Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230382e302f32322d3232203d3e20323638333631.roa
File:                     34352e3233382e3230382e302f32322d3232203d3e20323638333631.roa (raw, json)
Hash identifier:          A0b81Fsk+yXHC+k16eeDol0zuhnt2EXvtS79ekeaLjw=
Subject key identifier:   16:4E:61:89:58:33:DF:22:D7:0A:1E:DE:93:64:65:AF:47:AB:6E:FB
Certificate issuer:       /CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
Certificate serial:       5E9BD88AB9FB8578EBB476C8E052258D92A22789
Authority key identifier: D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230382e302f32322d3232203d3e20323638333631.roa
Signing time:             Wed 08 Jul 2026 19:48:37 +0000
ROA not before:           Wed 08 Jul 2026 19:43:37 +0000
ROA not after:            Wed 07 Jul 2027 19:48:37 +0000
asID:                     268361
IP address blocks:        45.238.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl
                          rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:d8:8a:b9:fb:85:78:eb:b4:76:c8:e0:52:25:8d:92:a2:27:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
        Validity
            Not Before: Jul  8 19:43:37 2026 GMT
            Not After : Jul  7 19:48:37 2027 GMT
        Subject: CN=164E61895833DF22D70A1EDE936465AF47AB6EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:9d:e6:d9:4e:56:23:a4:6b:eb:a0:dd:9f:
                    ee:89:e0:02:6a:15:29:e2:42:87:1a:28:02:21:a2:
                    75:c9:1c:6a:43:1e:9c:d6:1b:fb:3d:40:0d:a0:bc:
                    15:ae:55:f1:93:00:d4:04:8f:f6:af:6d:2c:05:5c:
                    28:c1:b6:b0:15:d6:64:a6:d8:83:fb:c2:ac:56:90:
                    6a:76:11:6a:47:34:73:3a:82:be:bd:bf:6c:f6:e0:
                    0a:b7:32:9c:b9:7a:d1:ec:64:1b:f2:99:aa:9c:bb:
                    15:a7:8b:b8:34:12:f6:ec:6b:7b:e6:a3:78:76:c5:
                    f4:fa:bd:f8:99:4e:df:ab:9e:22:32:9b:b8:bf:49:
                    2f:13:e0:a9:97:e0:ea:30:88:72:d2:31:ed:47:c6:
                    b0:a3:0c:5c:8b:96:6b:8c:2b:00:67:08:32:95:86:
                    30:63:f9:ac:c0:5a:11:7c:18:5a:95:34:ad:09:ff:
                    b7:27:01:e0:61:9d:66:54:de:c6:28:3d:fe:2b:f9:
                    86:4a:2f:f7:96:c0:f6:f4:fa:f4:61:67:c3:a9:53:
                    81:b1:6f:f5:0c:32:90:08:87:51:27:33:56:37:fe:
                    14:85:6f:8f:3f:c7:58:ae:d3:d6:c9:36:91:07:8d:
                    8d:56:e5:6b:05:87:e6:9d:38:55:71:6d:29:b8:bc:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:61:89:58:33:DF:22:D7:0A:1E:DE:93:64:65:AF:47:AB:6E:FB
            X509v3 Authority Key Identifier:
                keyid:D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230382e302f32322d3232203d3e20323638333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:32:58:4f:ec:3d:53:7b:22:7a:cf:e9:ea:e5:da:a2:17:
         16:08:02:e8:0f:56:e0:86:d3:5c:44:5b:0f:e9:65:f2:79:f7:
         c9:03:26:04:92:f8:79:f4:e9:62:69:dd:d6:d5:18:24:fc:f3:
         83:fc:5f:e2:43:f0:5f:e2:2f:2d:4c:7f:30:0c:aa:ab:ad:d9:
         01:31:ea:7a:9a:62:36:54:c0:7f:a3:25:31:d2:f1:cf:df:87:
         1b:48:49:76:ac:cf:27:fd:57:46:b9:05:68:63:92:59:ff:cd:
         ba:6d:a3:f0:e4:74:43:04:3e:5e:a0:71:ad:91:3f:4a:c6:1f:
         68:47:94:a9:04:a2:1e:90:09:a8:7c:b3:d5:c6:d4:90:b8:a3:
         33:4e:e3:f0:2b:5e:66:a9:57:24:c1:91:b9:62:1f:a9:bf:5c:
         14:09:ea:de:7d:77:6f:21:7d:92:e9:3a:3e:66:50:6b:49:e4:
         98:e2:12:6b:29:9a:54:11:df:f1:93:9f:3f:d7:17:de:0a:b7:
         98:fb:c8:d0:99:a0:37:ce:55:96:d0:d0:f5:9f:da:a5:f6:5a:
         ec:98:a7:a2:f9:15:de:7d:1f:5c:f3:69:7c:2e:0b:f2:de:28:
         d0:8c:c1:6f:24:9c:3f:a7:c3:c5:26:2f:e0:e9:bd:b9:34:92:
         41:06:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:58 2026 by rpki-client