Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa
File:                     34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa (raw, json)
Hash identifier:          OyvcT2Ga+Vv1GGLGGxLNHblcXMKGAkP8JvhcisDCvec=
Subject key identifier:   0C:95:BC:28:FC:36:70:19:38:04:BE:BC:92:64:9E:49:F3:77:66:D5
Certificate issuer:       /CN=2E56A03774091A591386D596B225DD96F3C3B92C
Certificate serial:       747217AC40DDA20326770F37FEBB778A5C2CAC32
Authority key identifier: 2E:56:A0:37:74:09:1A:59:13:86:D5:96:B2:25:DD:96:F3:C3:B9:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa
Signing time:             Thu 18 Jun 2026 23:34:04 +0000
ROA not before:           Thu 18 Jun 2026 23:29:04 +0000
ROA not after:            Thu 17 Jun 2027 23:34:04 +0000
asID:                     271609
IP address blocks:        45.183.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 02:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:72:17:ac:40:dd:a2:03:26:77:0f:37:fe:bb:77:8a:5c:2c:ac:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E56A03774091A591386D596B225DD96F3C3B92C
        Validity
            Not Before: Jun 18 23:29:04 2026 GMT
            Not After : Jun 17 23:34:04 2027 GMT
        Subject: CN=0C95BC28FC3670193804BEBC92649E49F37766D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:55:79:60:cd:16:66:34:fb:92:e4:8f:c6:
                    69:2e:56:75:9b:e0:1a:1b:3f:d7:4c:7e:59:0e:01:
                    ef:7b:85:c8:28:c2:62:6f:38:8b:26:55:86:93:80:
                    de:95:e7:04:0b:c7:18:77:fc:17:de:ae:fa:0d:fc:
                    fc:62:36:d3:9a:97:13:b8:ff:68:f4:5c:a2:4d:29:
                    bc:74:c0:85:9a:4f:05:77:a9:0a:a6:f7:93:c3:76:
                    f8:88:6a:ba:3d:03:db:88:b7:54:7d:e8:5a:f9:4e:
                    e4:3d:bd:26:e6:b4:9c:b0:60:8d:1a:db:ef:a0:ba:
                    de:1a:d5:3e:d6:94:9d:c8:53:51:4b:ed:76:c4:a5:
                    1c:51:a1:fb:c2:6c:b4:65:32:bb:94:ba:2d:4d:c8:
                    1a:ba:d2:ae:31:c8:7d:72:da:4c:2a:0b:aa:f6:35:
                    1d:14:29:af:87:64:49:dc:1f:cd:c2:4a:72:37:b0:
                    f5:ff:ea:2f:dd:59:ae:34:75:92:a4:56:17:2c:cf:
                    66:26:19:36:e8:22:c9:a3:1a:6e:42:48:db:39:31:
                    64:33:bb:0b:89:91:a0:38:dd:8a:ee:95:d8:32:e4:
                    79:01:06:5d:35:fa:58:69:07:b7:74:29:f1:e5:88:
                    9f:5d:87:68:96:fa:31:39:49:f0:55:41:83:07:c5:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:BC:28:FC:36:70:19:38:04:BE:BC:92:64:9E:49:F3:77:66:D5
            X509v3 Authority Key Identifier:
                keyid:2E:56:A0:37:74:09:1A:59:13:86:D5:96:B2:25:DD:96:F3:C3:B9:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:17:43:ab:af:e3:c7:d0:fb:c0:dc:06:ec:c2:d5:39:d8:
         d8:50:05:92:9f:3f:f7:48:b0:37:8d:27:d5:33:cb:33:72:1a:
         fb:17:5e:34:58:fb:d0:f7:50:f1:23:c4:9e:9f:1f:2a:08:8d:
         93:6c:a8:5f:c7:23:68:5a:fc:fd:83:c6:66:06:8f:87:ac:11:
         05:43:03:f9:f5:6b:09:c6:48:f2:db:c2:0d:29:d8:35:b6:55:
         d0:27:d2:5c:c4:c8:ca:70:ff:9f:56:5f:aa:ff:41:40:60:49:
         18:db:2f:33:ea:b7:50:73:b1:f3:f3:1b:a7:d7:f4:4b:7a:71:
         33:68:51:61:55:a9:89:b4:d1:c0:fb:b1:30:bf:e3:cb:8e:49:
         de:24:6f:6e:6e:34:8c:fb:8d:e6:98:f6:31:82:46:71:09:e0:
         e0:a2:e0:3e:47:0e:01:52:74:72:a2:0b:de:ff:f7:7d:56:43:
         d2:df:eb:27:b4:0a:88:b1:11:ea:97:7c:65:77:5a:b5:af:11:
         ea:bc:3b:7b:f1:c8:fc:47:dc:e6:3a:ec:9e:09:41:e2:67:d2:
         6b:15:14:62:f8:01:be:7d:5e:3a:e0:a5:18:de:0c:09:f9:f4:
         74:1f:d1:5a:47:3f:ea:68:c5:9f:4b:b3:60:28:c3:5f:3d:53:
         50:ed:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:59:17 2026 by rpki-client