Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
File:                     34352e3233302e32342e302f32322d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          ycbWuqMkb3fvODH1+BDVn+tyGQ32JBuqQuX21RxoSt4=
Subject key identifier:   01:05:DF:F1:41:9D:AA:75:D1:1D:80:BC:24:5C:AE:24:10:19:BA:19
Certificate issuer:       /CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
Certificate serial:       5BC3421F30850E61E8E514FC519831F269A4018B
Authority key identifier: 66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa
Signing time:             Tue 30 Jun 2026 19:10:06 +0000
ROA not before:           Tue 30 Jun 2026 19:05:06 +0000
ROA not after:            Tue 29 Jun 2027 19:10:06 +0000
asID:                     262893
IP address blocks:        45.230.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c3:42:1f:30:85:0e:61:e8:e5:14:fc:51:98:31:f2:69:a4:01:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
        Validity
            Not Before: Jun 30 19:05:06 2026 GMT
            Not After : Jun 29 19:10:06 2027 GMT
        Subject: CN=0105DFF1419DAA75D11D80BC245CAE241019BA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:6b:3c:bd:00:f5:6e:b2:01:13:07:37:5f:
                    3f:bc:d5:e0:87:da:a3:c2:83:f7:98:61:8e:c1:7f:
                    e5:c4:7b:8d:a6:8d:10:b7:ff:90:87:e5:a7:cf:5e:
                    88:3a:8f:3d:6b:81:5d:b2:4a:4d:72:35:ea:45:06:
                    75:e7:c6:44:3a:22:a6:84:42:c4:61:e9:4d:cb:92:
                    71:6b:e0:f6:71:7e:24:9a:cf:ff:33:a9:dd:6d:ca:
                    e9:a0:70:c0:94:26:c3:bf:01:46:a0:32:fd:a3:e6:
                    83:90:3d:fc:f1:cc:96:a3:ce:23:79:07:d0:ab:a4:
                    fc:0b:6b:5d:8a:81:e8:00:8d:e0:c7:ff:f3:b5:36:
                    d8:d0:ed:38:43:61:d9:44:fa:e9:1c:fe:0b:ae:82:
                    af:b0:f9:c2:30:e9:4c:c8:83:5f:a2:dc:6b:69:b7:
                    1a:08:95:b9:25:b0:31:db:5f:ea:af:ad:80:c4:e1:
                    36:5a:ea:94:ca:7b:41:f5:8c:38:c4:78:0b:e8:c7:
                    d7:cd:97:58:d8:b8:37:25:5c:4e:df:6a:3f:bc:fe:
                    62:cd:b5:2d:1f:4e:7f:98:9c:14:00:1e:06:33:97:
                    65:cd:63:4c:48:c5:a7:ec:5a:31:d8:1c:1c:54:29:
                    6b:03:8b:d8:9e:fe:ad:e9:21:90:59:15:89:c3:23:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:DF:F1:41:9D:AA:75:D1:1D:80:BC:24:5C:AE:24:10:19:BA:19
            X509v3 Authority Key Identifier:
                keyid:66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/34352e3233302e32342e302f32322d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:01:76:79:c8:3b:07:e8:93:37:ba:06:84:5d:f7:29:f8:
         bc:ab:b6:00:6b:9c:d1:65:33:87:04:e4:71:39:73:a5:2f:49:
         9d:2c:0c:56:ef:15:f6:19:8c:ad:13:36:f6:ec:8d:a5:cd:62:
         fc:de:6e:5e:e2:fa:bb:ac:45:ef:ea:4d:7e:86:de:55:3e:60:
         fb:32:02:64:92:74:a3:dd:dc:07:e0:73:46:20:ff:15:7a:28:
         8a:ac:bb:f9:ef:0f:a7:47:61:fd:59:be:62:9e:2c:85:e6:f7:
         95:6c:c2:44:1a:15:23:79:3d:72:7d:90:9c:f4:ce:47:29:08:
         ab:c0:30:27:52:a2:64:9a:18:d9:48:2c:3e:5f:d8:1a:38:cf:
         2c:0b:de:c8:c8:cc:12:b8:1b:26:8a:aa:d8:ff:26:e7:82:f1:
         a3:8c:12:78:97:f7:45:f7:93:88:e7:88:7f:55:b2:5c:ab:b9:
         e0:3d:4a:cf:38:8c:a6:fe:b4:95:dd:02:e3:7c:d7:ee:af:e1:
         21:81:52:97:b6:8e:b4:65:93:49:fd:4c:4f:31:fe:00:72:4d:
         09:b2:10:83:d5:04:a7:10:d3:0e:86:bc:a6:c5:5d:80:2f:c1:
         7a:13:a9:48:da:69:d0:10:c0:e2:d7:c3:66:3b:ae:74:b1:43:
         da:03:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:27:01 2026 by rpki-client