Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa
File:                     34352e3233352e3131362e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          6MUML7X2DccSZRyWKiiWtC9KW9WlunAiriFMePnmt8E=
Subject key identifier:   EA:46:4A:41:F7:AC:C5:CA:6F:BB:33:14:07:C2:E2:53:EB:77:FB:6C
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       3CE8D774FA09489CACA034AD32F811B6578DE2ED
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:57 +0000
ROA not before:           Sat 04 Jul 2026 13:38:57 +0000
ROA not after:            Sat 03 Jul 2027 13:43:57 +0000
asID:                     28201
IP address blocks:        45.235.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e8:d7:74:fa:09:48:9c:ac:a0:34:ad:32:f8:11:b6:57:8d:e2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:57 2026 GMT
            Not After : Jul  3 13:43:57 2027 GMT
        Subject: CN=EA464A41F7ACC5CA6FBB331407C2E253EB77FB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:81:04:d3:0e:e1:8c:c6:a6:e7:8b:b9:68:
                    a8:d4:bd:4b:62:c9:dd:c4:48:4f:f1:db:7e:20:e1:
                    30:39:5e:3a:07:cf:8e:5c:c5:55:24:15:87:c5:69:
                    cf:47:68:b5:9c:1e:b3:6c:28:7e:53:0e:6b:79:47:
                    0b:04:bc:42:54:d7:e4:53:0a:4f:fe:a0:7d:3c:a1:
                    32:77:05:76:70:b3:4f:a8:5a:3a:f9:58:56:0b:d0:
                    2c:8d:75:55:5d:59:ab:df:81:48:d6:58:c7:f9:f0:
                    43:33:41:8d:22:e7:a1:25:f2:93:c7:37:6e:79:23:
                    d5:0d:e7:ab:b2:b0:3b:3d:1e:14:ec:87:47:d8:76:
                    9b:6c:a3:98:e7:d3:3e:33:90:81:27:a3:eb:63:de:
                    da:87:2f:17:d7:c1:2d:9d:04:10:09:a9:92:84:7e:
                    e0:41:dd:2f:5a:c4:69:40:9e:6d:21:a3:f0:2b:9a:
                    5a:aa:b7:c0:c8:ae:8f:ae:46:27:fa:00:ae:87:dd:
                    e3:50:81:a6:66:92:f6:da:89:f8:c4:50:79:2c:43:
                    06:f0:dc:33:cc:df:e3:7e:a9:af:db:e6:7c:b3:01:
                    72:76:b9:ab:e4:21:96:62:56:7d:64:08:5c:56:39:
                    b9:2b:3e:9f:39:f0:e7:36:14:01:c8:53:68:39:af:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:4A:41:F7:AC:C5:CA:6F:BB:33:14:07:C2:E2:53:EB:77:FB:6C
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e3233352e3131362e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:8e:0c:0a:b7:12:cc:b9:00:0e:d7:f4:78:d4:a8:53:ed:07:
         2b:e5:22:7d:40:2c:fe:13:36:ac:ef:b9:a8:2a:a5:15:a7:f4:
         39:b1:dd:ae:c7:bb:de:fd:55:10:00:f0:0c:8f:32:75:82:9c:
         1a:1e:a4:26:cb:3b:f5:05:79:05:62:7e:8e:e7:44:1c:1d:eb:
         c5:81:b1:a6:73:d0:e3:2f:4c:60:42:f2:6a:ef:12:93:9b:b5:
         9a:e7:c7:62:ef:85:ae:55:08:b7:54:9d:2c:92:f2:3d:b1:fd:
         0f:1a:5d:f5:55:66:9d:84:2f:34:18:6e:50:05:09:53:41:f7:
         78:85:11:20:12:64:93:cc:36:b5:51:3d:20:55:46:86:f5:48:
         e0:af:0a:46:30:36:3a:69:d4:e4:24:08:cd:b0:40:44:f1:7e:
         74:cb:43:3b:4e:c3:9a:27:f4:54:e3:6a:db:98:7f:43:b1:44:
         a3:12:72:30:72:c3:50:0f:52:04:62:10:9b:bb:94:7e:90:b0:
         53:df:b5:9f:52:a2:da:f8:40:50:f7:32:62:b4:fb:a3:9b:8b:
         8e:7d:f5:55:54:08:b9:a1:24:0e:46:71:e3:4e:10:ea:0f:6d:
         f9:4f:79:94:0d:35:57:8b:48:38:28:ad:17:19:b8:22:58:15:
         98:73:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:05 2026 by rpki-client