Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa
File:                     34352e3138312e36362e302f32332d3233203d3e20323639313731.roa (raw, json)
Hash identifier:          SbC7srR8++CsNaXqvFL6rFPkWXFANsdvug1tiCv3xYs=
Subject key identifier:   7F:CE:ED:C8:88:74:E3:4B:91:7C:E0:73:90:9E:44:E9:D8:2A:90:ED
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       637E0277DAF26A8FD6E316BB00F5C1051BDB6F22
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa
Signing time:             Mon 27 Jul 2026 19:35:46 +0000
ROA not before:           Mon 27 Jul 2026 19:30:46 +0000
ROA not after:            Mon 26 Jul 2027 19:35:46 +0000
asID:                     269171
IP address blocks:        45.181.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7e:02:77:da:f2:6a:8f:d6:e3:16:bb:00:f5:c1:05:1b:db:6f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Jul 27 19:30:46 2026 GMT
            Not After : Jul 26 19:35:46 2027 GMT
        Subject: CN=7FCEEDC88874E34B917CE073909E44E9D82A90ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:8c:68:69:cd:e8:2b:7e:ff:c6:28:3e:32:
                    34:5c:47:06:35:55:af:46:a1:97:1e:2f:cf:a6:5c:
                    28:c7:2f:73:5c:1d:5c:a2:fd:88:10:ae:c7:c6:52:
                    e5:b7:73:63:a4:24:af:97:52:25:7a:e6:5c:ff:f6:
                    72:8b:a0:52:4b:be:b4:dc:f7:fd:f8:d7:a7:c2:0a:
                    00:8e:1e:c1:da:70:03:31:a1:d0:82:11:ca:ab:d6:
                    fa:d2:fe:26:ef:09:d8:3b:79:83:87:d7:94:e5:06:
                    fa:2b:21:37:e0:b3:14:1c:87:ba:cb:e4:9b:83:80:
                    96:72:ec:cb:b0:c9:a1:e3:f2:d7:5f:9a:08:d3:1c:
                    0c:49:5c:6f:24:bf:93:71:e4:11:b1:9c:4f:80:03:
                    e5:a6:ff:8c:38:31:1e:3a:bb:3b:fb:aa:c3:b3:dc:
                    df:59:0a:2b:27:a5:1b:c7:f0:0e:93:93:55:23:c0:
                    ea:e3:f7:26:f5:50:93:64:44:a3:19:54:21:e4:cb:
                    0d:54:12:25:65:55:d6:99:13:44:78:cd:e0:29:8e:
                    c6:f6:42:a1:84:70:2e:00:c4:49:7b:3b:7d:41:97:
                    90:d0:cc:ac:11:36:f1:9a:18:0a:f8:bf:9a:9d:6c:
                    09:7c:0d:96:7a:71:25:ad:a4:36:1a:8c:4a:a2:87:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:ED:C8:88:74:E3:4B:91:7C:E0:73:90:9E:44:E9:D8:2A:90:ED
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/34352e3138312e36362e302f32332d3233203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:41:2f:b9:23:f4:98:93:ab:43:2d:38:40:79:fb:7a:7c:64:
         bc:e0:fc:ec:d2:45:2c:b3:30:22:9e:6c:f5:2d:13:82:fc:0c:
         c2:bb:d2:47:1a:6c:91:9c:3b:da:39:f4:e0:0a:52:0b:21:f8:
         a2:71:32:0a:3a:35:6f:f7:d8:57:9b:7d:27:69:b1:36:15:1d:
         a4:09:89:9d:5f:5f:4c:e5:d3:af:62:b3:f0:6e:1b:f5:dd:71:
         2c:c6:82:aa:5e:11:a8:83:29:c0:fd:6a:3d:3e:d7:44:20:af:
         d2:98:ef:48:7f:d4:bf:1a:51:a5:f4:af:40:03:f3:ea:75:eb:
         1a:9e:a5:00:88:c5:f5:40:8c:70:d4:ab:86:db:a2:95:7a:95:
         85:ca:22:26:2f:79:e4:d2:9b:01:2b:f6:28:87:04:34:fa:f4:
         05:da:d5:0e:4e:01:89:51:41:5d:3a:33:f8:59:4f:95:39:e2:
         b8:ca:95:08:5e:5d:76:9d:1f:a4:53:63:57:a4:26:c5:4c:53:
         eb:aa:aa:8d:cb:96:47:2d:41:9c:3b:67:57:ed:32:80:08:2d:
         3b:bc:9f:f3:c7:fc:27:a5:a4:00:f5:42:71:42:e7:bb:bd:f2:
         ef:77:c9:51:14:dc:5a:fc:76:cf:98:8c:9c:ce:4b:7a:60:92:
         12:40:e4:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY34Cd9ryao/W4xa7APXBBRvbbyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxQzRCNkQ3M0M2NTYxNURCQUZCM0U2MDVERkI3NzIw
RjlEMkM1QzAeFw0yNjA3MjcxOTMwNDZaFw0yNzA3MjYxOTM1NDZaMDMxMTAvBgNV
BAMTKDdGQ0VFREM4ODg3NEUzNEI5MTdDRTA3MzkwOUU0NEU5RDgyQTkwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzIxoac3oK37/xig+MjRcRwY1
Va9GoZceL8+mXCjHL3NcHVyi/YgQrsfGUuW3c2OkJK+XUiV65lz/9nKLoFJLvrTc
9/3416fCCgCOHsHacAMxodCCEcqr1vrS/ibvCdg7eYOH15TlBvorITfgsxQch7rL
5JuDgJZy7MuwyaHj8tdfmgjTHAxJXG8kv5Nx5BGxnE+AA+Wm/4w4MR46uzv7qsOz
3N9ZCisnpRvH8A6Tk1UjwOrj9yb1UJNkRKMZVCHkyw1UEiVlVdaZE0R4zeApjsb2
QqGEcC4AxEl7O31Bl5DQzKwRNvGaGAr4v5qdbAl8DZZ6cSWtpDYajEqihzGRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUf87tyIh040uRfOBzkJ5E6dgqkO0wHwYDVR0j
BBgwFoAUNhxLbXPGVhXbr7PmBd+3cg+dLFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG54Y0hSTE1xNHl3RERzMlZWdTkzTDZZM0FKWVpkQ21NN05ENW5ncUJZ
aU4vMC8zNjFDNEI2RDczQzY1NjE1REJBRkIzRTYwNURGQjc3MjBGOUQyQzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MUM0QjZENzNDNjU2MTVE
QkFGQjNFNjA1REZCNzcyMEY5RDJDNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hueGNIUkxNcTR5d0REczJWVnU5M0w2WTNBSllaZENtTTdORDVuZ3FCWWlOLzAv
MzQzNTJlMzEzODMxMmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbVCMA0GCSqGSIb3DQEBCwUAA4IBAQAoQS+5I/SY
k6tDLThAeft6fGS84Pzs0kUsszAinmz1LROC/AzCu9JHGmyRnDvaOfTgClILIfii
cTIKOjVv99hXm30nabE2FR2kCYmdX19M5dOvYrPwbhv13XEsxoKqXhGogynA/Wo9
PtdEIK/SmO9If9S/GlGl9K9AA/PqdesanqUAiMX1QIxw1KuG26KVepWFyiImL3nk
0psBK/YohwQ0+vQF2tUOTgGJUUFdOjP4WU+VOeK4ypUIXl12nR+kU2NXpCbFTFPr
qqqNy5ZHLUGcO2dX7TKACC07vJ/zx/wnpaQA9UJxQue7vfLvd8lRFNxa/HbPmIyc
zkt6YJISQOT9
-----END CERTIFICATE-----
Generated at Tue Aug 25 00:20:11 2026 by rpki-client