Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa
File:                     34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa (raw, json)
Hash identifier:          EXw8MBp0C2jL7qq/slSRTBtC84Zq78Kd9N8xPDG+MPw=
Subject key identifier:   CF:A7:14:CF:72:11:74:1D:08:59:D3:96:33:6E:AC:2B:7F:4C:2A:77
Certificate issuer:       /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial:       5EF04C30D10B49350F4E7186C7788BD056D5FDCF
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa
Signing time:             Thu 16 Jul 2026 18:44:46 +0000
ROA not before:           Thu 16 Jul 2026 18:39:46 +0000
ROA not after:            Thu 15 Jul 2027 18:44:46 +0000
asID:                     267350
IP address blocks:        45.233.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f0:4c:30:d1:0b:49:35:0f:4e:71:86:c7:78:8b:d0:56:d5:fd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
        Validity
            Not Before: Jul 16 18:39:46 2026 GMT
            Not After : Jul 15 18:44:46 2027 GMT
        Subject: CN=CFA714CF7211741D0859D396336EAC2B7F4C2A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:a0:9d:86:f0:ca:23:6a:09:17:e6:e4:b0:
                    80:aa:ca:55:52:9a:5e:e7:56:ed:b0:d2:c3:29:14:
                    e2:7c:c4:ac:72:49:49:e1:f0:ff:2f:1b:94:9f:f7:
                    cc:3c:28:7a:54:bd:3e:33:de:d2:44:62:07:f7:67:
                    88:00:ba:75:fb:bb:33:09:c7:9b:91:68:4e:9f:8c:
                    b5:32:f8:c1:a8:37:87:d3:8a:cc:54:96:da:20:5d:
                    ba:12:fe:18:bf:8f:33:f0:1d:99:a1:b6:37:66:76:
                    f8:42:95:6c:61:8d:ca:e0:0e:31:6f:a6:cf:5f:f2:
                    60:a2:b5:96:48:45:61:df:ba:01:80:60:60:c3:8a:
                    37:d6:a4:4e:6b:fe:56:84:4a:0d:da:e9:9a:f8:5a:
                    e9:7d:f5:88:34:06:a3:0e:41:21:3f:ab:29:eb:18:
                    eb:29:11:9f:c1:e2:4f:5a:2a:1e:fb:bd:08:2c:92:
                    b4:3e:a8:3e:01:0e:04:be:1a:ad:d1:20:4b:00:74:
                    93:7a:ba:56:e4:92:3d:6d:a8:eb:a7:db:a6:97:5c:
                    27:e3:96:8c:76:69:81:3c:cc:fd:00:8a:4b:d0:86:
                    45:63:27:b3:ca:b7:b4:b0:02:e3:b1:6d:ba:86:df:
                    ae:33:68:56:ce:cc:1b:b1:99:2b:fd:9a:1b:d3:4f:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A7:14:CF:72:11:74:1D:08:59:D3:96:33:6E:AC:2B:7F:4C:2A:77
            X509v3 Authority Key Identifier:
                keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32332d3233203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:bb:45:c7:c4:88:ae:73:a9:4f:a8:ac:0d:cd:3e:75:cf:
         16:72:59:39:c7:22:45:3c:fb:3f:e0:5b:5a:96:eb:df:3a:70:
         3d:05:5d:be:3e:55:27:76:ab:92:12:90:fa:d8:cd:e2:82:ac:
         ca:ce:77:e2:48:30:f4:35:49:db:69:84:45:ae:d5:41:01:1c:
         0f:e0:28:90:22:b0:21:75:e0:5e:49:12:05:14:09:75:15:ec:
         6c:24:a5:f0:34:63:3b:d9:6e:48:f7:78:88:05:eb:5c:59:c9:
         eb:bd:61:57:31:bc:22:d1:de:a2:77:7c:c7:02:f7:6c:51:18:
         77:94:3a:6a:c2:a4:d8:a5:9c:9e:65:eb:84:24:e7:a1:23:48:
         7f:24:a0:59:16:68:8f:75:41:13:4a:fb:81:86:21:b4:48:cc:
         ca:0d:3a:8e:cf:12:d9:fe:08:7e:64:df:bf:e8:ae:05:b6:14:
         b8:13:9e:40:1c:29:f8:0b:9b:6d:4f:53:5d:b5:f9:d8:f4:23:
         d1:dc:0b:c7:e3:8b:1d:01:81:93:1b:55:c6:76:34:15:a8:4e:
         cc:de:ad:97:f8:f3:09:df:94:5f:57:a9:01:ee:70:12:5e:c1:
         b1:f5:fb:6f:21:e3:76:3f:ac:77:47:27:03:bb:e5:37:70:33:
         53:3a:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:46 2026 by rpki-client