Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
File:                     34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa (raw, json)
Hash identifier:          0c9eBxLSoC+NGuUzkiuKNXWLrVBiJjwHBKSNTfS8ppc=
Subject key identifier:   63:B4:3F:85:8F:7C:6C:30:2F:6D:02:A9:CC:CD:50:16:4D:2A:AF:78
Certificate issuer:       /CN=019B96DFD1887A663AC53177E6B0ECB5F24EB488
Certificate serial:       1E1B512F46A065DD5D17AF9B82306CD1C4D55807
Authority key identifier: 01:9B:96:DF:D1:88:7A:66:3A:C5:31:77:E6:B0:EC:B5:F2:4E:B4:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019B96DFD1887A663AC53177E6B0ECB5F24EB488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
Signing time:             Tue 16 Jun 2026 19:49:02 +0000
ROA not before:           Tue 16 Jun 2026 19:44:02 +0000
ROA not after:            Tue 15 Jun 2027 19:49:02 +0000
asID:                     267320
IP address blocks:        45.233.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/019B96DFD1887A663AC53177E6B0ECB5F24EB488.crl
                          rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/019B96DFD1887A663AC53177E6B0ECB5F24EB488.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019B96DFD1887A663AC53177E6B0ECB5F24EB488.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1b:51:2f:46:a0:65:dd:5d:17:af:9b:82:30:6c:d1:c4:d5:58:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019B96DFD1887A663AC53177E6B0ECB5F24EB488
        Validity
            Not Before: Jun 16 19:44:02 2026 GMT
            Not After : Jun 15 19:49:02 2027 GMT
        Subject: CN=63B43F858F7C6C302F6D02A9CCCD50164D2AAF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:38:a6:0b:7a:4b:97:c9:d3:3d:32:ac:5c:
                    67:f6:94:0f:a6:0d:a5:75:56:07:8c:ad:a6:7c:49:
                    76:02:e9:5b:0b:26:9e:7e:d5:2d:19:32:90:68:6c:
                    61:ea:97:6e:bb:9c:fc:e3:f6:a0:34:02:c5:d8:1c:
                    5f:ef:7a:36:06:d2:cc:07:b7:e3:c4:cc:28:ab:37:
                    d6:bb:94:66:20:92:72:94:9f:b4:11:ec:4f:46:c3:
                    9e:ae:38:59:cb:cc:6b:65:ac:50:dc:82:05:a9:3f:
                    4b:b1:e4:86:12:e1:3a:17:97:05:9b:8e:4f:87:88:
                    3d:4d:70:9c:10:ff:40:7e:aa:5e:9d:80:4d:6d:62:
                    4f:60:20:6e:10:50:db:b2:93:57:e4:1e:62:7e:81:
                    80:94:da:83:d4:a2:29:d5:29:7a:e1:4c:37:29:21:
                    be:40:a4:23:d7:66:01:c3:ce:a2:8b:23:33:f2:69:
                    55:f9:ef:bb:6c:30:27:dd:92:81:61:bc:06:d2:45:
                    8c:b6:dd:88:b7:b0:0a:fe:87:a3:ea:27:41:e3:fd:
                    d6:2e:dc:fd:9b:5f:f7:3c:92:8b:76:51:1a:0b:01:
                    41:70:63:0f:29:dc:98:91:23:58:00:99:3f:52:de:
                    8f:b0:70:a8:2a:cb:e5:0e:2c:52:e8:91:6f:ea:fb:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B4:3F:85:8F:7C:6C:30:2F:6D:02:A9:CC:CD:50:16:4D:2A:AF:78
            X509v3 Authority Key Identifier:
                keyid:01:9B:96:DF:D1:88:7A:66:3A:C5:31:77:E6:B0:EC:B5:F2:4E:B4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/019B96DFD1887A663AC53177E6B0ECB5F24EB488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019B96DFD1887A663AC53177E6B0ECB5F24EB488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:32:cd:d7:cb:dd:20:d5:36:73:a7:f6:cc:26:8e:50:97:
         97:b3:50:28:54:6a:ee:c5:c7:14:1c:7b:07:ad:1f:01:2b:46:
         6f:96:30:cd:d8:49:cc:d4:a6:8e:fe:8a:8c:c5:36:a2:a3:05:
         f8:39:39:7d:e9:d9:ad:52:7f:32:a3:8c:0c:ed:6e:d4:cd:62:
         df:7e:05:f3:bf:57:e2:2f:48:7e:7b:eb:7c:ba:cd:19:82:7f:
         76:0d:23:06:71:af:8f:aa:2b:e9:06:a0:ac:d8:c8:0e:7e:de:
         a3:87:1a:af:bd:1b:e5:50:80:43:ec:4d:fe:2f:83:15:cf:16:
         59:df:1d:78:20:94:4b:0d:d5:d4:58:4d:7c:48:c3:80:1a:e8:
         d8:2a:75:1d:12:53:34:52:c3:aa:0d:cd:72:59:bf:a4:02:10:
         e6:03:e5:56:49:1d:cb:3e:90:01:8d:c2:80:c6:1d:78:b8:22:
         07:e0:e7:63:72:66:13:11:27:b4:2e:ca:c7:f7:c2:6d:3c:7b:
         7a:70:37:e1:2d:d8:41:7a:c6:41:5a:aa:be:ea:71:b6:0b:c3:
         81:fd:3c:51:f9:ab:34:17:97:25:e5:23:d7:64:78:bc:19:2e:
         e4:9d:df:83:0f:0a:ac:dd:90:23:e0:0c:bd:a3:a5:d3:3e:dc:
         ff:15:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:21:19 2026 by rpki-client