Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37372e302f32342d3234203d3e20323638303339.roa
File:                     34352e3136382e37372e302f32342d3234203d3e20323638303339.roa (raw, json)
Hash identifier:          6kjTmZne9nbb7odRKiTF0SZOxFfi/6AhANCwLNRWTHQ=
Subject key identifier:   1E:AC:55:37:A4:4B:80:7B:43:14:6D:04:BE:B8:FA:EE:26:74:08:31
Certificate issuer:       /CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
Certificate serial:       36A54C181A4464694FDF2C3061114D17C6B4A188
Authority key identifier: B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37372e302f32342d3234203d3e20323638303339.roa
Signing time:             Thu 20 Aug 2026 15:14:18 +0000
ROA not before:           Thu 20 Aug 2026 15:09:18 +0000
ROA not after:            Thu 19 Aug 2027 15:14:18 +0000
asID:                     268039
IP address blocks:        45.168.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl
                          rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a5:4c:18:1a:44:64:69:4f:df:2c:30:61:11:4d:17:c6:b4:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
        Validity
            Not Before: Aug 20 15:09:18 2026 GMT
            Not After : Aug 19 15:14:18 2027 GMT
        Subject: CN=1EAC5537A44B807B43146D04BEB8FAEE26740831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:fb:f9:6a:52:40:04:fd:81:d5:86:c4:e8:
                    32:d5:01:ee:19:44:bf:d3:82:3c:8f:27:75:c9:cc:
                    de:25:cf:5a:c0:52:e2:58:bd:5c:c6:fa:2f:46:91:
                    30:3f:f4:a6:2a:27:3b:10:fc:ab:08:01:51:f4:72:
                    aa:db:39:8b:d5:93:87:e9:88:0e:03:3c:72:d1:af:
                    4e:5c:c9:72:98:0f:1c:1a:0e:bd:13:9b:fa:c9:87:
                    60:ff:f4:1b:28:7a:70:16:3e:4c:76:f0:82:37:61:
                    43:af:16:51:59:b8:ab:d7:ff:3a:07:15:d6:f9:8b:
                    ca:16:89:f4:53:e9:19:99:08:c8:e9:26:71:a6:f5:
                    c0:1f:a4:2c:cb:0d:07:83:8f:57:3f:18:ca:79:94:
                    75:d8:4a:d2:3b:f4:fd:5e:00:95:6a:90:48:fe:f2:
                    33:95:3f:71:cc:ad:9f:c2:18:be:5f:98:c0:49:1f:
                    95:6c:c2:a3:cb:74:90:ff:be:5d:f6:9b:90:e1:ac:
                    4c:18:c1:8d:dc:97:9e:8d:9d:d8:d5:fb:f7:d4:00:
                    51:36:6e:6f:36:f2:bb:4f:85:03:0c:4b:5b:cd:c3:
                    86:c4:43:2d:53:37:7c:17:06:5d:2d:39:92:4e:02:
                    7e:f8:f4:ea:6b:20:00:fb:60:6a:18:bb:04:8f:a9:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AC:55:37:A4:4B:80:7B:43:14:6D:04:BE:B8:FA:EE:26:74:08:31
            X509v3 Authority Key Identifier:
                keyid:B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37372e302f32342d3234203d3e20323638303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:ef:6a:df:99:52:b5:e6:be:c8:7b:55:f6:07:f0:82:e8:
