Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          FW6iS1IaS2+iX2R/aea8G+oAhLrhCUotgZ18bcGLyFQ=
Subject key identifier:   4A:5F:FC:0B:67:AD:62:87:E2:57:72:8C:A7:50:C8:E0:66:0F:D4:9A
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       1D5448C4758C277BE64F8DA7C12895F1085DAB33
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 09 May 2026 02:47:12 +0000
ROA not before:           Sat 09 May 2026 02:42:12 +0000
ROA not after:            Sat 08 May 2027 02:47:12 +0000
asID:                     267350
IP address blocks:        45.233.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:54:48:c4:75:8c:27:7b:e6:4f:8d:a7:c1:28:95:f1:08:5d:ab:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: May  9 02:42:12 2026 GMT
            Not After : May  8 02:47:12 2027 GMT
        Subject: CN=4A5FFC0B67AD6287E257728CA750C8E0660FD49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:2d:1c:ef:23:cd:f4:fc:83:f1:6c:64:ef:
                    92:63:ce:78:f5:9d:93:2a:2a:65:fb:83:52:a8:4c:
                    ae:3e:12:3d:95:d6:5d:0e:a6:da:b3:93:08:61:d3:
                    79:d4:14:dd:dd:d4:fe:8f:93:b7:6e:31:e7:06:55:
                    9d:9b:63:ff:f5:49:4b:20:54:f2:d4:55:38:c1:fa:
                    ec:de:06:cc:83:63:87:36:b1:aa:80:68:48:2c:7f:
                    b5:e6:78:71:cb:57:60:a8:56:ac:0d:3d:9b:3e:b1:
                    2e:f8:52:7c:08:59:83:de:18:ee:be:16:24:6d:1d:
                    89:a6:5c:5c:e5:a8:db:0a:1a:3a:e0:ef:e4:ad:3c:
                    44:4f:5d:22:be:10:2d:25:4c:12:3e:08:ca:2e:46:
                    8f:3f:a9:63:6d:e1:e3:ad:a8:08:69:e5:aa:49:d0:
                    a7:11:a6:7b:a0:1b:b2:6d:76:89:75:a8:92:f3:4c:
                    5e:5c:67:c4:6a:64:f9:fe:fc:d5:1c:cf:06:89:b2:
                    74:ac:e6:b1:77:76:b2:ef:ed:d3:55:c0:65:96:74:
                    ba:db:58:a0:f7:a1:5d:58:8c:d1:61:ea:a7:21:50:
                    0c:47:c3:99:14:1a:2b:be:95:50:3c:04:d0:64:e8:
                    4b:bc:6b:8f:35:a8:e1:7e:31:4e:82:1d:44:aa:a0:
                    fc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:FC:0B:67:AD:62:87:E2:57:72:8C:A7:50:C8:E0:66:0F:D4:9A
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:63:1a:fd:ad:d1:48:f9:3b:2e:98:34:27:22:ec:97:47:b1:
         5f:b3:10:34:c6:7a:5d:c9:c2:04:fb:6e:d3:5d:e6:d3:84:85:
         11:fd:8b:ac:63:2f:47:28:37:d0:3b:fb:0c:a0:95:83:b6:ee:
         1b:35:0a:1b:e8:65:22:19:9b:8b:d1:d2:da:4f:34:df:90:59:
         c5:db:bc:f7:97:03:26:87:24:6e:9a:5e:46:b6:e8:f3:cb:43:
         06:36:51:b9:f4:a3:f6:fc:70:a9:9e:02:c9:9d:22:d8:ed:1c:
         78:ef:fb:e9:99:58:e7:6d:bb:7e:bd:bb:34:0b:fe:fc:d9:82:
         38:46:a6:51:9d:2f:6c:d9:a5:42:56:ff:83:4a:4a:be:8a:09:
         3e:c7:2f:a4:b9:64:dd:ab:ec:53:74:85:9b:36:e5:c2:67:5b:
         e7:60:41:b8:be:35:a7:d5:4c:37:47:70:de:07:ba:66:e3:48:
         4d:09:19:1a:fa:78:f3:9f:cb:4c:b4:ae:6d:a5:bd:fc:0d:54:
         87:2c:4f:24:ef:56:8f:94:07:9d:90:cb:9a:24:bb:24:db:2c:
         e1:1d:dc:c8:38:a2:f0:2b:cb:fd:4e:9c:14:4c:18:d3:36:38:
         f2:c0:3d:1e:28:e3:53:7e:c3:94:ea:0a:d6:b8:db:6a:26:01:
         9c:1d:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:34:05 2026 by rpki-client