Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
File:                     34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier:          0lGKCwfvVzBOmhobiMI4exUYpDMhiZtaqRLtdMf18yU=
Subject key identifier:   89:EA:C9:41:26:85:82:20:45:DB:11:F3:D3:BF:C5:66:F2:B0:D6:D7
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       3D18E2FB0905A41B3C496A34AC03280541A4B53F
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
Signing time:             Tue 23 Jun 2026 21:14:31 +0000
ROA not before:           Tue 23 Jun 2026 21:09:31 +0000
ROA not after:            Tue 22 Jun 2027 21:14:31 +0000
asID:                     263427
IP address blocks:        45.162.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:e2:fb:09:05:a4:1b:3c:49:6a:34:ac:03:28:05:41:a4:b5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:31 2026 GMT
            Not After : Jun 22 21:14:31 2027 GMT
        Subject: CN=89EAC9412685822045DB11F3D3BFC566F2B0D6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:86:c3:40:b1:89:14:d4:66:68:2b:cb:9c:
                    d1:5a:d6:c5:67:3b:ba:77:8e:8d:2a:f5:15:4e:b0:
                    83:5e:1f:95:fc:44:fe:e6:77:b0:65:a3:43:80:41:
                    13:30:6e:39:61:ad:ea:db:31:78:0b:67:b8:0b:3c:
                    2b:a9:50:18:71:3e:21:e7:05:ae:62:1f:0a:fe:53:
                    bf:87:a8:a8:51:03:31:a4:5b:3b:1f:96:87:99:9e:
                    42:e0:36:07:f9:a0:5e:c3:c4:9a:39:b9:aa:12:e7:
                    9c:b6:49:1a:22:a7:20:5d:d2:cf:a6:7d:69:40:b3:
                    77:ed:5c:07:6c:b3:9f:6c:84:d2:7b:70:07:d7:fa:
                    d8:11:89:9e:a9:d3:d1:c2:a6:18:0e:26:5b:62:d1:
                    96:7e:20:41:3c:5f:16:86:5c:73:6e:ba:a6:e8:eb:
                    34:07:1c:12:42:04:a5:2a:d2:c8:ab:3a:58:0c:cc:
                    52:1b:20:24:cd:fb:46:f1:3b:d3:c7:b2:78:a5:23:
                    f1:52:8b:e6:f3:54:61:91:7e:0f:0f:e0:6d:a2:d5:
                    b4:17:90:e1:a5:87:6b:4b:c6:44:3b:29:25:e7:a6:
                    8a:80:9b:13:a8:81:55:1f:a8:21:9f:12:be:de:fd:
                    c3:9e:28:37:f7:40:50:13:97:d1:f5:0d:bf:26:63:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EA:C9:41:26:85:82:20:45:DB:11:F3:D3:BF:C5:66:F2:B0:D6:D7
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:53:ba:61:ce:a7:f3:ef:28:de:a5:69:34:5e:92:db:49:c5:
         d3:0c:1e:ef:a9:a0:89:9b:63:f3:00:13:33:f5:1c:d4:82:96:
         e0:33:fd:95:1b:9f:b9:5b:08:a1:d9:cc:62:5a:57:5c:14:02:
         91:bb:fe:ea:40:c6:a8:3e:80:4b:10:c5:78:a7:6b:c8:a7:34:
         c9:4b:62:a4:f1:e1:e7:85:8c:f8:25:dc:1b:03:c8:03:e9:b1:
         d0:39:97:8c:2f:f5:85:9a:44:f8:10:30:40:b4:51:58:fe:96:
         d6:3d:0c:ef:c8:20:db:df:6f:2f:b9:5d:f3:b0:c6:fd:a2:0e:
         e8:fa:50:12:59:16:4d:df:af:6f:17:59:b8:3d:bc:04:2d:cf:
         26:29:b5:3f:a9:f1:19:3b:3e:fe:db:a0:8e:d2:78:01:65:07:
         8c:34:45:ec:4d:d1:db:72:84:fa:27:a0:85:77:66:1d:93:29:
         30:d6:62:9d:d9:da:ed:11:d5:6f:4b:ef:41:4f:73:4a:b3:c9:
         ab:b1:69:d8:9f:ba:16:4e:1a:3b:2c:24:07:86:f0:80:e2:e3:
         bc:1a:e2:60:a1:6d:4a:b1:71:71:7b:00:c1:58:95:b9:6c:27:
         19:3f:8e:3c:04:12:df:c4:01:69:42:ee:94:74:d3:a6:d8:e9:
         47:cf:f6:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPRji+wkFpBs8SWo0rAMoBUGktT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2NDlCQTc1NkRFMjM0NTMyQTFFOUE4NThERUJGNDE4
NDM5MDZCRDAeFw0yNjA2MjMyMTA5MzFaFw0yNzA2MjIyMTE0MzFaMDMxMTAvBgNV
BAMTKDg5RUFDOTQxMjY4NTgyMjA0NURCMTFGM0QzQkZDNTY2RjJCMEQ2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfA4bDQLGJFNRmaCvLnNFa1sVn
O7p3jo0q9RVOsINeH5X8RP7md7Blo0OAQRMwbjlhrerbMXgLZ7gLPCupUBhxPiHn
Ba5iHwr+U7+HqKhRAzGkWzsfloeZnkLgNgf5oF7DxJo5uaoS55y2SRoipyBd0s+m
fWlAs3ftXAdss59shNJ7cAfX+tgRiZ6p09HCphgOJlti0ZZ+IEE8XxaGXHNuuqbo
6zQHHBJCBKUq0sirOlgMzFIbICTN+0bxO9PHsnilI/FSi+bzVGGRfg8P4G2i1bQX
kOGlh2tLxkQ7KSXnpoqAmxOogVUfqCGfEr7e/cOeKDf3QFATl9H1Db8mY6x7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUierJQSaFgiBF2xHz07/FZvKw1tcwHwYDVR0j
BBgwFoAUjWSbp1beI0UyoemoWN6/QYQ5Br0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC84RDY0OUJBNzU2REUyMzQ1MzJBMUU5QTg1OERFQkY0MTg0MzkwNkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENjQ5QkE3NTZERTIzNDUz
MkExRTlBODU4REVCRjQxODQzOTA2QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzQzNTJlMzEzNjMyMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItovAwDQYJKoZIhvcNAQELBQADggEBANpTumHO
p/PvKN6laTRekttJxdMMHu+poImbY/MAEzP1HNSCluAz/ZUbn7lbCKHZzGJaV1wU
ApG7/upAxqg+gEsQxXina8inNMlLYqTx4eeFjPgl3BsDyAPpsdA5l4wv9YWaRPgQ
MEC0UVj+ltY9DO/IINvfby+5XfOwxv2iDuj6UBJZFk3fr28XWbg9vAQtzyYptT+p
8Rk7Pv7boI7SeAFlB4w0RexN0dtyhPonoIV3Zh2TKTDWYp3Z2u0R1W9L70FPc0qz
yauxadifuhZOGjssJAeG8IDi47wa4mChbUqxcXF7AMFYlblsJxk/jjwEEt/EAWlC
7pR006bY6UfP9pU=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:37 2026 by rpki-client