhaJcsm7wrL
Fh9vUGqxyRvkz/RbCpNVMGRqFHeMLX7cyG7KqNHj2GWMvSRAnubNNMdIf2T6WvjI
OhW+UeiO9fRc5pwywCLRQqDOX6ed9oB/487g9RU/ib5y9y4frjj/8KMRjVk/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUNUBhpXXq1k8K/G5V8Lvjrd84BkYwHwYDVR0j
BBgwFoAUSvVVUH92OHxnwT3gvCtwDW0zEhswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGVtdDlOM0NCVTdRN2Q4QU5CNDFzaFZrOWZEM1BVQjhwYUFVYkRyV0Ey
LzAvNEFGNTU1NTA3Rjc2Mzg3QzY3QzEzREUwQkMyQjcwMEQ2RDMzMTIxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QUY1NTU1MDdGNzYzODdDNjdD
MTNERTBCQzJCNzAwRDZEMzMxMjFCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGVtdDlOM0NCVTdRN2Q4QU5CNDFzaFZrOWZEM1BVQjhwYUFVYkRyV0EyLzAvMzQz
NTJlMzIzMzMyMmUzNjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzMz
MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLeg8MA0GCSqGSIb3DQEBCwUAA4IBAQCPDj5PS5IYaz45
/bvrSiMvAxx5BrEEQOrBY5OaoR2LLz/rJ1LtdaZ2ot9QkHQwIujUYIaZJuNgpBY0
yavsWPyuTrQ6pBNpJMf0P9+do+CF0Bg9GBfNbaO6y5ypaTxXGr1P+uOrWVGqjcsk
oBul9nVkGYFS08JCJaOCv68QlZcc9ldxU4w6J/XUDJaUY+pdsKPOov2LMsF20Gay
7cT5TIOMQWw/9DlkhDPbM0AanE0zAcyF0zzzonYdY5+ZRy0UdxKipdT4dY8zLhZc
L773Nepc3wC8MYVJGAhDXwdRY76EpYsa0GZCPtVZ7Rm83XIsHpGPtrekhKZVxNE8
4tRypBGP
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:52:05 2026 by rpki-client