Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32342d3234203d3e20323638343837.roa
File:                     34352e3136312e3234382e302f32342d3234203d3e20323638343837.roa (raw, json)
Hash identifier:          lQvMzidMLlVLoLxL9VjIRJCni3djY/V4e2AaoJdq5Cg=
Subject key identifier:   5D:FE:70:1B:1F:58:96:9D:6B:6B:C6:FD:0A:CA:1F:76:3F:46:97:CA
Certificate issuer:       /CN=464B947257F06B70E4456A2AACFED298FBBEE866
Certificate serial:       73B0ABB6972AD3717BCE2B2D04EF0DDFDF8BC960
Authority key identifier: 46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32342d3234203d3e20323638343837.roa
Signing time:             Fri 26 Jun 2026 13:54:23 +0000
ROA not before:           Fri 26 Jun 2026 13:49:23 +0000
ROA not after:            Fri 25 Jun 2027 13:54:23 +0000
asID:                     268487
IP address blocks:        45.161.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b0:ab:b6:97:2a:d3:71:7b:ce:2b:2d:04:ef:0d:df:df:8b:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464B947257F06B70E4456A2AACFED298FBBEE866
        Validity
            Not Before: Jun 26 13:49:23 2026 GMT
            Not After : Jun 25 13:54:23 2027 GMT
        Subject: CN=5DFE701B1F58969D6B6BC6FD0ACA1F763F4697CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:be:94:26:cf:0e:aa:a0:e4:28:b9:2c:1c:
                    04:da:e9:b9:66:ed:48:96:36:08:ce:b7:53:8a:60:
                    dc:67:87:b2:84:20:81:cc:24:57:d7:4c:52:d5:7c:
                    50:65:5e:e9:65:a9:78:1d:20:cc:f9:c1:aa:e8:d1:
                    49:91:72:f4:80:23:44:0e:88:7b:e3:a3:a7:3b:b3:
                    b8:39:c3:2a:3a:ec:d0:df:10:3f:77:41:71:9a:07:
                    17:06:6a:22:b0:68:92:9b:2c:3c:bc:b8:ed:3f:3e:
                    66:b1:36:96:63:cc:95:4a:bd:65:bd:c4:2e:99:a3:
                    10:a6:d3:3e:0c:1e:07:f2:a9:5c:c3:6a:c4:e6:8f:
                    75:36:41:c9:37:a7:60:1a:c7:1d:5b:64:d4:0c:94:
                    c5:2d:32:40:ed:7d:ac:9c:c5:54:4f:0f:90:87:08:
                    e0:34:d5:9c:77:52:e3:61:8c:01:ee:13:09:9d:18:
                    7e:e0:cd:e0:2f:33:33:2b:97:c5:23:53:ab:8e:b9:
                    02:38:9e:7c:66:95:7f:00:aa:c0:52:9e:dd:9d:0b:
                    ea:a6:80:e3:f7:b2:23:4d:a6:41:9e:5b:3d:11:98:
                    85:48:8e:ed:21:fc:aa:fa:ad:ad:88:d1:ee:75:74:
                    53:4f:ab:72:65:56:68:e2:e2:1d:45:63:8f:2c:22:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:70:1B:1F:58:96:9D:6B:6B:C6:FD:0A:CA:1F:76:3F:46:97:CA
            X509v3 Authority Key Identifier:
                keyid:46:4B:94:72:57:F0:6B:70:E4:45:6A:2A:AC:FE:D2:98:FB:BE:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/464B947257F06B70E4456A2AACFED298FBBEE866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/464B947257F06B70E4456A2AACFED298FBBEE866.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/34352e3136312e3234382e302f32342d3234203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:02:d0:a4:a1:87:f7:22:a0:05:a3:a1:eb:37:8a:31:a2:59:
         19:71:f5:6f:df:99:8a:70:b6:e5:b9:a6:92:03:0d:da:34:43:
         9e:f8:9e:eb:5f:eb:39:43:0e:8b:f8:12:10:bf:86:df:31:b8:
         21:a7:99:e0:fd:34:a5:e5:44:3f:86:b4:0b:6b:38:a3:2d:8d:
         dd:a6:52:e2:fe:13:f7:6a:85:3e:6f:8e:4b:a8:60:70:02:87:
         c3:c5:0b:ba:8c:1d:f0:f2:d3:5f:c5:07:df:7f:6a:3b:d6:21:
         07:c2:26:72:83:dc:0f:79:e6:b8:82:10:1d:65:cc:5a:45:b9:
         c6:76:41:6e:ba:bc:db:4c:0a:45:36:de:93:21:a7:ef:24:4a:
         af:f0:cf:27:11:4a:b2:15:58:6d:7d:4a:be:f2:8c:36:24:01:
         10:91:5e:7c:2c:80:84:e3:f4:52:81:f3:64:15:40:eb:57:ca:
         00:ce:03:01:df:0a:97:ef:6c:fa:1b:35:66:07:ca:b5:80:0c:
         e4:c1:48:88:0e:6f:19:b2:78:8a:5f:67:01:93:26:bb:4b:8b:
         84:7b:4a:d5:21:b6:68:50:a9:6f:e2:11:a4:4e:c4:03:50:d2:
         59:a3:6b:f9:dd:d4:07:90:f2:db:c1:54:05:5d:2c:4a:43:73:
         b9:5d:b8:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc7Crtpcq03F7zistBO8N39+LyWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY0Qjk0NzI1N0YwNkI3MEU0NDU2QTJBQUNGRUQyOThG
QkJFRTg2NjAeFw0yNjA2MjYxMzQ5MjNaFw0yNzA2MjUxMzU0MjNaMDMxMTAvBgNV
BAMTKDVERkU3MDFCMUY1ODk2OUQ2QjZCQzZGRDBBQ0ExRjc2M0Y0Njk3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Nr6UJs8OqqDkKLksHATa6blm
7UiWNgjOt1OKYNxnh7KEIIHMJFfXTFLVfFBlXullqXgdIMz5waro0UmRcvSAI0QO
iHvjo6c7s7g5wyo67NDfED93QXGaBxcGaiKwaJKbLDy8uO0/PmaxNpZjzJVKvWW9
xC6ZoxCm0z4MHgfyqVzDasTmj3U2Qck3p2Aaxx1bZNQMlMUtMkDtfaycxVRPD5CH
COA01Zx3UuNhjAHuEwmdGH7gzeAvMzMrl8UjU6uOuQI4nnxmlX8AqsBSnt2dC+qm
gOP3siNNpkGeWz0RmIVIju0h/Kr6ra2I0e51dFNPq3JlVmji4h1FY48sIjvdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXf5wGx9Ylp1ra8b9Csofdj9Gl8owHwYDVR0j
BBgwFoAURkuUclfwa3DkRWoqrP7SmPu+6GYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN243Y2c1VHVVOEg1ZG5UUWk1N1JUNUhBQ2ZSZ0E3SmRuWUViR2FQWVlC
V2kvMC80NjRCOTQ3MjU3RjA2QjcwRTQ0NTZBMkFBQ0ZFRDI5OEZCQkVFODY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NEI5NDcyNTdGMDZCNzBF
NDQ1NkEyQUFDRkVEMjk4RkJCRUU4NjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzduN2NnNVR1VThINWRuVFFpNTdSVDVIQUNmUmdBN0pkbllFYkdhUFlZQldpLzAv
MzQzNTJlMzEzNjMxMmUzMjM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtofgwDQYJKoZIhvcNAQELBQADggEBAFQC0KSh
h/cioAWjoes3ijGiWRlx9W/fmYpwtuW5ppIDDdo0Q574nutf6zlDDov4EhC/ht8x
uCGnmeD9NKXlRD+GtAtrOKMtjd2mUuL+E/dqhT5vjkuoYHACh8PFC7qMHfDy01/F
B99/ajvWIQfCJnKD3A955riCEB1lzFpFucZ2QW66vNtMCkU23pMhp+8kSq/wzycR
SrIVWG19Sr7yjDYkARCRXnwsgITj9FKB82QVQOtXygDOAwHfCpfvbPobNWYHyrWA
DOTBSIgObxmyeIpfZwGTJrtLi4R7StUhtmhQqW/iEaROxANQ0lmja/nd1AeQ8tvB
VAVdLEpDc7lduJU=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:55 2026 by rpki-client