Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa
File:                     34352e3138322e33332e302f32342d3234203d3e20323639323635.roa (raw, json)
Hash identifier:          4DYO1E5EpqzrI4kqQnGpOKI5jUx7aClGDVRRhgWcxRw=
Subject key identifier:   53:E0:2D:78:E1:7B:88:6B:8F:29:73:4C:7D:17:B3:EE:48:66:03:47
Certificate issuer:       /CN=583EBED8D11DAA8FF7F307B11D88A891D630F09B
Certificate serial:       69364209E43CC29AD73C997CAEE249B38B1FA6F2
Authority key identifier: 58:3E:BE:D8:D1:1D:AA:8F:F7:F3:07:B1:1D:88:A8:91:D6:30:F0:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa
Signing time:             Fri 07 Aug 2026 13:31:00 +0000
ROA not before:           Fri 07 Aug 2026 13:26:00 +0000
ROA not after:            Fri 06 Aug 2027 13:31:00 +0000
asID:                     269265
IP address blocks:        45.182.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.crl
                          rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 21:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:42:09:e4:3c:c2:9a:d7:3c:99:7c:ae:e2:49:b3:8b:1f:a6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583EBED8D11DAA8FF7F307B11D88A891D630F09B
        Validity
            Not Before: Aug  7 13:26:00 2026 GMT
            Not After : Aug  6 13:31:00 2027 GMT
        Subject: CN=53E02D78E17B886B8F29734C7D17B3EE48660347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:8f:dc:28:c2:ff:6f:07:b2:ad:c1:fa:ac:
                    18:7b:5b:36:8f:da:bb:a7:ef:7c:24:7f:7f:dc:e9:
                    f6:c0:3b:85:ae:ac:7e:d8:5e:d5:92:7b:ed:fc:40:
                    5e:66:ae:8b:80:f0:47:b1:fe:e4:65:01:4d:d2:03:
                    2b:73:70:9b:71:12:4d:4d:cb:c9:dc:28:9e:06:19:
                    cf:3e:c0:ba:75:ec:cc:aa:76:2b:b9:f3:7d:fd:3d:
                    45:66:44:e3:28:a6:f7:b0:c4:52:ed:a8:b3:bd:a0:
                    06:f5:c5:d3:be:02:51:da:51:b9:75:c2:eb:0d:37:
                    38:9f:b2:52:ff:43:56:a7:9b:2e:b4:e5:b6:a2:b1:
                    76:45:97:ad:05:8f:30:12:37:81:23:ea:b3:d4:57:
                    e6:a2:a2:e9:2d:44:70:8d:f5:e4:08:47:42:83:ae:
                    67:27:9b:b2:69:98:24:a6:26:fb:94:88:7b:4f:a0:
                    02:fb:a3:82:8e:64:38:fd:fd:93:2d:5a:44:3d:c3:
                    27:07:71:32:7d:b4:a8:c5:25:fa:8a:e3:78:dd:4f:
                    e7:d6:c3:a6:1b:78:54:3e:2b:96:88:c2:ec:3e:a1:
                    30:28:fd:40:eb:da:c4:2c:50:b1:83:9b:c2:12:f1:
                    11:4d:08:82:9c:ca:58:51:c2:ef:3b:a9:78:68:a6:
                    07:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E0:2D:78:E1:7B:88:6B:8F:29:73:4C:7D:17:B3:EE:48:66:03:47
            X509v3 Authority Key Identifier:
                keyid:58:3E:BE:D8:D1:1D:AA:8F:F7:F3:07:B1:1D:88:A8:91:D6:30:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/583EBED8D11DAA8FF7F307B11D88A891D630F09B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/583EBED8D11DAA8FF7F307B11D88A891D630F09B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/34352e3138322e33332e302f32342d3234203d3e20323639323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:5c:dd:0a:ab:69:0a:cc:0d:fb:c1:1d:4d:6c:8f:8e:75:
         43:7b:6d:23:40:b2:97:28:54:8e:57:5a:5a:6c:17:c4:65:54:
         d1:93:c0:8c:b3:87:90:6c:58:70:55:05:da:a9:27:4f:9c:a7:
         9f:25:9e:b6:6a:a7:c1:83:93:8b:46:2d:58:06:59:8e:3f:53:
         6b:72:9f:94:79:de:9d:18:bc:01:00:c4:3c:99:d4:b6:57:94:
         9d:ff:41:f2:19:fe:4f:93:c5:6d:a4:dd:b8:e0:53:8c:17:9e:
         d3:19:b2:6e:e1:e6:07:ea:1b:69:24:39:b8:c9:ef:ea:ec:3e:
         93:e8:d8:14:dc:f5:ed:07:0f:b8:5b:ec:82:45:a1:9f:37:5a:
         8e:48:81:9b:9d:26:ca:8d:1e:98:be:12:44:c7:2a:10:22:0f:
         d4:16:2c:7b:7d:92:22:68:2e:46:f7:84:48:78:69:31:71:e1:
         3a:00:93:4a:ee:68:f1:2d:76:09:ae:1b:28:4c:c7:13:ae:eb:
         10:ad:16:7d:44:b6:01:50:a4:e7:e6:a8:95:0a:23:dd:33:ba:
         18:36:23:26:cd:31:56:3d:c8:27:24:51:c3:1d:e4:d8:90:f3:
         12:b7:0d:2b:b3:26:60:82:45:a7:0c:00:75:12:c2:b2:a5:b1:
         e8:0a:13:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaTZCCeQ8wprXPJl8ruJJs4sfpvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgzRUJFRDhEMTFEQUE4RkY3RjMwN0IxMUQ4OEE4OTFE
NjMwRjA5QjAeFw0yNjA4MDcxMzI2MDBaFw0yNzA4MDYxMzMxMDBaMDMxMTAvBgNV
BAMTKDUzRTAyRDc4RTE3Qjg4NkI4RjI5NzM0QzdEMTdCM0VFNDg2NjAzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDI/cKML/bweyrcH6rBh7WzaP
2run73wkf3/c6fbAO4WurH7YXtWSe+38QF5mrouA8Eex/uRlAU3SAytzcJtxEk1N
y8ncKJ4GGc8+wLp17Myqdiu58339PUVmROMopvewxFLtqLO9oAb1xdO+AlHaUbl1
wusNNzifslL/Q1anmy605baisXZFl60FjzASN4Ej6rPUV+aiouktRHCN9eQIR0KD
rmcnm7JpmCSmJvuUiHtPoAL7o4KOZDj9/ZMtWkQ9wycHcTJ9tKjFJfqK43jdT+fW
w6YbeFQ+K5aIwuw+oTAo/UDr2sQsULGDm8IS8RFNCIKcylhRwu87qXhopgdFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUU+AteOF7iGuPKXNMfRez7khmA0cwHwYDVR0j
BBgwFoAUWD6+2NEdqo/38wexHYiokdYw8JswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpWSFE2R3BtTUE0UGR3YWNDV0pFb2t4aFUxVlF6a3lwY3lYNlE5RTY2
SkYvMC81ODNFQkVEOEQxMURBQThGRjdGMzA3QjExRDg4QTg5MUQ2MzBGMDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4M0VCRUQ4RDExREFBOEZG
N0YzMDdCMTFEODhBODkxRDYzMEYwOUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKVkhRNkdwbU1BNFBkd2FjQ1dKRW9reGhVMVZRemt5cGN5WDZROUU2NkpGLzAv
MzQzNTJlMzEzODMyMmUzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbYhMA0GCSqGSIb3DQEBCwUAA4IBAQAkylzdCqtp
CswN+8EdTWyPjnVDe20jQLKXKFSOV1pabBfEZVTRk8CMs4eQbFhwVQXaqSdPnKef
JZ62aqfBg5OLRi1YBlmOP1Nrcp+Ued6dGLwBAMQ8mdS2V5Sd/0HyGf5Pk8VtpN24
4FOMF57TGbJu4eYH6htpJDm4ye/q7D6T6NgU3PXtBw+4W+yCRaGfN1qOSIGbnSbK
jR6YvhJExyoQIg/UFix7fZIiaC5G94RIeGkxceE6AJNK7mjxLXYJrhsoTMcTrusQ
rRZ9RLYBUKTn5qiVCiPdM7oYNiMmzTFWPcgnJFHDHeTYkPMStw0rsyZggkWnDAB1
EsKypbHoChN2
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:06:44 2026 by rpki-client