Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
File:                     34352e37302e32382e302f32322d3332203d3e20323637353734.roa (raw, json)
Hash identifier:          nBPTR9gqn6Rf2/ns3b3ImRcLx9t6pwCXXUT6sI3bG0o=
Subject key identifier:   F3:EF:6D:D5:31:EB:65:73:FD:2F:50:2D:AB:82:7E:71:38:09:22:D2
Certificate issuer:       /CN=3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB
Certificate serial:       3382C45B423B8DBD530874B540955BDB612BEC2B
Authority key identifier: 3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
Signing time:             Thu 16 Jul 2026 18:56:00 +0000
ROA not before:           Thu 16 Jul 2026 18:51:00 +0000
ROA not after:            Thu 15 Jul 2027 18:56:00 +0000
asID:                     267574
IP address blocks:        45.70.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.crl
                          rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:82:c4:5b:42:3b:8d:bd:53:08:74:b5:40:95:5b:db:61:2b:ec:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB
        Validity
            Not Before: Jul 16 18:51:00 2026 GMT
            Not After : Jul 15 18:56:00 2027 GMT
        Subject: CN=F3EF6DD531EB6573FD2F502DAB827E71380922D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:d3:b3:0d:3d:b1:17:31:b3:f0:79:ca:34:
                    37:14:fc:ff:14:8c:c5:67:80:2a:7c:61:b6:13:7f:
                    b1:d8:30:9c:44:0a:83:16:10:c2:af:90:1c:5c:a7:
                    72:d9:9a:a8:0b:16:db:a7:da:2f:ec:65:25:a1:3d:
                    b0:c8:87:e2:ea:3e:f9:65:b0:a4:36:53:f3:74:d5:
                    eb:7e:69:aa:78:4d:1a:56:35:3a:82:14:04:18:7e:
                    f8:54:23:44:b9:c8:87:e6:f6:3f:fa:0d:34:0f:aa:
                    b9:cc:99:7a:8e:88:09:b6:65:7f:0d:23:b5:ff:93:
                    25:d4:94:49:bc:3a:8b:1f:02:f3:2c:61:52:93:8d:
                    3b:c9:80:9a:b4:c6:68:b6:72:e6:e4:a1:a2:e1:1f:
                    a3:05:c4:11:59:f0:49:c0:30:fa:d2:9b:0b:b2:bf:
                    5b:e2:7a:a7:05:0e:be:a5:01:c4:2d:93:1b:2e:bf:
                    ce:a3:83:4d:8a:4b:0c:23:32:14:10:41:4c:b5:c9:
                    48:1e:52:1f:8e:cc:f4:3b:ac:d2:53:6d:33:4f:f6:
                    5f:f5:78:7c:98:15:c4:b1:25:5d:74:d1:4c:37:af:
                    5f:43:dc:85:ad:6f:29:08:30:c4:50:20:b7:d7:fe:
                    de:13:50:05:3e:c0:6e:47:7a:5e:b0:8c:dc:5c:5c:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:6D:D5:31:EB:65:73:FD:2F:50:2D:AB:82:7E:71:38:09:22:D2
            X509v3 Authority Key Identifier:
                keyid:3D:5C:84:37:E7:59:B5:3F:97:DC:2F:51:34:DA:D8:AF:FB:28:7E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5C8437E759B53F97DC2F5134DAD8AFFB287EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/0/34352e37302e32382e302f32322d3332203d3e20323637353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:d7:2a:32:31:40:9f:cf:5c:b8:11:2a:3a:ea:da:83:4c:
