Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230322e302f32332d3233203d3e20323637353532.roa
File:                     34352e3136332e3230322e302f32332d3233203d3e20323637353532.roa (raw, json)
Hash identifier:          gXE//rOtGWOfqOooc5fx4XiDAMVhUhdoLxWnDIU2CYQ=
Subject key identifier:   F1:33:C1:0B:B3:81:D2:F5:AD:E5:97:A6:82:39:62:35:A8:5E:BC:19
Certificate issuer:       /CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
Certificate serial:       46A204C85C70D7B489B98347CBC658682F0F8937
Authority key identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230322e302f32332d3233203d3e20323637353532.roa
Signing time:             Wed 15 Jul 2026 16:50:55 +0000
ROA not before:           Wed 15 Jul 2026 16:45:55 +0000
ROA not after:            Wed 14 Jul 2027 16:50:55 +0000
asID:                     267552
IP address blocks:        45.163.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl
                          rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a2:04:c8:5c:70:d7:b4:89:b9:83:47:cb:c6:58:68:2f:0f:89:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
        Validity
            Not Before: Jul 15 16:45:55 2026 GMT
            Not After : Jul 14 16:50:55 2027 GMT
        Subject: CN=F133C10BB381D2F5ADE597A682396235A85EBC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:e3:7f:d0:ad:92:25:a4:33:df:db:02:63:
                    a8:1b:77:d7:cc:6f:1c:04:7c:0c:34:8e:bf:06:30:
                    76:8d:0a:00:8c:6d:1a:c1:10:c7:9b:c8:95:14:fb:
                    1d:a4:82:7d:8f:97:51:22:1b:f7:96:61:4c:13:b6:
                    a3:6a:2d:ee:bb:a3:29:b2:ec:e0:55:ac:32:ab:64:
                    fb:39:b4:27:2f:50:97:1f:2e:dc:73:dd:bc:ed:f5:
                    09:e7:72:3c:7a:a6:14:2c:b7:19:af:68:98:a0:90:
                    a5:e0:47:19:60:a2:6b:54:95:c8:99:f3:56:0a:85:
                    47:54:c3:b3:e2:bd:37:82:a4:51:0d:e1:73:f0:84:
                    c9:4f:f8:09:e8:f9:9f:48:d7:d2:e2:e7:87:49:28:
                    77:b1:15:e2:b6:52:39:7c:de:c0:50:92:df:fc:ec:
                    89:c8:de:d3:b7:85:69:4a:38:ec:04:f8:13:d6:29:
                    66:13:95:cb:82:9f:2f:08:f6:3e:7b:65:7f:a5:14:
                    c3:70:c2:4e:ed:64:32:90:fe:df:94:93:23:d5:0e:
                    11:72:a5:dc:d1:16:48:6f:93:34:ff:8b:17:8a:92:
                    ab:dd:1b:f2:b3:3a:87:20:36:65:cf:ba:1e:8e:36:
                    60:aa:b0:22:18:e7:cc:d7:43:4e:70:03:ba:fd:b6:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:C1:0B:B3:81:D2:F5:AD:E5:97:A6:82:39:62:35:A8:5E:BC:19
            X509v3 Authority Key Identifier:
                keyid:66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e3136332e3230322e302f32332d3233203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:53:5a:ef:63:39:fc:20:8d:00:da:07:61:62:38:b3:cb:
         af:a8:ba:a2:34:97:04:1b:30:60:63:99:11:8e:ae:c0:67:2b:
         16:9c:cb:d5:68:05:28:62:d3:14:e8:8a:17:76:a3:ba:43:7c:
         b2:11:f4:66:8d:98:0e:98:e9:93:34:c8:cd:1d:ba:54:ef:08:
         85:6d:e7:0d:e6:58:78:34:a7:0f:37:db:70:94:35:3a:1f:fb:
         05:14:74:84:37:a0:46:bd:9f:04:0d:80:9c:4e:54:eb:6f:7e:
         84:5d:00:4c:d0:39:b9:00:c2:e1:2d:8d:c5:55:6b:06:92:6b:
         18:f3:a2:36:6e:6f:0e:b0:03:92:97:b5:b4:a6:80:e4:6f:9e:
         5d:0e:b7:53:0e:37:c4:e6:ed:3e:0f:fa:2f:86:9f:b3:65:a9:
         fc:2e:4f:4d:12:e1:38:2a:e7:56:b3:8d:95:da:41:de:02:95:
         84:22:4e:b9:b1:6b:d0:44:a9:48:ad:2a:31:80:95:1f:6c:2e:
         bf:0c:3b:55:75:f5:3d:07:be:3b:43:8b:97:1e:48:48:d5:63:
         d0:56:77:5c:58:03:cb:f6:09:98:29:7c:4b:6e:5e:af:69:d6:
         3d:bf:0d:f8:6a:4d:72:a4:53:35:2f:dd:96:76:83:4f:e0:29:
         c3:cb:a4:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURqIEyFxw17SJuYNHy8ZYaC8PiTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGMkFBRDIwMEQ5RTdCRjU3N0JBM0RFNUE0NkQ0MTVD
ODA3NTY5NzAeFw0yNjA3MTUxNjQ1NTVaFw0yNzA3MTQxNjUwNTVaMDMxMTAvBgNV
BAMTKEYxMzNDMTBCQjM4MUQyRjVBREU1OTdBNjgyMzk2MjM1QTg1RUJDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHauN/0K2SJaQz39sCY6gbd9fM
bxwEfAw0jr8GMHaNCgCMbRrBEMebyJUU+x2kgn2Pl1EiG/eWYUwTtqNqLe67oymy
7OBVrDKrZPs5tCcvUJcfLtxz3bzt9Qnncjx6phQstxmvaJigkKXgRxlgomtUlciZ
81YKhUdUw7PivTeCpFEN4XPwhMlP+Ano+Z9I19Li54dJKHexFeK2Ujl83sBQkt/8
7InI3tO3hWlKOOwE+BPWKWYTlcuCny8I9j57ZX+lFMNwwk7tZDKQ/t+UkyPVDhFy
pdzRFkhvkzT/ixeKkqvdG/KzOocgNmXPuh6ONmCqsCIY58zXQ05wA7r9tuyFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8TPBC7OB0vWt5ZemgjliNahevBkwHwYDVR0j
BBgwFoAUZvKq0gDZ579Xe6PeWkbUFcgHVpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMC82NkYyQUFEMjAwRDlFN0JGNTc3QkEzREU1QTQ2RDQxNUM4MDc1Njk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RjJBQUQyMDBEOUU3QkY1
NzdCQTNERTVBNDZENDE1QzgwNzU2OTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jjc1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAv
MzQzNTJlMzEzNjMzMmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEto8owDQYJKoZIhvcNAQELBQADggEBAGddU1rv
Yzn8II0A2gdhYjizy6+ouqI0lwQbMGBjmRGOrsBnKxacy9VoBShi0xToihd2o7pD
fLIR9GaNmA6Y6ZM0yM0dulTvCIVt5w3mWHg0pw8323CUNTof+wUUdIQ3oEa9nwQN
gJxOVOtvfoRdAEzQObkAwuEtjcVVawaSaxjzojZubw6wA5KXtbSmgORvnl0Ot1MO
N8Tm7T4P+i+Gn7NlqfwuT00S4Tgq51azjZXaQd4ClYQiTrmxa9BEqUitKjGAlR9s
Lr8MO1V19T0HvjtDi5ceSEjVY9BWd1xYA8v2CZgpfEtuXq9p1j2/DfhqTXKkUzUv
3ZZ2g0/gKcPLpAQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:50 2026 by rpki-client