Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/34352e3136312e33302e302f32342d3234203d3e20323638343930.roa
File:                     34352e3136312e33302e302f32342d3234203d3e20323638343930.roa (raw, json)
Hash identifier:          +KocbBsg3CGqLAG+ASZFw2outg1I8tVNaDZP+oPuXHs=
Subject key identifier:   55:02:A1:7D:2E:CF:93:67:5F:4E:D7:14:E1:0D:A5:71:25:EE:3D:29
Certificate issuer:       /CN=6BB586C8BD051D7034026A37A167E14A40B872A3
Certificate serial:       5E6DA0C3D7CE63E4A7EE48110248FDD4CBFB1CF9
Authority key identifier: 6B:B5:86:C8:BD:05:1D:70:34:02:6A:37:A1:67:E1:4A:40:B8:72:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB586C8BD051D7034026A37A167E14A40B872A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/34352e3136312e33302e302f32342d3234203d3e20323638343930.roa
Signing time:             Tue 21 Jul 2026 16:19:46 +0000
ROA not before:           Tue 21 Jul 2026 16:14:46 +0000
ROA not after:            Tue 20 Jul 2027 16:19:46 +0000
asID:                     268490
IP address blocks:        45.161.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/6BB586C8BD051D7034026A37A167E14A40B872A3.crl
                          rsync://rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/6BB586C8BD051D7034026A37A167E14A40B872A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB586C8BD051D7034026A37A167E14A40B872A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6d:a0:c3:d7:ce:63:e4:a7:ee:48:11:02:48:fd:d4:cb:fb:1c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB586C8BD051D7034026A37A167E14A40B872A3
        Validity
            Not Before: Jul 21 16:14:46 2026 GMT
            Not After : Jul 20 16:19:46 2027 GMT
        Subject: CN=5502A17D2ECF93675F4ED714E10DA57125EE3D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:96:e0:ec:7b:ba:08:59:24:3c:77:89:ce:
                    7e:d5:5c:d9:56:9d:2b:7b:bb:dd:e9:d9:f3:2a:b5:
                    97:06:bf:5f:d0:ff:dd:ed:12:30:fb:d3:fc:77:7b:
                    e5:5e:cc:c3:28:97:10:4a:fb:ab:09:22:e4:cf:ec:
                    3a:2a:2d:42:00:65:d6:5a:3f:8c:01:ba:d9:65:ab:
                    48:6e:6f:4d:c8:ab:dc:90:d3:1a:7d:7d:e8:9e:7b:
                    e5:d2:40:68:f6:96:a3:61:51:43:21:f9:e8:0d:a0:
                    e5:65:5c:0f:31:a0:59:f0:08:81:f8:56:5e:a7:c1:
                    53:bc:4e:41:0d:4a:ba:25:2b:09:56:4a:26:83:ee:
                    63:0d:19:18:99:94:7a:15:d9:f2:e2:4e:4b:39:e9:
                    a5:e1:75:6b:92:fc:81:73:50:15:c2:6d:c8:37:ee:
                    5e:8d:c4:4e:d1:fc:93:96:c6:12:e9:44:9e:a3:f3:
                    f1:cc:c5:ab:59:bc:9a:47:dc:21:5d:47:87:47:17:
                    cb:95:84:36:b8:4f:e1:d0:5b:d7:1b:6d:cb:2d:2a:
                    ba:3b:b0:87:80:f2:32:38:a3:b5:f9:a1:79:07:85:
                    e6:db:61:ea:12:66:5d:ab:91:9e:f4:c6:84:68:08:
                    d0:ee:98:7b:92:04:65:48:80:bd:3c:d6:1c:3c:76:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:02:A1:7D:2E:CF:93:67:5F:4E:D7:14:E1:0D:A5:71:25:EE:3D:29
            X509v3 Authority Key Identifier:
                keyid:6B:B5:86:C8:BD:05:1D:70:34:02:6A:37:A1:67:E1:4A:40:B8:72:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/6BB586C8BD051D7034026A37A167E14A40B872A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BB586C8BD051D7034026A37A167E14A40B872A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYDpnssnXCsY6odyPSGwN48WgaHkeKZ3wPhXBGXFAPGA/0/34352e3136312e33302e302f32342d3234203d3e20323638343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:b4:1b:a2:ec:4e:de:fe:7a:56:72:a6:57:1b:b7:9a:05:
         2c:e8:d0:a5:c1:78:c1:16:f7:6e:d9:56:ae:87:34:40:c4:bb:
         f0:39:3d:cf:ed:88:c8:e8:bf:d3:cb:ef:e1:38:65:d0:db:77:
         67:58:a7:1d:b6:29:8f:c0:ec:07:2d:bf:26:34:24:b2:1e:c3:
         da:d2:23:5c:ed:b0:00:6a:85:19:ef:f7:f5:ff:f1:af:c7:1a:
         95:63:2a:30:5b:61:02:2b:93:16:13:be:b9:a9:88:59:e9:2f:
         1e:23:d7:06:10:55:18:55:41:e9:0e:67:d1:82:5b:53:7e:75:
         0a:7b:e0:1d:96:50:88:72:36:18:d4:55:ac:2b:f5:eb:b3:e7:
         15:9a:98:81:a8:15:56:15:74:37:21:a7:09:3d:75:0a:b6:ac:
         3f:1a:19:f2:50:21:45:12:8c:b6:ac:cf:21:77:b6:f0:e5:3c:
         58:10:a6:32:d7:7c:75:28:d5:7c:be:69:4c:b1:69:76:9c:ce:
         a3:0b:06:74:a9:a9:24:d6:fb:c3:30:0a:fd:c8:a3:f8:3b:30:
         f1:15:d5:8f:9e:03:61:17:e9:14:c6:c9:9a:69:15:ca:10:03:
         19:f3:9a:f4:e9:10:4f:83:b6:87:fd:fa:7a:86:42:5a:6e:fe:
         f7:7c:a5:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXm2gw9fOY+Sn7kgRAkj91Mv7HPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCNTg2QzhCRDA1MUQ3MDM0MDI2QTM3QTE2N0UxNEE0
MEI4NzJBMzAeFw0yNjA3MjExNjE0NDZaFw0yNzA3MjAxNjE5NDZaMDMxMTAvBgNV
BAMTKDU1MDJBMTdEMkVDRjkzNjc1RjRFRDcxNEUxMERBNTcxMjVFRTNEMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuz5bg7Hu6CFkkPHeJzn7VXNlW
nSt7u93p2fMqtZcGv1/Q/93tEjD70/x3e+VezMMolxBK+6sJIuTP7DoqLUIAZdZa
P4wButllq0hub03Iq9yQ0xp9feiee+XSQGj2lqNhUUMh+egNoOVlXA8xoFnwCIH4
Vl6nwVO8TkENSrolKwlWSiaD7mMNGRiZlHoV2fLiTks56aXhdWuS/IFzUBXCbcg3
7l6NxE7R/JOWxhLpRJ6j8/HMxatZvJpH3CFdR4dHF8uVhDa4T+HQW9cbbcstKro7
sIeA8jI4o7X5oXkHhebbYeoSZl2rkZ70xoRoCNDumHuSBGVIgL081hw8dpODAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVQKhfS7Pk2dfTtcU4Q2lcSXuPSkwHwYDVR0j
BBgwFoAUa7WGyL0FHXA0Amo3oWfhSkC4cqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlEcG5zc25YQ3NZNm9keVBTR3dONDhXZ2FIa2VLWjN3UGhYQkdYRkFQ
R0EvMC82QkI1ODZDOEJEMDUxRDcwMzQwMjZBMzdBMTY3RTE0QTQwQjg3MkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCQjU4NkM4QkQwNTFENzAz
NDAyNkEzN0ExNjdFMTRBNDBCODcyQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZRHBuc3NuWENzWTZvZHlQU0d3TjQ4V2dhSGtlS1ozd1BoWEJHWEZBUEdBLzAv
MzQzNTJlMzEzNjMxMmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaEeMA0GCSqGSIb3DQEBCwUAA4IBAQChWbQbouxO
3v56VnKmVxu3mgUs6NClwXjBFvdu2VauhzRAxLvwOT3P7YjI6L/Ty+/hOGXQ23dn
WKcdtimPwOwHLb8mNCSyHsPa0iNc7bAAaoUZ7/f1//GvxxqVYyowW2ECK5MWE765
qYhZ6S8eI9cGEFUYVUHpDmfRgltTfnUKe+AdllCIcjYY1FWsK/Xrs+cVmpiBqBVW
FXQ3IacJPXUKtqw/GhnyUCFFEoy2rM8hd7bw5TxYEKYy13x1KNV8vmlMsWl2nM6j
CwZ0qakk1vvDMAr9yKP4OzDxFdWPngNhF+kUxsmaaRXKEAMZ85r06RBPg7aH/fp6
hkJabv73fKXb
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:49:23 2026 by rpki-client