Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
File:                     34352e3138322e32342e302f32322d3332203d3e20323639323133.roa (raw, json)
Hash identifier:          F6rMhO00XoQ+7TAS8Ylu+Z5Viy7EtiWMAJZO6w4e1dA=
Subject key identifier:   8B:AE:76:6A:1D:BE:B2:D5:C2:A3:CC:8F:55:EF:67:B2:0C:18:69:9D
Certificate issuer:       /CN=AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023
Certificate serial:       0D576ECAEF7C467ED33B7F229134C18D66CEDC2B
Authority key identifier: AC:74:0B:CF:D0:BF:28:CB:3F:61:FD:6F:6B:1F:86:F2:08:F2:A0:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa
Signing time:             Wed 08 Jul 2026 19:30:46 +0000
ROA not before:           Wed 08 Jul 2026 19:25:46 +0000
ROA not after:            Wed 07 Jul 2027 19:30:46 +0000
asID:                     269213
IP address blocks:        45.182.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:57:6e:ca:ef:7c:46:7e:d3:3b:7f:22:91:34:c1:8d:66:ce:dc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023
        Validity
            Not Before: Jul  8 19:25:46 2026 GMT
            Not After : Jul  7 19:30:46 2027 GMT
        Subject: CN=8BAE766A1DBEB2D5C2A3CC8F55EF67B20C18699D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:81:d9:0c:71:c4:41:2b:e7:ab:76:7e:42:
                    cf:f7:4b:4e:5a:74:c3:d0:9e:a0:a4:d1:fd:96:ad:
                    8f:e9:fa:d8:1a:1a:40:97:0c:d6:0e:b4:ef:06:8e:
                    08:22:9b:51:09:ee:a6:ce:09:57:15:96:ee:d1:97:
                    85:65:90:6c:ab:88:bc:3c:28:06:15:c6:9d:48:eb:
                    05:6e:8e:e2:a2:03:87:74:e7:30:ea:a0:47:fd:b2:
                    cb:73:08:ff:68:67:22:9f:f8:33:a6:7e:a1:75:2f:
                    ab:0c:7c:8a:b9:0c:58:6b:ff:5f:12:75:1e:00:00:
                    4d:87:b3:74:f8:43:ec:4f:6c:a9:ba:b0:d3:34:f5:
                    f5:a3:fa:35:70:32:31:cd:f2:2f:d0:54:bc:cc:6a:
                    a8:5d:66:66:63:28:2a:fc:1c:79:e7:02:df:65:fd:
                    a4:01:62:4a:1c:eb:85:be:eb:dc:e8:9d:01:49:df:
                    43:4e:08:7c:3d:65:81:76:d0:5e:f7:4c:dc:94:01:
                    42:c3:22:05:57:57:d1:ca:58:84:fb:2b:af:a5:7b:
                    7c:d6:31:00:da:eb:19:8e:cf:64:41:fc:2f:ef:3f:
                    b5:20:0b:33:e6:34:55:bc:fe:39:07:75:c9:41:4f:
                    41:96:4e:10:9c:ef:2e:2e:72:95:1c:83:78:d5:ba:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:76:6A:1D:BE:B2:D5:C2:A3:CC:8F:55:EF:67:B2:0C:18:69:9D
            X509v3 Authority Key Identifier:
                keyid:AC:74:0B:CF:D0:BF:28:CB:3F:61:FD:6F:6B:1F:86:F2:08:F2:A0:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC740BCFD0BF28CB3F61FD6F6B1F86F208F2A023.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/34352e3138322e32342e302f32322d3332203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:43:7d:6b:f9:c9:16:29:c2:cf:00:50:e7:1b:1c:98:7b:
         eb:40:f6:7f:e8:df:80:d6:96:1d:8e:ef:5d:31:97:54:a6:74:
         ad:22:00:2b:00:92:12:e9:41:fe:37:31:5d:a7:ca:b0:da:2f:
         ed:65:87:11:8c:3c:28:50:30:06:6c:55:67:b4:52:21:a8:bd:
         07:75:68:dc:2c:1e:48:61:30:ad:79:ea:d6:53:58:68:3f:3e:
         cd:1c:ab:3e:17:3b:c7:f0:3e:c1:f4:67:83:e2:a3:40:d3:c2:
         1e:b3:83:e4:42:8f:b8:61:66:eb:8a:f2:36:13:76:83:29:5a:
         a8:a6:69:d7:b9:ea:48:72:6a:f0:b3:48:4b:32:f6:5c:1c:c4:
         65:fe:71:36:c9:65:3f:d0:d6:6a:35:de:bf:01:bf:3d:9f:72:
         c3:c4:1e:c9:cd:39:49:70:3f:92:b9:82:0c:04:6b:43:21:3a:
         3b:03:a4:c7:1c:fe:1e:a6:2c:3c:3d:38:66:08:1f:ec:93:de:
         fb:a1:6e:e5:39:69:d5:ab:b8:25:3b:98:2a:4b:3d:4d:69:da:
         7b:f0:a9:ee:10:f2:09:0c:ad:0c:89:93:c5:8f:da:d3:85:94:
         e6:17:33:75:92:f2:5c:47:5f:f4:54:66:19:1f:f0:c0:c5:23:
         e6:d6:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:49:27 2026 by rpki-client