Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
File:                     34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa (raw, json)
Hash identifier:          HCUndJu2ycDqQT8x+Pnj7iYR2Y83TfAo5HFr8Ts1D3k=
Subject key identifier:   67:7F:8F:E3:55:E9:CB:6F:53:40:04:BD:17:D9:F6:33:46:D8:66:BB
Certificate issuer:       /CN=70C8507CE61B87E853ED7F427A74DD800580712D
Certificate serial:       55D5C83DB669A9B5EC50A26D5A62C1DF2C080A63
Authority key identifier: 70:C8:50:7C:E6:1B:87:E8:53:ED:7F:42:7A:74:DD:80:05:80:71:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C8507CE61B87E853ED7F427A74DD800580712D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa
Signing time:             Sat 05 Sep 2026 13:15:13 +0000
ROA not before:           Sat 05 Sep 2026 13:10:13 +0000
ROA not after:            Sat 04 Sep 2027 13:15:13 +0000
asID:                     269151
IP address blocks:        45.180.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/70C8507CE61B87E853ED7F427A74DD800580712D.crl
                          rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/70C8507CE61B87E853ED7F427A74DD800580712D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C8507CE61B87E853ED7F427A74DD800580712D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 19:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:c8:3d:b6:69:a9:b5:ec:50:a2:6d:5a:62:c1:df:2c:08:0a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C8507CE61B87E853ED7F427A74DD800580712D
        Validity
            Not Before: Sep  5 13:10:13 2026 GMT
            Not After : Sep  4 13:15:13 2027 GMT
        Subject: CN=677F8FE355E9CB6F534004BD17D9F63346D866BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:55:46:34:d1:eb:d4:b5:9d:da:bd:39:04:
                    3b:38:ed:3a:bd:3b:d6:39:af:cf:c1:8e:23:9c:81:
                    2c:94:04:1f:e2:19:4b:d9:5c:45:23:4c:8a:41:7d:
                    72:4d:91:1b:36:d7:26:b5:99:88:77:3a:6d:91:0e:
                    1e:fb:45:c7:18:7c:0a:e7:eb:64:ef:09:5e:c9:77:
                    79:c8:dd:4b:de:b6:34:61:d5:44:95:17:bc:1b:82:
                    34:55:bf:0d:8c:19:5e:e0:68:27:aa:1c:07:14:90:
                    bd:2b:ae:e9:25:e8:98:04:97:18:60:4f:df:ef:ca:
                    01:0f:8d:5f:96:91:5c:87:87:80:f1:db:f2:2c:d8:
                    1d:b2:ee:d7:a5:64:7c:bb:f0:ce:26:4b:ce:89:fb:
                    40:db:e1:db:8f:d9:3d:7c:bc:71:54:6e:97:b7:62:
                    fe:f3:60:10:8f:19:f6:ab:be:e9:75:f2:4e:c6:1d:
                    6d:68:51:16:71:88:2e:47:f7:8e:ed:c1:8b:4a:4a:
                    d5:42:10:e2:85:5d:ca:08:07:44:42:4c:95:94:d1:
                    1b:97:ed:39:0b:23:d4:da:86:8f:8a:06:7a:dc:d2:
                    8b:b7:84:07:bc:3b:49:16:38:7f:2b:8f:7e:6f:9e:
                    b1:71:5d:ac:0c:05:d6:16:1d:09:d4:3b:af:03:0e:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:8F:E3:55:E9:CB:6F:53:40:04:BD:17:D9:F6:33:46:D8:66:BB
            X509v3 Authority Key Identifier:
