Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
File:                     34352e3138342e36302e302f32322d3332203d3e20323639333137.roa (raw, json)
Hash identifier:          uHGUx6UnrFj+eBIj62d6JMEdABy2ZRwiWjeaO/25Jeo=
Subject key identifier:   79:64:F9:C6:98:47:6A:BB:6F:DB:15:45:BB:BB:D4:84:3F:FE:17:0A
Certificate issuer:       /CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
Certificate serial:       170FBC31BBBF0098E4904D97890909DBF8D9B6A5
Authority key identifier: 40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
Signing time:             Wed 15 Jul 2026 14:15:43 +0000
ROA not before:           Wed 15 Jul 2026 14:10:43 +0000
ROA not after:            Wed 14 Jul 2027 14:15:43 +0000
asID:                     269317
IP address blocks:        45.184.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl
                          rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0f:bc:31:bb:bf:00:98:e4:90:4d:97:89:09:09:db:f8:d9:b6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009BCA227DBF1010DF403A7CB5061E4A9AC0162
        Validity
            Not Before: Jul 15 14:10:43 2026 GMT
            Not After : Jul 14 14:15:43 2027 GMT
        Subject: CN=7964F9C698476ABB6FDB1545BBBBD4843FFE170A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:3d:36:85:34:d6:bc:11:6e:1d:2b:b0:10:
                    0a:84:bf:2e:f9:84:a0:39:a5:bd:eb:06:ea:22:c0:
                    64:a7:de:3b:86:9f:42:03:63:79:80:ea:b3:b6:ca:
                    ee:54:69:b1:ab:74:6b:8b:b0:42:e2:19:3f:91:f5:
                    e3:66:54:a7:36:34:da:fb:a3:ee:d7:9e:48:f0:46:
                    a7:70:55:4a:f0:78:e9:df:f1:3a:0f:55:1b:9e:70:
                    5c:29:78:76:59:08:35:60:7e:71:54:4d:5b:ad:86:
                    47:36:b0:50:b1:92:58:b1:56:46:c6:99:80:2c:7f:
                    ab:ee:61:0c:62:29:c8:c0:b2:32:69:51:83:5a:a8:
                    4e:91:09:d2:18:0c:49:a9:69:fd:da:a2:35:ee:62:
                    3f:43:fe:09:09:53:4a:36:27:eb:72:9a:d4:6f:34:
                    c5:89:b9:d2:ea:ef:f7:be:58:e4:e0:35:62:d4:92:
                    38:f5:42:09:e4:95:22:ee:fd:41:a3:aa:b7:ea:e2:
                    6e:39:8d:6c:bd:10:59:b0:4c:b3:61:78:01:da:d7:
                    f1:9b:e9:91:a2:8b:5d:9b:ff:5c:3d:4c:57:de:fd:
                    4e:ab:ca:52:02:ba:8a:a8:53:08:69:93:a9:c2:d4:
                    11:23:c0:32:ee:41:7e:a6:07:8e:54:53:0a:8b:48:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:64:F9:C6:98:47:6A:BB:6F:DB:15:45:BB:BB:D4:84:3F:FE:17:0A
            X509v3 Authority Key Identifier:
                keyid:40:09:BC:A2:27:DB:F1:01:0D:F4:03:A7:CB:50:61:E4:A9:AC:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4009BCA227DBF1010DF403A7CB5061E4A9AC0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:ea:93:5e:c1:d7:fe:3c:1f:d8:1e:0a:80:84:67:cb:4c:
         c7:68:0e:e9:c3:87:09:57:29:46:89:2f:e1:a5:9a:59:90:9f:
         8e:c2:f1:36:e5:a9:13:00:76:5b:5e:ca:c5:b2:aa:53:73:07:
         e6:d4:af:3c:86:93:1d:42:85:af:53:95:53:df:72:49:d9:5f:
         b0:54:ca:96:30:40:9f:93:57:50:76:1a:44:18:f2:a4:0f:e8:
         00:bf:9d:d9:72:9f:72:ee:8e:ec:0b:1b:43:4f:28:49:28:6b:
         fc:09:a2:f2:b8:cd:c3:70:90:e5:9c:4c:73:b5:bd:a1:df:11:
         97:8a:f7:32:86:06:f9:99:56:fa:fa:50:f9:7d:db:d8:da:3a:
         15:22:d3:73:3a:89:f6:b2:54:6c:bd:ae:59:8e:05:87:2c:2d:
         c8:b1:8d:c1:ed:20:55:4a:4d:01:2f:50:c6:20:35:e8:91:8e:
         f1:91:d6:db:58:42:7f:f0:b9:0d:c8:64:36:74:c9:3e:19:a8:
         d0:8b:55:69:24:16:a5:80:2a:a3:ce:14:c3:41:e4:ae:0f:ce:
         b8:ad:0b:11:6d:ca:8c:86:9d:42:e2:f1:dd:34:38:09:d3:fd:
         6d:52:f2:be:54:f6:82:4b:0b:75:dc:b8:80:b4:0f:51:f4:f5:
         17:d7:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:15 2026 by rpki-client