Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232372e302f32342d3234203d3e20323735363634.roa
File:                     34352e3233372e3232372e302f32342d3234203d3e20323735363634.roa (raw, json)
Hash identifier:          /YtHx+Rnax+QUmbjRFVBGnUhlrCoqoYRM/HcEocaUXo=
Subject key identifier:   8B:16:00:1A:06:6E:C9:52:CF:3F:A4:F7:96:7B:A9:66:C7:C2:3F:F1
Certificate issuer:       /CN=2BE50025D1B09A6D839F7185D6BD694383893878
Certificate serial:       5A7B3D3FBC6E8C1F680742C2409233334A11A9AA
Authority key identifier: 2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232372e302f32342d3234203d3e20323735363634.roa
Signing time:             Wed 05 Aug 2026 18:42:15 +0000
ROA not before:           Wed 05 Aug 2026 18:37:15 +0000
ROA not after:            Wed 04 Aug 2027 18:42:15 +0000
asID:                     275664
IP address blocks:        45.237.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.crl
                          rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7b:3d:3f:bc:6e:8c:1f:68:07:42:c2:40:92:33:33:4a:11:a9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE50025D1B09A6D839F7185D6BD694383893878
        Validity
            Not Before: Aug  5 18:37:15 2026 GMT
            Not After : Aug  4 18:42:15 2027 GMT
        Subject: CN=8B16001A066EC952CF3FA4F7967BA966C7C23FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:1b:ab:94:db:c4:7c:c8:4d:df:3d:e3:53:
                    e5:07:a5:b6:07:b8:26:56:44:40:4e:39:4e:4b:46:
                    f3:95:d5:ac:0b:a2:0a:d0:bf:85:9f:84:bd:23:f5:
                    52:9b:0e:be:a4:ff:03:df:97:f6:7f:66:f2:9b:de:
                    50:e5:2d:58:ba:41:68:17:33:da:5d:ad:e1:41:4a:
                    9a:67:fc:5f:8c:a6:b9:8f:28:1a:36:b3:19:4d:05:
                    17:1a:78:77:61:9b:33:c3:7c:23:92:23:5b:38:63:
                    3b:ac:be:b4:6f:a1:23:5a:f0:8a:56:24:71:b1:09:
                    37:19:b5:11:17:7b:3e:f1:fe:ab:56:f5:a8:e9:92:
                    34:6c:97:18:7b:5f:bb:b8:2d:98:86:c0:a8:43:bb:
                    47:04:b0:47:79:e5:ef:52:0a:27:bc:38:da:d6:b5:
                    c5:e3:aa:14:0a:a5:31:2a:fc:8c:cd:89:09:d9:4c:
                    7a:36:a5:0e:35:6d:63:85:fb:7d:08:a4:93:13:84:
                    b4:c1:3d:81:63:3c:78:90:46:bf:83:48:a0:ff:bf:
                    c5:fc:a2:a1:b1:d5:b8:12:f7:9b:d6:cf:d5:4a:ef:
                    3c:25:f5:67:7d:ba:46:63:19:28:4f:5c:f7:83:52:
                    cd:46:d7:5b:87:71:3a:57:2b:b4:a2:61:c9:c9:17:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:00:1A:06:6E:C9:52:CF:3F:A4:F7:96:7B:A9:66:C7:C2:3F:F1
            X509v3 Authority Key Identifier:
                keyid:2B:E5:00:25:D1:B0:9A:6D:83:9F:71:85:D6:BD:69:43:83:89:38:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/2BE50025D1B09A6D839F7185D6BD694383893878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE50025D1B09A6D839F7185D6BD694383893878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AkjqouAbqgumfKeh3eqG4QNK2aNvaoXwMXi7dEnVih5/0/34352e3233372e3232372e302f32342d3234203d3e20323735363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:fb:9d:81:d2:9c:ef:f2:27:6d:18:7e:59:4a:af:3b:35:
         d8:45:30:79:ff:49:4f:94:c8:8f:20:e5:39:93:69:6e:38:db:
         b1:49:3e:7a:d1:85:96:e8:7a:9d:c7:4f:31:f4:42:87:fd:48:
         53:80:24:1f:c5:bf:1c:9b:35:0f:c7:0d:61:35:05:13:40:5f:
         a6:38:0a:c1:b1:d7:6a:c9:45:93:e7:e5:70:5c:a0:fb:77:17:
         90:ca:2f:7f:ba:b3:4f:4a:0a:49:4c:cd:5c:30:ff:f1:65:05:
         33:eb:cd:31:a1:58:1d:20:9b:51:63:4c:9b:f2:ca:fd:fc:07:
         79:3a:26:17:e9:5f:15:5a:5b:b6:6f:99:c2:fc:5d:ce:d5:fe:
         39:fe:2b:4f:43:d6:37:0b:04:6c:82:a8:dd:2b:09:e7:d6:67:
         dd:e5:3b:f3:9a:40:e4:11:6d:df:ee:f1:5f:e6:67:94:59:d3:
         74:ff:fc:43:2d:13:62:b9:fc:e7:c5:56:65:88:b8:f2:0f:96:
         8d:e2:91:20:74:db:53:35:2f:ef:ff:1e:7a:c7:21:47:8c:31:
         28:1e:08:37:ed:c6:05:00:35:50:cc:93:e7:2d:bd:10:5d:12:
         80:aa:28:3e:00:99:4b:40:b6:6b:e6:fa:1d:91:5a:ba:16:8d:
         dd:18:bf:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWns9P7xujB9oB0LCQJIzM0oRqaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJFNTAwMjVEMUIwOUE2RDgzOUY3MTg1RDZCRDY5NDM4
Mzg5Mzg3ODAeFw0yNjA4MDUxODM3MTVaFw0yNzA4MDQxODQyMTVaMDMxMTAvBgNV
BAMTKDhCMTYwMDFBMDY2RUM5NTJDRjNGQTRGNzk2N0JBOTY2QzdDMjNGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeRurlNvEfMhN3z3jU+UHpbYH
uCZWREBOOU5LRvOV1awLogrQv4WfhL0j9VKbDr6k/wPfl/Z/ZvKb3lDlLVi6QWgX
M9pdreFBSppn/F+MprmPKBo2sxlNBRcaeHdhmzPDfCOSI1s4YzusvrRvoSNa8IpW
JHGxCTcZtREXez7x/qtW9ajpkjRslxh7X7u4LZiGwKhDu0cEsEd55e9SCie8ONrW
tcXjqhQKpTEq/IzNiQnZTHo2pQ41bWOF+30IpJMThLTBPYFjPHiQRr+DSKD/v8X8
oqGx1bgS95vWz9VK7zwl9Wd9ukZjGShPXPeDUs1G11uHcTpXK7SiYcnJF2k5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUixYAGgZuyVLPP6T3lnupZsfCP/EwHwYDVR0j
BBgwFoAUK+UAJdGwmm2Dn3GF1r1pQ4OJOHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFranFvdUFicWd1bWZLZWgzZXFHNFFOSzJhTnZhb1h3TVhpN2RFblZp
aDUvMC8yQkU1MDAyNUQxQjA5QTZEODM5RjcxODVENkJENjk0MzgzODkzODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTUwMDI1RDFCMDlBNkQ4
MzlGNzE4NUQ2QkQ2OTQzODM4OTM4NzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBa2pxb3VBYnFndW1mS2VoM2VxRzRRTksyYU52YW9Yd01YaTdkRW5WaWg1LzAv
MzQzNTJlMzIzMzM3MmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzUzNjM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7eMwDQYJKoZIhvcNAQELBQADggEBAAPc+52B
0pzv8idtGH5ZSq87NdhFMHn/SU+UyI8g5TmTaW4427FJPnrRhZboep3HTzH0Qof9
SFOAJB/FvxybNQ/HDWE1BRNAX6Y4CsGx12rJRZPn5XBcoPt3F5DKL3+6s09KCklM
zVww//FlBTPrzTGhWB0gm1FjTJvyyv38B3k6JhfpXxVaW7ZvmcL8Xc7V/jn+K09D
1jcLBGyCqN0rCefWZ93lO/OaQOQRbd/u8V/mZ5RZ03T//EMtE2K5/OfFVmWIuPIP
lo3ikSB021M1L+//HnrHIUeMMSgeCDftxgUANVDMk+ctvRBdEoCqKD4AmUtAtmvm
+h2RWroWjd0Yv1Q=
-----END CERTIFICATE-----
Generated at Wed Aug 26 00:25:38 2026 by rpki-client