Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e31312e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          k7nsweF7dxl5vY3tblEp6ij5aN4L1FJOjg0jcNzm1MY=
Subject key identifier:   8C:51:0C:79:4B:47:B0:7C:0E:72:5C:45:D7:CC:ED:40:D2:C3:5B:25
Certificate issuer:       /CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
Certificate serial:       4808880189AC4D260B8C7CE77D600664DB90609E
Authority key identifier: 1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa
Signing time:             Fri 07 Aug 2026 08:54:38 +0000
ROA not before:           Fri 07 Aug 2026 08:49:38 +0000
ROA not after:            Fri 06 Aug 2027 08:54:38 +0000
asID:                     269566
IP address blocks:        45.188.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:08:88:01:89:ac:4d:26:0b:8c:7c:e7:7d:60:06:64:db:90:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
        Validity
            Not Before: Aug  7 08:49:38 2026 GMT
            Not After : Aug  6 08:54:38 2027 GMT
        Subject: CN=8C510C794B47B07C0E725C45D7CCED40D2C35B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:9e:98:f2:f4:1e:fc:a7:85:1b:f5:a0:6b:
                    13:7e:31:6e:f8:dc:8a:2e:02:71:17:16:aa:6a:6e:
                    15:62:6f:cd:0d:a8:2d:5e:ce:29:7f:dc:a2:2e:ce:
                    0a:21:e0:7e:a3:a7:a3:99:9e:7b:93:7f:bb:11:5f:
                    b7:72:a7:56:68:92:a4:c2:84:62:f2:de:cc:b2:34:
                    82:e0:2c:eb:11:55:cf:65:83:84:2b:17:9e:c1:cf:
                    16:59:0c:8c:ce:63:9a:92:8b:2d:af:e6:7d:dd:34:
                    58:f5:41:70:48:8c:60:92:14:8b:e3:e0:ad:51:56:
                    95:ca:b2:1e:f6:e2:04:20:70:d5:74:6d:6e:9b:8c:
                    f4:f8:64:eb:bd:c4:09:3c:26:e0:cb:5c:9e:72:93:
                    74:6e:19:a7:90:2a:36:f0:00:9b:bd:3c:ac:1e:d8:
                    2a:f6:c5:0e:0a:d6:4e:0b:40:9a:d5:dc:d4:1d:ee:
                    24:cc:62:87:04:73:3b:f6:eb:64:e7:ed:fe:da:fb:
                    f7:c4:49:ed:94:2e:5b:c7:fc:af:87:f8:bc:13:2d:
                    35:f1:c1:0b:5a:1a:8e:e3:5f:f2:38:4b:7f:9f:87:
                    f8:fb:26:0b:9e:fb:41:a1:97:89:b8:c2:f1:21:b1:
                    8c:9f:63:21:a5:99:33:24:3c:00:41:40:98:ee:2e:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:0C:79:4B:47:B0:7C:0E:72:5C:45:D7:CC:ED:40:D2:C3:5B:25
            X509v3 Authority Key Identifier:
                keyid:1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31312e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:cb:9d:06:f7:69:5c:1c:22:80:28:44:dc:83:20:3b:f5:da:
         7d:7a:7e:ca:07:d4:be:f9:44:5e:21:9c:c3:7b:80:1c:24:88:
         ba:7f:fd:c6:67:76:f6:f4:6e:4b:65:c0:ff:d8:a1:8e:48:8c:
         04:b9:ed:eb:05:12:34:b7:b3:a1:4b:b5:e0:f1:aa:69:e3:dd:
         75:1b:56:c1:55:7c:b1:c9:4f:b9:db:f6:26:d8:a1:2b:b8:55:
         49:46:f1:4e:a2:12:d1:05:86:e5:3d:11:49:9e:70:49:67:f1:
         64:86:5e:85:ee:e2:a9:80:16:83:06:71:a2:ab:bf:ed:d6:d9:
         43:2e:81:1b:ea:c8:63:3f:33:af:a6:f3:e1:42:42:e3:8c:d5:
         a5:da:c4:e0:c9:b2:7b:6c:86:44:45:bc:45:3d:5b:0f:f8:c2:
         57:d9:f2:00:20:dc:ad:75:be:04:c0:1c:cf:ef:cf:37:6b:6c:
         73:19:37:63:cb:55:07:7e:fb:a1:c4:d4:14:81:78:7e:1c:28:
         f8:f7:e7:e8:7f:90:84:f5:e5:bc:d2:65:29:31:d0:8c:21:e6:
         06:8d:df:39:64:a9:51:a5:53:c9:14:a9:4a:b3:8a:57:21:23:
         34:a5:f1:71:63:c5:ec:71:5b:cb:8c:e2:d4:05:14:40:f6:77:
         b2:0f:a9:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSAiIAYmsTSYLjHznfWAGZNuQYJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwNzNDNzI2QzkxOTlDQTg2QkYwRDRFMDczQjNGQUI1
NDhCMTg3ODAeFw0yNjA4MDcwODQ5MzhaFw0yNzA4MDYwODU0MzhaMDMxMTAvBgNV
BAMTKDhDNTEwQzc5NEI0N0IwN0MwRTcyNUM0NUQ3Q0NFRDQwRDJDMzVCMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4D56Y8vQe/KeFG/WgaxN+MW74
3IouAnEXFqpqbhVib80NqC1ezil/3KIuzgoh4H6jp6OZnnuTf7sRX7dyp1ZokqTC
hGLy3syyNILgLOsRVc9lg4QrF57BzxZZDIzOY5qSiy2v5n3dNFj1QXBIjGCSFIvj
4K1RVpXKsh724gQgcNV0bW6bjPT4ZOu9xAk8JuDLXJ5yk3RuGaeQKjbwAJu9PKwe
2Cr2xQ4K1k4LQJrV3NQd7iTMYocEczv262Tn7f7a+/fESe2ULlvH/K+H+LwTLTXx
wQtaGo7jX/I4S3+fh/j7Jgue+0Ghl4m4wvEhsYyfYyGlmTMkPABBQJjuLuuLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjFEMeUtHsHwOclxF18ztQNLDWyUwHwYDVR0j
BBgwFoAUHwc8cmyRmcqGvw1OBzs/q1SLGHgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC8xRjA3M0M3MjZDOTE5OUNBODZCRjBENEUwNzNCM0ZBQjU0OEIxODc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMDczQzcyNkM5MTk5Q0E4
NkJGMEQ0RTA3M0IzRkFCNTQ4QjE4NzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzQzNTJlMzEzODM4MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbwLMA0GCSqGSIb3DQEBCwUAA4IBAQByy50G92lc
HCKAKETcgyA79dp9en7KB9S++UReIZzDe4AcJIi6f/3GZ3b29G5LZcD/2KGOSIwE
ue3rBRI0t7OhS7Xg8app4911G1bBVXyxyU+52/Ym2KEruFVJRvFOohLRBYblPRFJ
nnBJZ/Fkhl6F7uKpgBaDBnGiq7/t1tlDLoEb6shjPzOvpvPhQkLjjNWl2sTgybJ7
bIZERbxFPVsP+MJX2fIAINytdb4EwBzP7883a2xzGTdjy1UHfvuhxNQUgXh+HCj4
9+fof5CE9eW80mUpMdCMIeYGjd85ZKlRpVPJFKlKs4pXISM0pfFxY8XscVvLjOLU
BRRA9neyD6nj
-----END CERTIFICATE-----
Generated at Sun Aug 23 04:11:12 2026 by rpki-client