Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3234203d3e20323637303330.roa
File:                     34352e3232372e3230372e302f32342d3234203d3e20323637303330.roa (raw, json)
Hash identifier:          BtAoqLtugKujXYR3BzkaE4DfNG2L+CTYsRxJrkxZTr8=
Subject key identifier:   EB:41:DC:E1:5E:3F:47:71:E2:EA:78:98:70:DC:16:72:E0:95:E2:93
Certificate issuer:       /CN=D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7
Certificate serial:       C74970010FBE162650F023BA748416CDE7B17D
Authority key identifier: D0:C8:BE:70:33:D6:D0:57:8E:C7:14:D2:AB:0E:D4:E2:2C:85:A8:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3234203d3e20323637303330.roa
Signing time:             Wed 08 Jul 2026 20:09:31 +0000
ROA not before:           Wed 08 Jul 2026 20:04:31 +0000
ROA not after:            Wed 07 Jul 2027 20:09:31 +0000
asID:                     267030
IP address blocks:        45.227.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.crl
                          rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:49:70:01:0f:be:16:26:50:f0:23:ba:74:84:16:cd:e7:b1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7
        Validity
            Not Before: Jul  8 20:04:31 2026 GMT
            Not After : Jul  7 20:09:31 2027 GMT
        Subject: CN=EB41DCE15E3F4771E2EA789870DC1672E095E293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:65:31:18:fe:9a:64:8c:fe:17:21:08:c7:
                    03:e1:7b:87:6d:c3:60:4b:b7:cb:d9:36:4f:1d:90:
                    be:2f:06:f1:1f:03:4b:74:c4:4f:a4:b5:43:5c:03:
                    41:aa:92:04:1a:81:8a:bf:90:be:5f:04:d2:c8:36:
                    be:52:32:1e:40:6e:3b:7e:23:00:b0:62:af:fb:8e:
                    b9:3a:0d:fb:87:db:9f:c8:e3:e4:d9:93:38:76:fb:
                    6a:84:5e:40:54:25:a6:e3:f5:ef:49:b8:2a:4b:5a:
                    91:81:5c:50:4f:88:f0:fe:8a:5a:82:55:75:9b:4c:
                    ea:0c:d7:dd:89:d1:0e:6c:20:ae:9d:d2:9e:ff:55:
                    4f:e4:a0:3b:04:0b:ba:f7:14:89:18:fb:aa:b6:2f:
                    d9:bd:b0:9a:22:07:38:c1:36:cb:6b:e8:ea:05:e5:
                    27:7a:fc:4d:c4:a6:4f:a5:c4:72:d2:32:04:4f:95:
                    1b:ce:9a:cd:71:c2:91:f6:5d:ff:b7:79:14:7e:5f:
                    44:ad:dd:29:02:7e:39:05:08:f0:a9:f2:21:1f:8b:
                    e1:65:e0:45:8d:13:fe:a6:10:e4:5d:a8:f1:37:50:
                    82:d5:ce:2e:81:39:14:b7:be:46:06:c2:69:85:16:
                    9a:52:f9:9f:5d:2f:a7:4f:2e:e8:b0:87:f2:a2:01:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:DC:E1:5E:3F:47:71:E2:EA:78:98:70:DC:16:72:E0:95:E2:93
            X509v3 Authority Key Identifier:
                keyid:D0:C8:BE:70:33:D6:D0:57:8E:C7:14:D2:AB:0E:D4:E2:2C:85:A8:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C8BE7033D6D0578EC714D2AB0ED4E22C85A8A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230372e302f32342d3234203d3e20323637303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:57:05:c3:d4:1d:0e:25:ef:83:3e:b2:a4:8e:d2:93:e7:d3:
         21:03:f6:83:f7:b2:b1:c3:fc:6a:72:ba:da:37:97:66:5f:ac:
         8b:00:50:94:7c:63:98:36:41:33:41:62:ce:18:df:99:6c:85:
         85:9c:b8:ad:22:90:96:cd:3e:71:2e:db:c1:9d:ab:9d:66:4c:
         fe:06:b0:02:7c:02:a4:d1:1d:f3:e7:a0:b9:45:5c:f7:8a:7f:
         51:f7:7a:9e:25:29:c6:e4:fe:c5:a7:b4:40:f2:2c:ec:94:62:
         6f:3d:ce:65:78:b6:8f:37:5b:63:8a:1b:68:8a:d6:e2:3e:d0:
         f6:40:1f:94:5d:81:67:1a:4e:04:d2:46:24:ee:fb:3d:a7:36:
         40:67:63:76:a3:32:a9:e0:97:59:8f:78:56:9f:c2:32:b1:bf:
         dd:ff:6e:de:f7:67:57:5f:56:e1:2d:65:d9:3e:a8:fc:72:7b:
         91:b0:b8:2e:3e:42:5b:d3:37:4b:9f:6d:4d:52:d7:d8:3f:4e:
         82:9d:d1:b3:9d:af:e8:8f:1a:12:8e:1d:50:6f:a9:d4:d3:6a:
         45:84:12:5a:62:4b:98:30:1f:8d:11:bd:b5:24:b5:42:77:d6:
         56:87:c1:5a:8f:6a:df:06:86:3f:ac:06:46:6f:ba:c2:c4:30:
         73:74:b9:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAMdJcAEPvhYmUPAjunSEFs3nsX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOEJFNzAzM0Q2RDA1NzhFQzcxNEQyQUIwRUQ0RTIy
Qzg1QThBNzAeFw0yNjA3MDgyMDA0MzFaFw0yNzA3MDcyMDA5MzFaMDMxMTAvBgNV
BAMTKEVCNDFEQ0UxNUUzRjQ3NzFFMkVBNzg5ODcwREMxNjcyRTA5NUUyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3GUxGP6aZIz+FyEIxwPhe4dt
w2BLt8vZNk8dkL4vBvEfA0t0xE+ktUNcA0GqkgQagYq/kL5fBNLINr5SMh5Abjt+
IwCwYq/7jrk6DfuH25/I4+TZkzh2+2qEXkBUJabj9e9JuCpLWpGBXFBPiPD+ilqC
VXWbTOoM192J0Q5sIK6d0p7/VU/koDsEC7r3FIkY+6q2L9m9sJoiBzjBNstr6OoF
5Sd6/E3Epk+lxHLSMgRPlRvOms1xwpH2Xf+3eRR+X0St3SkCfjkFCPCp8iEfi+Fl
4EWNE/6mEORdqPE3UILVzi6BORS3vkYGwmmFFppS+Z9dL6dPLuiwh/KiAe9FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU60Hc4V4/R3Hi6niYcNwWcuCV4pMwHwYDVR0j
BBgwFoAU0Mi+cDPW0FeOxxTSqw7U4iyFqKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHVQTTVoSkRCeW05V29vZVVRdzF4ZGpocGpDUDdKUTh2R1VhQ3RvcktT
SHUvMC9EMEM4QkU3MDMzRDZEMDU3OEVDNzE0RDJBQjBFRDRFMjJDODVBOEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQzhCRTcwMzNENkQwNTc4
RUM3MTREMkFCMEVENEUyMkM4NUE4QTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh1UE01aEpEQnltOVdvb2VVUXcxeGRqaHBqQ1A3SlE4dkdVYUN0b3JLU0h1LzAv
MzQzNTJlMzIzMjM3MmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt488wDQYJKoZIhvcNAQELBQADggEBAJZXBcPU
HQ4l74M+sqSO0pPn0yED9oP3srHD/Gpyuto3l2ZfrIsAUJR8Y5g2QTNBYs4Y35ls
hYWcuK0ikJbNPnEu28Gdq51mTP4GsAJ8AqTRHfPnoLlFXPeKf1H3ep4lKcbk/sWn
tEDyLOyUYm89zmV4to83W2OKG2iK1uI+0PZAH5RdgWcaTgTSRiTu+z2nNkBnY3aj
Mqngl1mPeFafwjKxv93/bt73Z1dfVuEtZdk+qPxye5GwuC4+QlvTN0ufbU1S19g/
ToKd0bOdr+iPGhKOHVBvqdTTakWEElpiS5gwH40RvbUktUJ31laHwVqPat8Ghj+s
BkZvusLEMHN0uZQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:43 2026 by rpki-client