         01:66:14:fe:5e:08:4b:26:be:c2:7a:58:4d:53:49:c2:83:ca:
         c1:4a:53:12:97:93:3f:5a:cc:79:d8:1b:ae:24:f3:48:c9:c4:
         62:c3:f9:fd:f0:5b:9d:0a:99:0c:60:7f:ad:9a:2b:5c:45:41:
         83:9c:aa:05:d6:2a:78:af:7e:2a:fc:95:bb:29:41:9d:bb:d1:
         ab:86:89:dd:35:1a:1b:72:0f:aa:be:82:52:99:e3:21:29:7a:
         51:34:37:f7:25:83:70:6e:df:4b:80:1e:c0:5c:0f:69:04:51:
         4a:a3:fe:12:e1:84:87:c8:30:cd:c0:51:1a:2a:94:a7:70:36:
         9b:5a:da:08:ba:72:91:ee:d2:4b:6b:36:74:49:2e:32:47:72:
         e9:92:63:bc:6b:43:23:24:f4:d9:f6:d8:07:14:5a:21:e4:51:
         eb:6b:4e:ea:71:3c:74:5e:9a:63:c2:65:5c:9c:97:e1:1e:f8:
         2c:0e:6f:c6:40:1b:43:f0:c7:24:bf:e8:e8:35:39:76:5c:d3:
         51:0c:db:9f:f9:56:4a:67:f0:07:01:c5:3d:01:02:ba:65:56:
         41:81:13:d9:96:83:ec:4f:3c:61:ee:8c:ce:89:7f:08:a6:fe:
         43:bc:61:a0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUM4LEW0I7jb1TCHS1QJVb22Er7CswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1Qzg0MzdFNzU5QjUzRjk3REMyRjUxMzREQUQ4QUZG
QjI4N0VEQjAeFw0yNjA3MTYxODUxMDBaFw0yNzA3MTUxODU2MDBaMDMxMTAvBgNV
BAMTKEYzRUY2REQ1MzFFQjY1NzNGRDJGNTAyREFCODI3RTcxMzgwOTIyRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhdOzDT2xFzGz8HnKNDcU/P8U
jMVngCp8YbYTf7HYMJxECoMWEMKvkBxcp3LZmqgLFtun2i/sZSWhPbDIh+LqPvll
sKQ2U/N01et+aap4TRpWNTqCFAQYfvhUI0S5yIfm9j/6DTQPqrnMmXqOiAm2ZX8N
I7X/kyXUlEm8OosfAvMsYVKTjTvJgJq0xmi2cubkoaLhH6MFxBFZ8EnAMPrSmwuy
v1vieqcFDr6lAcQtkxsuv86jg02KSwwjMhQQQUy1yUgeUh+OzPQ7rNJTbTNP9l/1
eHyYFcSxJV100Uw3r19D3IWtbykIMMRQILfX/t4TUAU+wG5Hel6wjNxcXMJHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8+9t1THrZXP9L1Atq4J+cTgJItIwHwYDVR0j
BBgwFoAUPVyEN+dZtT+X3C9RNNrYr/softswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m
TnAvMC8zRDVDODQzN0U3NTlCNTNGOTdEQzJGNTEzNERBRDhBRkZCMjg3RURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENUM4NDM3RTc1OUI1M0Y5
N0RDMkY1MTM0REFEOEFGRkIyODdFREIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdNSGZYa3VuQ2lRQnJSU0ZQNTlvajFVcjhMWHNCR3hCZ3Exc0dZVDRNZk5wLzAv
MzQzNTJlMzczMDJlMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM1
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GHDANBgkqhkiG9w0BAQsFAAOCAQEAob/XKjIxQJ/P
XLgRKjrq2oNMAWYU/l4ISya+wnpYTVNJwoPKwUpTEpeTP1rMedgbriTzSMnEYsP5
/fBbnQqZDGB/rZorXEVBg5yqBdYqeK9+KvyVuylBnbvRq4aJ3TUaG3IPqr6CUpnj
ISl6UTQ39yWDcG7fS4AewFwPaQRRSqP+EuGEh8gwzcBRGiqUp3A2m1raCLpyke7S
S2s2dEkuMkdy6ZJjvGtDIyT02fbYBxRaIeRR62tO6nE8dF6aY8JlXJyX4R74LA5v
xkAbQ/DHJL/o6DU5dlzTUQzbn/lWSmfwBwHFPQECumVWQYET2ZaD7E88Ye6Mzol/
CKb+Q7xhoA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:37 2026 by rpki-client