Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3137332e32312e302f32342d3234203d3e20323638323537.roa
File:                     34352e3137332e32312e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          Y2EI13++eKilS2LwcYiVjMmmW9MchPUMUPqIudTKUZw=
Subject key identifier:   9F:52:3C:65:9D:B7:C6:BE:07:C9:3B:3D:22:2C:8A:51:E1:35:E5:9D
Certificate issuer:       /CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
Certificate serial:       016F2590D049A6765CBC8A09B8B19E85A451D376
Authority key identifier: EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3137332e32312e302f32342d3234203d3e20323638323537.roa
Signing time:             Wed 05 Aug 2026 23:43:52 +0000
ROA not before:           Wed 05 Aug 2026 23:38:52 +0000
ROA not after:            Wed 04 Aug 2027 23:43:52 +0000
asID:                     268257
IP address blocks:        45.173.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6f:25:90:d0:49:a6:76:5c:bc:8a:09:b8:b1:9e:85:a4:51:d3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
        Validity
            Not Before: Aug  5 23:38:52 2026 GMT
            Not After : Aug  4 23:43:52 2027 GMT
        Subject: CN=9F523C659DB7C6BE07C93B3D222C8A51E135E59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:aa:99:1e:db:f9:5a:88:f1:c7:2d:22:70:
                    88:f4:d0:d9:8b:1c:c6:34:50:86:5b:2a:79:b0:fe:
                    50:81:9d:f9:97:65:e8:a1:06:61:00:dd:ec:9d:0c:
                    62:a2:1f:4c:c6:7f:ea:13:99:bb:d1:25:34:bc:60:
                    89:f4:68:74:f3:b4:1a:ca:3a:45:a3:42:cc:0b:d2:
                    37:cf:8d:0d:66:2b:8e:a1:98:3f:df:35:55:33:da:
                    f4:93:7f:3f:d3:c8:77:c3:8c:23:42:33:d0:d3:22:
                    d9:4f:93:a4:4b:31:09:2a:e2:2a:61:ee:ca:4f:44:
                    08:30:5e:cd:79:57:1c:92:33:8e:b3:66:47:66:dc:
                    fc:92:e5:01:84:42:d9:3a:3f:3c:43:f8:5f:d7:44:
                    86:89:f7:2a:97:bc:20:47:99:ac:e9:c6:42:c4:7e:
                    6a:b7:2a:90:3b:bf:6b:a5:da:dc:e2:b0:a9:a3:d2:
                    70:f1:6c:77:59:f5:2e:83:6d:1d:b9:5a:6f:b1:cc:
                    f6:63:7d:df:b4:ed:17:87:f9:fe:ac:ad:00:67:3f:
                    30:dc:57:85:6f:10:85:3d:3d:c4:ef:5b:b7:b8:76:
                    a4:5d:aa:63:c1:26:ad:5f:a7:c6:39:13:ee:a9:08:
                    c5:ad:96:62:7e:a9:e7:98:d6:8f:54:e3:f0:3b:cc:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:3C:65:9D:B7:C6:BE:07:C9:3B:3D:22:2C:8A:51:E1:35:E5:9D
            X509v3 Authority Key Identifier:
                keyid:EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3137332e32312e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:a0:66:86:0f:5a:4a:7b:26:19:68:30:50:5e:3e:71:79:
         7b:4c:39:31:5b:e1:69:57:4b:c4:4f:6c:f1:d4:2b:59:95:1a:
         66:59:4b:a7:24:3f:cc:a6:54:50:3b:84:b4:b7:7f:4f:21:77:
         6d:72:f2:a4:f9:aa:03:9a:db:80:1e:57:43:ed:8a:31:79:f2:
         59:9c:92:4b:b6:51:f9:52:17:b7:b7:61:2e:b0:25:ee:43:81:
         72:e7:2e:8b:d7:42:30:c4:85:e6:17:ff:a3:72:77:b0:bc:84:
         cb:ae:07:f0:f0:fa:d4:fd:94:4f:5f:1b:94:cc:72:b6:b1:ef:
         43:a2:1c:99:3e:46:ec:59:97:24:89:4c:10:c8:18:2b:21:4b:
         a8:8e:a1:c9:70:ee:3d:88:77:55:f7:d6:80:26:6c:99:0f:38:
         90:38:59:53:b3:03:c4:db:2e:93:7f:b6:8f:3a:6f:6c:d3:02:
         bd:dd:de:17:22:06:63:c1:3d:38:ad:83:bb:66:a8:77:e6:8c:
         61:aa:9b:fd:de:94:e2:91:b9:b3:2e:47:c6:92:ad:47:c8:68:
         48:c5:2f:8b:7d:f5:1b:41:05:14:fa:18:fd:b3:1a:39:e4:3b:
         0e:cd:98:6a:ff:62:e2:a4:39:c1:7e:43:f4:d7:e3:d4:68:a1:
         15:de:76:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAW8lkNBJpnZcvIoJuLGehaRR03YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI0RDM4QkUyNDBEM0VBMTNEOURFMDJFMjYxOEQyNTUz
RUZBNzczRTAeFw0yNjA4MDUyMzM4NTJaFw0yNzA4MDQyMzQzNTJaMDMxMTAvBgNV
BAMTKDlGNTIzQzY1OURCN0M2QkUwN0M5M0IzRDIyMkM4QTUxRTEzNUU1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDaqZHtv5Wojxxy0icIj00NmL
HMY0UIZbKnmw/lCBnfmXZeihBmEA3eydDGKiH0zGf+oTmbvRJTS8YIn0aHTztBrK
OkWjQswL0jfPjQ1mK46hmD/fNVUz2vSTfz/TyHfDjCNCM9DTItlPk6RLMQkq4iph
7spPRAgwXs15VxySM46zZkdm3PyS5QGEQtk6PzxD+F/XRIaJ9yqXvCBHmazpxkLE
fmq3KpA7v2ul2tzisKmj0nDxbHdZ9S6DbR25Wm+xzPZjfd+07ReH+f6srQBnPzDc
V4VvEIU9PcTvW7e4dqRdqmPBJq1fp8Y5E+6pCMWtlmJ+qeeY1o9U4/A7zMpzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn1I8ZZ23xr4HyTs9IiyKUeE15Z0wHwYDVR0j
BBgwFoAU6004viQNPqE9neAuJhjSVT76dz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR
blgvMC9FQjREMzhCRTI0MEQzRUExM0Q5REUwMkUyNjE4RDI1NTNFRkE3NzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCNEQzOEJFMjQwRDNFQTEz
RDlERTAyRTI2MThEMjU1M0VGQTc3M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv
MzQzNTJlMzEzNzMzMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa0VMA0GCSqGSIb3DQEBCwUAA4IBAQAUzqBmhg9a
SnsmGWgwUF4+cXl7TDkxW+FpV0vET2zx1CtZlRpmWUunJD/MplRQO4S0t39PIXdt
cvKk+aoDmtuAHldD7YoxefJZnJJLtlH5Uhe3t2EusCXuQ4Fy5y6L10IwxIXmF/+j
cnewvITLrgfw8PrU/ZRPXxuUzHK2se9DohyZPkbsWZckiUwQyBgrIUuojqHJcO49
iHdV99aAJmyZDziQOFlTswPE2y6Tf7aPOm9s0wK93d4XIgZjwT04rYO7Zqh35oxh
qpv93pTikbmzLkfGkq1HyGhIxS+LffUbQQUU+hj9sxo55DsOzZhq/2LipDnBfkP0
1+PUaKEV3nbd
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:45:02 2026 by rpki-client