Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/34352e3138312e3138302e302f32322d3332203d3e20323639313930.roa
File:                     34352e3138312e3138302e302f32322d3332203d3e20323639313930.roa (raw, json)
Hash identifier:          7ndNFaee4LyYRGx6S2pG+mm/l8k31mcNFq97RNS8428=
Subject key identifier:   DE:74:68:61:DA:E1:EA:CC:F2:B6:1A:51:D7:A5:38:77:A8:53:55:19
Certificate issuer:       /CN=0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE
Certificate serial:       7AA1E6E48475F34D20CFC1ABE5DA6858963580CD
Authority key identifier: 08:21:FA:18:5C:7D:7A:11:CF:24:69:2C:AB:E4:FD:37:F1:BB:F4:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/34352e3138312e3138302e302f32322d3332203d3e20323639313930.roa
Signing time:             Sat 25 Apr 2026 14:06:39 +0000
ROA not before:           Sat 25 Apr 2026 14:01:39 +0000
ROA not after:            Sat 24 Apr 2027 14:06:39 +0000
asID:                     269190
IP address blocks:        45.181.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.crl
                          rsync://rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:e6:e4:84:75:f3:4d:20:cf:c1:ab:e5:da:68:58:96:35:80:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE
        Validity
            Not Before: Apr 25 14:01:39 2026 GMT
            Not After : Apr 24 14:06:39 2027 GMT
        Subject: CN=DE746861DAE1EACCF2B61A51D7A53877A8535519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:23:e2:6e:31:ba:8e:76:6a:e6:c4:ff:d6:
                    52:57:58:5f:a7:2e:82:6d:4d:bc:f7:fe:a2:92:8c:
                    31:44:c3:19:31:30:a3:b3:45:ce:c1:0e:66:15:73:
                    44:67:19:a4:c3:05:32:f0:4d:ad:a7:7c:c9:b2:f6:
                    c2:e5:9d:c8:b8:ec:fe:5b:2d:1b:14:04:4f:fe:1a:
                    19:f1:31:6e:a0:fd:96:4e:f5:8a:f9:d7:bf:86:86:
                    55:6f:a7:1d:e8:88:6a:30:04:d7:fd:d3:ed:1e:7b:
                    b7:cb:19:ba:42:21:68:d0:4e:91:53:3a:86:c1:ab:
                    79:e5:df:78:b6:ba:9f:08:aa:ea:9b:b6:87:36:f4:
                    18:c2:cd:eb:a5:f0:6a:d5:bb:47:e8:3d:87:1e:ce:
                    d5:86:64:5d:19:43:6f:3a:c4:0b:e6:a3:d8:27:2e:
                    bb:24:fc:20:bf:98:50:02:1d:3c:74:e0:1a:e5:69:
                    6a:75:4d:cb:f8:0c:95:eb:40:20:9d:51:0c:3a:df:
                    39:34:b2:7f:dd:41:d6:f2:0b:05:21:41:b1:ed:52:
                    58:a5:f4:ec:e2:de:d0:91:cd:57:10:2e:29:14:a8:
                    6d:f0:77:85:c2:ff:cf:25:2c:78:ae:c2:9e:02:e1:
                    13:ef:59:4c:8f:3d:42:de:b2:2f:64:2a:50:4c:c1:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:68:61:DA:E1:EA:CC:F2:B6:1A:51:D7:A5:38:77:A8:53:55:19
            X509v3 Authority Key Identifier:
