Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37302e302f32342d3234203d3e20323636363130.roa
File:                     34352e372e37302e302f32342d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          Xwieje6k+JAD++YpAGXB2W023yzKjYenjFxKoty7gZY=
Subject key identifier:   58:57:D0:1A:39:07:19:DD:D6:42:46:1F:52:AE:82:F0:E4:D4:16:48
Certificate issuer:       /CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
Certificate serial:       0CC1EAA76C4CD79199F3D7691AC1644B7894DFFA
Authority key identifier: 81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37302e302f32342d3234203d3e20323636363130.roa
Signing time:             Mon 10 Aug 2026 12:45:30 +0000
ROA not before:           Mon 10 Aug 2026 12:40:30 +0000
ROA not after:            Mon 09 Aug 2027 12:45:30 +0000
asID:                     266610
IP address blocks:        45.7.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:ea:a7:6c:4c:d7:91:99:f3:d7:69:1a:c1:64:4b:78:94:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
        Validity
            Not Before: Aug 10 12:40:30 2026 GMT
            Not After : Aug  9 12:45:30 2027 GMT
        Subject: CN=5857D01A390719DDD642461F52AE82F0E4D41648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:ab:2e:69:f0:9a:29:c1:3c:24:67:98:2f:
                    12:03:43:1c:2d:9e:7d:f8:20:fe:0b:1b:e6:a7:5e:
                    33:3d:a3:6e:76:8d:7c:0b:47:42:eb:5e:04:0b:00:
                    09:68:a9:9a:a1:12:03:07:01:e2:42:5f:3a:78:1c:
                    29:3a:a3:d9:bc:75:9d:a7:b2:52:60:76:9e:78:35:
                    dd:e4:c5:62:fb:8c:29:05:8c:29:6a:09:2b:b4:3f:
                    8c:25:36:69:1b:85:e6:2a:a4:6b:94:ba:70:41:35:
                    50:50:d0:8a:83:1b:bc:62:f8:c8:11:bd:36:25:f7:
                    ae:af:1e:2c:12:0c:63:70:37:96:08:17:fa:92:68:
                    82:f8:ab:e5:4e:f7:72:1f:f9:55:5d:0d:b1:21:76:
                    8c:dc:c4:63:88:8b:91:10:16:67:f2:25:77:6d:b7:
                    44:ba:0f:03:2c:54:83:01:bd:7f:9e:8a:13:a3:6e:
                    cf:42:7f:bf:83:52:c5:91:64:8c:c8:89:2e:f1:f6:
                    22:c0:c2:4a:8d:28:7b:c9:a1:e8:ec:10:fb:27:1c:
                    ad:3f:98:a8:da:19:22:ae:97:84:60:5d:81:6a:96:
                    b2:80:73:d9:86:97:f9:74:cd:17:9d:b8:fb:59:db:
                    8d:4d:ad:91:46:30:30:d7:99:95:4c:3d:ac:d1:b8:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:D0:1A:39:07:19:DD:D6:42:46:1F:52:AE:82:F0:E4:D4:16:48
            X509v3 Authority Key Identifier:
                keyid:81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37302e302f32342d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:65:c8:1e:56:15:d4:2e:4b:e0:be:cb:8b:c9:c6:35:38:47:
         ae:ef:3e:6a:72:94:96:ba:d7:a0:c5:c5:56:72:86:53:39:69:
         d3:80:71:83:ef:12:55:a7:f0:75:da:85:d1:40:71:a6:25:3a:
         e7:41:48:a1:18:98:8b:b0:07:04:1f:e5:7d:9d:52:e1:c5:2e:
         d6:fc:68:66:ec:fb:4d:32:54:5d:e6:e3:8c:a6:1a:8c:7e:74:
         63:39:bf:5b:c3:00:8b:f1:67:e7:d2:25:13:fe:05:0f:1d:f9:
         4e:93:1f:85:48:9c:e8:a6:22:74:4e:b6:ce:35:d5:5e:26:45:
         61:37:eb:af:48:ae:b1:75:0b:e7:ad:da:87:95:ea:0d:2a:30:
         d4:15:db:8f:c0:78:63:d9:4c:40:e0:7b:a7:59:2d:07:ae:cc:
         3b:35:c6:6d:b1:d7:82:43:da:ef:b7:82:6f:4f:12:24:cd:af:
         58:d4:4a:cb:3b:0f:90:c2:b4:a8:52:94:9c:0a:ca:7c:7f:db:
         75:81:27:f7:00:de:c2:27:2e:4c:08:1b:1a:b5:a4:dd:35:f4:
         e1:ff:fd:b9:26:c1:ea:83:53:12:b7:2f:37:93:1c:34:95:b6:
         79:8a:a7:9b:db:ae:44:50:3f:a6:81:40:16:e2:50:8d:97:72:
         49:37:18:b8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUDMHqp2xM15GZ89dpGsFkS3iU3/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4QkNGNEQzOUI3QjY1MUMzRDk0NTIyRkM1RUVFNTEx
QjREQTYzNTAeFw0yNjA4MTAxMjQwMzBaFw0yNzA4MDkxMjQ1MzBaMDMxMTAvBgNV
BAMTKDU4NTdEMDFBMzkwNzE5RERENjQyNDYxRjUyQUU4MkYwRTRENDE2NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyasuafCaKcE8JGeYLxIDQxwt
nn34IP4LG+anXjM9o252jXwLR0LrXgQLAAloqZqhEgMHAeJCXzp4HCk6o9m8dZ2n
slJgdp54Nd3kxWL7jCkFjClqCSu0P4wlNmkbheYqpGuUunBBNVBQ0IqDG7xi+MgR
vTYl966vHiwSDGNwN5YIF/qSaIL4q+VO93If+VVdDbEhdozcxGOIi5EQFmfyJXdt
t0S6DwMsVIMBvX+eihOjbs9Cf7+DUsWRZIzIiS7x9iLAwkqNKHvJoejsEPsnHK0/
mKjaGSKul4RgXYFqlrKAc9mGl/l0zReduPtZ241NrZFGMDDXmZVMPazRuCHrAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUWFfQGjkHGd3WQkYfUq6C8OTUFkgwHwYDVR0j
BBgwFoAUgYvPTTm3tlHD2UUi/F7uURtNpjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWthWnQ1alVqbzEyaExNamVEQndqS0oxNUpoMjVUZ0dtc0xhemVBRkJK
VmEvMC84MThCQ0Y0RDM5QjdCNjUxQzNEOTQ1MjJGQzVFRUU1MTFCNERBNjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxOEJDRjREMzlCN0I2NTFD
M0Q5NDUyMkZDNUVFRTUxMUI0REE2MzUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrYVp0NWpVam8xMmhMTWplREJ3aktKMTVKaDI1VGdHbXNMYXplQUZCSlZhLzAv
MzQzNTJlMzcyZTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtB0YwDQYJKoZIhvcNAQELBQADggEBAMVlyB5WFdQuS+C+
y4vJxjU4R67vPmpylJa616DFxVZyhlM5adOAcYPvElWn8HXahdFAcaYlOudBSKEY
mIuwBwQf5X2dUuHFLtb8aGbs+00yVF3m44ymGox+dGM5v1vDAIvxZ+fSJRP+BQ8d
+U6TH4VInOimInROts411V4mRWE3669IrrF1C+et2oeV6g0qMNQV24/AeGPZTEDg
e6dZLQeuzDs1xm2x14JD2u+3gm9PEiTNr1jUSss7D5DCtKhSlJwKynx/23WBJ/cA
3sInLkwIGxq1pN019OH//bkmweqDUxK3LzeTHDSVtnmKp5vbrkRQP6aBQBbiUI2X
ckk3GLg=
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:43 2026 by rpki-client