                keyid:70:C8:50:7C:E6:1B:87:E8:53:ED:7F:42:7A:74:DD:80:05:80:71:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/70C8507CE61B87E853ED7F427A74DD800580712D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C8507CE61B87E853ED7F427A74DD800580712D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/34352e3138302e3232382e302f32322d3234203d3e20323639313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:44:58:36:6d:22:2e:fa:0e:37:dc:2c:9b:45:1f:83:a4:
         47:fa:04:8c:7c:e1:b5:bc:98:fc:77:12:36:2e:e9:dc:3b:af:
         fe:3a:e5:06:5a:ad:13:b3:36:e7:50:89:b0:25:5d:c0:e9:78:
         fc:0a:11:d2:68:4f:55:60:5a:ee:2d:bf:52:1d:2d:f7:04:d3:
         f5:b0:b8:d9:93:42:5e:ad:d4:5f:5e:7b:21:63:c9:72:b4:0f:
         19:43:94:8d:b3:ad:88:93:6f:43:4f:45:2f:ac:52:21:70:cf:
         80:e0:d1:e4:30:e6:eb:b9:f8:cc:ff:36:99:df:a3:88:46:93:
         1f:42:34:ec:ae:63:9f:ae:c1:63:0a:9a:1d:50:9e:76:dc:5f:
         e5:24:05:46:99:d1:44:74:b1:6e:ce:70:35:e5:d5:44:79:e6:
         9c:00:51:ee:4a:72:2c:00:8d:f9:ae:93:89:59:f3:54:14:46:
         b1:2b:68:2a:83:59:da:44:b2:c5:2f:74:ed:f1:bd:6e:7f:60:
         1f:6a:80:52:e1:cc:9b:27:c6:bd:fd:51:13:4b:4b:ac:47:6c:
         ff:93:49:22:40:ab:cb:0d:c1:3b:37:a7:23:7c:b3:4e:8e:5d:
         a1:5e:a0:dd:59:ea:ed:60:f7:66:5e:62:0b:4c:4b:55:e8:28:
         32:5e:b3:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVdXIPbZpqbXsUKJtWmLB3ywICmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBDODUwN0NFNjFCODdFODUzRUQ3RjQyN0E3NEREODAw
NTgwNzEyRDAeFw0yNjA5MDUxMzEwMTNaFw0yNzA5MDQxMzE1MTNaMDMxMTAvBgNV
BAMTKDY3N0Y4RkUzNTVFOUNCNkY1MzQwMDRCRDE3RDlGNjMzNDZEODY2QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F1VGNNHr1LWd2r05BDs47Tq9
O9Y5r8/BjiOcgSyUBB/iGUvZXEUjTIpBfXJNkRs21ya1mYh3Om2RDh77RccYfArn
62TvCV7Jd3nI3UvetjRh1USVF7wbgjRVvw2MGV7gaCeqHAcUkL0rrukl6JgElxhg
T9/vygEPjV+WkVyHh4Dx2/Is2B2y7telZHy78M4mS86J+0Db4duP2T18vHFUbpe3
Yv7zYBCPGfarvul18k7GHW1oURZxiC5H947twYtKStVCEOKFXcoIB0RCTJWU0RuX
7TkLI9Taho+KBnrc0ou3hAe8O0kWOH8rj35vnrFxXawMBdYWHQnUO68DDsozAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ3+P41Xpy29TQAS9F9n2M0bYZrswHwYDVR0j
BBgwFoAUcMhQfOYbh+hT7X9CenTdgAWAcS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBrQ05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05q
UHYvMC83MEM4NTA3Q0U2MUI4N0U4NTNFRDdGNDI3QTc0REQ4MDA1ODA3MTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQzg1MDdDRTYxQjg3RTg1
M0VEN0Y0MjdBNzRERDgwMDU4MDcxMkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwa0NOWTNnU2NnUVY0eGtES0FadGtxS2RrcTZOMzY2R1l5Q3NZa0dOalB2LzAv
MzQzNTJlMzEzODMwMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttOQwDQYJKoZIhvcNAQELBQADggEBAFZKRFg2
bSIu+g433CybRR+DpEf6BIx84bW8mPx3EjYu6dw7r/465QZarROzNudQibAlXcDp
ePwKEdJoT1VgWu4tv1IdLfcE0/WwuNmTQl6t1F9eeyFjyXK0DxlDlI2zrYiTb0NP
RS+sUiFwz4Dg0eQw5uu5+Mz/Npnfo4hGkx9CNOyuY5+uwWMKmh1QnnbcX+UkBUaZ
0UR0sW7OcDXl1UR55pwAUe5KciwAjfmuk4lZ81QURrEraCqDWdpEssUvdO3xvW5/
YB9qgFLhzJsnxr39URNLS6xHbP+TSSJAq8sNwTs3pyN8s06OXaFeoN1Z6u1g92Ze
YgtMS1XoKDJes4E=
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:13:05 2026 by rpki-client