Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130392e302f32342d3234203d3e20323638313036.roa
File:                     34352e3136392e3130392e302f32342d3234203d3e20323638313036.roa (raw, json)
Hash identifier:          Osf4D0G0QVWgacMeIq6BQVvDzzmyMsn9MhuUR/i3p+s=
Subject key identifier:   6F:3C:C1:F3:15:F0:1C:2A:44:8A:B2:23:2F:22:25:AD:8C:99:76:F2
Certificate issuer:       /CN=614F55B896D05F51FBF66A43C86D750B52415663
Certificate serial:       732C0ED9AA1CDAC0E8F9F2501C6F09DDADBFEC54
Authority key identifier: 61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130392e302f32342d3234203d3e20323638313036.roa
Signing time:             Thu 02 Jul 2026 16:10:16 +0000
ROA not before:           Thu 02 Jul 2026 16:05:16 +0000
ROA not after:            Thu 01 Jul 2027 16:10:16 +0000
asID:                     268106
IP address blocks:        45.169.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:0e:d9:aa:1c:da:c0:e8:f9:f2:50:1c:6f:09:dd:ad:bf:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614F55B896D05F51FBF66A43C86D750B52415663
        Validity
            Not Before: Jul  2 16:05:16 2026 GMT
            Not After : Jul  1 16:10:16 2027 GMT
        Subject: CN=6F3CC1F315F01C2A448AB2232F2225AD8C9976F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:e4:05:90:48:46:ac:26:b9:78:97:e2:00:
                    23:24:c4:3f:77:f1:6a:ad:f0:cb:59:15:1a:ed:92:
                    0f:12:ef:c4:a0:08:27:db:d3:3f:ec:80:db:a0:18:
                    73:25:32:4a:fa:7c:7a:6f:6e:c6:c7:dc:3d:37:97:
                    6f:a6:d1:7c:f5:c5:c0:b7:57:34:9e:23:57:aa:8c:
                    ca:71:08:e7:9a:46:07:14:46:f1:4d:f1:e4:61:dc:
                    f6:49:59:cc:60:23:98:1f:0b:0d:54:92:f2:f1:3b:
                    69:0e:19:1d:40:cf:63:52:26:a7:db:9c:b4:2a:18:
                    76:15:25:eb:01:b5:e4:ef:fc:98:85:a1:d2:73:1d:
                    2a:36:94:a1:b0:c8:0d:26:4b:4b:a7:09:02:c1:86:
                    81:63:a9:5c:ef:b4:70:51:e3:af:01:b5:9c:95:c9:
                    6e:63:6f:b1:96:55:f0:90:be:de:93:2e:7d:57:6c:
                    79:a8:56:38:24:3b:29:e4:6a:ed:2b:b8:90:fa:94:
                    7d:98:18:95:ab:17:2b:4d:41:35:b9:43:8d:9c:7e:
                    2d:da:16:4f:2a:17:e7:40:79:1f:ac:dd:1b:3f:b0:
                    e0:6f:72:ce:71:05:f7:3a:e1:57:f6:30:b4:d7:ed:
                    d8:1e:7e:f2:6f:5d:7c:15:83:91:6c:e7:fa:fe:3c:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3C:C1:F3:15:F0:1C:2A:44:8A:B2:23:2F:22:25:AD:8C:99:76:F2
            X509v3 Authority Key Identifier:
