Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa
File:                     34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa (raw, json)
Hash identifier:          HvS3vNFit2hkXH5aLXT76hPwVBrUCNE/KLgEsP2h8vA=
Subject key identifier:   16:A1:C4:C6:15:98:19:E3:69:33:6F:4A:43:25:9E:A0:05:8D:54:34
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       5029A1FEB0B002F016552C9BE52BAAEFAAD5A4F2
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     269596
IP address blocks:        45.189.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:29:a1:fe:b0:b0:02:f0:16:55:2c:9b:e5:2b:aa:ef:aa:d5:a4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=16A1C4C6159819E369336F4A43259EA0058D5434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:66:35:59:1a:43:37:aa:c5:8d:76:c9:5b:
                    ff:64:ed:e5:ce:35:51:99:e6:80:a7:1b:ad:f5:c4:
                    b5:41:07:e3:bd:92:a5:25:fe:92:53:4f:85:81:62:
                    d8:4c:70:04:be:e2:a8:ae:bf:4c:a9:bd:86:84:34:
                    15:52:8c:9c:02:c7:52:5e:20:43:5b:93:4f:24:a0:
                    73:0e:4f:12:9f:95:80:16:53:4b:72:59:d6:02:04:
                    16:f3:99:bf:da:1b:aa:d9:48:a7:46:24:a0:2d:d9:
                    63:9c:06:6b:56:87:77:f0:62:af:44:9e:fa:5e:eb:
                    86:74:62:af:90:f2:d7:10:3e:87:70:e1:02:47:a2:
                    90:c4:3e:7b:16:75:1d:27:8f:a1:c7:45:ef:eb:20:
                    e2:99:9a:2f:cd:cc:8a:f3:9c:49:d6:69:aa:cc:bd:
                    c3:8b:5b:af:0b:1b:b1:83:b6:f1:f6:f0:f7:30:54:
                    ef:89:2d:d0:76:6e:fb:1d:6f:dd:7e:5d:19:23:03:
                    12:15:d5:53:dd:d4:7d:b5:78:8e:13:8a:96:13:4f:
                    cc:24:ad:2b:c5:65:65:fa:1c:e9:f8:89:6d:9c:80:
                    62:35:42:08:66:96:8d:b5:8e:19:a7:46:0a:a5:45:
                    a9:48:43:6b:5d:86:a8:3a:73:48:6d:70:40:88:00:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:C4:C6:15:98:19:E3:69:33:6F:4A:43:25:9E:A0:05:8D:54:34
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3138392e3134342e302f32322d3234203d3e20323639353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:16:ea:4e:75:0c:b9:51:5b:86:e7:96:7f:c9:08:42:85:d5:
         00:92:72:87:3a:79:e4:f2:c9:d3:cd:6e:bf:d8:c4:95:74:b8:
         37:42:1a:e0:fd:55:82:f0:ac:94:1e:94:c5:5b:69:6d:fc:ff:
         3c:c6:2a:55:e1:3b:60:d4:a7:15:cf:2d:78:e8:09:e1:bb:c6:
         36:6e:50:a3:e3:28:0a:95:48:fc:8e:80:24:58:89:1a:14:d7:
         71:14:a5:7f:58:9f:74:c3:69:86:92:7a:5a:55:d6:d9:d1:1f:
         d7:36:eb:17:84:17:8b:c9:21:b4:96:26:d7:d2:56:09:0e:33:
         55:95:9b:06:c2:d9:f8:f3:a5:89:59:e6:50:fb:d9:e3:ba:7c:
         2c:d6:f8:5a:2c:54:d1:09:3e:23:8e:85:9e:ce:41:7a:4c:18:
         6b:4b:a1:b1:ad:87:b0:76:ad:e1:7f:c8:d2:3a:06:f8:66:88:
         78:18:9e:9c:0d:b9:ed:7b:b6:ce:c2:a2:86:9c:08:dc:16:2e:
         60:41:e7:aa:54:2f:01:05:6a:13:15:4f:ec:50:c5:88:e4:8d:
         07:4d:9e:2d:c6:70:ab:8d:7a:74:94:31:f4:0b:d2:e5:a6:f1:
         56:fa:e5:e4:fe:b0:2c:0f:cc:94:45:5c:24:9f:39:e1:af:1f:
         fc:f2:93:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUCmh/rCwAvAWVSyb5Suq76rVpPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNjA3MjMxNjAwNDBaFw0yNzA3MjIxNjA1NDBaMDMxMTAvBgNV
BAMTKDE2QTFDNEM2MTU5ODE5RTM2OTMzNkY0QTQzMjU5RUEwMDU4RDU0MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkmY1WRpDN6rFjXbJW/9k7eXO
NVGZ5oCnG631xLVBB+O9kqUl/pJTT4WBYthMcAS+4qiuv0ypvYaENBVSjJwCx1Je
IENbk08koHMOTxKflYAWU0tyWdYCBBbzmb/aG6rZSKdGJKAt2WOcBmtWh3fwYq9E
nvpe64Z0Yq+Q8tcQPodw4QJHopDEPnsWdR0nj6HHRe/rIOKZmi/NzIrznEnWaarM
vcOLW68LG7GDtvH28PcwVO+JLdB2bvsdb91+XRkjAxIV1VPd1H21eI4TipYTT8wk
rSvFZWX6HOn4iW2cgGI1Qghmlo21jhmnRgqlRalIQ2tdhqg6c0htcECIAPJTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFqHExhWYGeNpM29KQyWeoAWNVDQwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzQzNTJlMzEzODM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvZAwDQYJKoZIhvcNAQELBQADggEBAIkW6k51
DLlRW4bnln/JCEKF1QCScoc6eeTyydPNbr/YxJV0uDdCGuD9VYLwrJQelMVbaW38
/zzGKlXhO2DUpxXPLXjoCeG7xjZuUKPjKAqVSPyOgCRYiRoU13EUpX9Yn3TDaYaS
elpV1tnRH9c26xeEF4vJIbSWJtfSVgkOM1WVmwbC2fjzpYlZ5lD72eO6fCzW+Fos
VNEJPiOOhZ7OQXpMGGtLobGth7B2reF/yNI6BvhmiHgYnpwNue17ts7CooacCNwW
LmBB56pULwEFahMVT+xQxYjkjQdNni3GcKuNenSUMfQL0uWm8Vb65eT+sCwPzJRF
XCSfOeGvH/zyky4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:56:32 2026 by rpki-client