Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3234203d3e20323638353738.roa
File:                     34352e3136332e3137382e302f32342d3234203d3e20323638353738.roa (raw, json)
Hash identifier:          xV1Y+yPxqY3iYsXdWm6X6ptrvKjKJ2XX4DNqB6GRJa0=
Subject key identifier:   83:F5:7F:B1:1B:D6:A3:25:E0:A3:87:5C:AD:02:20:45:CC:D9:B3:87
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       0FE114AC5DECED3D95351D4D424402F2CB75EC58
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3234203d3e20323638353738.roa
Signing time:             Fri 20 Mar 2026 12:51:34 +0000
ROA not before:           Fri 20 Mar 2026 12:46:34 +0000
ROA not after:            Fri 19 Mar 2027 12:51:34 +0000
asID:                     268578
IP address blocks:        45.163.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 16:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:14:ac:5d:ec:ed:3d:95:35:1d:4d:42:44:02:f2:cb:75:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Mar 20 12:46:34 2026 GMT
            Not After : Mar 19 12:51:34 2027 GMT
        Subject: CN=83F57FB11BD6A325E0A3875CAD022045CCD9B387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:8f:ca:90:2e:39:6e:4a:a3:d7:3e:a9:66:
                    6a:14:db:17:fb:56:ec:fe:b6:1c:42:0e:9e:39:bb:
                    88:8c:1f:7b:55:16:62:8e:6b:92:ef:14:10:c6:6d:
                    16:2b:04:26:55:b2:9e:38:7a:a3:c2:4d:58:d7:f1:
                    c7:ea:9d:a6:9c:dc:bc:5c:c6:77:dc:fa:b3:77:a8:
                    17:97:de:8e:dd:3f:3f:b5:f7:d9:25:09:dc:55:e2:
                    46:3b:aa:83:62:6c:8b:da:65:d0:dd:6d:92:b0:47:
                    db:5a:bc:cd:8b:02:ec:29:2f:46:0f:50:ea:ec:7c:
                    0f:06:c7:84:58:2f:d8:67:be:3b:04:0d:7c:5e:aa:
                    81:3f:c7:58:ed:e4:45:3a:3e:c7:c4:30:90:9b:f4:
                    5d:2c:fb:7e:3b:c2:b6:24:53:f2:59:16:e9:0d:89:
                    ad:80:a4:28:78:55:88:ff:6e:7e:87:b6:59:34:5e:
                    33:1f:0b:d7:db:2a:58:f3:ac:3f:90:1c:39:be:37:
                    2a:54:ed:67:90:8d:ef:26:7c:01:62:76:f7:d0:20:
                    3c:fe:e2:1f:96:d1:f1:ba:68:7a:61:e7:02:aa:8b:
                    f9:65:d0:9e:38:0a:e5:51:fd:dd:26:69:e9:52:a7:
                    98:2d:6b:93:3f:2b:d6:60:64:0b:ea:21:8f:88:44:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:7F:B1:1B:D6:A3:25:E0:A3:87:5C:AD:02:20:45:CC:D9:B3:87
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3234203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:13:07:3f:43:bc:df:3d:a4:20:2d:c1:4d:e3:e3:79:4e:4e:
