Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa
File:                     34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa (raw, json)
Hash identifier:          k8wDgoMO+w6sPIkiCqmvsIQB5f7IcS+HeI7LCdsY0JI=
Subject key identifier:   C8:12:82:A8:03:26:AB:0E:BE:A6:D7:FA:86:9B:02:CC:68:D4:56:C9
Certificate issuer:       /CN=E84CD4F4D98BE445EC05B340638A58497D066F35
Certificate serial:       21DFEF03816747503C4CFA19C07C4A72B4C7CFA3
Authority key identifier: E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa
Signing time:             Wed 08 Jul 2026 01:56:39 +0000
ROA not before:           Wed 08 Jul 2026 01:51:39 +0000
ROA not after:            Wed 07 Jul 2027 01:56:39 +0000
asID:                     268116
IP address blocks:        45.169.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl
                          rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:ef:03:81:67:47:50:3c:4c:fa:19:c0:7c:4a:72:b4:c7:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E84CD4F4D98BE445EC05B340638A58497D066F35
        Validity
            Not Before: Jul  8 01:51:39 2026 GMT
            Not After : Jul  7 01:56:39 2027 GMT
        Subject: CN=C81282A80326AB0EBEA6D7FA869B02CC68D456C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:60:f9:9c:7f:67:e0:07:14:ac:eb:51:9d:
                    17:40:47:69:1c:03:cc:0c:61:00:d1:3b:97:22:e9:
                    c4:4a:da:a0:b2:7c:d8:fd:88:5f:e4:58:4b:d0:c3:
                    9f:fc:62:dc:0c:8d:5e:83:a6:90:18:f3:f2:20:49:
                    e4:83:0b:12:43:bf:fd:17:f0:60:76:5c:21:8e:e2:
                    0a:ac:8d:47:df:d4:08:43:83:15:6d:ff:5e:5f:09:
                    e5:6b:1f:02:58:9f:a8:e5:38:3c:a3:6b:0a:0d:ae:
                    3e:ac:52:54:9b:01:5c:f5:0b:cb:43:df:20:6d:c7:
                    44:2e:3e:09:b5:43:cb:d2:0f:29:ea:92:56:3d:12:
                    3a:d9:a1:d6:17:39:a3:22:63:bc:d2:5b:a0:8c:82:
                    46:ac:cf:26:d2:50:d3:79:40:19:98:62:29:a8:8f:
                    a9:c3:f0:a0:1f:f6:60:b9:4d:68:dd:5f:ff:97:a9:
                    6b:fa:3f:f3:f6:6a:68:b0:4b:08:47:4a:c1:c4:bc:
                    38:ed:e4:99:1e:06:2a:a1:23:32:df:78:49:95:be:
                    3f:de:09:b1:cc:c8:f5:4e:dd:38:37:5c:ae:6a:47:
                    a3:3a:64:99:b4:e6:26:7a:4d:74:94:9a:ea:43:88:
                    60:ea:1e:88:9f:8b:87:91:d3:24:5f:6a:e9:5e:f5:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:82:A8:03:26:AB:0E:BE:A6:D7:FA:86:9B:02:CC:68:D4:56:C9
            X509v3 Authority Key Identifier:
                keyid:E8:4C:D4:F4:D9:8B:E4:45:EC:05:B3:40:63:8A:58:49:7D:06:6F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/E84CD4F4D98BE445EC05B340638A58497D066F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E84CD4F4D98BE445EC05B340638A58497D066F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6yaF6gV5X6EzYE4u9EsJj1XmdZNRQ1jAXTgr3dP26S6V/0/34352e3136392e3135362e302f32332d3233203d3e20323638313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:3e:2a:d0:67:5b:70:ad:8f:69:8e:ad:02:95:73:c2:a4:70:
