Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa
File:                     34352e3136342e3131322e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          lGF5OqXw7NaVMb7nXASbgu1J5EKPKDFqcFzGgiI81/E=
Subject key identifier:   86:60:D0:31:C6:AB:DE:B4:99:82:03:BC:06:EC:80:DC:B8:A7:2A:98
Certificate issuer:       /CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
Certificate serial:       67181CA6A616DFD0B8717D0AD4FF1B899ABFC21A
Authority key identifier: 5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa
Signing time:             Wed 09 Sep 2026 11:38:23 +0000
ROA not before:           Wed 09 Sep 2026 11:33:23 +0000
ROA not after:            Wed 08 Sep 2027 11:38:23 +0000
asID:                     53181
IP address blocks:        45.164.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:18:1c:a6:a6:16:df:d0:b8:71:7d:0a:d4:ff:1b:89:9a:bf:c2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
        Validity
            Not Before: Sep  9 11:33:23 2026 GMT
            Not After : Sep  8 11:38:23 2027 GMT
        Subject: CN=8660D031C6ABDEB4998203BC06EC80DCB8A72A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:41:f8:7b:42:01:b7:34:9e:26:6d:e7:73:
                    93:80:e5:22:98:60:d2:de:1a:be:fe:ff:d1:1d:96:
                    55:66:db:12:02:ad:a3:10:43:13:07:4d:09:20:74:
                    74:09:fc:00:1a:b7:10:47:1f:4b:d9:35:c2:e0:b4:
                    05:01:f3:83:a4:98:16:fb:9c:57:7f:21:0c:26:04:
                    b9:e6:91:9b:76:cf:59:14:4b:65:b2:e8:ce:f8:a5:
                    9d:b5:a3:a0:d9:e7:f2:ad:3d:3e:a6:7d:33:0b:37:
                    7e:b2:48:c7:b2:f1:ec:e4:75:cd:cf:e6:f7:4c:5f:
                    7c:97:2a:3a:67:4e:21:07:a2:35:a3:1a:1a:b1:4e:
                    78:ce:af:9f:d9:09:f5:6d:1d:e8:16:d7:c2:2f:86:
                    9e:4c:2f:7e:2b:95:2f:64:00:be:12:0e:2e:9e:7b:
                    5a:6e:3e:c0:63:c1:99:4e:41:3b:47:c5:0a:be:eb:
                    b0:fb:7f:83:8b:d7:bf:c3:67:d8:32:8b:58:de:3f:
                    50:7f:93:aa:5d:7a:2b:bd:03:e6:b4:9a:8b:b6:30:
                    3b:92:fd:72:5e:2a:24:c5:d9:7c:69:6e:11:9a:b3:
                    d1:38:37:1b:f2:67:07:88:f6:fc:76:d6:d6:f4:11:
                    ab:c5:00:92:4c:83:8c:9f:60:8c:a1:ea:ce:f4:4f:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:60:D0:31:C6:AB:DE:B4:99:82:03:BC:06:EC:80:DC:B8:A7:2A:98
            X509v3 Authority Key Identifier:
                keyid:5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/34352e3136342e3131322e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:4c:93:e1:4d:48:33:73:93:1b:47:99:b3:48:a9:9c:14:75:
         47:48:88:85:69:1b:c0:37:22:a8:d3:ec:a2:63:89:43:70:82:
         60:b6:71:16:4e:23:a9:79:fe:b0:e2:1a:2a:d1:d8:e5:0c:0d:
         aa:2a:b1:45:60:ec:3e:14:6d:35:ad:37:f7:fb:73:90:d1:e3:
         d5:e7:f0:78:b7:0d:6c:0d:bb:25:36:71:76:01:97:7f:98:e5:
         5f:95:af:8b:ec:68:58:d1:e6:47:5d:f1:1e:6e:a8:bf:c0:03:
         18:60:cf:0d:7e:22:f0:8d:08:a6:00:18:9e:f1:70:62:83:af:
         65:85:0e:89:54:e7:03:64:26:67:9e:4c:2c:16:9f:e5:67:84:
         e2:b6:58:72:82:8b:e5:d5:8f:ee:a0:8f:2d:a4:9a:42:c3:71:
         91:95:0e:56:83:51:da:da:02:2b:34:83:84:f7:7a:86:bf:cf:
         77:02:5b:75:a2:eb:48:66:b0:f6:10:9f:58:01:80:fe:a1:0f:
         2b:26:32:17:16:cb:56:ae:b7:48:c3:ab:9f:37:64:29:3a:1a:
         4b:b6:4a:1a:03:af:42:76:18:11:65:d4:3c:29:46:7a:a5:7a:
         2a:1f:84:00:5f:8c:ee:4f:cf:d3:fd:79:75:e7:5e:b4:2e:d3:
         a7:50:65:17
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZxgcpqYW39C4cX0K1P8biZq/whowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUExQTY1MkZFRTMyOEQ2RjNFMUI0N0NENEM4NDIzMkNC
MkVFRjk1RTAeFw0yNjA5MDkxMTMzMjNaFw0yNzA5MDgxMTM4MjNaMDMxMTAvBgNV
BAMTKDg2NjBEMDMxQzZBQkRFQjQ5OTgyMDNCQzA2RUM4MERDQjhBNzJBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zUH4e0IBtzSeJm3nc5OA5SKY
YNLeGr7+/9EdllVm2xICraMQQxMHTQkgdHQJ/AAatxBHH0vZNcLgtAUB84OkmBb7
nFd/IQwmBLnmkZt2z1kUS2Wy6M74pZ21o6DZ5/KtPT6mfTMLN36ySMey8ezkdc3P
5vdMX3yXKjpnTiEHojWjGhqxTnjOr5/ZCfVtHegW18Ivhp5ML34rlS9kAL4SDi6e
e1puPsBjwZlOQTtHxQq+67D7f4OL17/DZ9gyi1jeP1B/k6pdeiu9A+a0mou2MDuS
/XJeKiTF2XxpbhGas9E4NxvyZweI9vx21tb0EavFAJJMg4yfYIyh6s70T9afAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhmDQMcar3rSZggO8BuyA3LinKpgwHwYDVR0j
BBgwFoAUWhplL+4yjW8+G0fNTIQjLLLu+V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMS81QTFBNjUyRkVFMzI4RDZGM0UxQjQ3Q0Q0Qzg0MjMyQ0IyRUVGOTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMUE2NTJGRUUzMjhENkYz
RTFCNDdDRDRDODQyMzJDQjJFRUY5NUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzEv
MzQzNTJlMzEzNjM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaRwMA0GCSqGSIb3DQEBCwUAA4IBAQCiTJPhTUgz
c5MbR5mzSKmcFHVHSIiFaRvANyKo0+yiY4lDcIJgtnEWTiOpef6w4hoq0djlDA2q
KrFFYOw+FG01rTf3+3OQ0ePV5/B4tw1sDbslNnF2AZd/mOVfla+L7GhY0eZHXfEe
bqi/wAMYYM8NfiLwjQimABie8XBig69lhQ6JVOcDZCZnnkwsFp/lZ4Titlhygovl
1Y/uoI8tpJpCw3GRlQ5Wg1Ha2gIrNIOE93qGv893Alt1outIZrD2EJ9YAYD+oQ8r
JjIXFstWrrdIw6ufN2QpOhpLtkoaA69CdhgRZdQ8KUZ6pXoqH4QAX4zuT8/T/Xl1
5160LtOnUGUX
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:08 2026 by rpki-client