Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa
File:                     34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa (raw, json)
Hash identifier:          Mu7IxQt/wo8Pc6UCdVTlDUPv8MIX2XZ+LwKPBcUNNqI=
Subject key identifier:   AE:0E:E5:2B:4A:A5:2B:E0:DD:ED:0B:A8:98:F0:4A:48:D7:F7:2C:16
Certificate issuer:       /CN=DC6E04022FF36884007C31619FCCBF26C172D359
Certificate serial:       7AA3E29B07899AD81AD4383998BF6CFACDF1ABAE
Authority key identifier: DC:6E:04:02:2F:F3:68:84:00:7C:31:61:9F:CC:BF:26:C1:72:D3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa
Signing time:             Fri 29 May 2026 16:32:13 +0000
ROA not before:           Fri 29 May 2026 16:27:13 +0000
ROA not after:            Fri 28 May 2027 16:32:13 +0000
asID:                     268075
IP address blocks:        45.168.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.crl
                          rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:e2:9b:07:89:9a:d8:1a:d4:38:39:98:bf:6c:fa:cd:f1:ab:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC6E04022FF36884007C31619FCCBF26C172D359
        Validity
            Not Before: May 29 16:27:13 2026 GMT
            Not After : May 28 16:32:13 2027 GMT
        Subject: CN=AE0EE52B4AA52BE0DDED0BA898F04A48D7F72C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:90:86:3f:a2:c5:08:59:4c:e8:b5:c4:d3:
                    6e:17:82:5c:a2:55:2a:08:cd:75:e7:f5:a0:cc:c1:
                    9d:4c:cd:5f:42:8e:6c:42:88:25:e2:bd:3f:d6:02:
                    72:e3:9c:00:87:ea:08:e9:1e:8e:04:3f:e0:2d:af:
                    e8:c0:c7:72:d6:ca:d9:23:39:8a:38:3b:8a:79:3f:
                    f3:a6:22:c3:5d:07:f2:52:93:7b:5a:51:dd:7f:9d:
                    2e:9f:bf:18:0e:4b:92:e9:50:b1:4b:03:cd:2f:dd:
                    83:fa:f6:03:f4:12:5f:96:ba:78:25:da:d8:2a:98:
                    82:69:dd:4b:ad:5d:a0:40:b0:53:28:77:b3:6b:e6:
                    6e:49:2e:4f:f1:12:09:20:1d:03:80:ef:8c:2d:7e:
                    bc:cf:3a:8d:bb:ee:7c:85:03:d7:18:6a:f2:94:6e:
                    bc:2c:f4:d0:35:cc:d0:b1:ed:71:0f:9d:cd:26:8e:
                    c6:5d:e3:92:92:16:0f:8c:fd:f2:c1:dd:e4:bf:2f:
                    42:89:a3:c1:f2:58:fc:b7:f2:48:3f:b1:98:c4:54:
                    3e:1f:7f:c9:49:c9:3d:a4:cb:d8:2e:88:03:01:57:
                    1a:6f:cd:96:ee:fc:d7:d8:9c:04:d3:47:4b:34:94:
                    c7:e0:2f:98:b5:d3:04:d5:dd:2b:1c:6a:da:3d:38:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0E:E5:2B:4A:A5:2B:E0:DD:ED:0B:A8:98:F0:4A:48:D7:F7:2C:16
            X509v3 Authority Key Identifier:
                keyid:DC:6E:04:02:2F:F3:68:84:00:7C:31:61:9F:CC:BF:26:C1:72:D3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/DC6E04022FF36884007C31619FCCBF26C172D359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC6E04022FF36884007C31619FCCBF26C172D359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7sABSRCxJsfiHKbowsHi1ekBmZUoMb7ZGrbPpjQLD7D/0/34352e3136382e3231382e302f32332d3233203d3e20323638303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:aa:96:17:e6:03:83:58:dd:39:52:83:d2:4e:a9:16:dd:47:
