Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa
File:                     34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (raw, json)
Hash identifier:          PfAkcNVHgY6l7fexWzYdIsQkUMk4igN399C0KfY91+s=
Subject key identifier:   B9:9B:E7:D7:69:B3:56:3A:CA:41:1A:F2:23:6D:20:58:5E:42:2A:3A
Certificate issuer:       /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
Certificate serial:       6EFA583C12B48469CB6BA1CE6DA99DFBC85222CF
Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa
Signing time:             Tue 14 Jul 2026 17:55:47 +0000
ROA not before:           Tue 14 Jul 2026 17:50:47 +0000
ROA not after:            Tue 13 Jul 2027 17:55:47 +0000
asID:                     269203
IP address blocks:        45.181.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl
                          rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fa:58:3c:12:b4:84:69:cb:6b:a1:ce:6d:a9:9d:fb:c8:52:22:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A
        Validity
            Not Before: Jul 14 17:50:47 2026 GMT
            Not After : Jul 13 17:55:47 2027 GMT
        Subject: CN=B99BE7D769B3563ACA411AF2236D20585E422A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:23:69:98:d2:47:f9:b2:3c:ac:36:2d:2e:
                    be:60:bb:25:a5:86:06:6f:41:4d:79:31:26:b6:45:
                    b9:51:81:8f:c6:bb:6d:e9:8f:a7:3b:71:2f:a6:25:
                    4a:3b:3b:be:b5:b4:75:16:fe:f5:05:d7:08:8b:fe:
                    0c:2c:7a:d3:e4:b4:21:4a:3d:31:51:f1:8c:98:24:
                    92:c9:f0:2d:af:d4:e1:a6:78:5a:a0:fe:0d:07:f6:
                    bc:ff:a2:d7:7f:f4:35:6a:22:ed:d8:57:69:61:a8:
                    ab:3b:96:f8:03:a5:76:8f:44:74:8e:1e:64:9a:ee:
                    5a:b9:dc:18:c4:d0:00:30:97:72:16:30:1d:2e:a4:
                    7e:d7:f1:6e:89:0a:c9:b1:13:6c:5f:56:2a:96:37:
                    d8:4b:83:3d:2f:83:84:f3:11:b3:32:d9:da:3a:e0:
                    39:bf:ae:17:cf:3d:19:b9:57:7a:2e:a0:0f:30:81:
                    44:2e:68:8f:50:ea:33:1f:eb:0c:f6:ba:33:14:92:
                    9c:50:31:c1:bb:a0:70:f3:5c:d5:d3:f9:3f:74:4e:
                    de:70:31:73:63:a9:f3:74:5b:33:5d:a8:45:95:99:
                    3a:1a:b9:bc:70:51:e9:0f:5b:cb:54:dd:d3:df:cb:
                    bc:15:8b:2f:d6:17:3c:e3:5b:56:76:75:74:f8:92:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:E7:D7:69:B3:56:3A:CA:41:1A:F2:23:6D:20:58:5E:42:2A:3A
            X509v3 Authority Key Identifier:
                keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:dc:6c:a3:ae:79:01:4a:72:7f:fd:21:bc:6c:d6:0c:66:
         90:6b:eb:f9:b4:83:99:42:c7:07:0d:52:5e:6a:b7:c9:ac:7a:
         f6:a7:71:e1:8c:10:e8:c0:48:c5:ab:aa:6a:c7:67:fb:a5:77:
         3f:97:86:8d:ef:47:af:18:c3:e6:5c:5c:26:33:78:71:95:db:
         a9:34:cf:0f:6c:c3:83:21:e4:58:11:c7:61:38:68:5d:6b:4d:
         b9:83:45:d0:c9:c7:cf:7d:22:4b:c8:e2:68:c8:03:f7:7c:db:
         4a:1b:cd:15:e1:db:24:57:e1:ae:e3:55:8f:ec:43:2c:1e:71:
         39:c4:76:8c:1b:46:d2:37:b4:f7:ae:11:fe:4b:ea:50:0b:b7:
         08:a7:6b:fa:f2:39:5c:06:46:d0:7c:2b:19:79:6f:42:86:62:
         46:82:72:8b:61:5e:2a:73:37:70:df:69:6c:73:ad:16:34:37:
         ab:1f:eb:5f:cd:ab:4d:03:5c:5d:4d:6e:a0:1d:b4:6b:17:26:
         04:00:29:4d:26:0f:b2:0f:7f:8e:3c:89:24:52:9c:a8:1c:cd:
         c6:d4:67:e6:f0:5a:60:fa:da:e8:a2:46:c1:ab:a3:97:42:ba:
         b9:57:0b:c0:64:61:9e:e0:af:eb:e4:e7:fe:90:03:2c:2a:2d:
         5e:ed:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:45:30 2026 by rpki-client