Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3234203d3e20323731353031.roa
File:                     34352e36352e3136302e302f32322d3234203d3e20323731353031.roa (raw, json)
Hash identifier:          yk9oor2TqTz6xaA9t9tDt3AdM2QrSvOrxEe7YotZFZk=
Subject key identifier:   3D:78:EC:FA:FF:61:51:79:57:2C:8A:28:A5:E0:DE:EE:2A:23:12:E9
Certificate issuer:       /CN=0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B
Certificate serial:       312F86515DE0C6AFAA23F0CEE5FEA189FC5F135F
Authority key identifier: 0A:A1:7F:22:30:97:72:53:BF:05:27:CE:FD:C2:DD:CB:EE:EB:C0:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3234203d3e20323731353031.roa
Signing time:             Sat 04 Jul 2026 01:39:05 +0000
ROA not before:           Sat 04 Jul 2026 01:34:05 +0000
ROA not after:            Sat 03 Jul 2027 01:39:05 +0000
asID:                     271501
IP address blocks:        45.65.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2f:86:51:5d:e0:c6:af:aa:23:f0:ce:e5:fe:a1:89:fc:5f:13:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B
        Validity
            Not Before: Jul  4 01:34:05 2026 GMT
            Not After : Jul  3 01:39:05 2027 GMT
        Subject: CN=3D78ECFAFF615179572C8A28A5E0DEEE2A2312E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:52:92:f3:be:ba:5b:9a:83:40:f3:b0:40:
                    46:4b:ed:f6:8b:79:bf:ba:20:dd:bf:aa:1f:5a:bb:
                    ff:01:fd:c3:ba:5d:cc:67:67:b5:3c:32:d0:c4:cb:
                    43:0c:fc:a7:4a:f3:f0:cf:40:a2:30:f4:e7:28:41:
                    f3:21:e3:97:8c:ba:f8:af:78:77:04:97:45:38:db:
                    02:fb:13:2d:b4:0b:d1:b2:e0:95:e3:55:cd:a4:b7:
                    ec:51:d4:ba:ad:d7:2a:20:42:09:40:9d:51:f7:05:
                    ed:52:8e:a8:e5:ad:41:4f:e9:ca:15:4b:c4:38:4c:
                    8b:ca:1e:c3:93:e4:56:7b:43:74:47:3d:69:ff:68:
                    d4:c8:fd:07:5d:c7:c1:d4:5e:8d:f8:da:4a:d7:fd:
                    f7:42:0a:e3:18:d3:ca:2d:2a:99:16:64:2c:a4:6d:
                    23:b1:fe:85:5b:cc:2a:73:59:ba:6a:cf:64:a1:34:
                    1b:61:25:be:82:b4:c3:9c:7b:87:9d:21:98:1e:a2:
                    81:b5:e4:e5:87:22:7b:69:b4:07:7e:df:b9:f8:a9:
                    ed:3a:53:5d:ec:e4:15:66:d5:3d:9e:56:db:81:25:
                    0f:54:c6:ab:2f:04:af:6b:66:65:37:6a:55:de:e5:
                    f7:08:da:b6:4d:02:28:e4:11:16:7c:11:bd:61:b8:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:EC:FA:FF:61:51:79:57:2C:8A:28:A5:E0:DE:EE:2A:23:12:E9
            X509v3 Authority Key Identifier:
                keyid:0A:A1:7F:22:30:97:72:53:BF:05:27:CE:FD:C2:DD:CB:EE:EB:C0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/34352e36352e3136302e302f32322d3234203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:6b:6c:69:9b:d8:a9:b5:8f:33:79:fa:57:52:41:98:0a:
         2c:f9:13:5b:ce:63:de:06:89:4e:8e:00:bf:0d:e7:f0:c6:0c:
         ec:9c:2a:b4:53:f1:ad:50:fe:14:16:86:f7:fc:29:53:d4:52:
         c5:f9:e0:56:f4:b6:e3:50:72:fa:6f:8a:cf:59:5a:79:d7:ee:
         75:61:37:7e:a4:4c:a3:ab:8b:ac:92:64:9d:44:d4:4d:fe:84:
         de:9c:5d:c3:9c:cc:18:1f:db:31:92:0f:69:ba:b3:59:dc:40:
         d0:58:ef:19:c3:bf:a0:a6:e0:2c:aa:eb:71:de:07:dc:a3:c7:
         c7:15:1a:11:20:1e:ff:44:c6:cf:10:9e:0e:f6:38:e6:79:75:
         f0:2b:ce:4c:e2:61:30:87:52:7c:90:99:de:a8:55:b7:4b:ef:
         20:47:90:4c:00:2f:aa:16:fb:f3:76:22:c2:1e:ca:44:c8:0b:
         2d:4a:4c:67:89:f5:fa:62:14:2c:da:ba:f3:4c:1c:66:5f:e7:
         84:50:79:51:39:d6:7d:3a:8f:39:0c:f2:52:d1:ad:f9:68:b2:
         69:e2:98:da:e4:22:91:85:ce:9e:26:48:bb:a3:73:1c:88:e8:
         f4:70:4b:95:b0:52:10:33:1b:61:e8:56:d4:ae:d5:85:5a:54:
         9a:40:75:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMS+GUV3gxq+qI/DO5f6hifxfE18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBMTdGMjIzMDk3NzI1M0JGMDUyN0NFRkRDMkREQ0JF
RUVCQzA2QjAeFw0yNjA3MDQwMTM0MDVaFw0yNzA3MDMwMTM5MDVaMDMxMTAvBgNV
BAMTKDNENzhFQ0ZBRkY2MTUxNzk1NzJDOEEyOEE1RTBERUVFMkEyMzEyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA91KS8766W5qDQPOwQEZL7faL
eb+6IN2/qh9au/8B/cO6XcxnZ7U8MtDEy0MM/KdK8/DPQKIw9OcoQfMh45eMuviv
eHcEl0U42wL7Ey20C9Gy4JXjVc2kt+xR1Lqt1yogQglAnVH3Be1SjqjlrUFP6coV
S8Q4TIvKHsOT5FZ7Q3RHPWn/aNTI/Qddx8HUXo342krX/fdCCuMY08otKpkWZCyk
bSOx/oVbzCpzWbpqz2ShNBthJb6CtMOce4edIZgeooG15OWHIntptAd+37n4qe06
U13s5BVm1T2eVtuBJQ9UxqsvBK9rZmU3alXe5fcI2rZNAijkERZ8Eb1huNFPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPXjs+v9hUXlXLIoopeDe7iojEukwHwYDVR0j
BBgwFoAUCqF/IjCXclO/BSfO/cLdy+7rwGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBQUG5yaGd0anV0NFd0dmg0cnk0VlJIZFdNNGVmNFY0aXpzd3VrNkpX
d1gvMC8wQUExN0YyMjMwOTc3MjUzQkYwNTI3Q0VGREMyRERDQkVFRUJDMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQTE3RjIyMzA5NzcyNTNC
RjA1MjdDRUZEQzJERENCRUVFQkMwNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwUFBucmhndGp1dDRXdHZoNHJ5NFZSSGRXTTRlZjRWNGl6c3d1azZKV3dYLzAv
MzQzNTJlMzYzNTJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUGgMA0GCSqGSIb3DQEBCwUAA4IBAQACt2tsaZvY
qbWPM3n6V1JBmAos+RNbzmPeBolOjgC/DefwxgzsnCq0U/GtUP4UFob3/ClT1FLF
+eBW9LbjUHL6b4rPWVp51+51YTd+pEyjq4uskmSdRNRN/oTenF3DnMwYH9sxkg9p
urNZ3EDQWO8Zw7+gpuAsqutx3gfco8fHFRoRIB7/RMbPEJ4O9jjmeXXwK85M4mEw
h1J8kJneqFW3S+8gR5BMAC+qFvvzdiLCHspEyAstSkxnifX6YhQs2rrzTBxmX+eE
UHlROdZ9Oo85DPJS0a35aLJp4pja5CKRhc6eJki7o3MciOj0cEuVsFIQMxth6FbU
rtWFWlSaQHWB
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:06 2026 by rpki-client