Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37312e302f32342d3234203d3e20323636363130.roa
File:                     34352e372e37312e302f32342d3234203d3e20323636363130.roa (raw, json)
Hash identifier:          E9mh/AmCKo1q/QWyT9UV1syEl2bY0LaEzLp2a7vPD1o=
Subject key identifier:   5C:44:07:78:BF:EF:12:0C:6F:F4:18:81:BB:4E:82:24:61:AB:DC:BA
Certificate issuer:       /CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
Certificate serial:       64BF94885BB04C6CC319A2C176D1E78E0C7DE0DD
Authority key identifier: 81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37312e302f32342d3234203d3e20323636363130.roa
Signing time:             Mon 10 Aug 2026 12:45:32 +0000
ROA not before:           Mon 10 Aug 2026 12:40:32 +0000
ROA not after:            Mon 09 Aug 2027 12:45:32 +0000
asID:                     266610
IP address blocks:        45.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:94:88:5b:b0:4c:6c:c3:19:a2:c1:76:d1:e7:8e:0c:7d:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818BCF4D39B7B651C3D94522FC5EEE511B4DA635
        Validity
            Not Before: Aug 10 12:40:32 2026 GMT
            Not After : Aug  9 12:45:32 2027 GMT
        Subject: CN=5C440778BFEF120C6FF41881BB4E822461ABDCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:61:4f:e7:e0:14:b5:17:e6:c7:ee:34:3d:
                    b2:23:ea:02:83:c1:32:13:68:5a:7a:2a:80:d5:e3:
                    62:dd:51:ac:2c:7b:c7:13:a0:d6:ee:66:07:f8:5c:
                    a1:1f:d4:25:f6:d9:6a:d5:65:39:00:aa:c8:5a:a4:
                    ab:22:05:90:c0:0c:b7:f1:95:cd:41:c3:28:ae:bb:
                    16:1d:2e:65:0d:e8:06:de:6c:16:1d:c3:6e:4e:82:
                    89:93:75:ed:85:f9:ec:f7:c6:bc:42:da:ab:04:d5:
                    6e:7d:34:d0:34:47:b5:16:98:d2:04:7a:c7:af:f0:
                    2b:cc:33:77:0c:e4:c3:22:39:31:d9:5c:15:f9:f0:
                    07:c7:a5:7e:26:23:c8:74:ea:55:83:8e:93:43:b6:
                    8b:86:1e:ce:e7:06:24:98:84:f9:cc:7f:94:de:85:
                    81:93:f5:65:8e:0e:d6:fb:3d:84:5a:a6:c4:19:a8:
                    70:b6:58:c2:e0:33:32:2a:28:c5:65:91:22:85:71:
                    71:df:c3:24:44:c4:81:6a:63:ab:fc:de:89:c4:dc:
                    d3:3e:c9:b9:57:70:a5:b1:33:a5:fa:76:f9:e5:6c:
                    d6:a1:08:b8:d7:81:9b:e5:64:b6:cd:c0:99:10:55:
                    86:ca:bf:5e:c1:8a:94:2d:2d:2d:6e:f1:d9:5a:be:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:07:78:BF:EF:12:0C:6F:F4:18:81:BB:4E:82:24:61:AB:DC:BA
            X509v3 Authority Key Identifier:
                keyid:81:8B:CF:4D:39:B7:B6:51:C3:D9:45:22:FC:5E:EE:51:1B:4D:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818BCF4D39B7B651C3D94522FC5EEE511B4DA635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/0/34352e372e37312e302f32342d3234203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:a2:e1:ef:24:35:1c:bb:61:78:55:e8:7e:94:b3:16:16:56:
