Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
File:                     34352e3139312e34302e302f32322d3332203d3e20323730323534.roa (raw, json)
Hash identifier:          dvdE/aAXyefHeyRBYZJzcTZV/g57ZeKfWM79u6YwxHg=
Subject key identifier:   D1:B5:21:CC:E9:6E:9E:6E:9B:AC:75:C3:8E:8B:39:24:11:C1:51:19
Certificate issuer:       /CN=AAA8656790493966C7881B97EDA3802A503310D2
Certificate serial:       3165C48AFB183684B587FD59037149177C685290
Authority key identifier: AA:A8:65:67:90:49:39:66:C7:88:1B:97:ED:A3:80:2A:50:33:10:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAA8656790493966C7881B97EDA3802A503310D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa
Signing time:             Fri 19 Jun 2026 11:51:45 +0000
ROA not before:           Fri 19 Jun 2026 11:46:45 +0000
ROA not after:            Fri 18 Jun 2027 11:51:45 +0000
asID:                     270254
IP address blocks:        45.191.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/AAA8656790493966C7881B97EDA3802A503310D2.crl
                          rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/AAA8656790493966C7881B97EDA3802A503310D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAA8656790493966C7881B97EDA3802A503310D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:c4:8a:fb:18:36:84:b5:87:fd:59:03:71:49:17:7c:68:52:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAA8656790493966C7881B97EDA3802A503310D2
        Validity
            Not Before: Jun 19 11:46:45 2026 GMT
            Not After : Jun 18 11:51:45 2027 GMT
        Subject: CN=D1B521CCE96E9E6E9BAC75C38E8B392411C15119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:14:a6:97:f9:d2:3c:70:ff:d5:e2:6b:2b:
                    9f:68:73:41:2d:ff:2e:13:6e:a0:29:da:6e:69:33:
                    24:94:af:2f:df:96:86:f4:76:d7:64:b5:74:9e:30:
                    01:98:61:98:f0:97:0c:21:a6:eb:80:3f:61:ea:04:
                    26:21:94:3f:25:42:1b:d8:8c:83:34:c9:59:13:07:
                    55:7d:ef:8b:8f:58:fc:de:94:df:1c:b7:be:cf:b7:
                    61:b7:8c:88:b1:49:24:d0:e9:61:9c:cb:c1:49:d6:
                    7c:14:2a:07:7b:4d:42:69:78:65:b0:3f:e5:ee:81:
                    bd:19:70:86:cb:dc:6b:a9:f9:2b:67:0c:98:5f:e3:
                    2d:9e:9f:14:b3:86:5a:ef:4a:ec:ef:52:0e:d1:3d:
                    d4:1a:10:36:44:7d:56:22:fa:79:5b:5c:b3:2d:13:
                    6a:5f:84:19:a8:63:7b:0e:a3:1b:13:dd:6f:40:df:
                    69:ae:fc:4c:8a:a3:70:4e:eb:18:de:7b:24:05:b4:
                    c1:c1:9b:71:55:e1:ac:39:ae:e5:de:e1:a9:c9:bf:
                    b7:11:fc:99:c7:b7:90:08:36:f3:d2:1e:e8:13:b9:
                    07:82:9c:b2:1a:e3:22:57:f3:8e:6b:78:0c:12:14:
                    2b:7d:0d:3e:0c:cb:27:e5:7c:31:54:44:b2:8d:d9:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:21:CC:E9:6E:9E:6E:9B:AC:75:C3:8E:8B:39:24:11:C1:51:19
            X509v3 Authority Key Identifier:
                keyid:AA:A8:65:67:90:49:39:66:C7:88:1B:97:ED:A3:80:2A:50:33:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/AAA8656790493966C7881B97EDA3802A503310D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAA8656790493966C7881B97EDA3802A503310D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3332203d3e20323730323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:76:df:1c:07:72:94:79:b6:2d:b3:33:eb:7a:7f:c1:57:
         3c:6c:c3:af:cc:11:07:ff:14:e9:41:50:24:49:61:78:10:12:
         ee:17:28:83:5a:f9:6e:e1:d9:41:82:44:44:c2:87:fb:4f:e8:
         cb:94:5f:47:cd:79:79:ef:7a:3e:04:f2:b8:c3:05:6e:90:a8:
         97:41:72:98:bc:6e:b1:01:f1:34:be:50:8c:ca:a5:14:14:0f:
         59:ce:1a:44:9b:47:37:bd:13:a9:2b:ad:3d:09:d6:86:96:fc:
         3f:f6:60:aa:9f:7a:f2:36:f3:2c:27:b0:ad:91:82:8d:33:c2:
         4d:01:70:fa:55:db:c8:4c:ef:5d:78:a9:ec:e7:a2:5c:d6:9a:
         88:ec:05:15:93:24:7a:c6:7f:0a:c7:15:db:c2:75:05:75:9f:
         ed:21:8a:27:45:99:68:9e:3b:ec:9a:f3:89:b7:3d:38:f7:02:
         b8:f6:f2:97:0a:ad:1d:9d:86:dd:c0:d2:9d:b3:37:0f:82:f9:
         6c:e6:31:b9:19:d5:93:8e:b5:ee:f5:30:1f:15:3c:da:bc:42:
         75:3f:c9:52:69:a2:9f:81:a5:bc:e3:88:93:3d:c7:e1:30:e3:
         cd:eb:0f:77:67:60:1b:f2:2f:3b:6d:f8:9c:15:fc:47:55:b1:
         e4:c9:f7:52
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUMWXEivsYNoS1h/1ZA3FJF3xoUpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFBODY1Njc5MDQ5Mzk2NkM3ODgxQjk3RURBMzgwMkE1
MDMzMTBEMjAeFw0yNjA2MTkxMTQ2NDVaFw0yNzA2MTgxMTUxNDVaMDMxMTAvBgNV
BAMTKEQxQjUyMUNDRTk2RTlFNkU5QkFDNzVDMzhFOEIzOTI0MTFDMTUxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHBSml/nSPHD/1eJrK59oc0Et
/y4TbqAp2m5pMySUry/flob0dtdktXSeMAGYYZjwlwwhpuuAP2HqBCYhlD8lQhvY
jIM0yVkTB1V974uPWPzelN8ct77Pt2G3jIixSSTQ6WGcy8FJ1nwUKgd7TUJpeGWw
P+Xugb0ZcIbL3Gup+StnDJhf4y2enxSzhlrvSuzvUg7RPdQaEDZEfVYi+nlbXLMt
E2pfhBmoY3sOoxsT3W9A32mu/EyKo3BO6xjeeyQFtMHBm3FV4aw5ruXe4anJv7cR
/JnHt5AINvPSHugTuQeCnLIa4yJX845reAwSFCt9DT4MyyflfDFURLKN2Ss3AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU0bUhzOlunm6brHXDjos5JBHBURkwHwYDVR0j
BBgwFoAUqqhlZ5BJOWbHiBuX7aOAKlAzENIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz
LzAvQUFBODY1Njc5MDQ5Mzk2NkM3ODgxQjk3RURBMzgwMkE1MDMzMTBEMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BQUE4NjU2NzkwNDkzOTY2Qzc4
ODFCOTdFREEzODAyQTUwMzMxMEQyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
RHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktzLzAvMzQz
NTJlMzEzOTMxMmUzNDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzIz
NTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCLb8oMA0GCSqGSIb3DQEBCwUAA4IBAQAvQ3bfHAdylHm2
LbMz63p/wVc8bMOvzBEH/xTpQVAkSWF4EBLuFyiDWvlu4dlBgkREwof7T+jLlF9H
zXl573o+BPK4wwVukKiXQXKYvG6xAfE0vlCMyqUUFA9ZzhpEm0c3vROpK609CdaG
lvw/9mCqn3ryNvMsJ7CtkYKNM8JNAXD6VdvITO9deKns56Jc1pqI7AUVkyR6xn8K
xxXbwnUFdZ/tIYonRZlonjvsmvOJtz049wK49vKXCq0dnYbdwNKdszcPgvls5jG5
GdWTjrXu9TAfFTzavEJ1P8lSaaKfgaW844iTPcfhMOPN6w93Z2Ab8i87bficFfxH
VbHkyfdS
-----END CERTIFICATE-----
Generated at Sat Jun 27 14:24:28 2026 by rpki-client