         c3:62:da:89:8d:65:af:14:94:76:45:ee:5f:c3:4c:ce:18:34:
         fd:3d:bd:39:f0:d7:98:51:24:15:52:fd:37:29:fb:db:6f:c5:
         cf:04:9c:e1:f0:fa:7c:0f:cf:63:68:10:48:a3:14:b0:bb:4e:
         0f:a2:6d:17:92:b4:4c:dd:4f:79:aa:59:49:03:95:8d:57:9c:
         27:94:55:86:f2:b4:e3:a4:5d:dc:d6:d6:4b:c3:a2:cd:c6:46:
         5a:a2:34:92:cf:db:15:8d:de:17:e6:1e:8b:61:56:8e:ba:e4:
         1a:bc:33:08:08:9f:ca:01:75:a4:50:39:2a:a8:48:35:ed:8b:
         cb:1d:1a:ba:78:3c:97:ca:37:76:ad:7b:b3:9a:ae:0c:be:ac:
         44:45:fa:3d:df:c6:2d:12:7e:c5:c7:74:28:3d:94:8f:20:ca:
         b6:87:5d:01:1b:3e:c2:50:83:d3:41:e5:d9:14:e0:d7:c1:dc:
         37:06:d9:51:aa:11:30:5f:9b:71:e5:57:55:07:5d:08:ee:34:
         ac:ce:73:d5:01:89:e0:0d:ad:c5:37:9c:67:b8:6b:f4:a4:53:
         dd:01:aa:84:8f:95:b3:54:99:e9:be:25:62:0c:ff:72:c5:57:
         86:82:fa:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD+EUrF3s7T2VNR1NQkQC8st17FgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM0ODc3NTYyNTQ4QzY2NEQ3REJBMEQzMjdCMkYyMzE3
MTBEQzEwMjAeFw0yNjAzMjAxMjQ2MzRaFw0yNzAzMTkxMjUxMzRaMDMxMTAvBgNV
BAMTKDgzRjU3RkIxMUJENkEzMjVFMEEzODc1Q0FEMDIyMDQ1Q0NEOUIzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtI/KkC45bkqj1z6pZmoU2xf7
Vuz+thxCDp45u4iMH3tVFmKOa5LvFBDGbRYrBCZVsp44eqPCTVjX8cfqnaac3Lxc
xnfc+rN3qBeX3o7dPz+199klCdxV4kY7qoNibIvaZdDdbZKwR9tavM2LAuwpL0YP
UOrsfA8Gx4RYL9hnvjsEDXxeqoE/x1jt5EU6PsfEMJCb9F0s+347wrYkU/JZFukN
ia2ApCh4VYj/bn6Htlk0XjMfC9fbKljzrD+QHDm+NypU7WeQje8mfAFidvfQIDz+
4h+W0fG6aHph5wKqi/ll0J44CuVR/d0maelSp5gta5M/K9ZgZAvqIY+IRCFxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg/V/sRvWoyXgo4dcrQIgRczZs4cwHwYDVR0j
BBgwFoAUrEh3ViVIxmTX26DTJ7LyMXENwQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTVLcG9XM0FxdFZjcjVMeks3U25mcVU2TXhYYlYyMlJSTG9oaWc5ZFBm
WksvMC9BQzQ4Nzc1NjI1NDhDNjY0RDdEQkEwRDMyN0IyRjIzMTcxMERDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNDg3NzU2MjU0OEM2NjRE
N0RCQTBEMzI3QjJGMjMxNzEwREMxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk1S3BvVzNBcXRWY3I1THpLN1NuZnFVNk14WGJWMjJSUkxvaGlnOWRQZlpLLzAv
MzQzNTJlMzEzNjMzMmUzMTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAto7IwDQYJKoZIhvcNAQELBQADggEBACgTBz9D
vN89pCAtwU3j43lOTsNi2omNZa8UlHZF7l/DTM4YNP09vTnw15hRJBVS/Tcp+9tv
xc8EnOHw+nwPz2NoEEijFLC7Tg+ibReStEzdT3mqWUkDlY1XnCeUVYbytOOkXdzW
1kvDos3GRlqiNJLP2xWN3hfmHothVo665Bq8MwgIn8oBdaRQOSqoSDXti8sdGrp4
PJfKN3ate7Oargy+rERF+j3fxi0SfsXHdCg9lI8gyraHXQEbPsJQg9NB5dkU4NfB
3DcG2VGqETBfm3HlV1UHXQjuNKzOc9UBieANrcU3nGe4a/SkU90BqoSPlbNUmem+
JWIM/3LFV4aC+vE=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:45 2026 by rpki-client