Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33382e302f32342d3234203d3e20323636303435.roa
File:                     34352e342e33382e302f32342d3234203d3e20323636303435.roa (raw, json)
Hash identifier:          sOrw1CZhS4VRmhxohlfBNawc4cL9A2M1+tePKqoJF10=
Subject key identifier:   1B:E2:55:70:4E:0D:1A:7D:8E:95:03:EB:F9:E6:9C:85:D3:E7:F5:05
Certificate issuer:       /CN=A75ED3D3A27119AD362E745F2E0EC17950532980
Certificate serial:       A54A63C52F75CBD657077D17FBD8ED0DD9867F
Authority key identifier: A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33382e302f32342d3234203d3e20323636303435.roa
Signing time:             Tue 28 Jul 2026 14:10:13 +0000
ROA not before:           Tue 28 Jul 2026 14:05:13 +0000
ROA not after:            Tue 27 Jul 2027 14:10:13 +0000
asID:                     266045
IP address blocks:        45.4.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl
                          rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:4a:63:c5:2f:75:cb:d6:57:07:7d:17:fb:d8:ed:0d:d9:86:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75ED3D3A27119AD362E745F2E0EC17950532980
        Validity
            Not Before: Jul 28 14:05:13 2026 GMT
            Not After : Jul 27 14:10:13 2027 GMT
        Subject: CN=1BE255704E0D1A7D8E9503EBF9E69C85D3E7F505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:c5:55:29:e4:70:bb:4e:aa:8d:b5:2a:a3:
                    78:ac:cc:e8:6a:15:2e:0a:c9:c3:ca:10:07:f7:98:
                    cd:f1:92:dc:10:4b:5c:14:05:51:0f:50:64:ba:22:
                    f7:bb:65:08:10:fc:f6:d7:49:9d:ec:0c:81:84:21:
                    e1:c1:83:c9:7c:26:78:eb:10:e5:88:65:e5:8f:77:
                    7d:b6:6f:71:db:68:15:b3:2e:47:7d:59:55:bd:0f:
                    be:c7:2e:13:4a:b7:b4:ce:a5:52:c4:99:a4:2f:09:
                    e9:33:3d:cf:62:8f:06:64:13:af:54:d5:c6:98:91:
                    ea:bf:c8:d4:cd:a5:c0:3b:e7:43:47:40:c3:d2:e8:
                    ca:fc:17:51:2a:14:e1:92:d0:8e:7b:6b:99:96:68:
                    ae:5f:bc:8c:ff:12:a5:08:d3:73:a9:52:8b:b4:96:
                    6b:9f:99:27:dc:22:3d:dc:bb:bf:97:ee:e0:69:83:
                    ab:a6:18:18:28:8a:a7:b7:96:b6:29:4d:25:c7:04:
                    78:41:70:fd:3b:d6:f2:da:19:e6:87:a4:aa:78:4b:
                    46:ab:68:28:cf:fa:a0:a5:d4:47:14:48:33:a1:43:
                    f2:ec:f2:10:a9:ff:0c:30:4d:37:25:36:86:69:bf:
                    33:da:ab:4e:2e:97:66:46:08:9f:62:2b:26:80:24:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:55:70:4E:0D:1A:7D:8E:95:03:EB:F9:E6:9C:85:D3:E7:F5:05
            X509v3 Authority Key Identifier:
                keyid:A7:5E:D3:D3:A2:71:19:AD:36:2E:74:5F:2E:0E:C1:79:50:53:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/A75ED3D3A27119AD362E745F2E0EC17950532980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A75ED3D3A27119AD362E745F2E0EC17950532980.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uEjBDAkwaG1DKGRuzD4VfFpeQ4JhKMDRhBzf9oYpQBf/1/34352e342e33382e302f32342d3234203d3e20323636303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:44:d2:ee:5e:19:f6:67:5a:55:53:fa:20:a9:d7:4d:76:
         cc:b5:17:74:ed:8f:b1:ce:fc:77:5f:f1:02:f6:55:db:19:1a:
         7b:67:99:29:4c:2d:37:56:77:92:cf:24:48:1f:77:49:f5:42:
         8e:da:ee:5f:d8:35:0c:fe:09:30:1f:ca:9f:90:02:e8:29:56:
         19:da:92:eb:ac:73:a0:0f:61:4f:c5:80:7f:35:ef:c3:b9:bf:
         55:a0:b8:16:6b:c3:01:ed:65:2c:9b:1a:d0:6d:1a:4d:09:0d:
         e6:37:c5:a7:d4:72:c6:31:b2:69:e4:fd:8a:be:23:46:f1:1e:
         72:49:fc:05:91:a9:3c:c3:eb:2f:c1:49:93:d0:a6:8a:dc:d0:
         9d:7a:8d:c7:c7:95:6a:da:81:95:d0:73:3d:f0:68:e0:f8:64:
         50:a1:29:a1:e9:21:f7:cb:03:bf:44:a2:08:15:19:9d:5d:09:
         ee:50:43:64:af:15:4d:bf:dd:f5:3d:2c:21:fa:14:53:c6:c7:
         6c:ba:c3:2d:88:25:55:b3:75:58:08:00:77:f3:2a:e7:7f:5c:
         ab:cf:7e:dd:3d:ce:20:d4:3c:be:8d:38:4b:55:48:f1:98:e6:
         f3:84:3f:01:9f:fe:17:5f:a0:4d:3c:4f:7f:84:0e:71:08:06:
         e4:58:9d:4f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUAKVKY8UvdcvWVwd9F/vY7Q3Zhn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc1RUQzRDNBMjcxMTlBRDM2MkU3NDVGMkUwRUMxNzk1
MDUzMjk4MDAeFw0yNjA3MjgxNDA1MTNaFw0yNzA3MjcxNDEwMTNaMDMxMTAvBgNV
BAMTKDFCRTI1NTcwNEUwRDFBN0Q4RTk1MDNFQkY5RTY5Qzg1RDNFN0Y1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXO8VVKeRwu06qjbUqo3iszOhq
FS4KycPKEAf3mM3xktwQS1wUBVEPUGS6Ive7ZQgQ/PbXSZ3sDIGEIeHBg8l8Jnjr
EOWIZeWPd322b3HbaBWzLkd9WVW9D77HLhNKt7TOpVLEmaQvCekzPc9ijwZkE69U
1caYkeq/yNTNpcA750NHQMPS6Mr8F1EqFOGS0I57a5mWaK5fvIz/EqUI03OpUou0
lmufmSfcIj3cu7+X7uBpg6umGBgoiqe3lrYpTSXHBHhBcP071vLaGeaHpKp4S0ar
aCjP+qCl1EcUSDOhQ/Ls8hCp/wwwTTclNoZpvzPaq04ul2ZGCJ9iKyaAJHJvAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUG+JVcE4NGn2OlQPr+eachdPn9QUwHwYDVR0j
BBgwFoAUp17T06JxGa02LnRfLg7BeVBTKYAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFakJEQWt3YUcxREtHUnV6RDRWZkZwZVE0SmhLTURSaEJ6ZjlvWXBR
QmYvMS9BNzVFRDNEM0EyNzExOUFEMzYyRTc0NUYyRTBFQzE3OTUwNTMyOTgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3NUVEM0QzQTI3MTE5QUQz
NjJFNzQ1RjJFMEVDMTc5NTA1MzI5ODAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RWpCREFrd2FHMURLR1J1ekQ0VmZGcGVRNEpoS01EUmhCemY5b1lwUUJmLzEv
MzQzNTJlMzQyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM0
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBCYwDQYJKoZIhvcNAQELBQADggEBALWeRNLuXhn2Z1pV
U/ogqddNdsy1F3Ttj7HO/Hdf8QL2VdsZGntnmSlMLTdWd5LPJEgfd0n1Qo7a7l/Y
NQz+CTAfyp+QAugpVhnakuusc6APYU/FgH8178O5v1WguBZrwwHtZSybGtBtGk0J
DeY3xafUcsYxsmnk/Yq+I0bxHnJJ/AWRqTzD6y/BSZPQporc0J16jcfHlWragZXQ
cz3waOD4ZFChKaHpIffLA79EoggVGZ1dCe5QQ2SvFU2/3fU9LCH6FFPGx2y6wy2I
JVWzdVgIAHfzKud/XKvPft09ziDUPL6NOEtVSPGY5vOEPwGf/hdfoE08T3+EDnEI
BuRYnU8=
-----END CERTIFICATE-----