Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20323633353739.roa
File:                     34352e3136312e3231362e302f32322d3332203d3e20323633353739.roa (raw, json)
Hash identifier:          RE9t75pbBXs7k1lwBc3F6q0oVfVnTGI2teDu0uAIi+o=
Subject key identifier:   52:62:68:D6:24:A3:2C:65:46:EE:FD:F3:9C:95:40:FB:45:7A:51:CE
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       2AF38BC49BDB0BE75A5072E2B0CD6680136FF24E
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20323633353739.roa
Signing time:             Thu 23 Jul 2026 20:48:37 +0000
ROA not before:           Thu 23 Jul 2026 20:43:37 +0000
ROA not after:            Thu 22 Jul 2027 20:48:37 +0000
asID:                     263579
IP address blocks:        45.161.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:8b:c4:9b:db:0b:e7:5a:50:72:e2:b0:cd:66:80:13:6f:f2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 23 20:43:37 2026 GMT
            Not After : Jul 22 20:48:37 2027 GMT
        Subject: CN=526268D624A32C6546EEFDF39C9540FB457A51CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:30:9f:6a:5f:78:87:65:6a:07:e9:2f:54:
                    34:95:4f:b7:12:5d:2b:f0:23:ed:0b:9b:f9:2f:02:
                    dc:a4:80:e6:32:a2:2d:86:29:04:12:db:a5:c9:27:
                    87:e7:9b:0e:c8:ed:43:f7:22:b6:08:c0:99:ec:52:
                    23:65:70:2a:d8:9e:2d:e1:15:8b:d8:58:be:5e:40:
                    3a:e0:d5:99:43:24:bc:e0:86:3a:ce:e5:db:7d:a2:
                    eb:5d:93:63:b4:b8:f5:9c:9a:83:05:15:29:41:83:
                    22:8d:6a:07:d5:ba:db:d6:c6:38:f6:e9:c8:14:71:
                    e7:bc:aa:e6:5c:ad:74:e0:b9:81:01:8c:d1:7d:f0:
                    b1:ed:79:0d:72:6c:07:f1:63:e9:d7:d2:d6:c1:ee:
                    c2:a5:f8:d6:a9:35:7e:7d:56:86:e1:74:34:4c:86:
                    01:09:fe:eb:7b:06:a3:c0:1d:08:3c:3c:6a:2e:ac:
                    ee:cb:0f:f6:3a:29:c6:82:b1:b1:03:0e:92:2c:9b:
                    ed:56:4f:60:f8:1b:ee:d4:c8:c0:48:28:49:6b:23:
                    2d:a3:1f:e6:87:75:21:c0:06:fe:70:67:c0:6d:10:
                    f8:2e:bc:3b:9c:d2:e5:93:3e:89:5d:57:a8:33:cb:
                    d5:55:cd:94:b9:e7:ab:ac:6d:d1:f9:99:6b:45:a5:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:68:D6:24:A3:2C:65:46:EE:FD:F3:9C:95:40:FB:45:7A:51:CE
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/34352e3136312e3231362e302f32322d3332203d3e20323633353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:5b:48:7c:f6:6c:ef:56:1e:c7:e4:d1:4f:33:f1:fd:3b:
         c5:3e:43:53:b5:b9:c3:54:6f:ad:c8:4f:11:9c:09:6d:3c:b6:
         f6:9a:95:3b:07:fa:d5:30:43:7d:49:30:43:d9:ec:b4:2a:85:
         7b:11:51:2a:c3:91:13:3b:d3:16:d2:95:7a:66:c9:89:9c:fd:
         d4:7a:d0:ec:1a:c9:bd:ed:c9:31:f6:61:b9:04:b9:1b:c8:0f:
         94:13:b2:43:bf:96:ef:e5:f4:be:6a:a8:ba:cf:37:1f:8e:40:
         f4:55:ed:51:63:9e:0b:ca:41:a6:5d:a3:b8:0a:2d:d8:aa:f0:
         55:3b:19:f9:7c:27:8d:4e:a8:be:61:12:32:82:44:45:0d:db:
         f2:4c:ad:ca:e1:07:24:13:0b:35:b7:f6:0d:b6:d6:0f:63:99:
         40:25:0a:b3:52:40:b2:89:bf:ab:e0:cb:74:4d:69:40:60:d8:
         e9:96:30:d0:42:16:8d:d2:1a:ab:4f:74:f3:c2:5e:fc:da:71:
         6c:7c:86:2d:f4:c9:0e:9c:a7:a4:0b:bf:bc:1a:33:d5:f5:76:
         4d:d0:f2:61:e6:a2:a0:ca:5c:c5:9f:da:ca:85:b0:d2:82:c4:
         9c:14:bb:69:dc:13:3a:c3:7e:88:64:fe:ec:11:da:19:6f:af:
         de:ec:63:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKvOLxJvbC+daUHLisM1mgBNv8k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYzMTQ0RUYxM0M3MzIwMEZBQTEzQzhDOUMzNDZCNEE1
N0RCRDMyQzAeFw0yNjA3MjMyMDQzMzdaFw0yNzA3MjIyMDQ4MzdaMDMxMTAvBgNV
BAMTKDUyNjI2OEQ2MjRBMzJDNjU0NkVFRkRGMzlDOTU0MEZCNDU3QTUxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBjCfal94h2VqB+kvVDSVT7cS
XSvwI+0Lm/kvAtykgOYyoi2GKQQS26XJJ4fnmw7I7UP3IrYIwJnsUiNlcCrYni3h
FYvYWL5eQDrg1ZlDJLzghjrO5dt9outdk2O0uPWcmoMFFSlBgyKNagfVutvWxjj2
6cgUcee8quZcrXTguYEBjNF98LHteQ1ybAfxY+nX0tbB7sKl+NapNX59VobhdDRM
hgEJ/ut7BqPAHQg8PGourO7LD/Y6KcaCsbEDDpIsm+1WT2D4G+7UyMBIKElrIy2j
H+aHdSHABv5wZ8BtEPguvDuc0uWTPoldV6gzy9VVzZS556usbdH5mWtFpb+jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUmJo1iSjLGVG7v3znJVA+0V6Uc4wHwYDVR0j
BBgwFoAUpjFE7xPHMgD6oTyMnDRrSlfb0ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHhiMkJwWWVKTVJSaXJYNlJHUHhtWjlzRnM4ZWVITUFBaDdwa0h2YVFE
d2EvMC9BNjMxNDRFRjEzQzczMjAwRkFBMTNDOEM5QzM0NkI0QTU3REJEMzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MzE0NEVGMTNDNzMyMDBG
QUExM0M4QzlDMzQ2QjRBNTdEQkQzMkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4YjJCcFllSk1SUmlyWDZSR1B4bVo5c0ZzOGVlSE1BQWg3cGtIdmFRRHdhLzAv
MzQzNTJlMzEzNjMxMmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItodgwDQYJKoZIhvcNAQELBQADggEBABjiW0h8
9mzvVh7H5NFPM/H9O8U+Q1O1ucNUb63ITxGcCW08tvaalTsH+tUwQ31JMEPZ7LQq
hXsRUSrDkRM70xbSlXpmyYmc/dR60Owayb3tyTH2YbkEuRvID5QTskO/lu/l9L5q
qLrPNx+OQPRV7VFjngvKQaZdo7gKLdiq8FU7Gfl8J41OqL5hEjKCREUN2/JMrcrh
ByQTCzW39g221g9jmUAlCrNSQLKJv6vgy3RNaUBg2OmWMNBCFo3SGqtPdPPCXvza
cWx8hi30yQ6cp6QLv7waM9X1dk3Q8mHmoqDKXMWf2sqFsNKCxJwUu2ncEzrDfohk
/uwR2hlvr97sY0I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:33:19 2026 by rpki-client