Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa
File:                     34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa (raw, json)
Hash identifier:          AtD/AuD74D+JHS9N2SzYBkrj9jOntWhkzeANniL2LZ4=
Subject key identifier:   53:F7:DF:49:B3:6B:D1:A7:FF:0A:09:6F:4D:99:D7:AE:4A:D9:9F:C9
Certificate issuer:       /CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
Certificate serial:       327F1D523799316176C5AA3ACB8344E796281EF5
Authority key identifier: 31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa
Signing time:             Fri 19 Jun 2026 18:13:22 +0000
ROA not before:           Fri 19 Jun 2026 18:08:22 +0000
ROA not after:            Fri 18 Jun 2027 18:13:22 +0000
asID:                     268829
IP address blocks:        45.173.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl
                          rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7f:1d:52:37:99:31:61:76:c5:aa:3a:cb:83:44:e7:96:28:1e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31191729A0CB52CD6AB42531D9E1B5B056F5020B
        Validity
            Not Before: Jun 19 18:08:22 2026 GMT
            Not After : Jun 18 18:13:22 2027 GMT
        Subject: CN=53F7DF49B36BD1A7FF0A096F4D99D7AE4AD99FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:3f:ff:f4:89:3b:3f:f3:db:eb:f4:21:8f:
                    b4:07:1d:3d:ee:8d:fc:4f:6e:e8:a6:c2:de:39:34:
                    71:70:12:a2:ed:ad:c0:60:98:01:0e:46:d4:9b:7f:
                    63:a2:d4:db:61:f7:7d:1d:d5:7e:52:10:e5:01:c9:
                    3e:5f:af:f7:46:eb:c7:9e:08:07:26:34:12:f6:ee:
                    e0:f9:88:06:96:f7:40:a8:88:2c:1b:0c:91:71:99:
                    68:f1:86:99:af:72:07:89:89:81:63:38:9d:5a:cb:
                    c2:78:49:75:0a:22:79:99:f7:2b:60:af:b2:03:3b:
                    d8:77:3d:cb:29:27:a6:64:c0:b6:83:5f:be:eb:9f:
                    ab:60:e9:d5:9d:e9:04:11:dc:e7:5d:f5:aa:4a:84:
                    59:1d:fa:6c:62:4c:c9:99:77:46:69:67:5a:4b:28:
                    05:73:7c:f7:38:2f:7a:ef:c1:65:96:eb:ea:9b:55:
                    70:d9:43:a2:6d:74:ae:23:3b:cc:c9:75:ec:49:5d:
                    0c:56:e9:4b:5d:e6:06:ee:ad:58:75:f4:c4:da:4f:
                    19:ad:3a:72:1b:c0:d2:8e:38:2d:34:71:de:d2:d4:
                    27:41:c9:cd:59:21:fa:ea:03:38:bd:62:2d:e0:11:
                    83:54:21:11:e1:77:a9:e0:0d:02:2e:9e:7c:53:7f:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F7:DF:49:B3:6B:D1:A7:FF:0A:09:6F:4D:99:D7:AE:4A:D9:9F:C9
            X509v3 Authority Key Identifier:
                keyid:31:19:17:29:A0:CB:52:CD:6A:B4:25:31:D9:E1:B5:B0:56:F5:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/31191729A0CB52CD6AB42531D9E1B5B056F5020B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31191729A0CB52CD6AB42531D9E1B5B056F5020B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCDhxeHyBk4QPvuJgabf5RK9UwUvrrSJmdKCHPJA5YZq/0/34352e3137332e3232322e302f32342d3234203d3e20323638383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:22:02:07:1a:dc:61:40:f9:b7:a7:2d:0b:7c:98:7e:43:
