Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32332d3233203d3e20323637343132.roa
File:                     34352e3233352e36342e302f32332d3233203d3e20323637343132.roa (raw, json)
Hash identifier:          juoBcZ8j5b3Rd3tLcCLc7OkVCcUwzp4PGeQw+STSYNI=
Subject key identifier:   11:2C:10:50:57:3E:06:29:26:F5:C3:FD:BD:F7:9D:5F:4D:89:EB:8E
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       45299C1AEBBB16B0F382927A9C19F0F9412DADB7
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32332d3233203d3e20323637343132.roa
Signing time:             Tue 21 Jul 2026 19:45:28 +0000
ROA not before:           Tue 21 Jul 2026 19:40:28 +0000
ROA not after:            Tue 20 Jul 2027 19:45:28 +0000
asID:                     267412
IP address blocks:        45.235.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:29:9c:1a:eb:bb:16:b0:f3:82:92:7a:9c:19:f0:f9:41:2d:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Jul 21 19:40:28 2026 GMT
            Not After : Jul 20 19:45:28 2027 GMT
        Subject: CN=112C1050573E062926F5C3FDBDF79D5F4D89EB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:b0:fc:98:55:b1:33:8f:b6:d9:7f:86:9d:
                    70:72:3a:90:05:f3:69:24:a3:b7:07:5d:4d:b2:97:
                    26:f7:9a:05:55:4a:80:8f:a6:8e:f6:70:b7:15:06:
                    d1:2e:3f:ce:bd:88:d3:7a:34:b5:c2:4f:4e:65:ee:
                    70:a6:1a:c6:dd:24:fa:f8:6c:94:88:b2:af:92:dd:
                    b7:4b:56:93:c3:ab:1a:68:2d:f3:fc:f5:56:25:f2:
                    c6:de:53:eb:18:a6:be:14:52:03:40:ea:1e:f4:d5:
                    a6:c2:86:6c:18:82:29:78:7b:e3:18:da:40:3a:ba:
                    ce:92:ae:39:1a:fa:02:7d:00:13:5b:2d:03:a4:54:
                    b3:09:18:c4:b7:19:a0:07:4f:9a:60:45:29:ea:35:
                    e8:58:6a:2d:c4:43:ce:6c:0d:6f:79:99:35:92:fa:
                    d0:a6:cb:85:ee:eb:44:e9:df:d3:fc:1f:84:1c:37:
                    a8:b0:ab:2d:05:8d:69:0c:f3:ce:76:7f:11:6f:93:
                    57:ec:38:1f:a3:b6:5c:be:3d:44:53:c8:e5:7d:b6:
                    51:46:0d:2c:f4:19:8a:a9:4c:a3:55:02:1d:71:3c:
                    30:b1:7c:38:59:e8:55:84:39:68:d0:10:78:3b:34:
                    10:56:4f:7a:7c:57:1a:d0:cb:ce:a4:f8:5b:7c:d8:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:10:50:57:3E:06:29:26:F5:C3:FD:BD:F7:9D:5F:4D:89:EB:8E
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/34352e3233352e36342e302f32332d3233203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:82:73:cf:a2:e9:2c:70:aa:14:b7:9d:e1:74:95:51:4d:0a:
         e5:00:11:aa:49:39:65:7c:68:ac:24:8c:4e:9a:7f:6e:ec:78:
         75:0e:2e:59:ac:40:c8:42:15:9d:66:d5:8a:06:5f:95:6c:fe:
         bc:78:b2:d1:1d:b8:66:8a:bf:b4:46:ce:59:fd:c2:0e:e1:b2:
         98:b3:4e:ad:a8:e6:00:83:8b:6c:16:af:a9:c4:25:b8:73:e4:
         ec:93:67:c1:a8:49:28:1d:83:db:0f:7d:56:72:04:dd:c9:20:
         00:b4:c0:1e:ce:e4:3c:24:93:40:c5:d5:7f:13:b5:e8:b7:63:
         d1:0d:fd:76:bc:1b:17:9c:9c:cb:d9:3e:b8:c3:d6:cb:22:5c:
         b5:cb:8c:4f:b7:6a:28:62:e8:86:5f:3c:40:d1:d2:42:e5:c2:
         5a:8e:8d:78:bd:5a:2c:ee:85:ec:42:0f:b0:f6:0b:8c:3c:58:
         e7:08:a0:6c:34:21:d0:f4:7f:3f:d9:c6:ca:af:b0:ed:74:0e:
         6d:bd:a9:81:65:96:8b:1a:a7:82:a8:c8:df:4a:9d:aa:fa:4d:
         60:22:63:6d:cf:e3:59:01:c7:e6:4f:5a:70:27:91:65:04:c2:
         f7:c8:f1:18:93:40:d1:2d:3d:77:f9:6c:90:6f:ca:b2:d3:c3:
         e0:a2:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:49:26 2026 by rpki-client