Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32332d3233203d3e20323638343834.roa
File:                     34352e3136312e3234342e302f32332d3233203d3e20323638343834.roa (raw, json)
Hash identifier:          BIT7FtOIQxBMqt/04kaa7a1mllRAj1UQCKsZ9YMPvDA=
Subject key identifier:   0A:3D:E7:06:A0:2B:91:04:82:91:4D:6A:7D:D2:96:F8:CB:1A:54:65
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       3A104467B166603C16CC48399BF4212F323ED170
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32332d3233203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:23:44 +0000
ROA not before:           Tue 23 Jun 2026 01:18:44 +0000
ROA not after:            Tue 22 Jun 2027 01:23:44 +0000
asID:                     268484
IP address blocks:        45.161.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:10:44:67:b1:66:60:3c:16:cc:48:39:9b:f4:21:2f:32:3e:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:18:44 2026 GMT
            Not After : Jun 22 01:23:44 2027 GMT
        Subject: CN=0A3DE706A02B910482914D6A7DD296F8CB1A5465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:0f:86:64:ca:12:8a:81:75:bf:d2:28:36:
                    c2:cc:03:c7:c0:f7:11:22:5e:25:07:66:79:ff:0d:
                    95:6d:14:96:91:0a:e6:24:8b:57:6f:1b:ad:e1:57:
                    c7:01:39:a1:86:8d:fe:77:b3:f7:de:8c:29:de:18:
                    d0:44:c9:a6:f2:25:16:b1:df:7d:0e:5a:52:d4:ba:
                    1a:ca:74:94:1f:e3:4f:f0:28:58:3e:be:ec:1c:1b:
                    bb:cf:dc:65:98:b5:ed:0e:fe:11:ee:53:4e:fa:13:
                    91:c4:d9:37:89:8b:cf:32:c6:de:a3:60:74:bb:e5:
                    dc:ab:91:d9:81:a6:d2:24:c2:69:f5:5e:4b:fc:29:
                    80:dd:7b:5e:14:66:85:ad:aa:4e:6b:e9:1f:eb:8f:
                    c0:16:8e:a6:b0:3a:77:2f:9e:e7:98:6a:81:0f:81:
                    27:c7:40:e4:a6:62:0b:be:8a:54:92:b8:66:3a:35:
                    14:57:74:eb:55:ee:cb:fc:95:2e:02:b4:3e:88:2d:
                    93:21:c5:38:58:a0:4c:bd:74:9a:ff:98:92:46:6d:
                    c3:78:5e:26:aa:74:f7:fe:43:f7:b5:ed:41:de:c6:
                    54:6b:06:4d:d8:fc:30:a0:62:48:f5:0d:10:a2:b0:
                    1f:d7:63:4d:c0:db:28:b6:d2:8a:7e:0f:ef:33:3d:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3D:E7:06:A0:2B:91:04:82:91:4D:6A:7D:D2:96:F8:CB:1A:54:65
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/34352e3136312e3234342e302f32332d3233203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:0f:c5:9a:94:46:9e:3a:92:e7:d5:c0:8b:64:7a:0d:bf:
         a1:cc:e7:3c:93:16:58:88:11:e3:28:f3:44:de:6f:4b:1d:0d:
         4a:d7:33:98:45:06:c7:35:0c:9d:64:ca:b2:31:13:15:89:cb:
         31:65:dc:ba:52:fb:e6:d8:36:f8:8d:7f:99:6e:e4:b6:f2:eb:
         b5:b9:4a:17:1e:55:b0:4e:0a:85:f1:87:e8:96:21:86:2b:25:
         61:f0:36:ea:0e:79:e9:4b:cf:f8:45:2d:1c:d4:52:7f:4b:bc:
         c4:9d:0f:4e:0d:cb:55:08:94:6a:89:ac:15:1b:17:23:43:17:
         16:82:0b:35:d8:7b:51:f3:7d:0c:71:e6:57:00:20:cb:41:e2:
         93:f1:39:51:64:4f:66:63:ef:34:e6:eb:5d:3f:c8:e1:ed:bc:
         b2:c9:fc:f2:b9:79:2c:e6:81:c6:29:24:3b:38:71:f9:a1:58:
         3e:2d:c7:be:90:6a:05:80:de:ab:1d:37:f6:55:d3:6d:c0:16:
         db:ca:d6:2a:f1:41:71:be:af:24:05:9f:ab:2a:32:cd:62:d1:
         b2:30:29:fc:3a:d1:e3:e3:04:d5:76:fc:f9:d4:eb:e4:2f:02:
         2a:21:af:71:6b:9d:4d:e0:14:f0:b7:af:2a:59:87:58:e9:cb:
         58:ad:e1:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOhBEZ7FmYDwWzEg5m/QhLzI+0XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMzk2MzI1REY5RUJEOERERENCMjE0OUYwMDg0ODIz
RkE2N0IxRTAeFw0yNjA2MjMwMTE4NDRaFw0yNzA2MjIwMTIzNDRaMDMxMTAvBgNV
BAMTKDBBM0RFNzA2QTAyQjkxMDQ4MjkxNEQ2QTdERDI5NkY4Q0IxQTU0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILQ+GZMoSioF1v9IoNsLMA8fA
9xEiXiUHZnn/DZVtFJaRCuYki1dvG63hV8cBOaGGjf53s/fejCneGNBEyabyJRax
330OWlLUuhrKdJQf40/wKFg+vuwcG7vP3GWYte0O/hHuU076E5HE2TeJi88yxt6j
YHS75dyrkdmBptIkwmn1Xkv8KYDde14UZoWtqk5r6R/rj8AWjqawOncvnueYaoEP
gSfHQOSmYgu+ilSSuGY6NRRXdOtV7sv8lS4CtD6ILZMhxThYoEy9dJr/mJJGbcN4
XiaqdPf+Q/e17UHexlRrBk3Y/DCgYkj1DRCisB/XY03A2yi20op+D+8zPYcDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCj3nBqArkQSCkU1qfdKW+MsaVGUwHwYDVR0j
BBgwFoAUR6OWMl3569jd3LIUnwCEgj+mex4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMC80N0EzOTYzMjVERjlFQkQ4REREQ0IyMTQ5RjAwODQ4MjNGQTY3QjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTM5NjMyNURGOUVCRDhE
RERDQjIxNDlGMDA4NDgyM0ZBNjdCMUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzMmtWNjNHTGdTbWdORzg5cWdxckpkSkJVdTZTUGlSRGNxZld4akJZbTZkLzAv
MzQzNTJlMzEzNjMxMmUzMjM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtofQwDQYJKoZIhvcNAQELBQADggEBAChND8Wa
lEaeOpLn1cCLZHoNv6HM5zyTFliIEeMo80Teb0sdDUrXM5hFBsc1DJ1kyrIxExWJ
yzFl3LpS++bYNviNf5lu5Lby67W5ShceVbBOCoXxh+iWIYYrJWHwNuoOeelLz/hF
LRzUUn9LvMSdD04Ny1UIlGqJrBUbFyNDFxaCCzXYe1HzfQxx5lcAIMtB4pPxOVFk
T2Zj7zTm610/yOHtvLLJ/PK5eSzmgcYpJDs4cfmhWD4tx76QagWA3qsdN/ZV023A
FtvK1irxQXG+ryQFn6sqMs1i0bIwKfw60ePjBNV2/PnU6+QvAiohr3FrnU3gFPC3
rypZh1jpy1it4Qs=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:22 2026 by rpki-client