Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/34352e3136302e3130322e302f32332d3332203d3e20323734363338.roa
File:                     34352e3136302e3130322e302f32332d3332203d3e20323734363338.roa (raw, json)
Hash identifier:          E0iON1ZM8QXzk2Y10INf5HoU70/5wDmsWvH6rjjcgb8=
Subject key identifier:   CA:3C:53:5E:30:62:EC:B1:3D:3D:C3:35:E3:9A:8D:91:A0:B3:C6:A1
Certificate issuer:       /CN=B0A119AF43EBF0B035FDCB223219CFDDD3124F76
Certificate serial:       12DCC244304DA57AC5FD02FD7B2DA01691ADFC00
Authority key identifier: B0:A1:19:AF:43:EB:F0:B0:35:FD:CB:22:32:19:CF:DD:D3:12:4F:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/34352e3136302e3130322e302f32332d3332203d3e20323734363338.roa
Signing time:             Mon 11 May 2026 16:30:05 +0000
ROA not before:           Mon 11 May 2026 16:25:05 +0000
ROA not after:            Mon 10 May 2027 16:30:05 +0000
asID:                     274638
IP address blocks:        45.160.102.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.crl
                          rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:dc:c2:44:30:4d:a5:7a:c5:fd:02:fd:7b:2d:a0:16:91:ad:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A119AF43EBF0B035FDCB223219CFDDD3124F76
        Validity
            Not Before: May 11 16:25:05 2026 GMT
            Not After : May 10 16:30:05 2027 GMT
        Subject: CN=CA3C535E3062ECB13D3DC335E39A8D91A0B3C6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:6a:28:a6:27:7c:f5:ae:9b:39:87:a2:23:
                    b6:8d:fb:a1:2e:dc:3a:c4:31:12:7d:d4:24:10:5e:
                    b5:19:81:fa:0c:89:34:e5:4c:a0:7f:5c:e9:11:2e:
                    a0:6a:dd:42:4c:6a:33:fb:1c:06:37:39:14:3d:c5:
                    86:49:e5:8a:0a:47:a4:9b:3e:83:83:c5:0b:fc:de:
                    23:8c:32:d5:db:60:59:53:df:71:d8:4d:90:bf:10:
                    a6:21:98:43:4b:4d:71:96:04:55:a0:a6:48:83:fa:
                    47:84:ca:25:34:0b:b1:5b:09:21:11:33:59:6f:57:
                    53:b9:a5:18:95:8f:a2:02:04:59:17:51:91:70:91:
                    3d:bd:27:b5:13:c1:18:0c:eb:b2:7a:fa:00:9a:77:
                    ae:21:fd:11:09:b3:eb:52:17:43:4f:64:2c:32:a2:
                    82:47:c6:a0:d8:b4:00:15:1a:aa:43:33:d4:72:3e:
                    f9:93:b5:f5:4d:08:ff:9d:4d:aa:55:9c:b8:e6:5b:
                    c0:6f:63:e2:0c:51:f7:87:91:0a:cb:c8:32:ac:cb:
                    46:b9:3b:75:1e:ee:90:3d:16:ca:69:62:f7:a2:fe:
                    2d:f4:3e:16:d9:86:0b:bd:f1:7a:4b:bb:86:fc:78:
                    0b:09:05:c3:0f:98:95:9a:64:d4:d4:0b:10:e7:93:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:53:5E:30:62:EC:B1:3D:3D:C3:35:E3:9A:8D:91:A0:B3:C6:A1
            X509v3 Authority Key Identifier:
                keyid:B0:A1:19:AF:43:EB:F0:B0:35:FD:CB:22:32:19:CF:DD:D3:12:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0A119AF43EBF0B035FDCB223219CFDDD3124F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GdvqzRVodcJCXiggAY17LUueAiBGvSnWGKpkMr2VQSJ/0/34352e3136302e3130322e302f32332d3332203d3e20323734363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:e1:8b:f7:98:ee:e8:0c:ff:f9:c5:24:43:c0:94:15:1b:
         22:77:62:8d:06:eb:aa:cd:8d:de:fa:22:b4:36:4a:af:06:69:
         d9:30:3a:92:2e:65:13:4b:04:26:f3:43:d8:c9:a4:8c:f5:a4:
         bd:07:16:83:bb:82:90:39:f0:96:db:8b:58:b0:06:42:31:4d:
         4a:e8:2c:04:54:8b:1e:c9:f7:ae:5c:1e:47:29:d3:ed:9f:07:
         74:62:5f:78:c0:e1:13:fc:95:b6:13:25:a0:e9:7d:0d:c7:bb:
         8c:28:67:d4:a1:c9:12:dd:35:9d:45:6b:19:f6:4f:18:d2:70:
         e2:89:f6:85:1d:da:15:98:20:40:59:d6:4b:be:5d:32:dc:33:
         a2:d8:41:d9:10:7a:8b:59:e5:c9:bb:80:1d:93:4f:f5:d3:16:
         d6:46:59:ef:0a:9e:c5:2a:ca:09:8f:ff:83:eb:66:fd:34:f4:
         33:70:bb:27:e4:00:60:84:36:1b:b5:22:1b:ea:ea:f7:c9:b6:
         16:cc:0c:3c:70:5e:86:15:72:c8:0d:ce:dc:ea:7c:69:ce:e5:
         ed:e3:d8:e2:81:c9:c9:d7:05:c0:ce:e1:20:87:a3:c2:ae:93:
         b9:1e:e5:ef:db:f6:93:48:50:13:2b:fa:47:00:8b:dc:c3:b0:
         81:4b:35:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEtzCRDBNpXrF/QL9ey2gFpGt/AAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBBMTE5QUY0M0VCRjBCMDM1RkRDQjIyMzIxOUNGRERE
MzEyNEY3NjAeFw0yNjA1MTExNjI1MDVaFw0yNzA1MTAxNjMwMDVaMDMxMTAvBgNV
BAMTKENBM0M1MzVFMzA2MkVDQjEzRDNEQzMzNUUzOUE4RDkxQTBCM0M2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMGoopid89a6bOYeiI7aN+6Eu
3DrEMRJ91CQQXrUZgfoMiTTlTKB/XOkRLqBq3UJMajP7HAY3ORQ9xYZJ5YoKR6Sb
PoODxQv83iOMMtXbYFlT33HYTZC/EKYhmENLTXGWBFWgpkiD+keEyiU0C7FbCSER
M1lvV1O5pRiVj6ICBFkXUZFwkT29J7UTwRgM67J6+gCad64h/REJs+tSF0NPZCwy
ooJHxqDYtAAVGqpDM9RyPvmTtfVNCP+dTapVnLjmW8BvY+IMUfeHkQrLyDKsy0a5
O3Ue7pA9FsppYvei/i30PhbZhgu98XpLu4b8eAsJBcMPmJWaZNTUCxDnk7cDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyjxTXjBi7LE9PcM145qNkaCzxqEwHwYDVR0j
BBgwFoAUsKEZr0Pr8LA1/csiMhnP3dMST3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dkdnF6UlZvZGNKQ1hpZ2dBWTE3TFV1ZUFpQkd2U25XR0twa01yMlZR
U0ovMC9CMEExMTlBRjQzRUJGMEIwMzVGRENCMjIzMjE5Q0ZEREQzMTI0Rjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQTExOUFGNDNFQkYwQjAz
NUZEQ0IyMjMyMTlDRkRERDMxMjRGNzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHZHZxelJWb2RjSkNYaWdnQVkxN0xVdWVBaUJHdlNuV0dLcGtNcjJWUVNKLzAv
MzQzNTJlMzEzNjMwMmUzMTMwMzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMjM3
MzQzNjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtoGYwDQYJKoZIhvcNAQELBQADggEBABVb4Yv3
mO7oDP/5xSRDwJQVGyJ3Yo0G66rNjd76IrQ2Sq8GadkwOpIuZRNLBCbzQ9jJpIz1
pL0HFoO7gpA58Jbbi1iwBkIxTUroLARUix7J965cHkcp0+2fB3RiX3jA4RP8lbYT
JaDpfQ3Hu4woZ9ShyRLdNZ1Faxn2TxjScOKJ9oUd2hWYIEBZ1ku+XTLcM6LYQdkQ
eotZ5cm7gB2TT/XTFtZGWe8KnsUqygmP/4PrZv009DNwuyfkAGCENhu1Ihvq6vfJ
thbMDDxwXoYVcsgNztzqfGnO5e3j2OKBycnXBcDO4SCHo8Kuk7ke5e/b9pNIUBMr
+kcAi9zDsIFLNYU=
-----END CERTIFICATE-----
Generated at Wed May 13 16:21:00 2026 by rpki-client