Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32322d3232203d3e20323638333437.roa
File:                     34352e3233382e3136302e302f32322d3232203d3e20323638333437.roa (raw, json)
Hash identifier:          ZE5KJCuvpQVdGQtzVdefnbUnu673EkkWu6I9ld15IwQ=
Subject key identifier:   50:D6:C1:70:E0:2B:A6:5A:4D:7C:E8:FA:DD:7D:EA:05:3E:4C:0F:9F
Certificate issuer:       /CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
Certificate serial:       4106B8C9D28902B1EB1A36CB25B2FB83BEF4D1F9
Authority key identifier: EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32322d3232203d3e20323638333437.roa
Signing time:             Fri 24 Jul 2026 05:21:38 +0000
ROA not before:           Fri 24 Jul 2026 05:16:38 +0000
ROA not after:            Fri 23 Jul 2027 05:21:38 +0000
asID:                     268347
IP address blocks:        45.238.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl
                          rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 23:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:06:b8:c9:d2:89:02:b1:eb:1a:36:cb:25:b2:fb:83:be:f4:d1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
        Validity
            Not Before: Jul 24 05:16:38 2026 GMT
            Not After : Jul 23 05:21:38 2027 GMT
        Subject: CN=50D6C170E02BA65A4D7CE8FADD7DEA053E4C0F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:c5:22:28:28:62:47:36:43:66:e5:e8:7f:
                    4b:74:2e:8c:b5:6b:05:54:b1:51:47:bd:b1:20:6d:
                    ff:ad:7f:86:c3:4d:36:4a:51:67:39:40:5e:71:08:
                    99:25:32:0e:f4:8a:c9:44:4b:ee:12:2a:9c:6d:5e:
                    93:44:04:b6:bf:b9:8a:2d:72:49:28:20:cb:71:2a:
                    30:61:33:ac:12:39:35:ec:f4:16:c4:54:77:37:e1:
                    2e:1d:ac:97:35:55:83:c5:1c:75:e7:8c:38:cf:3e:
                    07:9e:23:f1:9b:e3:17:bf:1b:45:98:14:07:70:21:
                    f5:a8:37:f6:bf:c7:6b:5b:4a:e5:4c:1e:69:8a:8c:
                    46:42:ec:cb:b3:20:13:a6:1b:95:36:36:af:2c:46:
                    43:26:51:ff:a6:c8:4e:73:e7:25:f6:3c:42:bb:f1:
                    59:52:65:47:fc:26:cc:3d:d1:f0:65:13:2e:e4:5b:
                    9a:ef:93:52:38:fe:6a:00:66:9a:c0:ee:a6:e5:23:
                    b7:bd:b9:2f:c2:60:64:e7:41:2c:86:fa:85:92:02:
                    91:af:f7:98:fe:cd:75:5c:8b:5c:fe:98:cf:a4:e4:
                    6f:64:fd:06:d0:10:e4:32:1a:95:f8:43:b5:11:dc:
                    1d:73:a9:01:bd:9a:c8:77:bb:6e:86:cf:15:d6:f2:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:C1:70:E0:2B:A6:5A:4D:7C:E8:FA:DD:7D:EA:05:3E:4C:0F:9F
            X509v3 Authority Key Identifier:
