Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          7311vl4LVDqwpq4qYeENPh/P16z5aJQ20VkqaOrFFTA=
Subject key identifier:   76:CD:A7:A6:E3:06:4C:88:67:C9:1E:C9:99:F0:09:39:F7:C2:D1:75
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       524F0C89BB8A7A6E8DBFF27CEAC58E07DC572301
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:11 +0000
ROA not before:           Sat 09 May 2026 02:42:11 +0000
ROA not after:            Sat 08 May 2027 02:47:11 +0000
asID:                     267350
IP address blocks:        45.233.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4f:0c:89:bb:8a:7a:6e:8d:bf:f2:7c:ea:c5:8e:07:dc:57:23:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:11 2026 GMT
            Not After : May  8 02:47:11 2027 GMT
        Subject: CN=76CDA7A6E3064C8867C91EC999F00939F7C2D175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:45:d4:8f:50:4b:bf:2d:4a:38:4a:6f:a1:
                    6e:3a:f2:24:de:a7:10:7b:58:b8:c0:9d:64:e8:2f:
                    15:c0:92:d6:60:9e:06:0a:27:73:22:0e:31:d0:f8:
                    49:b1:07:19:b5:90:28:26:f7:1a:84:f7:2f:4b:9a:
                    7c:07:af:5f:61:65:fe:b4:43:65:d9:29:5b:61:c1:
                    08:20:8d:8d:34:1b:59:fe:9a:ad:01:b3:8e:a6:47:
                    b3:7f:63:62:f4:12:16:cf:1c:7b:83:48:39:44:92:
                    61:fa:d7:b0:45:2d:bc:55:d9:8d:10:ea:92:99:66:
                    54:9f:ec:13:ae:81:33:af:21:a7:8b:bf:45:74:08:
                    90:d4:c8:a1:ac:8d:2f:ba:34:1a:f5:37:dd:c3:13:
                    97:67:6a:23:79:fa:72:96:02:89:f5:8c:24:af:fc:
                    46:b0:78:b2:1b:1e:54:67:fb:71:fe:8c:0b:5e:14:
                    1e:6a:72:df:b9:c9:ab:9b:23:1c:ae:1c:f7:d3:31:
                    61:e9:20:aa:52:6b:a3:64:19:6e:c1:8e:61:da:58:
                    3b:c5:fa:90:f9:47:49:de:9d:43:36:8f:98:d0:4c:
                    43:8a:51:d3:9c:53:53:b3:98:4e:34:c2:e5:5b:12:
                    d0:41:7c:bb:95:7f:22:cb:5a:01:31:5f:5e:37:24:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:A7:A6:E3:06:4C:88:67:C9:1E:C9:99:F0:09:39:F7:C2:D1:75
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3232382e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:34:26:48:fa:3e:c2:87:13:1b:90:29:9b:89:09:de:dc:cb:
         a0:19:1b:94:6f:ed:db:3e:59:9a:80:6a:98:dc:c5:4f:c3:cf:
         b1:0d:14:58:2c:5b:9f:3d:a8:6f:f8:e9:a4:ce:9e:43:9e:58:
         fa:1b:dd:6f:af:60:1a:fb:d0:ea:f9:59:b2:52:94:79:d1:81:
         7b:5b:26:ce:6c:28:1b:14:d4:5d:70:64:ba:9e:78:c6:f3:24:
         8f:b8:f4:1f:86:68:fb:33:71:51:0d:5f:8c:33:8d:8f:e7:fc:
         88:61:1a:4a:a5:e9:b8:c5:a8:4b:93:52:e3:b4:ae:f2:25:a1:
         6c:80:cf:23:fa:cb:91:71:51:a1:de:90:99:45:de:dc:cd:5b:
         8f:10:b8:ba:7b:09:b7:4d:51:37:9a:c8:60:87:6d:ee:ca:59:
         8b:0b:7c:cf:ae:a6:02:02:ca:ad:a0:83:2b:ff:dd:b0:f8:21:
         21:b3:a9:ec:8f:de:56:83:ff:9b:c1:57:7b:6d:59:a1:82:eb:
         a8:2d:1a:31:ed:68:1c:ac:27:52:4c:bf:72:f6:21:5b:78:93:
         b7:4e:0e:ab:2f:67:cc:83:b2:58:26:62:aa:c3:19:1d:13:ce:
         2d:fa:f8:73:d3:de:38:2d:46:73:e2:24:65:65:b4:41:7a:ab:
         e4:4f:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:46:07 2026 by rpki-client