                keyid:08:21:FA:18:5C:7D:7A:11:CF:24:69:2C:AB:E4:FD:37:F1:BB:F4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0821FA185C7D7A11CF24692CABE4FD37F1BBF4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FSrZQVKGajrLKA2WCuuHMGeqNXWZk3F71ak1qofyWEx/0/34352e3138312e3138302e302f32322d3332203d3e20323639313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:70:fb:b9:d5:75:8b:31:44:cc:0b:8b:a1:5d:11:54:d1:
         f5:01:a8:72:08:d3:82:69:fb:50:e5:6a:fb:0a:6a:41:39:63:
         8c:f1:b5:3c:fb:89:25:30:ce:2e:6c:63:cc:f1:7f:30:7d:c2:
         f7:48:06:09:63:8c:5e:0f:6a:5a:3d:87:e0:11:fd:17:e6:f6:
         30:3e:02:4b:8d:45:76:72:b4:ee:18:96:4e:f4:dc:53:f7:86:
         6a:ea:8a:46:9d:a4:9b:4e:2c:9b:e6:eb:84:a2:0c:79:82:5c:
         fe:7f:f5:27:94:9b:11:ec:74:59:80:4a:d2:65:af:a0:3b:a7:
         e0:36:8f:8d:12:d7:dd:ca:e0:13:7f:b5:37:ac:51:1f:e8:32:
         61:62:3c:b4:cd:14:ea:8a:23:b4:fa:34:f5:1e:89:08:2e:b2:
         59:fa:44:b0:7f:a7:cb:61:e1:15:77:41:3d:25:5e:92:83:4f:
         f0:70:d5:e6:e4:3c:38:ba:f5:03:a8:b9:83:b8:99:96:ab:75:
         cb:2e:5e:da:db:85:9a:6e:7a:2c:f5:62:79:50:a1:fb:70:94:
         46:f6:a7:c4:1e:e2:5d:63:52:d5:45:6f:28:5a:51:9b:c7:b2:
         00:f1:6a:16:f4:72:ee:ba:78:25:4d:5e:18:d2:2b:be:bd:95:
         26:42:95:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeqHm5IR1800gz8Gr5dpoWJY1gM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyMUZBMTg1QzdEN0ExMUNGMjQ2OTJDQUJFNEZEMzdG
MUJCRjRGRTAeFw0yNjA0MjUxNDAxMzlaFw0yNzA0MjQxNDA2MzlaMDMxMTAvBgNV
BAMTKERFNzQ2ODYxREFFMUVBQ0NGMkI2MUE1MUQ3QTUzODc3QTg1MzU1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmSPibjG6jnZq5sT/1lJXWF+n
LoJtTbz3/qKSjDFEwxkxMKOzRc7BDmYVc0RnGaTDBTLwTa2nfMmy9sLlnci47P5b
LRsUBE/+GhnxMW6g/ZZO9Yr517+GhlVvpx3oiGowBNf90+0ee7fLGbpCIWjQTpFT
OobBq3nl33i2up8Iquqbtoc29BjCzeul8GrVu0foPYceztWGZF0ZQ286xAvmo9gn
Lrsk/CC/mFACHTx04BrlaWp1Tcv4DJXrQCCdUQw63zk0sn/dQdbyCwUhQbHtUlil
9Ozi3tCRzVcQLikUqG3wd4XC/88lLHiuwp4C4RPvWUyPPULesi9kKlBMwSAHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3nRoYdrh6szythpR16U4d6hTVRkwHwYDVR0j
BBgwFoAUCCH6GFx9ehHPJGksq+T9N/G79P4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZTclpRVktHYWpyTEtBMldDdXVITUdlcU5YV1prM0Y3MWFrMXFvZnlX
RXgvMC8wODIxRkExODVDN0Q3QTExQ0YyNDY5MkNBQkU0RkQzN0YxQkJGNEZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4MjFGQTE4NUM3RDdBMTFD
RjI0NjkyQ0FCRTRGRDM3RjFCQkY0RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGU3JaUVZLR2FqckxLQTJXQ3V1SE1HZXFOWFdaazNGNzFhazFxb2Z5V0V4LzAv
MzQzNTJlMzEzODMxMmUzMTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzMTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttbQwDQYJKoZIhvcNAQELBQADggEBAI7+cPu5
1XWLMUTMC4uhXRFU0fUBqHII04Jp+1DlavsKakE5Y4zxtTz7iSUwzi5sY8zxfzB9
wvdIBgljjF4Palo9h+AR/Rfm9jA+AkuNRXZytO4Ylk703FP3hmrqikadpJtOLJvm
64SiDHmCXP5/9SeUmxHsdFmAStJlr6A7p+A2j40S193K4BN/tTesUR/oMmFiPLTN
FOqKI7T6NPUeiQgusln6RLB/p8th4RV3QT0lXpKDT/Bw1ebkPDi69QOouYO4mZar
dcsuXtrbhZpueiz1YnlQoftwlEb2p8Qe4l1jUtVFbyhaUZvHsgDxahb0cu66eCVN
XhjSK769lSZClXI=
-----END CERTIFICATE-----
Generated at Wed May 13 17:42:42 2026 by rpki-client