Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232312e302f32342d3234203d3e20323638383239.roa
File:                     34352e3137332e3232312e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          zJK2rfiez9xV7v+zoT3GOnzeZJ2HhsnWg9qEK4laCgA=
Subject key identifier:   01:B1:6A:F1:FA:6C:AC:6E:0C:34:0F:DC:3B:FE:73:6F:94:23:1E:A6
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       3E14C57962EB8E55DA4AE190A2BEF5541AE093C8
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232312e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 19 Jun 2026 18:13:19 +0000
ROA not before:           Fri 19 Jun 2026 18:08:19 +0000
ROA not after:            Fri 18 Jun 2027 18:13:19 +0000
asID:                     268829
IP address blocks:        45.173.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:14:c5:79:62:eb:8e:55:da:4a:e1:90:a2:be:f5:54:1a:e0:93:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jun 19 18:08:19 2026 GMT
            Not After : Jun 18 18:13:19 2027 GMT
        Subject: CN=01B16AF1FA6CAC6E0C340FDC3BFE736F94231EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:d1:98:3f:07:c2:a3:78:0d:02:d7:8a:78:
                    60:b1:7c:bb:e1:d3:c8:30:ca:3e:b9:c1:ef:2c:85:
                    a7:bd:36:41:6c:57:bc:22:70:0b:52:bd:b2:ee:08:
                    6a:9a:b1:ff:b5:ed:4f:b6:60:b2:d2:14:ae:3d:fd:
                    7d:c5:97:bb:5c:a5:29:3c:67:d5:8e:fb:0e:94:de:
                    0c:cd:f1:a5:c4:b9:ff:78:19:26:b5:14:65:53:8a:
                    c0:4a:7b:d3:ed:2c:55:ab:bb:e2:cb:65:ce:11:3f:
                    55:b4:ff:de:d4:d4:48:81:ec:85:dc:d2:42:ca:de:
                    8d:b7:e8:82:55:69:72:71:7e:5d:d5:b4:af:dc:e8:
                    f8:a2:06:55:d4:c4:b5:38:6a:ff:56:16:35:d5:33:
                    6e:3f:b5:5b:32:58:2a:55:6f:cc:b6:fa:ba:44:f0:
                    62:ed:02:51:cc:ae:25:7e:61:89:e3:3a:f0:d9:bf:
                    3d:ef:15:d4:64:a0:56:11:1f:38:e9:bb:38:73:e8:
                    31:af:d2:df:34:2c:63:e1:d0:d6:99:a6:d5:b2:0c:
                    15:3b:c2:6f:36:08:7d:24:1d:0b:d5:95:fe:48:c3:
                    76:33:ed:f7:5d:ec:ed:d4:f3:9e:7b:55:35:85:9c:
                    9c:31:d1:20:5c:ba:d5:74:40:2f:a2:e6:fe:96:51:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:6A:F1:FA:6C:AC:6E:0C:34:0F:DC:3B:FE:73:6F:94:23:1E:A6
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232312e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:ec:27:c6:a8:69:40:c2:c1:f6:67:ef:0a:89:78:05:f2:
         21:66:b7:4c:49:4b:f2:a5:c5:51:df:f9:ca:66:3a:6a:a8:3b:
         e6:d7:9f:4f:67:a5:bd:10:c1:50:b0:d4:f9:ee:b9:3e:d6:c3:
         15:06:f0:6a:a8:f4:d8:de:7e:b7:7a:ce:60:33:f4:b5:78:de:
         4a:ad:b3:01:09:f3:fb:d4:41:99:4e:6f:41:c7:f4:b6:0d:a5:
         dc:04:ea:01:d6:f3:0f:33:75:44:9b:94:18:15:46:02:7b:12:
         d0:83:32:c9:62:07:39:bf:ed:72:39:d3:dd:06:fc:dd:41:c9:
         d4:98:e8:65:69:9b:7b:9b:5d:b3:99:9a:69:24:93:6e:08:9c:
         1b:f6:70:4a:6d:70:cd:14:5e:b4:e2:c7:c8:8d:99:75:29:01:
         26:a7:ae:4e:0d:91:2f:d7:07:11:22:7f:3e:54:7f:fb:5d:f6:
         34:b1:67:56:35:93:cf:44:78:df:52:67:c3:b6:56:35:20:cf:
         72:9d:50:0e:d8:a7:70:7f:e0:0e:9a:cb:31:f1:0a:f9:6e:b8:
         76:81:e9:1e:23:d8:d5:da:6e:75:95:c2:3a:06:03:2c:33:5d:
         de:ca:bf:a1:9d:5d:c7:8a:ba:1d:db:e8:c7:6d:34:6f:70:d9:
         0a:1d:d7:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPhTFeWLrjlXaSuGQor71VBrgk8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzExOTE3MjlBMENCNTJDRDZBQjQyNTMxRDlFMUI1QjA1
NkY1MDIwQjAeFw0yNjA2MTkxODA4MTlaFw0yNzA2MTgxODEzMTlaMDMxMTAvBgNV
BAMTKDAxQjE2QUYxRkE2Q0FDNkUwQzM0MEZEQzNCRkU3MzZGOTQyMzFFQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDdGYPwfCo3gNAteKeGCxfLvh
08gwyj65we8shae9NkFsV7wicAtSvbLuCGqasf+17U+2YLLSFK49/X3Fl7tcpSk8
Z9WO+w6U3gzN8aXEuf94GSa1FGVTisBKe9PtLFWru+LLZc4RP1W0/97U1EiB7IXc
0kLK3o236IJVaXJxfl3VtK/c6PiiBlXUxLU4av9WFjXVM24/tVsyWCpVb8y2+rpE
8GLtAlHMriV+YYnjOvDZvz3vFdRkoFYRHzjpuzhz6DGv0t80LGPh0NaZptWyDBU7
wm82CH0kHQvVlf5Iw3Yz7fdd7O3U8557VTWFnJwx0SBcutV0QC+i5v6WUfAPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAbFq8fpsrG4MNA/cO/5zb5QjHqYwHwYDVR0j
BBgwFoAUMRkXKaDLUs1qtCUx2eG1sFb1AgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8zMTE5MTcyOUEwQ0I1MkNENkFCNDI1MzFEOUUxQjVCMDU2RjUwMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxMTkxNzI5QTBDQjUyQ0Q2
QUI0MjUzMUQ5RTFCNUIwNTZGNTAyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDRGh4ZUh5Qms0UVB2dUpnYWJmNVJLOVV3VXZyclNKbWRLQ0hQSkE1WVpxLzAv
MzQzNTJlMzEzNzMzMmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrd0wDQYJKoZIhvcNAQELBQADggEBABHw7CfG
qGlAwsH2Z+8KiXgF8iFmt0xJS/KlxVHf+cpmOmqoO+bXn09npb0QwVCw1PnuuT7W
wxUG8Gqo9Njefrd6zmAz9LV43kqtswEJ8/vUQZlOb0HH9LYNpdwE6gHW8w8zdUSb
lBgVRgJ7EtCDMsliBzm/7XI5090G/N1BydSY6GVpm3ubXbOZmmkkk24InBv2cEpt
cM0UXrTix8iNmXUpASanrk4NkS/XBxEifz5Uf/td9jSxZ1Y1k89EeN9SZ8O2VjUg
z3KdUA7Yp3B/4A6ayzHxCvluuHaB6R4j2NXabnWVwjoGAywzXd7Kv6GdXceKuh3b
6MdtNG9w2Qod17I=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:12:48 2026 by rpki-client