Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32332d3233203d3e20323639353636.roa (raw, json)
Hash identifier:          qJkZmKLxeW527+CynSLqKZUqvHdptWYilWn61DIYKYg=
Subject key identifier:   07:C4:4F:88:84:89:63:28:D5:0F:FD:9A:60:5A:DC:31:B7:48:61:71
Certificate issuer:       /CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
Certificate serial:       0C251E3171E0D5430918898BBE079641B13CABB2
Authority key identifier: 1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa
Signing time:             Fri 07 Aug 2026 08:54:39 +0000
ROA not before:           Fri 07 Aug 2026 08:49:39 +0000
ROA not after:            Fri 06 Aug 2027 08:54:39 +0000
asID:                     269566
IP address blocks:        45.188.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:25:1e:31:71:e0:d5:43:09:18:89:8b:be:07:96:41:b1:3c:ab:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
        Validity
            Not Before: Aug  7 08:49:39 2026 GMT
            Not After : Aug  6 08:54:39 2027 GMT
        Subject: CN=07C44F8884896328D50FFD9A605ADC31B7486171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:0b:65:2f:a4:43:d6:63:5d:96:f1:00:48:
                    2f:ca:af:b8:03:da:d2:a8:76:e3:34:4c:f7:bd:a4:
                    af:87:80:61:d6:86:2c:0f:ee:01:28:b0:89:f9:47:
                    2b:a7:4c:4a:57:83:96:12:f6:d3:07:db:46:51:66:
                    e6:89:c8:f9:bd:45:36:18:cb:00:de:49:86:3c:1e:
                    21:9d:94:ec:5f:75:c2:5f:f5:d9:a9:08:17:43:d7:
                    78:8b:09:a0:05:e0:76:b9:d5:c5:f1:7f:56:f6:a0:
                    cc:5b:e6:6f:a9:8e:c8:a1:2f:96:6c:14:ea:c2:26:
                    be:c1:3a:8b:0c:a2:fa:5b:fb:e3:bc:f3:ee:3c:48:
                    6d:49:b6:b6:40:d6:5d:67:27:c5:78:37:d0:db:de:
                    ac:52:a2:af:7f:07:25:f0:78:58:c1:fc:bc:2d:db:
                    92:95:00:82:de:47:12:c0:4d:ac:6f:6f:b2:ec:f3:
                    06:c9:96:a7:b2:11:f5:6a:0c:60:44:7d:bd:51:06:
                    48:04:9a:56:04:c0:a3:dd:d5:7a:5b:ba:c4:20:b7:
                    44:86:3a:93:29:18:1d:52:81:fa:59:85:f9:ad:94:
                    d9:76:5c:3d:f1:78:53:55:be:7e:a2:de:77:5a:02:
                    54:f4:47:89:68:74:fb:51:63:56:bc:34:fb:0a:18:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:4F:88:84:89:63:28:D5:0F:FD:9A:60:5A:DC:31:B7:48:61:71
            X509v3 Authority Key Identifier:
                keyid:1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32332d3233203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:b0:02:33:55:ac:ad:93:5c:48:88:f4:04:14:ff:79:36:
         85:c0:4a:51:78:67:de:91:a4:4e:a5:63:51:f3:36:8b:8c:e7:
         88:f8:2f:76:f6:92:0a:4e:b4:fc:74:13:86:7e:e9:12:14:7d:
         3e:28:6f:eb:e8:c9:3f:1d:52:85:be:64:cc:cd:73:b7:6c:32:
         24:35:8c:70:0d:a6:0d:ac:89:15:a4:f2:9a:ac:75:10:e5:de:
         90:41:2b:e1:29:e3:d3:ba:c8:ae:82:b6:22:3b:4a:90:b9:cd:
         d6:0b:fa:91:13:c7:ec:0b:6b:24:cd:58:78:81:ad:bc:f3:0b:
         95:f6:63:da:64:5d:80:dd:17:8b:3e:75:42:9e:38:a8:05:6f:
         95:32:d0:f7:8b:bd:82:3f:60:41:38:dd:70:28:6f:cc:c6:a5:
         16:80:a0:e8:9f:14:98:9f:9f:3a:e6:c2:08:40:e9:44:be:10:
         e3:9d:39:43:15:cb:a9:f1:e2:5f:d5:8a:48:2f:dd:b3:21:03:
         aa:00:0a:fe:6d:cc:f8:cb:14:d6:0d:f0:1f:8d:90:13:ba:33:
         15:5f:50:90:b4:ba:e9:94:6c:86:8b:38:18:27:a8:bf:85:dd:
         41:89:d8:2a:07:14:0f:77:ef:b2:d7:b6:42:fc:5e:1e:49:3e:
         c7:1b:30:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDCUeMXHg1UMJGImLvgeWQbE8q7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwNzNDNzI2QzkxOTlDQTg2QkYwRDRFMDczQjNGQUI1
NDhCMTg3ODAeFw0yNjA4MDcwODQ5MzlaFw0yNzA4MDYwODU0MzlaMDMxMTAvBgNV
BAMTKDA3QzQ0Rjg4ODQ4OTYzMjhENTBGRkQ5QTYwNUFEQzMxQjc0ODYxNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7QtlL6RD1mNdlvEASC/Kr7gD
2tKoduM0TPe9pK+HgGHWhiwP7gEosIn5RyunTEpXg5YS9tMH20ZRZuaJyPm9RTYY
ywDeSYY8HiGdlOxfdcJf9dmpCBdD13iLCaAF4Ha51cXxf1b2oMxb5m+pjsihL5Zs
FOrCJr7BOosMovpb++O88+48SG1JtrZA1l1nJ8V4N9Db3qxSoq9/ByXweFjB/Lwt
25KVAILeRxLATaxvb7Ls8wbJlqeyEfVqDGBEfb1RBkgEmlYEwKPd1XpbusQgt0SG
OpMpGB1SgfpZhfmtlNl2XD3xeFNVvn6i3ndaAlT0R4lodPtRY1a8NPsKGJQ/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUB8RPiISJYyjVD/2aYFrcMbdIYXEwHwYDVR0j
BBgwFoAUHwc8cmyRmcqGvw1OBzs/q1SLGHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC8xRjA3M0M3MjZDOTE5OUNBODZCRjBENEUwNzNCM0ZBQjU0OEIxODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMDczQzcyNkM5MTk5Q0E4
NkJGMEQ0RTA3M0IzRkFCNTQ4QjE4NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzQzNTJlMzEzODM4MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbwKMA0GCSqGSIb3DQEBCwUAA4IBAQBF1rACM1Ws
rZNcSIj0BBT/eTaFwEpReGfekaROpWNR8zaLjOeI+C929pIKTrT8dBOGfukSFH0+
KG/r6Mk/HVKFvmTMzXO3bDIkNYxwDaYNrIkVpPKarHUQ5d6QQSvhKePTusiugrYi
O0qQuc3WC/qRE8fsC2skzVh4ga288wuV9mPaZF2A3ReLPnVCnjioBW+VMtD3i72C
P2BBON1wKG/MxqUWgKDonxSYn5865sIIQOlEvhDjnTlDFcup8eJf1YpIL92zIQOq
AAr+bcz4yxTWDfAfjZATujMVX1CQtLrplGyGizgYJ6i/hd1BidgqBxQPd++y17ZC
/F4eST7HGzCP
-----END CERTIFICATE-----
Generated at Sun Aug 23 04:09:22 2026 by rpki-client