Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3232203d3e20323639333137.roa
File:                     34352e3138342e36302e302f32322d3232203d3e20323639333137.roa (raw, json)
Hash identifier:          RR1iqcM03gPimIlNkOlK1tM7DHNOaYc884kiTOCDbW8=
Subject key identifier:   9C:2C:C0:14:DC:47:25:B4:97:33:82:51:CC:D4:EB:B9:B4:5A:83:AC
Certificate issuer:       /CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
Certificate serial:       1E0178837DEF4EA8ECFA07B629EEC553BCF8A194
Authority key identifier: 40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3232203d3e20323639333137.roa
Signing time:             Wed 15 Jul 2026 14:14:40 +0000
ROA not before:           Wed 15 Jul 2026 14:09:40 +0000
ROA not after:            Wed 14 Jul 2027 14:14:40 +0000
asID:                     269317
IP address blocks:        45.184.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl
                          rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:01:78:83:7d:ef:4e:a8:ec:fa:07:b6:29:ee:c5:53:bc:f8:a1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
        Validity
            Not Before: Jul 15 14:09:40 2026 GMT
            Not After : Jul 14 14:14:40 2027 GMT
        Subject: CN=9C2CC014DC4725B497338251CCD4EBB9B45A83AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:5e:1e:da:5d:54:c1:06:21:6b:59:30:df:
                    f0:85:1c:d7:b1:ef:e8:bb:25:b9:e6:c8:52:cf:e2:
                    af:54:af:1c:5a:fb:b0:fa:d8:98:a1:b1:ea:a8:09:
                    66:ea:ab:8e:3e:27:84:69:b8:d0:a1:ef:2d:46:f0:
                    3b:b4:3d:55:60:9e:7d:72:11:9e:23:d3:58:a1:2f:
                    ec:52:3c:ff:cf:73:01:84:91:89:03:0b:d7:1d:cc:
                    b5:27:a1:e4:7b:6b:89:45:d4:46:29:f7:72:64:0c:
                    6c:8a:f1:84:d2:de:40:8e:82:b9:d0:37:31:de:bb:
                    e5:90:45:cc:9f:ab:34:7f:49:66:93:f9:11:ef:b3:
                    65:d0:10:eb:cb:7f:76:f9:28:79:36:09:18:05:72:
                    1f:6a:e6:54:1c:b9:73:c4:52:ba:98:d0:f3:e8:49:
                    c2:7a:8b:cb:b9:c5:1b:44:fd:c0:69:8c:7a:25:d9:
                    cf:63:57:33:d5:e1:e7:05:47:03:72:ef:9f:53:50:
                    64:8e:1e:0f:b4:c1:fe:36:4e:fb:ee:c7:4a:6c:33:
                    8f:47:4e:e0:50:e7:94:72:52:9c:bb:09:ee:84:7f:
                    b6:15:7f:bf:f4:6e:f1:58:39:c0:71:54:44:54:ad:
                    5a:94:43:d5:8e:99:03:fd:6f:83:3c:d2:b2:33:20:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2C:C0:14:DC:47:25:B4:97:33:82:51:CC:D4:EB:B9:B4:5A:83:AC
            X509v3 Authority Key Identifier:
                keyid:40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3232203d3e20323639333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:6c:cd:03:15:43:7e:9a:a8:74:c0:a2:b4:98:3c:b9:fb:a6:
         98:1d:f1:b2:e9:7e:d1:45:3b:95:9c:75:6b:5f:ca:3c:cd:69:
         de:61:3a:af:c5:76:75:2e:75:7d:c8:79:61:33:e6:c7:17:96:
         4c:78:23:8c:e0:23:60:db:e8:15:56:90:99:98:b0:b2:bd:b2:
         d7:ce:d7:0b:d7:b0:f4:14:fc:d9:ba:99:ff:b6:72:32:56:b6:
         8f:d4:e8:68:41:ca:61:db:54:27:89:db:3a:b1:88:3b:33:52:
         ad:80:bf:f7:46:1e:84:dc:02:de:c0:ba:b9:40:4b:61:c2:17:
         ea:95:70:46:6d:94:3f:4d:76:7a:b2:8c:4f:31:5c:c3:cc:fe:
         e7:b2:84:02:fe:43:d4:d3:c4:84:45:df:5d:ff:ac:ad:16:e7:
         1a:ca:f2:74:33:28:4f:40:d8:f5:2d:37:42:d3:39:88:94:fc:
         f9:39:6c:77:86:91:68:1d:28:47:79:de:00:51:00:7d:15:95:
         e3:1b:34:be:95:32:db:5b:36:0d:8f:a9:64:58:40:7a:37:2b:
         ba:55:f2:04:ab:34:10:f3:24:ee:1d:95:4e:d0:8d:f3:84:2c:
         8f:22:96:e3:13:ea:24:c3:b3:6c:fc:7e:63:dc:02:0c:af:b8:
         62:7f:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:50 2026 by rpki-client