                keyid:61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/34352e3136392e3130392e302f32342d3234203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:7a:b0:a0:d5:a4:c6:72:48:ba:a3:76:a5:07:e3:49:e6:
         d1:5b:df:1d:33:49:81:7c:61:6f:fa:a0:f4:d0:4d:1d:ac:4b:
         4e:7e:69:aa:d8:44:7f:fe:b3:d1:ad:01:9c:60:42:ec:47:d9:
         8f:2f:9e:e6:e2:14:32:8c:7d:aa:87:03:97:f6:7f:12:f2:1e:
         15:31:b7:71:94:91:c7:2b:13:e7:66:ea:4e:b3:24:0c:50:05:
         43:d0:1b:d1:35:ca:ad:67:e1:61:4d:4d:f7:e9:b6:25:4d:cc:
         64:72:10:26:de:65:44:23:1d:97:e8:81:67:d5:66:de:87:2e:
         96:f2:5c:01:94:8f:b9:a6:82:09:3b:00:56:f3:f7:61:6f:8e:
         e3:ea:41:3f:5a:a5:ed:87:49:41:fc:95:fc:6e:63:95:a1:9e:
         fb:98:77:ea:fd:cf:c3:d1:fc:63:05:06:b5:18:c1:10:68:50:
         fa:ea:15:0b:5a:59:92:a9:5c:e1:a9:17:7b:f6:a8:6d:a9:77:
         5f:b1:e4:31:83:6d:f3:43:e5:42:92:d7:83:06:3b:71:ee:80:
         4b:40:36:2e:fd:65:93:50:41:ce:80:59:04:26:f8:34:af:88:
         53:e6:4b:2f:0a:1a:b4:e3:91:c2:09:20:93:69:d3:b6:4c:42:
         e3:be:7d:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcywO2aoc2sDo+fJQHG8J3a2/7FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE0RjU1Qjg5NkQwNUY1MUZCRjY2QTQzQzg2RDc1MEI1
MjQxNTY2MzAeFw0yNjA3MDIxNjA1MTZaFw0yNzA3MDExNjEwMTZaMDMxMTAvBgNV
BAMTKDZGM0NDMUYzMTVGMDFDMkE0NDhBQjIyMzJGMjIyNUFEOEM5OTc2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1+QFkEhGrCa5eJfiACMkxD93
8Wqt8MtZFRrtkg8S78SgCCfb0z/sgNugGHMlMkr6fHpvbsbH3D03l2+m0Xz1xcC3
VzSeI1eqjMpxCOeaRgcURvFN8eRh3PZJWcxgI5gfCw1UkvLxO2kOGR1Az2NSJqfb
nLQqGHYVJesBteTv/JiFodJzHSo2lKGwyA0mS0unCQLBhoFjqVzvtHBR468BtZyV
yW5jb7GWVfCQvt6TLn1XbHmoVjgkOynkau0ruJD6lH2YGJWrFytNQTW5Q42cfi3a
Fk8qF+dAeR+s3Rs/sOBvcs5xBfc64Vf2MLTX7dgefvJvXXwVg5Fs5/r+PIz7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbzzB8xXwHCpEirIjLyIlrYyZdvIwHwYDVR0j
BBgwFoAUYU9VuJbQX1H79mpDyG11C1JBVmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMC82MTRGNTVCODk2RDA1RjUxRkJGNjZBNDNDODZENzUwQjUyNDE1NjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNEY1NUI4OTZEMDVGNTFG
QkY2NkE0M0M4NkQ3NTBCNTI0MTU2NjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSWmRwVDFqcVVrcVZuUHZXdVdmZVl1UXhnU1M2M3ZDUkYyRWY4Nm9mOG53LzAv
MzQzNTJlMzEzNjM5MmUzMTMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqW0wDQYJKoZIhvcNAQELBQADggEBAD9TerCg
1aTGcki6o3alB+NJ5tFb3x0zSYF8YW/6oPTQTR2sS05+aarYRH/+s9GtAZxgQuxH
2Y8vnubiFDKMfaqHA5f2fxLyHhUxt3GUkccrE+dm6k6zJAxQBUPQG9E1yq1n4WFN
TffptiVNzGRyECbeZUQjHZfogWfVZt6HLpbyXAGUj7mmggk7AFbz92FvjuPqQT9a
pe2HSUH8lfxuY5WhnvuYd+r9z8PR/GMFBrUYwRBoUPrqFQtaWZKpXOGpF3v2qG2p
d1+x5DGDbfND5UKS14MGO3HugEtANi79ZZNQQc6AWQQm+DSviFPmSy8KGrTjkcIJ
IJNp07ZMQuO+feA=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:32 2026 by rpki-client