Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/34352e342e3232362e302f32332d3233203d3e20323636303630.roa
File:                     34352e342e3232362e302f32332d3233203d3e20323636303630.roa (raw, json)
Hash identifier:          ClbohI4qi9++ZnDbRf4qe2pmGt80FGkpn0/7za1COx8=
Subject key identifier:   BE:72:ED:56:F7:1F:D8:30:D9:E4:FC:18:B6:00:1C:00:06:3D:12:BC
Certificate issuer:       /CN=40EA943B9928A2416D417FB39A392494904FD334
Certificate serial:       4B765928F3BED6C3B464F2E8BD11B7C1141A02DB
Authority key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/34352e342e3232362e302f32332d3233203d3e20323636303630.roa
Signing time:             Thu 16 Jul 2026 18:32:33 +0000
ROA not before:           Thu 16 Jul 2026 18:27:33 +0000
ROA not after:            Thu 15 Jul 2027 18:32:33 +0000
asID:                     266060
IP address blocks:        45.4.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl
                          rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:76:59:28:f3:be:d6:c3:b4:64:f2:e8:bd:11:b7:c1:14:1a:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40EA943B9928A2416D417FB39A392494904FD334
        Validity
            Not Before: Jul 16 18:27:33 2026 GMT
            Not After : Jul 15 18:32:33 2027 GMT
        Subject: CN=BE72ED56F71FD830D9E4FC18B6001C00063D12BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:5b:d3:c6:22:31:d3:e0:18:2c:5b:d3:55:
                    81:8a:75:33:19:7c:67:05:0c:c2:a1:a5:89:9d:53:
                    08:a3:8e:43:4d:05:2c:f1:bf:c5:82:ef:3f:32:a5:
                    43:3e:a4:52:0d:29:26:d2:5f:f2:bf:48:28:39:88:
                    0f:1e:15:f0:f2:33:ed:b2:4c:cb:74:c8:ea:f4:be:
                    50:74:1b:6b:fe:a0:4c:57:d0:59:7e:c1:90:26:88:
                    7d:4d:df:c2:27:d8:13:c9:77:ef:7a:df:6d:6e:4a:
                    5a:56:4b:66:74:09:35:da:a9:0f:ed:db:81:0d:c7:
                    71:f8:00:60:bc:23:bd:fd:7c:3c:6e:91:48:21:15:
                    6b:39:5c:50:ce:8b:12:a4:35:d5:b0:68:79:a4:1c:
                    62:2f:4e:07:5b:84:02:c4:5e:95:2f:9b:ab:8a:20:
                    d8:b9:d0:2d:4f:2e:e2:16:ad:58:89:26:d7:51:30:
                    f2:92:3b:a5:87:6d:86:df:86:20:9f:92:21:ad:a3:
                    4e:c9:5f:88:a6:a0:87:d8:39:8f:5e:8c:62:bd:e0:
                    df:dd:1c:31:63:58:d5:65:dc:7a:e4:3e:1c:9c:6e:
                    6c:84:61:ab:e3:61:b9:7d:fa:99:19:3d:31:85:97:
                    46:42:a0:05:71:36:41:7b:29:e4:41:e7:30:f9:ab:
                    41:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:72:ED:56:F7:1F:D8:30:D9:E4:FC:18:B6:00:1C:00:06:3D:12:BC
            X509v3 Authority Key Identifier:
                keyid:40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/34352e342e3232362e302f32332d3233203d3e20323636303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:99:d6:b2:bb:46:e3:41:e9:c8:35:1a:67:83:f9:a7:6b:4d:
         f7:8d:6d:b4:e3:0a:82:7c:0a:9e:9b:50:9c:9e:15:5e:e3:82:
         5d:92:3e:80:b1:db:e2:9c:e7:65:99:3e:a2:32:8e:e7:d1:f6:
         a8:d6:7f:ef:c5:83:72:eb:de:d4:09:25:4d:ee:8d:bb:1a:fe:
         1b:d5:17:5a:34:b0:47:20:70:bb:e8:51:62:59:4c:20:ef:fd:
         e8:f9:10:dd:fb:b3:60:44:bb:73:47:8f:0d:c6:81:97:50:92:
         fb:89:6d:5c:e1:df:a0:12:4f:cb:7b:36:29:ab:90:96:10:f7:
         36:4b:27:64:67:ba:fc:ba:4f:e0:59:48:f5:04:f5:5c:f1:89:
         6b:65:6a:61:34:1e:0b:5f:62:aa:ad:66:6d:15:fb:fd:d1:36:
         58:22:21:5f:f7:ab:d9:71:fd:e8:5b:c0:5e:80:bd:d0:61:26:
         f2:82:86:89:35:91:6c:b4:27:e0:df:3d:c1:09:03:94:81:59:
         4f:aa:8a:4b:e3:2b:e9:49:d0:51:e4:e9:91:21:f8:59:b8:fb:
         08:84:ed:16:e6:7f:7b:ae:2b:f1:ae:24:b6:53:35:12:e4:9c:
         05:94:fc:2d:17:68:fc:6f:bb:b5:91:52:87:d1:d0:5d:43:35:
         30:8b:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:51 2026 by rpki-client