Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e372e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e372e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          qwkXikPv09lf0zMtJLY/yvR4gDDdmx/jHJjqh3smY/A=
Subject key identifier:   37:78:21:37:E2:19:7F:3A:63:00:7F:61:F1:AF:A8:3C:DF:81:F1:61
Certificate issuer:       /CN=9652752ADADE81419E0621ACCD592D9B4892CE9F
Certificate serial:       472D6A7DFF13082481E3FFD3B3A63CE18A1C2CB5
Authority key identifier: 96:52:75:2A:DA:DE:81:41:9E:06:21:AC:CD:59:2D:9B:48:92:CE:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e372e302f32342d3234203d3e20323638393134.roa
Signing time:             Thu 13 Aug 2026 17:33:28 +0000
ROA not before:           Thu 13 Aug 2026 17:28:28 +0000
ROA not after:            Thu 12 Aug 2027 17:33:28 +0000
asID:                     268914
IP address blocks:        45.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2d:6a:7d:ff:13:08:24:81:e3:ff:d3:b3:a6:3c:e1:8a:1c:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9652752ADADE81419E0621ACCD592D9B4892CE9F
        Validity
            Not Before: Aug 13 17:28:28 2026 GMT
            Not After : Aug 12 17:33:28 2027 GMT
        Subject: CN=37782137E2197F3A63007F61F1AFA83CDF81F161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:45:1d:48:58:ee:fd:14:4e:b0:d4:6c:79:
                    5f:d7:39:7e:55:5c:9d:fc:b5:bd:b6:c1:19:76:b3:
                    76:1e:b0:77:6b:17:04:a3:56:17:09:b1:0e:4c:f3:
                    58:71:f7:e1:5d:a1:8d:60:d9:55:a7:c2:33:39:7a:
                    76:50:50:f2:c3:09:f6:28:fb:2d:99:4c:43:46:dd:
                    d8:4b:4d:94:fc:c4:15:7d:1e:c1:7f:ab:9d:fd:de:
                    02:b8:46:6b:d2:7f:df:a2:6f:c0:2b:24:63:56:84:
                    c1:c4:e6:91:5c:72:55:0a:22:58:86:3b:f2:b1:b5:
                    55:e5:dc:41:2e:eb:10:99:66:0c:00:ae:68:56:04:
                    b4:2a:91:08:4f:89:9c:4f:2f:a1:8d:34:e5:b6:53:
                    7b:dd:59:34:57:07:63:ba:eb:1c:4c:2e:bf:f5:b2:
                    01:24:65:20:00:82:cc:fe:53:82:b2:d9:0b:9d:b0:
                    d3:05:c6:8d:af:c2:59:82:e1:42:3d:a1:1e:a0:df:
                    79:f9:4a:5e:d2:9b:1d:02:ef:e7:b7:f5:20:dc:1b:
                    fa:e2:ed:28:7e:b3:b5:f0:72:dd:8d:03:18:2f:80:
                    98:c4:a8:0f:84:a3:b3:fe:4b:1f:af:0b:2e:88:ac:
                    d4:81:25:43:d3:1f:2f:6b:91:c7:e8:06:02:a5:f4:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:78:21:37:E2:19:7F:3A:63:00:7F:61:F1:AF:A8:3C:DF:81:F1:61
            X509v3 Authority Key Identifier:
                keyid:96:52:75:2A:DA:DE:81:41:9E:06:21:AC:CD:59:2D:9B:48:92:CE:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/9652752ADADE81419E0621ACCD592D9B4892CE9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9652752ADADE81419E0621ACCD592D9B4892CE9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/5/34352e3137342e372e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:52:e2:eb:28:90:c1:33:aa:c4:90:ac:f6:f3:e4:4f:4a:8e:
         ed:c0:21:ed:b5:8a:cb:c5:59:18:a6:c3:72:13:20:ac:97:4b:
         32:26:f0:33:29:a9:7e:f5:22:f2:57:05:1e:b3:09:32:29:1e:
         f6:83:e9:ba:c1:73:96:ca:c9:81:73:11:c5:8c:7e:3c:ec:8b:
         72:75:3f:16:31:a6:24:d4:5e:b2:e1:23:a7:b8:ea:44:f6:26:
         1c:ed:f3:b2:2f:b9:d3:f7:13:6f:c6:7f:49:a6:f7:66:78:1d:
         58:d3:4d:e4:7f:7d:9a:c6:41:c7:55:05:01:2c:67:d1:4c:71:
         3e:78:69:86:95:a7:d7:b0:37:4a:1d:29:f5:86:f4:75:cf:ef:
         bf:ae:23:9c:b5:40:e1:06:b5:e1:6d:fc:1f:b1:ff:28:43:1b:
         f9:ba:f1:55:7e:f2:fb:04:b9:42:a0:4e:92:f8:da:f1:9d:7b:
         16:35:19:c5:89:d4:a4:38:1d:e6:69:c2:e2:bb:d2:6f:0f:22:
         55:2f:d0:8a:4e:36:d0:d7:8a:f9:f2:e5:64:a7:48:9b:91:c6:
         e1:29:0f:b1:e4:6f:e9:00:c9:5c:7a:81:cd:48:07:d9:0c:03:
         31:0d:ad:37:66:e6:ee:a0:3a:61:d3:7e:eb:02:ab:62:c8:ff:
         f1:d3:3f:9d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURy1qff8TCCSB4//Ts6Y84YocLLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1Mjc1MkFEQURFODE0MTlFMDYyMUFDQ0Q1OTJEOUI0
ODkyQ0U5RjAeFw0yNjA4MTMxNzI4MjhaFw0yNzA4MTIxNzMzMjhaMDMxMTAvBgNV
BAMTKDM3NzgyMTM3RTIxOTdGM0E2MzAwN0Y2MUYxQUZBODNDREY4MUYxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClu0UdSFju/RROsNRseV/XOX5V
XJ38tb22wRl2s3YesHdrFwSjVhcJsQ5M81hx9+FdoY1g2VWnwjM5enZQUPLDCfYo
+y2ZTENG3dhLTZT8xBV9HsF/q5393gK4RmvSf9+ib8ArJGNWhMHE5pFcclUKIliG
O/KxtVXl3EEu6xCZZgwArmhWBLQqkQhPiZxPL6GNNOW2U3vdWTRXB2O66xxMLr/1
sgEkZSAAgsz+U4Ky2QudsNMFxo2vwlmC4UI9oR6g33n5Sl7Smx0C7+e39SDcG/ri
7Sh+s7Xwct2NAxgvgJjEqA+Eo7P+Sx+vCy6IrNSBJUPTHy9rkcfoBgKl9NOLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUN3ghN+IZfzpjAH9h8a+oPN+B8WEwHwYDVR0j
BBgwFoAUllJ1KtregUGeBiGszVktm0iSzp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJwRVJMN0trZTk2NFdwdldoQjY2R2FzNWJ5MlZOQ0VDOXVBVU5aUXhk
dDkvNS85NjUyNzUyQURBREU4MTQxOUUwNjIxQUNDRDU5MkQ5QjQ4OTJDRTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2NTI3NTJBREFERTgxNDE5
RTA2MjFBQ0NENTkyRDlCNDg5MkNFOUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYycEVSTDdLa2U5NjRXcHZXaEI2NkdhczVieTJWTkNFQzl1QVVOWlF4ZHQ5LzUv
MzQzNTJlMzEzNzM0MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM5
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2uBzANBgkqhkiG9w0BAQsFAAOCAQEA4VLi6yiQwTOq
xJCs9vPkT0qO7cAh7bWKy8VZGKbDchMgrJdLMibwMympfvUi8lcFHrMJMike9oPp
usFzlsrJgXMRxYx+POyLcnU/FjGmJNResuEjp7jqRPYmHO3zsi+50/cTb8Z/Sab3
ZngdWNNN5H99msZBx1UFASxn0UxxPnhphpWn17A3Sh0p9Yb0dc/vv64jnLVA4Qa1
4W38H7H/KEMb+brxVX7y+wS5QqBOkvja8Z17FjUZxYnUpDgd5mnC4rvSbw8iVS/Q
ik420NeK+fLlZKdIm5HG4SkPseRv6QDJXHqBzUgH2QwDMQ2tN2bm7qA6YdN+6wKr
Ysj/8dM/nQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:55 2026 by rpki-client