Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3234203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32322d3234203d3e203631353932.roa (raw, json)
Hash identifier:          bFWLaiJzbLbe54kOlPlDR6pzRp4NlFEzRZbbh4eNLCk=
Subject key identifier:   0B:87:1A:D1:93:BA:72:68:A9:C2:8C:5F:9E:23:D7:20:AF:EF:0B:67
Certificate issuer:       /CN=3B2BB1A685CC394F90605D8F40A7BC549EC60748
Certificate serial:       7BB1062B6530855183FB447223BA875A483D0F5F
Authority key identifier: 3B:2B:B1:A6:85:CC:39:4F:90:60:5D:8F:40:A7:BC:54:9E:C6:07:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2BB1A685CC394F90605D8F40A7BC549EC60748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3234203d3e203631353932.roa
Signing time:             Fri 10 Jul 2026 14:13:55 +0000
ROA not before:           Fri 10 Jul 2026 14:08:55 +0000
ROA not after:            Fri 09 Jul 2027 14:13:55 +0000
asID:                     61592
IP address blocks:        45.234.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2BB1A685CC394F90605D8F40A7BC549EC60748.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:06:2b:65:30:85:51:83:fb:44:72:23:ba:87:5a:48:3d:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2BB1A685CC394F90605D8F40A7BC549EC60748
        Validity
            Not Before: Jul 10 14:08:55 2026 GMT
            Not After : Jul  9 14:13:55 2027 GMT
        Subject: CN=0B871AD193BA7268A9C28C5F9E23D720AFEF0B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b3:73:0f:16:dd:16:28:7d:3e:e2:d1:30:86:
                    29:82:0d:52:31:bb:07:86:85:d8:cb:3c:f3:cc:c6:
                    6a:99:e4:01:cd:9f:96:23:6a:c1:f5:5c:7a:30:0f:
                    8b:f1:69:f1:1c:2e:b0:93:df:5f:f8:41:d0:f4:40:
                    55:95:c9:3b:bc:b7:84:fa:7f:e3:9b:4e:e9:e8:35:
                    e9:8c:1c:68:04:cb:1e:01:df:b2:ef:cc:4c:87:d9:
                    fc:0b:fc:2a:78:75:49:3a:ae:75:d8:cb:8c:51:2e:
                    77:35:c9:ac:94:ac:53:74:b9:03:97:a6:b7:05:98:
                    1b:5c:46:2d:32:80:d5:c5:35:64:37:5f:ea:f0:81:
                    a2:ec:99:47:2a:a2:fd:69:ba:ba:3f:18:95:cf:83:
                    2e:1b:04:8e:f8:d6:5d:82:59:98:ac:00:2a:c7:fc:
                    05:47:d4:43:31:b2:fc:78:f1:27:08:30:b7:ab:b8:
                    e4:c7:de:f1:74:24:f2:dd:d5:2c:0c:9a:55:81:88:
                    84:63:f5:04:e9:20:ef:08:f2:7a:0f:83:41:fd:df:
                    ea:1f:ab:f3:93:b8:f1:2a:ee:70:4e:ff:bb:85:10:
                    22:ab:11:e5:14:d7:67:c5:cb:7b:59:52:03:84:64:
                    9b:79:0e:fa:4f:8a:f7:60:a1:ec:43:06:8a:0b:d7:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:1A:D1:93:BA:72:68:A9:C2:8C:5F:9E:23:D7:20:AF:EF:0B:67
            X509v3 Authority Key Identifier:
                keyid:3B:2B:B1:A6:85:CC:39:4F:90:60:5D:8F:40:A7:BC:54:9E:C6:07:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/3B2BB1A685CC394F90605D8F40A7BC549EC60748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2BB1A685CC394F90605D8F40A7BC549EC60748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:d7:18:fd:e7:18:60:18:46:eb:12:7e:db:a1:b8:b5:05:
         04:ad:0c:bc:a5:9a:fc:a7:73:7a:e1:02:59:0d:c7:3d:33:62:
         18:86:94:fa:41:a5:79:dd:d8:b0:a6:25:d8:e7:49:fd:32:8a:
         95:16:02:a6:80:d5:07:98:83:f7:06:5a:b0:16:04:65:34:67:
         e2:b9:1f:0d:36:69:73:ff:22:45:19:0e:45:bb:f4:63:33:4f:
         bb:2c:1f:66:d5:ba:73:c4:b1:7f:b0:01:7d:97:6a:0d:f0:ab:
         83:20:2c:2c:49:45:a0:1b:44:03:37:75:e5:4f:8f:22:b9:35:
         ba:0f:dc:aa:b3:87:ab:fc:7a:af:5e:6e:d6:30:94:26:8d:9c:
         9e:7a:c3:03:77:b4:78:1f:e2:4e:41:23:43:97:48:c5:50:4c:
         10:31:fe:4e:ac:a5:46:49:df:d0:87:b9:a3:00:32:14:16:9b:
         be:f4:29:44:b2:36:54:5f:f2:83:1e:fa:a9:63:e0:1f:e0:e7:
         4e:ae:4a:e7:65:03:2d:d9:a2:88:7e:57:20:0e:08:2d:8a:b8:
         d3:96:7f:15:8f:46:94:5c:f7:d3:61:ae:96:8f:a0:dd:8e:4a:
         8a:30:1e:2e:ec:8e:b0:03:d5:d3:4d:e3:ce:fd:60:88:33:27:
         c6:dd:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:02:35 2026 by rpki-client