Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230392e302f32342d3234203d3e20323638333631.roa
File:                     34352e3233382e3230392e302f32342d3234203d3e20323638333631.roa (raw, json)
Hash identifier:          4VRq3hMRo9owwp+z/Zi7JLX8AYh2LCBeHlUXRhnqgrQ=
Subject key identifier:   C0:20:6E:5D:C7:09:23:B0:09:E9:BD:87:FD:41:D3:8F:7B:49:3B:F0
Certificate issuer:       /CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
Certificate serial:       5E544BD82FAB0497D77D26D3A4F2C51CE6797F95
Authority key identifier: D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230392e302f32342d3234203d3e20323638333631.roa
Signing time:             Wed 08 Jul 2026 19:48:47 +0000
ROA not before:           Wed 08 Jul 2026 19:43:47 +0000
ROA not after:            Wed 07 Jul 2027 19:48:47 +0000
asID:                     268361
IP address blocks:        45.238.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl
                          rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:54:4b:d8:2f:ab:04:97:d7:7d:26:d3:a4:f2:c5:1c:e6:79:7f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
        Validity
            Not Before: Jul  8 19:43:47 2026 GMT
            Not After : Jul  7 19:48:47 2027 GMT
        Subject: CN=C0206E5DC70923B009E9BD87FD41D38F7B493BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:9e:32:ca:34:b3:dd:40:7d:6b:89:11:b7:
                    dc:ab:73:5f:e6:93:bf:49:26:a5:ce:60:e0:94:dc:
                    b0:5b:74:6e:31:c5:a5:03:88:b9:ae:7e:4f:8d:05:
                    92:f0:9a:ce:23:ee:74:2d:cc:30:1b:4a:6c:89:f3:
                    9b:d0:b3:92:d3:a4:b9:1d:93:19:97:8d:c8:32:28:
                    0e:a9:71:89:c4:c0:10:2c:0f:95:33:26:25:90:4f:
                    62:d3:28:9d:61:aa:2e:a0:73:34:79:ac:54:26:69:
                    e1:92:c9:e3:1b:9e:9d:a4:8c:27:41:47:47:c7:58:
                    35:01:9e:9e:44:94:00:5b:d5:db:ab:24:53:56:76:
                    94:54:a2:3e:12:45:2d:63:66:39:58:c0:74:df:d1:
                    e7:f5:13:7f:99:f3:45:fb:1b:60:92:93:1c:55:b7:
                    e3:bf:20:e9:b2:42:77:d0:7b:50:ae:23:34:27:26:
                    f7:4e:30:47:50:67:9b:5c:84:53:9c:6c:98:fa:1d:
                    72:c2:71:e1:75:23:65:bf:54:13:d4:44:f9:a6:0e:
                    2b:ef:d8:bb:a7:3b:87:41:42:17:e6:7e:f1:cc:68:
                    84:62:7c:ca:76:6e:29:2f:d6:93:0d:32:6e:ea:87:
                    8c:c2:6a:5b:05:ea:a2:4c:4c:0b:a9:c7:88:99:a2:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:20:6E:5D:C7:09:23:B0:09:E9:BD:87:FD:41:D3:8F:7B:49:3B:F0
            X509v3 Authority Key Identifier:
                keyid:D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/34352e3233382e3230392e302f32342d3234203d3e20323638333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:52:bb:50:d6:7d:3b:58:58:8f:c0:fd:27:19:e6:4b:e1:da:
         fc:df:66:f9:95:b3:22:9a:04:e8:55:a9:9a:18:da:6b:f5:b3:
         67:f7:b8:25:6c:47:e3:ec:85:48:f6:23:ac:ea:70:6b:42:5f:
         b7:99:e6:86:00:ec:09:af:60:86:11:97:53:51:e1:10:37:0d:
         86:e3:71:39:c9:d3:8c:ed:8e:a1:c8:3f:da:81:ab:0a:9b:1d:
         95:80:fe:68:cd:76:46:a1:6d:c9:c5:92:08:e8:46:ab:5e:05:
         4d:66:2a:af:68:e6:cf:2d:f0:98:2f:57:c0:b7:11:50:e0:c5:
         57:1a:af:27:61:8c:99:07:8b:23:44:73:71:a5:c6:df:48:a5:
         0d:44:20:6a:6b:1a:b3:6a:fe:f2:19:c6:f7:c4:d4:cb:77:d4:
         ce:6c:5c:5b:0f:31:f1:90:5b:4d:2e:43:4e:e3:9c:3e:9a:ac:
         0b:5d:f2:e1:15:d2:b9:b5:cd:59:2f:87:29:aa:db:50:d9:13:
         2c:c0:f8:3d:2e:57:40:45:3f:15:20:07:fe:ce:d7:d0:b9:7f:
         14:c8:f1:b0:14:47:8b:5d:ad:78:14:5d:e4:89:8a:74:de:28:
         95:6c:85:7f:bc:d0:32:17:16:2b:ac:6f:b6:ea:d9:58:36:29:
         46:f0:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:46:45 2026 by rpki-client