         c2:7a:93:86:68:5a:0a:60:df:53:f2:ea:6f:ce:70:90:68:6f:
         b0:ba:2b:28:85:7b:ef:69:1d:15:a4:fe:98:8d:73:61:bf:77:
         e8:0c:76:39:d9:70:56:88:7a:26:4b:00:c6:05:2a:3d:bd:24:
         33:9b:e9:ae:0a:60:82:89:15:ab:c1:0f:75:3f:2c:25:c3:f3:
         36:84:d9:e9:13:cb:e8:37:46:8c:46:2d:d7:2b:b1:e4:13:5e:
         4c:34:30:28:ed:37:24:d4:6e:dd:36:38:9f:a5:ec:d8:e7:94:
         22:90:0a:68:b5:2e:87:93:d1:7b:8f:0b:95:5a:6e:b0:e8:e8:
         17:e1:df:30:1f:29:36:47:dc:51:2f:c3:95:b5:07:4f:71:6f:
         e2:41:11:95:9a:1e:48:7b:d5:bc:09:96:88:b1:0a:81:b5:83:
         89:cf:90:5b:86:75:48:7d:53:b4:07:a2:ba:d1:66:b7:d6:db:
         53:db:1f:b9:11:62:fd:22:2f:24:5f:4d:d4:25:50:4b:ca:be:
         70:43:20:ff:25:64:94:eb:c4:8f:c6:48:b1:2f:6d:03:56:9a:
         58:c4:80:fe:03:c7:b6:72:e8:ea:06:04:5b:08:13:47:80:d4:
         f8:29:db:09
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNqVMGBpEZGlP3ywwYRFNF8a0oYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwRjYwNUUwQTdFMDdFODFGREZEOTg0QUVDMDVBNEY2
RDNGODk3RDAeFw0yNjA4MjAxNTA5MThaFw0yNzA4MTkxNTE0MThaMDMxMTAvBgNV
BAMTKDFFQUM1NTM3QTQ0QjgwN0I0MzE0NkQwNEJFQjhGQUVFMjY3NDA4MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXPv5alJABP2B1YbE6DLVAe4Z
RL/TgjyPJ3XJzN4lz1rAUuJYvVzG+i9GkTA/9KYqJzsQ/KsIAVH0cqrbOYvVk4fp
iA4DPHLRr05cyXKYDxwaDr0Tm/rJh2D/9BsoenAWPkx28II3YUOvFlFZuKvX/zoH
Fdb5i8oWifRT6RmZCMjpJnGm9cAfpCzLDQeDj1c/GMp5lHXYStI79P1eAJVqkEj+
8jOVP3HMrZ/CGL5fmMBJH5VswqPLdJD/vl32m5DhrEwYwY3cl56NndjV+/fUAFE2
bm828rtPhQMMS1vNw4bEQy1TN3wXBl0tOZJOAn749OprIAD7YGoYuwSPqSXxAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUHqxVN6RLgHtDFG0Evrj67iZ0CDEwHwYDVR0j
BBgwFoAUsQ9gXgp+B+gf39mErsBaT20/iX0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YaU13b003UTdHUmdackhGdlVFZXFkamluU2VUUFlBc0F3bm1Ba2d5Nzhx
LzAvQjEwRjYwNUUwQTdFMDdFODFGREZEOTg0QUVDMDVBNEY2RDNGODk3RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMTBGNjA1RTBBN0UwN0U4MUZE
RkQ5ODRBRUMwNUE0RjZEM0Y4OTdELmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
aU13b003UTdHUmdackhGdlVFZXFkamluU2VUUFlBc0F3bm1Ba2d5NzhxLzAvMzQz
NTJlMzEzNjM4MmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzAz
MzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALahNMA0GCSqGSIb3DQEBCwUAA4IBAQAXa+9q35lStea+
yHtV9gfwgujCepOGaFoKYN9T8upvznCQaG+wuisohXvvaR0VpP6YjXNhv3foDHY5
2XBWiHomSwDGBSo9vSQzm+muCmCCiRWrwQ91Pywlw/M2hNnpE8voN0aMRi3XK7Hk
E15MNDAo7Tck1G7dNjifpezY55QikApotS6Hk9F7jwuVWm6w6OgX4d8wHyk2R9xR
L8OVtQdPcW/iQRGVmh5Ie9W8CZaIsQqBtYOJz5BbhnVIfVO0B6K60Wa31ttT2x+5
EWL9Ii8kX03UJVBLyr5wQyD/JWSU68SPxkixL20DVppYxID+A8e2cujqBgRbCBNH
gNT4KdsJ
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:44 2026 by rpki-client