         30:af:fd:cd:40:34:16:47:62:40:aa:9e:9c:1c:c0:53:ba:47:
         7c:42:92:49:be:a6:49:72:02:2e:62:65:32:20:ad:2c:bd:45:
         34:44:92:0b:ab:05:87:81:da:a2:bc:4b:0f:cc:f1:3d:72:04:
         ca:eb:21:38:8d:ae:1f:5f:50:31:a6:3c:b0:41:e0:cf:54:19:
         99:87:6a:21:fa:6b:59:ed:a9:8e:3d:7d:e3:3a:8c:d5:e9:d8:
         27:82:4e:2b:91:a6:31:56:70:c5:a8:df:4e:a1:64:09:48:97:
         41:6b:65:ab:57:88:a0:f4:e3:67:dd:0f:16:15:db:1a:c6:64:
         72:60:83:f8:72:22:17:07:b4:f6:11:a2:9f:f2:8b:35:d2:e2:
         0e:fd:4a:ef:7d:df:df:09:cd:37:4f:44:e1:9e:f2:84:07:fc:
         d8:c1:db:7c:08:a7:61:55:e5:f0:b0:58:64:c0:00:1e:82:e1:
         41:cd:45:c6:ec:18:3e:7c:2d:f6:4a:31:8f:4a:5c:13:8d:31:
         8b:a0:16:0d:6e:ac:b4:f4:34:2e:42:66:eb:b9:68:47:7d:d7:
         92:05:c8:1f:a9:2a:4e:69:3e:79:6c:e9:ad:b1:15:c2:ca:1b:
         42:52:5b:a9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZL+UiFuwTGzDGaLBdtHnjgx94N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4QkNGNEQzOUI3QjY1MUMzRDk0NTIyRkM1RUVFNTEx
QjREQTYzNTAeFw0yNjA4MTAxMjQwMzJaFw0yNzA4MDkxMjQ1MzJaMDMxMTAvBgNV
BAMTKDVDNDQwNzc4QkZFRjEyMEM2RkY0MTg4MUJCNEU4MjI0NjFBQkRDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHmFP5+AUtRfmx+40PbIj6gKD
wTITaFp6KoDV42LdUawse8cToNbuZgf4XKEf1CX22WrVZTkAqshapKsiBZDADLfx
lc1BwyiuuxYdLmUN6AbebBYdw25OgomTde2F+ez3xrxC2qsE1W59NNA0R7UWmNIE
esev8CvMM3cM5MMiOTHZXBX58AfHpX4mI8h06lWDjpNDtouGHs7nBiSYhPnMf5Te
hYGT9WWODtb7PYRapsQZqHC2WMLgMzIqKMVlkSKFcXHfwyRExIFqY6v83onE3NM+
yblXcKWxM6X6dvnlbNahCLjXgZvlZLbNwJkQVYbKv17BipQtLS1u8dlavqXDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUXEQHeL/vEgxv9BiBu06CJGGr3LowHwYDVR0j
BBgwFoAUgYvPTTm3tlHD2UUi/F7uURtNpjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWthWnQ1alVqbzEyaExNamVEQndqS0oxNUpoMjVUZ0dtc0xhemVBRkJK
VmEvMC84MThCQ0Y0RDM5QjdCNjUxQzNEOTQ1MjJGQzVFRUU1MTFCNERBNjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxOEJDRjREMzlCN0I2NTFD
M0Q5NDUyMkZDNUVFRTUxMUI0REE2MzUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrYVp0NWpVam8xMmhMTWplREJ3aktKMTVKaDI1VGdHbXNMYXplQUZCSlZhLzAv
MzQzNTJlMzcyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtB0cwDQYJKoZIhvcNAQELBQADggEBAKKi4e8kNRy7YXhV
6H6UsxYWVjCv/c1ANBZHYkCqnpwcwFO6R3xCkkm+pklyAi5iZTIgrSy9RTREkgur
BYeB2qK8Sw/M8T1yBMrrITiNrh9fUDGmPLBB4M9UGZmHaiH6a1ntqY49feM6jNXp
2CeCTiuRpjFWcMWo306hZAlIl0FrZatXiKD042fdDxYV2xrGZHJgg/hyIhcHtPYR
op/yizXS4g79Su99398JzTdPROGe8oQH/NjB23wIp2FV5fCwWGTAAB6C4UHNRcbs
GD58LfZKMY9KXBONMYugFg1urLT0NC5CZuu5aEd915IFyB+pKk5pPnls6a2xFcLK
G0JSW6k=
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:35 2026 by rpki-client