Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32342d3234203d3e20323636363130.roa
File:                     34352e372e36382e302f32342d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          3svBhqPWMmZiA4OGfTHszoqRlP3+22KEH6xfJqSCdfQ=
Subject key identifier:   CA:BB:DE:53:36:4B:C8:56:20:F6:4B:55:C9:6D:CA:71:16:62:0E:1B
Certificate issuer:       /CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
Certificate serial:       544FC6200EBBF7A7DEA1F8400BBEBD65C44EFADD
Authority key identifier: 81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32342d3234203d3e20323636363130.roa
Signing time:             Mon 10 Aug 2026 12:45:23 +0000
ROA not before:           Mon 10 Aug 2026 12:40:23 +0000
ROA not after:            Mon 09 Aug 2027 12:45:23 +0000
asID:                     266610
IP address blocks:        45.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4f:c6:20:0e:bb:f7:a7:de:a1:f8:40:0b:be:bd:65:c4:4e:fa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
        Validity
            Not Before: Aug 10 12:40:23 2026 GMT
            Not After : Aug  9 12:45:23 2027 GMT
        Subject: CN=CABBDE53364BC85620F64B55C96DCA7116620E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:fa:39:16:3c:28:a0:fe:f4:d9:8b:49:18:
                    9d:67:1a:e6:e2:2c:6a:dd:39:b4:58:26:77:a0:5e:
                    02:40:61:01:f0:e6:9a:98:e7:c2:97:69:15:60:5d:
                    44:04:9d:42:93:03:78:d2:e8:af:f3:92:72:3c:ed:
                    1e:a7:d0:72:87:11:98:5d:11:8a:e6:e5:65:24:6b:
                    4d:21:5e:e9:cc:4a:7e:26:49:04:d5:2f:e3:b6:6d:
                    74:67:02:66:5a:3e:39:7a:93:26:23:24:1b:7f:5a:
                    fb:fe:ad:f1:13:bc:6a:b4:32:7a:be:9c:ad:ce:47:
                    8d:9f:70:20:5e:d3:c7:ac:d7:3c:04:d2:c6:73:35:
                    7e:5e:1d:68:b4:8f:87:71:43:15:7e:88:92:4f:c9:
                    82:3d:39:17:4d:65:2b:8c:48:21:b3:8e:83:53:3d:
                    da:66:7b:c2:bf:13:f9:98:e8:ed:5b:3d:c9:fc:85:
                    17:9b:a4:72:34:ba:11:bd:c9:ff:c2:f8:97:a6:73:
                    94:88:44:02:03:84:8b:91:a7:e8:7e:d5:6b:c0:26:
                    d2:01:8e:0d:8c:73:e7:34:82:99:a4:8d:10:57:70:
                    0d:9f:bd:52:fa:2e:bb:82:01:01:71:22:b2:a7:de:
                    ae:b8:c5:9e:f6:b4:cf:4f:3c:82:94:18:d9:4f:f3:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:DE:53:36:4B:C8:56:20:F6:4B:55:C9:6D:CA:71:16:62:0E:1B
            X509v3 Authority Key Identifier:
                keyid:81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e36382e302f32342d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:03:d4:5b:fd:72:7a:19:bb:ea:7e:e3:a8:cf:30:b7:de:ca:
         83:5c:1b:3e:19:db:97:fa:18:86:aa:56:39:1d:b1:0a:5b:2a:
         2c:90:d1:99:5e:53:b2:de:3f:a4:d4:99:6f:19:fa:7b:6a:73:
         1f:44:f4:00:a6:c4:0b:52:6c:dc:19:c6:19:90:16:1b:97:6a:
         e7:2f:99:18:f0:b3:d5:8e:38:5e:93:bc:6c:e9:84:35:1b:98:
         de:7e:8b:9e:d9:0a:f0:4b:f8:8e:91:b5:37:26:bc:04:bd:2d:
         e6:7d:47:ee:26:99:7e:75:f8:88:da:d8:4a:bf:f9:27:21:51:
         4b:2f:0f:66:fe:04:10:d9:76:e8:6a:0c:c4:24:1a:75:f2:cd:
         4d:f5:a3:22:77:14:d8:0d:67:4b:f5:01:64:b4:f3:d6:2a:83:
         1d:4c:52:a6:8d:40:47:71:6f:e8:02:79:45:03:3d:c6:b9:76:
         d6:47:63:86:57:f3:1f:10:c5:8d:59:2f:14:a9:01:70:ca:e1:
         d3:50:81:3e:08:7f:3b:c6:eb:23:67:18:fb:55:6c:e9:68:9d:
         c2:79:f7:83:c7:a5:a1:2b:b9:bc:71:04:5f:d8:f8:cb:e8:a3:
         b5:d9:a5:86:d5:ec:9b:03:8e:a2:c4:82:3a:91:d6:22:2a:c1:
         8f:30:fd:bb
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVE/GIA6796feofhAC769ZcRO+t0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4QkNGNEQzOUI3QjY1MUMzRDk0NTIyRkM1RUVFNTEx
QjREQTYzNTAeFw0yNjA4MTAxMjQwMjNaFw0yNzA4MDkxMjQ1MjNaMDMxMTAvBgNV
BAMTKENBQkJERTUzMzY0QkM4NTYyMEY2NEI1NUM5NkRDQTcxMTY2MjBFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwfvo5FjwooP702YtJGJ1nGubi
LGrdObRYJnegXgJAYQHw5pqY58KXaRVgXUQEnUKTA3jS6K/zknI87R6n0HKHEZhd
EYrm5WUka00hXunMSn4mSQTVL+O2bXRnAmZaPjl6kyYjJBt/Wvv+rfETvGq0Mnq+
nK3OR42fcCBe08es1zwE0sZzNX5eHWi0j4dxQxV+iJJPyYI9ORdNZSuMSCGzjoNT
Pdpme8K/E/mY6O1bPcn8hRebpHI0uhG9yf/C+Jemc5SIRAIDhIuRp+h+1WvAJtIB
jg2Mc+c0gpmkjRBXcA2fvVL6LruCAQFxIrKn3q64xZ72tM9PPIKUGNlP82gDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUyrveUzZLyFYg9ktVyW3KcRZiDhswHwYDVR0j
BBgwFoAUgYvPTTm3tlHD2UUi/F7uURtNpjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWthWnQ1alVqbzEyaExNamVEQndqS0oxNUpoMjVUZ0dtc0xhemVBRkJK
VmEvMC84MThCQ0Y0RDM5QjdCNjUxQzNEOTQ1MjJGQzVFRUU1MTFCNERBNjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxOEJDRjREMzlCN0I2NTFD
M0Q5NDUyMkZDNUVFRTUxMUI0REE2MzUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrYVp0NWpVam8xMmhMTWplREJ3aktKMTVKaDI1VGdHbXNMYXplQUZCSlZhLzAv
MzQzNTJlMzcyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtB0QwDQYJKoZIhvcNAQELBQADggEBAKED1Fv9cnoZu+p+
46jPMLfeyoNcGz4Z25f6GIaqVjkdsQpbKiyQ0ZleU7LeP6TUmW8Z+ntqcx9E9ACm
xAtSbNwZxhmQFhuXaucvmRjws9WOOF6TvGzphDUbmN5+i57ZCvBL+I6RtTcmvAS9
LeZ9R+4mmX51+Ija2Eq/+SchUUsvD2b+BBDZduhqDMQkGnXyzU31oyJ3FNgNZ0v1
AWS089Yqgx1MUqaNQEdxb+gCeUUDPca5dtZHY4ZX8x8QxY1ZLxSpAXDK4dNQgT4I
fzvG6yNnGPtVbOloncJ594PHpaErubxxBF/Y+Mvoo7XZpYbV7JsDjqLEgjqR1iIq
wY8w/bs=
-----END CERTIFICATE-----
Generated at Sun Aug 23 13:07:32 2026 by rpki-client