         09:25:57:0c:0b:52:67:bb:53:61:7c:35:99:b6:12:fe:5d:a0:
         6a:de:14:1d:be:d6:84:cf:b7:44:82:50:92:42:97:d8:86:62:
         1e:64:9b:f7:a1:01:29:13:ed:19:2f:eb:bd:64:9c:93:13:4c:
         db:5a:2e:d1:ce:49:75:0f:c0:ae:36:7a:62:63:a8:b4:ab:ef:
         84:43:1c:2a:dd:c1:46:5b:c5:65:91:81:61:19:6d:a9:19:ab:
         d1:43:ef:66:15:72:78:c3:56:df:45:36:d4:83:c5:fe:b6:4b:
         3e:7b:b7:f2:20:68:58:c9:f5:fd:cf:0d:54:da:1f:22:3e:03:
         72:be:51:f7:15:2d:c8:8a:ae:46:1d:31:9d:a0:95:ff:a9:e5:
         03:ee:40:37:4f:13:31:9c:18:12:e4:c7:bb:a6:5f:14:f9:93:
         52:89:1c:37:11:38:4a:d9:f2:95:cb:b0:b1:fc:64:3f:42:40:
         25:8e:cd:6b:d7:2e:0c:d1:d6:78:8e:7b:14:53:2f:da:5a:c5:
         f0:72:1a:28:13:a7:0c:ab:00:c4:b8:84:04:84:ee:9d:64:5d:
         75:6b:14:23:e4:3f:aa:f8:cb:c4:e6:ed:12:8e:27:d6:39:1b:
         f9:75:f3:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMn8dUjeZMWF2xao6y4NE55YoHvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzExOTE3MjlBMENCNTJDRDZBQjQyNTMxRDlFMUI1QjA1
NkY1MDIwQjAeFw0yNjA2MTkxODA4MjJaFw0yNzA2MTgxODEzMjJaMDMxMTAvBgNV
BAMTKDUzRjdERjQ5QjM2QkQxQTdGRjBBMDk2RjREOTlEN0FFNEFEOTlGQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPz//9Ik7P/Pb6/Qhj7QHHT3u
jfxPbuimwt45NHFwEqLtrcBgmAEORtSbf2Oi1Nth930d1X5SEOUByT5fr/dG68ee
CAcmNBL27uD5iAaW90CoiCwbDJFxmWjxhpmvcgeJiYFjOJ1ay8J4SXUKInmZ9ytg
r7IDO9h3PcspJ6ZkwLaDX77rn6tg6dWd6QQR3Odd9apKhFkd+mxiTMmZd0ZpZ1pL
KAVzfPc4L3rvwWWW6+qbVXDZQ6JtdK4jO8zJdexJXQxW6Utd5gburVh19MTaTxmt
OnIbwNKOOC00cd7S1CdByc1ZIfrqAzi9Yi3gEYNUIRHhd6ngDQIunnxTfw9VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU/ffSbNr0af/CglvTZnXrkrZn8kwHwYDVR0j
BBgwFoAUMRkXKaDLUs1qtCUx2eG1sFb1AgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkNEaHhlSHlCazRRUHZ1SmdhYmY1Uks5VXdVdnJyU0ptZEtDSFBKQTVZ
WnEvMC8zMTE5MTcyOUEwQ0I1MkNENkFCNDI1MzFEOUUxQjVCMDU2RjUwMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxMTkxNzI5QTBDQjUyQ0Q2
QUI0MjUzMUQ5RTFCNUIwNTZGNTAyMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZDRGh4ZUh5Qms0UVB2dUpnYWJmNVJLOVV3VXZyclNKbWRLQ0hQSkE1WVpxLzAv
MzQzNTJlMzEzNzMzMmUzMjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrd4wDQYJKoZIhvcNAQELBQADggEBAASpIgIH
GtxhQPm3py0LfJh+QwklVwwLUme7U2F8NZm2Ev5doGreFB2+1oTPt0SCUJJCl9iG
Yh5km/ehASkT7Rkv671knJMTTNtaLtHOSXUPwK42emJjqLSr74RDHCrdwUZbxWWR
gWEZbakZq9FD72YVcnjDVt9FNtSDxf62Sz57t/IgaFjJ9f3PDVTaHyI+A3K+UfcV
LciKrkYdMZ2glf+p5QPuQDdPEzGcGBLkx7umXxT5k1KJHDcROErZ8pXLsLH8ZD9C
QCWOzWvXLgzR1niOexRTL9paxfByGigTpwyrAMS4hASE7p1kXXVrFCPkP6r4y8Tm
7RKOJ9Y5G/l182w=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:09:07 2026 by rpki-client