Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3138382e302f32332d3233203d3e20323636353935.roa
File:                     34352e372e3138382e302f32332d3233203d3e20323636353935.roa (raw, json)
Hash identifier:          N/pwWHQLsi+YDocBxlUN58DDpPZV+2Jdjea8Xq6O/L4=
Subject key identifier:   91:FA:58:1B:4E:3D:5A:CF:D4:7A:E9:75:0B:DE:85:1C:7C:68:A3:84
Certificate issuer:       /CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
Certificate serial:       3010F5D91F13E112DF53AD8BE4893F8844D19A1C
Authority key identifier: D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3138382e302f32332d3233203d3e20323636353935.roa
Signing time:             Wed 13 May 2026 19:22:08 +0000
ROA not before:           Wed 13 May 2026 19:17:08 +0000
ROA not after:            Wed 12 May 2027 19:22:08 +0000
asID:                     266595
IP address blocks:        45.7.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl
                          rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:10:f5:d9:1f:13:e1:12:df:53:ad:8b:e4:89:3f:88:44:d1:9a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A
        Validity
            Not Before: May 13 19:17:08 2026 GMT
            Not After : May 12 19:22:08 2027 GMT
        Subject: CN=91FA581B4E3D5ACFD47AE9750BDE851C7C68A384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:e2:0f:a9:f1:fc:bb:0b:67:b5:50:6a:c5:
                    fa:cc:e6:ba:81:76:4a:a6:97:6e:22:80:be:c8:7c:
                    cf:d1:a1:70:fe:2e:2d:58:fb:f4:3f:b5:44:02:6f:
                    52:65:d2:a5:4d:d9:ba:59:45:64:c5:09:36:30:a5:
                    e3:5f:95:5c:74:fe:47:3b:9d:05:0c:55:9f:9d:69:
                    fa:55:16:7c:b5:9f:3f:90:a0:8a:7a:a8:90:ad:40:
                    f4:d2:32:1e:38:82:44:98:87:e8:01:b7:b9:98:82:
                    15:9d:87:2c:0c:29:7d:0e:65:4b:33:6b:bd:9d:55:
                    51:ac:29:ba:7d:e5:7a:4f:34:cc:ea:e3:cb:06:f8:
                    69:fd:e6:4d:be:17:a6:fc:d5:43:98:4c:c0:48:4e:
                    9d:9d:ef:5b:e4:b3:2b:46:b8:dd:ef:56:b4:16:1d:
                    70:24:d3:2d:47:ad:f7:e0:c7:08:72:50:bc:89:40:
                    22:b5:97:f3:a0:af:92:62:f9:e4:07:a6:3a:9f:83:
                    73:30:e1:80:9b:d9:d3:71:14:75:a2:1a:49:64:01:
                    7d:74:a1:ee:f4:18:da:ed:e9:54:6c:e3:3e:83:50:
                    cc:40:c9:52:90:26:e2:13:d5:ca:95:1e:8d:a2:72:
                    fe:cd:18:ad:ee:d2:83:f3:71:62:c3:ee:e5:e0:b1:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FA:58:1B:4E:3D:5A:CF:D4:7A:E9:75:0B:DE:85:1C:7C:68:A3:84
            X509v3 Authority Key Identifier:
                keyid:D4:EB:D5:16:ED:A5:69:5A:31:20:80:AA:7A:8A:1F:D3:DC:9C:C1:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4EBD516EDA5695A312080AA7A8A1FD3DC9CC18A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/932y4LNeNTjz62TqFVizhW86XdpQ5AX9rvYvp2E6YKWy/0/34352e372e3138382e302f32332d3233203d3e20323636353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:33:3c:e9:48:e1:6d:69:b7:c2:e9:18:eb:d3:39:00:58:d2:
         af:1e:6a:df:a8:9f:25:6a:6d:e8:c2:ee:40:5a:e3:79:02:07:
         48:af:97:73:c9:7d:67:36:e4:f1:2d:37:11:28:50:fe:2b:56:
         92:3b:41:a8:b0:a2:90:89:03:df:90:10:9d:14:55:af:b6:7c:
         0d:9a:69:21:85:b7:d4:80:d3:7f:e9:16:4a:0d:88:e0:74:f5:
         3f:17:ad:2f:94:93:c0:d1:5f:28:df:31:b5:7f:17:9e:8e:13:
         ce:9c:0c:61:08:c4:97:00:bb:58:ee:de:26:1c:7f:f5:56:b4:
         27:38:5c:9e:e2:0a:1c:36:5d:60:9c:fe:c3:8d:c1:1c:f9:dd:
         af:95:5f:ce:53:c6:49:53:20:6d:15:20:bf:1e:c8:c7:68:70:
         c5:26:4e:e2:36:e9:86:f3:ec:28:bb:cb:88:2c:8c:4f:09:2c:
         34:ca:1b:97:55:ce:61:fa:be:72:75:20:dd:39:9d:93:f7:bd:
         c8:e2:ca:1c:59:4b:26:bd:b0:be:0a:71:50:74:f8:ce:9e:d1:
         9e:a0:ee:3d:4e:c1:d0:20:db:bb:85:b3:dd:54:4f:f0:1c:ad:
         7a:82:77:9c:86:0c:61:0e:e5:14:19:f5:19:6c:00:62:4f:8b:
         8e:2b:6a:32
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMBD12R8T4RLfU62L5Ik/iETRmhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRFQkQ1MTZFREE1Njk1QTMxMjA4MEFBN0E4QTFGRDNE
QzlDQzE4QTAeFw0yNjA1MTMxOTE3MDhaFw0yNzA1MTIxOTIyMDhaMDMxMTAvBgNV
BAMTKDkxRkE1ODFCNEUzRDVBQ0ZENDdBRTk3NTBCREU4NTFDN0M2OEEzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqOIPqfH8uwtntVBqxfrM5rqB
dkqml24igL7IfM/RoXD+Li1Y+/Q/tUQCb1Jl0qVN2bpZRWTFCTYwpeNflVx0/kc7
nQUMVZ+dafpVFny1nz+QoIp6qJCtQPTSMh44gkSYh+gBt7mYghWdhywMKX0OZUsz
a72dVVGsKbp95XpPNMzq48sG+Gn95k2+F6b81UOYTMBITp2d71vksytGuN3vVrQW
HXAk0y1HrffgxwhyULyJQCK1l/Ogr5Ji+eQHpjqfg3Mw4YCb2dNxFHWiGklkAX10
oe70GNrt6VRs4z6DUMxAyVKQJuIT1cqVHo2icv7NGK3u0oPzcWLD7uXgsWkxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkfpYG049Ws/Ueul1C96FHHxoo4QwHwYDVR0j
BBgwFoAU1OvVFu2laVoxIICqeoof09ycwYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTMyeTRMTmVOVGp6NjJUcUZWaXpoVzg2WGRwUTVBWDlydll2cDJFNllL
V3kvMC9ENEVCRDUxNkVEQTU2OTVBMzEyMDgwQUE3QThBMUZEM0RDOUNDMThBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RUJENTE2RURBNTY5NUEz
MTIwODBBQTdBOEExRkQzREM5Q0MxOEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzMnk0TE5lTlRqejYyVHFGVml6aFc4NlhkcFE1QVg5cnZZdnAyRTZZS1d5LzAv
MzQzNTJlMzcyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM1
MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0HvDANBgkqhkiG9w0BAQsFAAOCAQEAiTM86UjhbWm3
wukY69M5AFjSrx5q36ifJWpt6MLuQFrjeQIHSK+Xc8l9Zzbk8S03EShQ/itWkjtB
qLCikIkD35AQnRRVr7Z8DZppIYW31IDTf+kWSg2I4HT1PxetL5STwNFfKN8xtX8X
no4TzpwMYQjElwC7WO7eJhx/9Va0JzhcnuIKHDZdYJz+w43BHPndr5VfzlPGSVMg
bRUgvx7Ix2hwxSZO4jbphvPsKLvLiCyMTwksNMobl1XOYfq+cnUg3Tmdk/e9yOLK
HFlLJr2wvgpxUHT4zp7RnqDuPU7B0CDbu4Wz3VRP8ByteoJ3nIYMYQ7lFBn1GWwA
Yk+LjitqMg==
-----END CERTIFICATE-----
Generated at Sun May 24 14:06:27 2026 by rpki-client