Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          663CMMb2kZqEuRozxXYRID+Qp3ZANdKSvNKjiIYbqbc=
Subject key identifier:   4A:2F:7B:C2:A2:F5:3F:D7:AE:8D:20:48:5B:BF:C7:09:FE:D9:EC:38
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       0C2001FA282D3AE72DFFDD88EB4FE42D86130D98
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:26 +0000
ROA not before:           Thu 17 Sep 2026 18:50:26 +0000
ROA not after:            Thu 16 Sep 2027 18:55:26 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 Oct 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:20:01:fa:28:2d:3a:e7:2d:ff:dd:88:eb:4f:e4:2d:86:13:0d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:26 2026 GMT
            Not After : Sep 16 18:55:26 2027 GMT
        Subject: CN=4A2F7BC2A2F53FD7AE8D20485BBFC709FED9EC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:54:2f:dc:22:57:4c:da:af:77:bd:de:f5:
                    e7:4a:c6:32:33:39:f4:c7:ec:c0:cb:8a:0f:a9:e6:
                    b7:99:32:78:11:48:82:48:55:2e:ed:0d:73:c2:eb:
                    23:71:78:6e:a6:56:ee:4b:6e:4b:21:33:1f:3a:a5:
                    40:a1:b2:92:9c:7c:7b:cf:c1:1b:e2:86:86:26:ca:
                    45:64:8a:7b:8f:d0:48:19:0e:59:f6:55:37:fe:bf:
                    ad:d5:9d:4b:f3:19:ee:4d:4e:60:15:b9:0b:3d:07:
                    79:8c:ae:d9:8b:78:a4:89:9d:95:91:41:92:62:ce:
                    de:86:8f:e9:d0:00:7a:4a:02:68:03:fb:70:85:8c:
                    5e:aa:5d:d4:0f:11:eb:84:d0:74:91:76:ba:e1:8b:
                    c7:4f:61:f8:cd:83:57:a9:80:fd:30:ef:40:39:51:
                    2b:22:d0:b8:94:b5:05:63:e9:4a:a1:d5:d3:d8:78:
                    5f:86:a7:87:aa:f2:48:5a:3c:c3:db:6f:2b:19:1b:
                    3e:b9:c3:e7:c0:19:7b:cc:48:2a:45:94:5b:ee:f3:
                    41:18:59:cc:a1:4e:8f:ea:a7:c7:bc:6e:cb:8e:b1:
                    17:cc:7c:4e:47:34:7c:bd:3d:65:cc:9c:1e:bb:ce:
                    a7:55:e7:44:f3:d4:fb:1b:3b:31:9b:d5:4f:4b:16:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:7B:C2:A2:F5:3F:D7:AE:8D:20:48:5B:BF:C7:09:FE:D9:EC:38
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:fa:08:f0:99:85:27:57:f4:3d:3a:fd:6a:3b:91:d1:21:2d:
         50:29:b4:22:79:66:f5:46:3b:17:87:ea:af:76:c7:e0:ba:ad:
         f7:a6:e0:d3:f1:f7:e9:f2:8c:ac:fb:98:fb:8a:bf:58:f5:20:
         6f:5a:3c:55:b5:96:cf:ac:6b:1b:aa:0a:c4:69:61:49:5e:80:
         51:74:88:84:65:19:59:be:6a:51:67:c2:0c:4f:0f:32:20:31:
         98:54:f8:66:dc:65:aa:3d:dc:96:0a:c9:5e:4e:14:1a:f8:14:
         7f:3b:e3:9d:86:3e:53:fd:62:d3:3e:0b:6f:b1:44:2a:88:a8:
         06:68:70:64:df:26:ed:0f:e9:2c:9a:6f:af:9f:75:e4:ac:61:
         85:29:9f:a5:08:27:28:29:2b:22:25:df:94:bc:8a:5b:c0:06:
         04:79:15:83:21:02:f9:29:30:76:2c:27:93:3a:88:5b:84:8b:
         5b:41:8c:c2:28:55:2c:9f:06:46:cb:93:14:5b:f8:e6:8d:2c:
         10:63:d0:16:31:c5:98:0a:8e:89:08:e8:1c:fd:b1:c5:25:a6:
         14:10:dc:c5:9a:cd:25:48:97:64:65:d0:1a:8d:71:aa:31:5b:
         22:03:b0:d3:a1:97:6a:34:c7:38:4e:ac:a0:b9:cc:46:15:e3:
         27:87:8d:16
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDCAB+igtOuct/92I60/kLYYTDZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQxRjNBODQ1NzNBMjc1RTJDRkRDOEI5Qzg2MEVERTE3
RkRCRUM4MTAeFw0yNjA5MTcxODUwMjZaFw0yNzA5MTYxODU1MjZaMDMxMTAvBgNV
BAMTKDRBMkY3QkMyQTJGNTNGRDdBRThEMjA0ODVCQkZDNzA5RkVEOUVDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuFQv3CJXTNqvd73e9edKxjIz
OfTH7MDLig+p5reZMngRSIJIVS7tDXPC6yNxeG6mVu5LbkshMx86pUChspKcfHvP
wRvihoYmykVkinuP0EgZDln2VTf+v63VnUvzGe5NTmAVuQs9B3mMrtmLeKSJnZWR
QZJizt6Gj+nQAHpKAmgD+3CFjF6qXdQPEeuE0HSRdrrhi8dPYfjNg1epgP0w70A5
USsi0LiUtQVj6Uqh1dPYeF+Gp4eq8khaPMPbbysZGz65w+fAGXvMSCpFlFvu80EY
WcyhTo/qp8e8bsuOsRfMfE5HNHy9PWXMnB67zqdV50Tz1PsbOzGb1U9LFpItAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSi97wqL1P9eujSBIW7/HCf7Z7DgwHwYDVR0j
BBgwFoAU3R86hFc6J14s/ci5yGDt4X/b7IEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC9ERDFGM0E4NDU3M0EyNzVFMkNGREM4QjlDODYwRURFMTdGREJFQzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMUYzQTg0NTczQTI3NUUy
Q0ZEQzhCOUM4NjBFREUxN0ZEQkVDODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzQzNTJlMzEzODM4MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbwKMA0GCSqGSIb3DQEBCwUAA4IBAQCW+gjwmYUn
V/Q9Ov1qO5HRIS1QKbQieWb1RjsXh+qvdsfguq33puDT8ffp8oys+5j7ir9Y9SBv
WjxVtZbPrGsbqgrEaWFJXoBRdIiEZRlZvmpRZ8IMTw8yIDGYVPhm3GWqPdyWCsle
ThQa+BR/O+Odhj5T/WLTPgtvsUQqiKgGaHBk3ybtD+ksmm+vn3XkrGGFKZ+lCCco
KSsiJd+UvIpbwAYEeRWDIQL5KTB2LCeTOohbhItbQYzCKFUsnwZGy5MUW/jmjSwQ
Y9AWMcWYCo6JCOgc/bHFJaYUENzFms0lSJdkZdAajXGqMVsiA7DToZdqNMc4Tqyg
ucxGFeMnh40W
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:52:52 2026 by rpki-client