Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e203533303437.roa
File:                     34352e3232372e3132302e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          1fqmlCDwTnPVL+wTEAPPzS9+J064bretgC3wR0uUoPc=
Subject key identifier:   D1:8D:A2:1F:61:35:5A:16:5D:F8:64:40:EF:09:45:5F:D6:19:80:95
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0FB58A80F3ACDAD7AB5DBAF737F6F1407BFD6DFB
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 13 Aug 2026 16:50:00 +0000
ROA not before:           Thu 13 Aug 2026 16:45:00 +0000
ROA not after:            Thu 12 Aug 2027 16:50:00 +0000
asID:                     53047
IP address blocks:        45.227.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b5:8a:80:f3:ac:da:d7:ab:5d:ba:f7:37:f6:f1:40:7b:fd:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Aug 13 16:45:00 2026 GMT
            Not After : Aug 12 16:50:00 2027 GMT
        Subject: CN=D18DA21F61355A165DF86440EF09455FD6198095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:57:5a:3a:d0:e6:5f:48:2c:69:3b:8d:1a:
                    a0:f0:2c:df:84:76:9c:f4:44:65:17:b4:26:8e:66:
                    f9:5c:53:10:ca:43:2f:aa:8d:0c:a3:6e:8f:e4:2d:
                    09:28:ef:5d:c1:27:9d:34:f9:29:10:c8:b5:06:61:
                    e4:50:dc:7c:de:ea:ed:7a:1d:c3:61:46:19:1a:d3:
                    d8:da:eb:af:50:d9:90:7b:9c:f1:c1:66:15:62:2e:
                    9b:af:37:e6:63:b1:49:19:b1:fb:b4:55:a7:48:d7:
                    8d:af:60:65:c7:cf:63:1c:b8:59:a3:cc:67:05:12:
                    b6:3a:17:c8:b9:ae:37:01:06:3c:92:24:d5:df:13:
                    b0:b0:ee:1e:05:5a:4f:4a:be:e0:b9:82:5d:db:f8:
                    cd:30:85:0b:16:af:d4:c0:d9:fb:27:93:ec:30:41:
                    80:85:f6:c5:01:15:f3:4a:1b:54:c9:1f:8b:44:80:
                    83:35:a1:df:91:4c:bf:d1:a1:01:f7:b8:9d:f5:87:
                    78:1a:19:49:3a:51:b7:5e:8a:3b:26:da:83:f0:72:
                    23:dd:4f:da:87:c8:99:0e:16:d9:7a:67:ca:fc:ad:
                    f2:fc:94:d3:df:b3:c5:74:bd:21:f3:c0:04:ce:2a:
                    2d:e1:4d:20:18:c9:f9:e7:a2:0c:b6:04:b9:26:f5:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:A2:1F:61:35:5A:16:5D:F8:64:40:EF:09:45:5F:D6:19:80:95
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/34352e3232372e3132302e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:07:79:57:6e:17:88:6f:38:48:7c:1e:1c:b0:b9:a9:59:e2:
         a0:ac:f6:fb:8e:e6:d1:83:0f:0b:77:f8:7e:98:cc:25:f7:12:
         9d:58:96:04:20:fb:f0:07:a0:70:bd:1f:fd:8d:06:df:fc:fe:
         ad:a0:55:7d:a2:f1:ea:c8:61:3c:ef:df:84:bc:4b:5f:07:e1:
         92:5d:7e:67:36:42:17:fe:99:1b:98:79:d0:70:d1:cc:1f:3e:
         32:ba:60:80:6e:91:3d:f4:53:47:3f:5c:e7:08:6e:b9:13:43:
         01:9d:98:5c:5f:02:9a:9a:4e:78:51:c0:4c:0d:8a:5e:bc:19:
         28:90:5c:a9:9a:82:dc:4b:9f:da:1e:ec:5a:b8:ab:57:fc:78:
         a0:2f:b6:3a:c2:52:eb:a5:da:c5:1a:cb:27:9f:30:68:69:f4:
         83:53:1f:f5:4f:da:ef:16:65:5c:7d:05:97:0b:a6:2a:73:1b:
         6f:c7:e7:47:6d:6f:1b:bb:81:23:e1:67:d5:d6:a4:38:b2:9b:
         bc:25:09:de:78:b6:f6:c1:41:1c:2c:28:5b:b9:8b:cf:a2:66:
         2d:34:0d:2c:13:98:df:ae:3b:9a:4b:f5:08:89:55:f8:0d:ce:
         f3:1f:d7:0c:d7:ea:3f:32:82:b6:68:79:b5:99:86:04:77:66:
         ba:c0:79:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD7WKgPOs2terXbr3N/bxQHv9bfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNjA4MTMxNjQ1MDBaFw0yNzA4MTIxNjUwMDBaMDMxMTAvBgNV
BAMTKEQxOERBMjFGNjEzNTVBMTY1REY4NjQ0MEVGMDk0NTVGRDYxOTgwOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7VdaOtDmX0gsaTuNGqDwLN+E
dpz0RGUXtCaOZvlcUxDKQy+qjQyjbo/kLQko713BJ500+SkQyLUGYeRQ3Hze6u16
HcNhRhka09ja669Q2ZB7nPHBZhViLpuvN+ZjsUkZsfu0VadI142vYGXHz2McuFmj
zGcFErY6F8i5rjcBBjySJNXfE7Cw7h4FWk9KvuC5gl3b+M0whQsWr9TA2fsnk+ww
QYCF9sUBFfNKG1TJH4tEgIM1od+RTL/RoQH3uJ31h3gaGUk6Ubdeijsm2oPwciPd
T9qHyJkOFtl6Z8r8rfL8lNPfs8V0vSHzwATOKi3hTSAYyfnnogy2BLkm9ThnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0Y2iH2E1WhZd+GRA7wlFX9YZgJUwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzQzNTJlMzIzMjM3MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeN4MA0GCSqGSIb3DQEBCwUAA4IBAQBxB3lXbheI
bzhIfB4csLmpWeKgrPb7jubRgw8Ld/h+mMwl9xKdWJYEIPvwB6BwvR/9jQbf/P6t
oFV9ovHqyGE879+EvEtfB+GSXX5nNkIX/pkbmHnQcNHMHz4yumCAbpE99FNHP1zn
CG65E0MBnZhcXwKamk54UcBMDYpevBkokFypmoLcS5/aHuxauKtX/HigL7Y6wlLr
pdrFGssnnzBoafSDUx/1T9rvFmVcfQWXC6Yqcxtvx+dHbW8bu4Ej4WfV1qQ4spu8
JQneeLb2wUEcLChbuYvPomYtNA0sE5jfrjuaS/UIiVX4Dc7zH9cM1+o/MoK2aHm1
mYYEd2a6wHmD
-----END CERTIFICATE-----
Generated at Mon Aug 24 12:54:28 2026 by rpki-client