Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32332d3233203d3e20323637323837.roa
File:                     34352e3233332e31322e302f32332d3233203d3e20323637323837.roa (raw, json)
Hash identifier:          zKbXIKP7mItlQiDEWbkbOcMzS9N5GqhN9SDP8WeKv9I=
Subject key identifier:   02:98:BD:8C:A3:B7:43:F9:FB:66:70:97:28:D5:FE:67:F1:BA:AD:67
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       7A08AD40AD3133B33A350EF719A389962260A38E
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32332d3233203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 21:33:24 +0000
ROA not before:           Tue 08 Sep 2026 21:28:24 +0000
ROA not after:            Tue 07 Sep 2027 21:33:24 +0000
asID:                     267287
IP address blocks:        45.233.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:08:ad:40:ad:31:33:b3:3a:35:0e:f7:19:a3:89:96:22:60:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:28:24 2026 GMT
            Not After : Sep  7 21:33:24 2027 GMT
        Subject: CN=0298BD8CA3B743F9FB66709728D5FE67F1BAAD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:e6:61:ef:b3:db:62:33:60:33:3d:9e:98:
                    af:ce:62:da:1a:cc:bd:e3:cf:74:5b:59:a8:6b:d2:
                    1b:81:04:cb:66:9c:4b:25:e7:fe:3b:61:4a:9f:9d:
                    f0:74:97:72:78:98:00:7d:e7:35:13:ce:91:3f:85:
                    db:db:5f:76:ad:31:f5:62:e3:1a:2f:22:d4:40:f2:
                    97:d8:b8:b0:ad:23:85:c3:0d:b5:70:1c:e7:a5:10:
                    36:2e:f1:9c:c3:44:f6:08:08:41:61:50:dc:b7:bf:
                    5c:05:12:6c:c9:ab:1c:cb:98:3d:2e:07:d1:f2:f1:
                    65:41:e7:d6:9c:1b:6a:34:cf:33:2e:ac:7c:fa:c6:
                    7a:b7:c7:78:d1:42:ab:62:e3:c7:2c:ac:c7:57:d5:
                    c6:33:8d:b5:b5:19:68:e4:b6:a5:4b:8d:0e:9c:e7:
                    4a:27:2c:60:9b:e2:dd:b0:ac:cb:8f:87:1a:9d:c9:
                    c8:11:55:f9:d4:ab:1e:3e:98:79:1f:75:c4:7d:5e:
                    7f:64:c8:da:dc:a0:6f:0f:dd:09:a4:3b:93:34:c4:
                    43:4a:c3:cc:ea:d9:53:c9:ff:d9:47:00:6b:69:23:
                    2c:a7:0b:4e:61:46:73:17:09:c7:ae:02:50:0b:00:
                    3b:84:91:e2:88:61:b0:07:75:7e:c4:eb:1e:aa:50:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:BD:8C:A3:B7:43:F9:FB:66:70:97:28:D5:FE:67:F1:BA:AD:67
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32332d3233203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:64:2c:eb:91:1d:3b:b2:fe:ec:8f:c8:ad:9a:a2:f5:ed:61:
         81:5d:ca:5d:4c:84:72:42:02:f1:c5:8f:ce:4f:71:4f:71:22:
         f6:23:f0:88:b7:cf:ca:6b:77:90:6a:5b:39:94:b7:f8:c4:bd:
         3e:e3:9c:54:28:02:76:5e:34:3a:9b:51:e5:c0:7c:86:3b:40:
         48:ae:47:4b:a9:f5:26:1f:c9:53:5d:6a:ca:bd:41:63:07:ab:
         66:d7:99:5b:d0:fd:c3:fc:13:3a:9b:5b:9e:ee:52:e1:2c:62:
         d0:38:60:26:8f:1e:71:1f:de:86:e9:3d:1e:86:f0:14:da:49:
         42:b2:37:74:05:eb:46:7d:76:ec:8c:56:11:3e:bb:bc:a4:e9:
         92:c8:6d:e8:52:17:4a:12:33:57:8d:43:a1:18:3c:50:7f:b2:
         98:a1:d2:03:8b:a9:08:dd:8b:8e:64:cd:bf:58:94:19:d4:0b:
         41:64:90:db:52:25:a4:3e:3e:dc:2d:90:f5:6c:a6:b1:a3:d7:
         2b:46:ee:68:6f:37:0c:d1:0b:1d:3b:f0:d0:32:10:73:5b:30:
         80:00:66:6d:ce:d9:7e:6f:76:55:b0:a6:65:59:45:42:9e:7e:
         eb:ca:fe:ae:cf:56:9e:a3:d9:54:6f:53:34:d5:e1:b0:2b:06:
         6f:f0:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:51:48 2026 by rpki-client