         05:da:72:e2:87:48:7b:09:11:9a:ae:5f:0e:37:b5:5e:a5:e8:
         db:1d:51:bf:c9:ca:bd:24:a6:45:8a:b2:20:69:29:47:64:18:
         5e:d9:97:5b:9d:48:2c:e5:45:b8:02:00:cd:90:ed:57:c3:f2:
         9c:48:43:47:05:2d:92:73:85:55:28:0f:9e:94:ef:4e:8a:34:
         e6:2b:c6:1f:8e:a1:1c:f2:f3:05:73:01:c2:5a:e5:b4:e7:64:
         73:32:24:8a:20:d9:e3:66:d6:46:a1:fd:29:02:01:8a:63:8e:
         c2:43:ca:47:dc:dd:4f:f9:7d:b5:1b:49:8d:47:0d:74:cc:b5:
         82:0a:90:97:f0:ed:28:2f:cb:27:ea:19:8e:56:96:a7:59:b3:
         11:ed:93:8c:3c:06:4b:76:d4:8e:73:ad:22:5a:9b:14:6b:e6:
         c9:b3:61:44:2f:83:48:80:6a:f7:1f:ba:22:f8:f3:fb:3f:ae:
         33:0a:2a:46:c9:df:1e:60:0a:5c:a2:da:de:43:97:40:35:3e:
         1b:3d:b3:d6:2d:f3:e4:8b:0a:99:18:d5:6d:8f:58:38:0a:b9:
         cf:7e:74:d5:b3:a6:fc:d3:b6:08:d9:44:83:d7:b6:24:02:3e:
         c8:ee:31:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeqPimweJmtga1Dg5mL9s+s3xq64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM2RTA0MDIyRkYzNjg4NDAwN0MzMTYxOUZDQ0JGMjZD
MTcyRDM1OTAeFw0yNjA1MjkxNjI3MTNaFw0yNzA1MjgxNjMyMTNaMDMxMTAvBgNV
BAMTKEFFMEVFNTJCNEFBNTJCRTBEREVEMEJBODk4RjA0QTQ4RDdGNzJDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SJCGP6LFCFlM6LXE024Xglyi
VSoIzXXn9aDMwZ1MzV9CjmxCiCXivT/WAnLjnACH6gjpHo4EP+Atr+jAx3LWytkj
OYo4O4p5P/OmIsNdB/JSk3taUd1/nS6fvxgOS5LpULFLA80v3YP69gP0El+Wungl
2tgqmIJp3UutXaBAsFMod7Nr5m5JLk/xEgkgHQOA74wtfrzPOo277nyFA9cYavKU
brws9NA1zNCx7XEPnc0mjsZd45KSFg+M/fLB3eS/L0KJo8HyWPy38kg/sZjEVD4f
f8lJyT2ky9guiAMBVxpvzZbu/NfYnATTR0s0lMfgL5i10wTV3Sscato9OG9hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrg7lK0qlK+Dd7QuomPBKSNf3LBYwHwYDVR0j
BBgwFoAU3G4EAi/zaIQAfDFhn8y/JsFy01kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDdzQUJTUkN4SnNmaUhLYm93c0hpMWVrQm1aVW9NYjdaR3JiUHBqUUxE
N0QvMC9EQzZFMDQwMjJGRjM2ODg0MDA3QzMxNjE5RkNDQkYyNkMxNzJEMzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDNkUwNDAyMkZGMzY4ODQw
MDdDMzE2MTlGQ0NCRjI2QzE3MkQzNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q3c0FCU1JDeEpzZmlIS2Jvd3NIaTFla0JtWlVvTWI3WkdyYlBwalFMRDdELzAv
MzQzNTJlMzEzNjM4MmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqNowDQYJKoZIhvcNAQELBQADggEBAL6qlhfm
A4NY3TlSg9JOqRbdRwXacuKHSHsJEZquXw43tV6l6NsdUb/Jyr0kpkWKsiBpKUdk
GF7Zl1udSCzlRbgCAM2Q7VfD8pxIQ0cFLZJzhVUoD56U706KNOYrxh+OoRzy8wVz
AcJa5bTnZHMyJIog2eNm1kah/SkCAYpjjsJDykfc3U/5fbUbSY1HDXTMtYIKkJfw
7SgvyyfqGY5WlqdZsxHtk4w8Bkt21I5zrSJamxRr5smzYUQvg0iAavcfuiL48/s/
rjMKKkbJ3x5gClyi2t5Dl0A1Phs9s9Yt8+SLCpkY1W2PWDgKuc9+dNWzpvzTtgjZ
RIPXtiQCPsjuMU8=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:10 2026 by rpki-client