Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          ONkSpC2XvMaOirJzSnw4l/3tZvWBJt6UhloqFvenOxY=
Subject key identifier:   E3:34:55:CA:4B:4C:4E:72:A2:A2:63:76:76:90:F4:25:7B:3E:12:87
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       2589DA4612DF70D97CEFD0A6789893814C01E17E
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
Signing time:             Sat 18 Jul 2026 04:18:41 +0000
ROA not before:           Sat 18 Jul 2026 04:13:41 +0000
ROA not after:            Sat 17 Jul 2027 04:18:41 +0000
asID:                     266924
IP address blocks:        45.224.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:89:da:46:12:df:70:d9:7c:ef:d0:a6:78:98:93:81:4c:01:e1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Jul 18 04:13:41 2026 GMT
            Not After : Jul 17 04:18:41 2027 GMT
        Subject: CN=E33455CA4B4C4E72A2A263767690F4257B3E1287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:a0:eb:01:e7:6f:95:af:7c:93:ef:49:0f:
                    5e:c2:31:d8:42:11:2c:c1:d7:78:18:89:73:55:a3:
                    10:d6:42:95:29:a5:fc:80:31:03:0d:78:75:db:98:
                    36:64:10:78:a0:22:66:56:87:c2:d7:4d:62:72:c1:
                    56:bf:e7:97:5b:47:20:49:4c:c9:58:30:11:29:a9:
                    b3:f4:b8:8a:b5:e1:fd:b6:17:91:3b:a5:87:2d:b2:
                    77:97:de:26:21:f9:8c:12:c7:d5:ae:6a:09:c8:81:
                    34:61:88:b9:77:08:10:31:0c:ec:e2:6c:a5:48:a8:
                    10:9f:58:ce:b9:86:98:c5:b2:2c:72:02:60:ce:95:
                    5f:c0:e8:db:e7:3d:17:db:89:22:8c:ce:64:f2:d7:
                    ce:b5:3e:ff:d3:7c:58:dc:e2:95:e1:be:2b:71:2d:
                    91:08:58:f5:ea:e5:ec:db:83:e4:48:2e:eb:5d:a7:
                    f7:e9:b0:7d:47:ae:cf:85:60:34:19:f6:0d:cc:99:
                    f3:4f:98:fe:70:af:df:ae:7b:fc:10:a2:9c:38:c7:
                    c3:a5:fc:2f:33:1a:da:30:b2:10:82:d4:9b:a4:bd:
                    1b:eb:bb:a0:d4:0d:9b:ae:43:9d:49:f1:fc:8c:7b:
                    9b:1b:1d:57:8a:14:d2:c8:3e:88:8b:7a:33:46:35:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:55:CA:4B:4C:4E:72:A2:A2:63:76:76:90:F4:25:7B:3E:12:87
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:9d:3e:23:45:db:61:83:36:ef:f9:e3:d4:4d:80:bc:bd:
         8b:3d:20:af:e2:0b:eb:9f:6a:52:22:1b:31:64:d5:75:f8:dd:
         d9:1a:cd:70:7a:02:29:58:67:9e:2f:5d:c6:d0:a5:9b:96:60:
         92:d0:5e:90:aa:4d:3f:0e:d9:d1:44:dd:5a:66:31:91:70:5a:
         70:ef:b3:43:c1:09:88:a1:a0:94:4a:ba:2c:6b:48:14:85:80:
         5c:d4:99:ef:bb:88:bf:42:b0:ac:22:7f:57:ad:11:46:2a:0a:
         12:12:34:f1:e9:03:df:4f:27:c3:24:f6:8a:ad:13:d8:5d:ed:
         60:54:26:35:ec:b1:ac:c7:a2:e2:4b:07:a1:a5:9d:f6:3c:da:
         f8:08:39:9a:43:7a:76:70:fb:25:68:aa:aa:09:55:41:ad:83:
         7d:08:9d:ca:a2:7e:a3:cc:3c:da:d0:e9:f4:5e:74:50:ef:fa:
         f5:ea:72:67:92:c0:7c:2b:32:3d:25:13:8c:42:da:68:15:76:
         37:71:c0:83:c5:3b:5e:fa:d7:94:1e:48:50:f5:8f:bc:b0:08:
         f4:bc:f2:0c:61:50:64:6e:de:24:bf:f7:a6:22:03:fb:c8:dc:
         f9:8e:e8:ae:f3:3a:90:b3:41:88:d1:23:33:5d:7a:23:f4:b4:
         c5:2c:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:30:20 2026 by rpki-client