                keyid:EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32322d3232203d3e20323638333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:94:18:4f:ab:96:46:e6:56:fb:65:37:c5:fc:d4:b7:77:
         fc:71:81:e9:9a:b9:b8:38:ff:12:3b:a1:78:dc:d6:de:4c:fc:
         e4:22:1c:47:c8:2e:66:a8:10:1f:3f:72:fa:a0:6c:35:05:de:
         92:11:b7:99:cf:27:bf:f0:2f:43:e3:24:84:be:32:bf:66:42:
         bf:69:c2:c3:ae:1c:ab:8e:9a:a4:30:a6:9a:3c:9c:b9:7a:35:
         56:e5:ea:eb:f5:c8:7c:be:9b:74:53:0d:21:47:de:6f:93:5c:
         dc:54:8a:6e:8e:92:8c:b8:62:19:31:a2:b1:29:83:6b:68:c8:
         a9:02:80:5a:e9:ef:a8:5a:05:77:d7:37:9f:72:8d:29:cf:df:
         7a:84:82:8b:1e:76:05:0a:36:81:2b:a7:9d:6f:8f:3c:7e:19:
         f2:4c:59:8d:6c:45:58:b3:6c:a1:74:9d:eb:bf:f0:e3:fa:61:
         f8:2b:a0:75:35:cb:73:74:55:a5:7e:ed:1f:57:b2:49:15:ce:
         ea:01:b0:e9:a8:e5:e9:da:5b:50:78:8f:f1:c9:74:f4:e0:62:
         5c:32:b1:cc:e3:e1:fe:f7:c8:94:4b:94:90:56:aa:45:87:9b:
         ba:b5:d4:f7:d6:8d:c9:0d:da:3f:b9:81:4f:8e:c0:54:37:f8:
         b9:09:d1:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQQa4ydKJArHrGjbLJbL7g7700fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwQzZENTFGRjhGNkZBQzJEQjNCNTBFODI2MkVFMzk3
QjYzRTkwMTAeFw0yNjA3MjQwNTE2MzhaFw0yNzA3MjMwNTIxMzhaMDMxMTAvBgNV
BAMTKDUwRDZDMTcwRTAyQkE2NUE0RDdDRThGQUREN0RFQTA1M0U0QzBGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqU8UiKChiRzZDZuXof0t0Loy1
awVUsVFHvbEgbf+tf4bDTTZKUWc5QF5xCJklMg70islES+4SKpxtXpNEBLa/uYot
ckkoIMtxKjBhM6wSOTXs9BbEVHc34S4drJc1VYPFHHXnjDjPPgeeI/Gb4xe/G0WY
FAdwIfWoN/a/x2tbSuVMHmmKjEZC7MuzIBOmG5U2Nq8sRkMmUf+myE5z5yX2PEK7
8VlSZUf8Jsw90fBlEy7kW5rvk1I4/moAZprA7qblI7e9uS/CYGTnQSyG+oWSApGv
95j+zXVci1z+mM+k5G9k/QbQEOQyGpX4Q7UR3B1zqQG9msh3u26GzxXW8g2VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUNbBcOArplpNfOj63X3qBT5MD58wHwYDVR0j
BBgwFoAU6gxtUf+Pb6wts7UOgmLuOXtj6QEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1BUWURXM0JNTWllZU1YVHdFdkdYNDZDNFJacVdxaEZKWlJzTE56VUNF
ckgvMC9FQTBDNkQ1MUZGOEY2RkFDMkRCM0I1MEU4MjYyRUUzOTdCNjNFOTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMEM2RDUxRkY4RjZGQUMy
REIzQjUwRTgyNjJFRTM5N0I2M0U5MDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNQVFlEVzNCTU1pZWVNWFR3RXZHWDQ2QzRSWnFXcWhGSlpSc0xOelVDRXJILzAv
MzQzNTJlMzIzMzM4MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7qAwDQYJKoZIhvcNAQELBQADggEBAJzglBhP
q5ZG5lb7ZTfF/NS3d/xxgemaubg4/xI7oXjc1t5M/OQiHEfILmaoEB8/cvqgbDUF
3pIRt5nPJ7/wL0PjJIS+Mr9mQr9pwsOuHKuOmqQwppo8nLl6NVbl6uv1yHy+m3RT
DSFH3m+TXNxUim6Okoy4YhkxorEpg2toyKkCgFrp76haBXfXN59yjSnP33qEgose
dgUKNoErp51vjzx+GfJMWY1sRVizbKF0neu/8OP6YfgroHU1y3N0VaV+7R9XskkV
zuoBsOmo5enaW1B4j/HJdPTgYlwysczj4f73yJRLlJBWqkWHm7q11PfWjckN2j+5
gU+OwFQ3+LkJ0b0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:58:50 2026 by rpki-client