Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          d+TJN7XsBrH6LbhjzoGCAQ2udf7x8XrVutGzhi6i5k0=
Subject key identifier:   97:1B:60:C2:C8:91:63:56:AF:36:E1:2E:8A:9E:31:91:DA:AB:B2:11
Certificate issuer:       /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial:       6DC18BFD83BCFE952D22B9CAF1F87286718D1B8A
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa
Signing time:             Thu 16 Jul 2026 18:44:46 +0000
ROA not before:           Thu 16 Jul 2026 18:39:46 +0000
ROA not after:            Thu 15 Jul 2027 18:44:46 +0000
asID:                     267350
IP address blocks:        45.233.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c1:8b:fd:83:bc:fe:95:2d:22:b9:ca:f1:f8:72:86:71:8d:1b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
        Validity
            Not Before: Jul 16 18:39:46 2026 GMT
            Not After : Jul 15 18:44:46 2027 GMT
        Subject: CN=971B60C2C8916356AF36E12E8A9E3191DAABB211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:d3:d2:9d:30:12:1b:e8:0a:d7:6e:f9:7c:
                    2a:ec:44:6a:43:f2:2e:a8:63:f6:08:3e:e4:7f:61:
                    c7:fe:68:42:ce:0e:5f:36:fc:52:0b:07:96:b7:5f:
                    4a:42:b8:40:f5:63:bf:44:59:97:3b:50:85:c0:8e:
                    e4:8c:80:8f:13:fb:c6:bb:e3:99:0f:83:b8:35:b1:
                    1b:1a:58:34:92:c9:a3:8b:af:64:94:12:79:f7:10:
                    94:60:fd:a0:1f:9b:ce:4a:7e:97:9f:00:c8:76:f9:
                    0c:05:c6:a7:5d:7e:02:0f:c5:72:06:a1:ea:aa:01:
                    ab:9c:80:1b:ad:ce:9b:3c:d8:da:2f:69:58:a4:a0:
                    52:6e:73:29:b9:9b:ba:2f:0c:7b:f7:27:4d:1e:1d:
                    fa:17:ce:53:b3:00:1e:3b:95:cb:af:84:a6:0d:1a:
                    11:c0:f0:47:72:df:cf:48:a7:dd:e0:9d:aa:15:6d:
                    40:1d:1e:5f:18:8c:55:30:0a:0d:65:3b:7b:8a:c4:
                    01:8a:43:c3:77:20:8b:90:be:bf:24:0e:00:12:be:
                    ca:03:7f:0c:62:95:59:fa:22:46:9e:b9:cf:0f:96:
                    c7:6a:c1:62:96:22:58:f0:c2:6e:fd:00:89:4b:8d:
                    a0:cd:21:0f:85:e4:c4:2d:11:70:8b:7f:b0:e5:c5:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1B:60:C2:C8:91:63:56:AF:36:E1:2E:8A:9E:31:91:DA:AB:B2:11
            X509v3 Authority Key Identifier:
                keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/34352e3233332e3233302e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:84:57:ec:0c:87:ef:a4:9e:96:f6:f5:a9:a2:08:cb:92:c3:
         78:9d:65:91:65:ba:73:13:03:d6:ce:11:f8:7d:0c:8f:aa:67:
         12:7e:b6:aa:4d:ee:ce:de:9f:a6:b2:36:5f:18:f5:33:97:49:
         e3:2e:fe:ac:14:45:39:61:4c:b8:44:14:5a:39:0f:1d:9d:18:
         e5:52:4a:b6:e6:95:c1:91:d6:f9:bc:9e:3c:e9:d9:f5:2c:f5:
         41:2a:2f:d7:54:d4:1c:a0:5b:ef:40:ae:cb:59:3c:aa:07:86:
         e7:49:b4:6f:a3:ca:e7:1b:3d:94:8e:25:28:d9:a9:1f:be:a7:
         15:91:d7:5e:5d:27:aa:91:f0:26:34:9d:c7:af:4e:be:5e:e0:
         f2:24:b0:d1:77:0b:c4:4a:28:76:50:2d:ae:d1:b7:75:f7:36:
         d9:90:87:ab:c7:7a:5d:99:ff:65:a3:e7:62:87:ff:80:63:fb:
         7a:f9:41:bb:9d:0b:3c:db:e6:88:1f:4c:8d:3d:36:f4:d5:13:
         19:32:66:6f:7a:5b:c2:82:3f:66:9e:db:b4:92:8f:ff:8b:e9:
         ba:2e:a9:f9:26:81:e8:b2:c8:27:ae:9e:a6:d9:77:a9:1e:90:
         e3:92:78:11:d3:dd:fb:39:04:10:f0:df:c7:1e:62:91:bc:be:
         f6:25:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:41 2026 by rpki-client