         92:a8:ae:91:8b:02:1d:10:6e:62:3d:22:2d:02:30:67:ae:65:
         70:fe:9f:c2:6f:56:75:7c:48:62:84:0a:81:58:22:ee:fc:77:
         15:93:72:59:33:e6:a5:b6:f7:4e:d1:3d:55:fd:a5:f5:c1:39:
         d3:44:65:bb:06:18:72:01:03:b2:5a:87:63:2e:1b:3b:0c:c8:
         b7:cc:43:d2:07:67:e7:66:d0:f0:18:a4:42:8d:92:9a:6d:66:
         ba:53:02:d2:f0:76:dc:ce:2b:12:a5:e0:64:fe:30:a1:4c:e1:
         b5:b6:b8:36:37:00:dd:5f:91:da:62:13:f8:64:f0:ea:f2:33:
         e9:09:dc:fa:2d:f4:1b:82:99:19:1d:9d:39:bb:28:19:6e:58:
         96:35:03:0a:1b:45:de:62:aa:bd:bd:2c:64:53:ef:4c:d4:12:
         0a:28:2b:64:56:32:e6:a8:68:ef:3c:7d:0c:61:70:40:1f:96:
         36:cb:bd:5e:b4:07:55:58:46:6f:db:a6:1f:6f:fa:07:a6:0a:
         aa:3b:45:6d:be:de:33:18:de:90:22:bc:33:33:07:4e:82:05:
         40:b7:a3:5a:9f:44:ad:05:34:96:c2:fd:48:80:fa:25:c0:11:
         c7:af:8f:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUId/vA4FnR1A8TPoZwHxKcrTHz6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg0Q0Q0RjREOThCRTQ0NUVDMDVCMzQwNjM4QTU4NDk3
RDA2NkYzNTAeFw0yNjA3MDgwMTUxMzlaFw0yNzA3MDcwMTU2MzlaMDMxMTAvBgNV
BAMTKEM4MTI4MkE4MDMyNkFCMEVCRUE2RDdGQTg2OUIwMkNDNjhENDU2QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPWD5nH9n4AcUrOtRnRdAR2kc
A8wMYQDRO5ci6cRK2qCyfNj9iF/kWEvQw5/8YtwMjV6DppAY8/IgSeSDCxJDv/0X
8GB2XCGO4gqsjUff1AhDgxVt/15fCeVrHwJYn6jlODyjawoNrj6sUlSbAVz1C8tD
3yBtx0QuPgm1Q8vSDynqklY9EjrZodYXOaMiY7zSW6CMgkaszybSUNN5QBmYYimo
j6nD8KAf9mC5TWjdX/+XqWv6P/P2amiwSwhHSsHEvDjt5JkeBiqhIzLfeEmVvj/e
CbHMyPVO3Tg3XK5qR6M6ZJm05iZ6TXSUmupDiGDqHoifi4eR0yRfaule9YU7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyBKCqAMmqw6+ptf6hpsCzGjUVskwHwYDVR0j
BBgwFoAU6EzU9NmL5EXsBbNAY4pYSX0GbzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnlhRjZnVjVYNkV6WUU0dTlFc0pqMVhtZFpOUlExakFYVGdyM2RQMjZT
NlYvMC9FODRDRDRGNEQ5OEJFNDQ1RUMwNUIzNDA2MzhBNTg0OTdEMDY2RjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4NENENEY0RDk4QkU0NDVF
QzA1QjM0MDYzOEE1ODQ5N0QwNjZGMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5YUY2Z1Y1WDZFellFNHU5RXNKajFYbWRaTlJRMWpBWFRncjNkUDI2UzZWLzAv
MzQzNTJlMzEzNjM5MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqZwwDQYJKoZIhvcNAQELBQADggEBAME+KtBn
W3Ctj2mOrQKVc8KkcJKorpGLAh0QbmI9Ii0CMGeuZXD+n8JvVnV8SGKECoFYIu78
dxWTclkz5qW2907RPVX9pfXBOdNEZbsGGHIBA7Jah2MuGzsMyLfMQ9IHZ+dm0PAY
pEKNkpptZrpTAtLwdtzOKxKl4GT+MKFM4bW2uDY3AN1fkdpiE/hk8OryM+kJ3Pot
9BuCmRkdnTm7KBluWJY1AwobRd5iqr29LGRT70zUEgooK2RWMuaoaO88fQxhcEAf
ljbLvV60B1VYRm/bph9v+gemCqo7RW2+3jMY3pAivDMzB06CBUC3o1qfRK0FNJbC
/UiA+iXAEcevj6I=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:30 2026 by rpki-client