Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3232203d3e20323638373838.roa
File:                     34352e3137332e32342e302f32322d3232203d3e20323638373838.roa (raw, json)
Hash identifier:          cIsdqnOLP3XaB3LJtAIbncIs4fY5VWtLmommTe01664=
Subject key identifier:   1D:FD:41:E4:E1:0B:09:A3:2F:02:FB:81:A7:24:AC:E4:0E:C6:33:CC
Certificate issuer:       /CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
Certificate serial:       3DC64DA88A89F80D14A374A26913788803CC7048
Authority key identifier: 6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3232203d3e20323638373838.roa
Signing time:             Thu 13 Aug 2026 19:45:44 +0000
ROA not before:           Thu 13 Aug 2026 19:40:44 +0000
ROA not after:            Thu 12 Aug 2027 19:45:44 +0000
asID:                     268788
IP address blocks:        45.173.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c6:4d:a8:8a:89:f8:0d:14:a3:74:a2:69:13:78:88:03:cc:70:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
        Validity
            Not Before: Aug 13 19:40:44 2026 GMT
            Not After : Aug 12 19:45:44 2027 GMT
        Subject: CN=1DFD41E4E10B09A32F02FB81A724ACE40EC633CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:47:cc:07:c7:dc:69:f9:14:44:8f:5a:f5:
                    3d:20:1d:fd:7c:77:08:25:d4:04:8c:09:8a:a5:3d:
                    72:e5:27:3e:8d:bf:69:e8:41:fe:77:d8:48:7d:a1:
                    c2:37:9d:61:61:7f:c3:28:e8:76:24:70:8d:ab:cd:
                    d5:53:41:02:40:04:c1:29:7e:ac:25:f1:23:53:91:
                    48:93:21:a5:6f:e8:73:ef:d6:23:fb:ef:86:0a:a4:
                    f9:e2:38:18:09:18:ab:7d:92:18:c6:ce:fa:ed:b9:
                    be:f6:d1:2d:96:1f:1c:b8:74:b1:be:b4:79:61:35:
                    f0:e2:f1:56:39:f1:96:52:fa:21:44:89:26:cf:f5:
                    be:c4:bf:f9:df:cd:b9:53:d2:a5:1f:45:b8:d0:6b:
                    b6:bd:1e:1d:1b:af:5d:f0:59:61:22:7c:c4:40:a8:
                    55:10:a1:8d:29:5c:2e:5e:1b:e7:c0:24:07:3d:bb:
                    5d:79:d9:9b:52:cd:75:b9:12:2e:85:45:89:28:17:
                    b0:69:23:b2:bb:f7:f1:ce:3f:ce:1b:a9:c2:a5:a1:
                    e1:77:94:23:b8:56:b7:37:82:51:e4:ef:04:94:08:
                    3a:2c:9c:15:d3:51:15:05:a6:02:06:4f:7c:05:f5:
                    73:f5:84:a7:18:89:13:34:ba:91:c8:41:7a:92:a1:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:41:E4:E1:0B:09:A3:2F:02:FB:81:A7:24:AC:E4:0E:C6:33:CC
            X509v3 Authority Key Identifier:
                keyid:6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3232203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:ed:8e:40:55:c9:13:c0:ff:5b:91:88:46:a5:84:4f:9a:
         12:09:81:b9:df:ea:69:b9:20:44:e4:a1:fd:1c:92:ff:74:dc:
         35:77:3d:5f:61:c9:e4:0f:56:a9:28:a2:3e:7a:b2:06:3d:02:
         96:24:16:44:fb:85:9a:d3:f5:7e:61:4c:a1:bf:4d:8e:0a:62:
         17:42:d4:0d:64:33:9e:b4:73:32:7f:22:b9:15:2f:ac:82:6f:
         d2:52:ab:7b:2c:41:1f:c6:24:bc:93:1f:9d:67:fa:48:df:18:
         e3:0f:31:fd:b7:fd:4b:11:37:83:2a:a0:0a:d9:53:ee:b8:73:
         e4:df:b5:3c:7f:4b:a9:03:e5:a5:5e:4a:ad:30:31:c1:9b:53:
         32:f1:f9:51:f8:c0:62:49:bd:a9:41:12:54:cf:1b:6f:b5:21:
         01:01:ef:f9:e5:5b:8c:61:5d:37:cc:4f:36:49:ef:49:70:db:
         61:06:f0:77:d3:4f:57:6e:12:50:15:c8:e1:77:f7:ec:6c:56:
         47:47:c4:3d:39:04:20:c6:87:23:6f:ba:ea:12:e5:7d:07:29:
         a9:c4:56:02:8c:3d:b4:f1:7b:f2:07:7b:29:44:5b:5f:4f:1a:
         8a:86:82:ba:f4:d3:fc:f7:4c:ad:8e:f5:58:87:74:a7:14:42:
         b5:14:d9:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPcZNqIqJ+A0Uo3SiaRN4iAPMcEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkVFNTVEQ0Q0RDc3QTRBMDlERDM1OTgxRTEwMDVF
QzEyMDE4MzAeFw0yNjA4MTMxOTQwNDRaFw0yNzA4MTIxOTQ1NDRaMDMxMTAvBgNV
BAMTKDFERkQ0MUU0RTEwQjA5QTMyRjAyRkI4MUE3MjRBQ0U0MEVDNjMzQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxkfMB8fcafkURI9a9T0gHf18
dwgl1ASMCYqlPXLlJz6Nv2noQf532Eh9ocI3nWFhf8Mo6HYkcI2rzdVTQQJABMEp
fqwl8SNTkUiTIaVv6HPv1iP774YKpPniOBgJGKt9khjGzvrtub720S2WHxy4dLG+
tHlhNfDi8VY58ZZS+iFEiSbP9b7Ev/nfzblT0qUfRbjQa7a9Hh0br13wWWEifMRA
qFUQoY0pXC5eG+fAJAc9u1152ZtSzXW5Ei6FRYkoF7BpI7K79/HOP84bqcKloeF3
lCO4Vrc3glHk7wSUCDosnBXTURUFpgIGT3wF9XP1hKcYiRM0upHIQXqSoZ6DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHf1B5OELCaMvAvuBpySs5A7GM8wwHwYDVR0j
BBgwFoAUbULuVdzU13pKCd01mB4QBewSAYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq
QkUvMC82RDQyRUU1NURDRDRENzdBNEEwOUREMzU5ODFFMTAwNUVDMTIwMTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZENDJFRTU1RENENEQ3N0E0
QTA5REQzNTk4MUUxMDA1RUMxMjAxODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDV1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAv
MzQzNTJlMzEzNzMzMmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa0YMA0GCSqGSIb3DQEBCwUAA4IBAQCD++2OQFXJ
E8D/W5GIRqWET5oSCYG53+ppuSBE5KH9HJL/dNw1dz1fYcnkD1apKKI+erIGPQKW
JBZE+4Wa0/V+YUyhv02OCmIXQtQNZDOetHMyfyK5FS+sgm/SUqt7LEEfxiS8kx+d
Z/pI3xjjDzH9t/1LETeDKqAK2VPuuHPk37U8f0upA+WlXkqtMDHBm1My8flR+MBi
Sb2pQRJUzxtvtSEBAe/55VuMYV03zE82Se9JcNthBvB3009XbhJQFcjhd/fsbFZH
R8Q9OQQgxocjb7rqEuV9BympxFYCjD208XvyB3spRFtfTxqKhoK69NP890ytjvVY
h3SnFEK1FNl0
-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:23 2026 by rpki-client