Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
File:                     34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa (raw, json)
Hash identifier:          6pY5QXeb4rWtXAchHJQAOCzaTsVw7BL+N0Xpl6E7eXo=
Subject key identifier:   7E:DD:D1:E3:F7:25:2B:1B:8B:41:47:57:37:62:71:99:CE:51:CD:78
Certificate issuer:       /CN=206F1492B1B5481E32DB722BD82E3656411655C5
Certificate serial:       6C761F2ECAB85E3903E90E282C9553E3A70B0DAA
Authority key identifier: 20:6F:14:92:B1:B5:48:1E:32:DB:72:2B:D8:2E:36:56:41:16:55:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa
Signing time:             Fri 24 Jul 2026 17:14:12 +0000
ROA not before:           Fri 24 Jul 2026 17:09:12 +0000
ROA not after:            Fri 23 Jul 2027 17:14:12 +0000
asID:                     269521
IP address blocks:        45.188.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.crl
                          rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:76:1f:2e:ca:b8:5e:39:03:e9:0e:28:2c:95:53:e3:a7:0b:0d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206F1492B1B5481E32DB722BD82E3656411655C5
        Validity
            Not Before: Jul 24 17:09:12 2026 GMT
            Not After : Jul 23 17:14:12 2027 GMT
        Subject: CN=7EDDD1E3F7252B1B8B41475737627199CE51CD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3e:dc:c7:94:d2:58:ff:54:74:f2:c4:bc:af:
                    31:8c:80:9c:9e:8d:72:96:ca:ed:ee:a5:79:14:3a:
                    fb:15:9a:e8:e8:f2:61:27:2d:f9:37:19:cf:33:2b:
                    40:b4:e5:e4:5b:a2:e3:bc:e4:cf:af:53:0e:a8:bb:
                    73:71:4e:e7:31:48:52:d6:90:ec:4b:9b:60:e7:08:
                    cf:a1:a7:83:27:40:7b:5d:8f:e8:ce:05:29:40:b8:
                    3b:1b:df:ae:c6:a3:ad:af:69:8e:08:cb:b9:8f:5b:
                    2c:3d:f5:97:44:9d:7b:77:82:25:42:1c:37:72:63:
                    f9:cf:15:49:5d:e6:9c:27:56:89:71:1d:86:e0:3a:
                    29:01:ca:5d:2a:73:b3:cb:8a:ee:9c:df:0d:8c:df:
                    17:3e:16:c2:12:50:b8:f3:66:6b:44:59:1c:4b:e2:
                    fe:b6:48:96:da:8e:1f:41:45:50:86:2d:72:bc:02:
                    f6:3b:a9:a7:86:8d:fc:a2:0a:be:c3:ca:ec:63:d1:
                    23:5e:22:46:da:0c:4e:86:07:c3:32:ce:9a:c8:58:
                    66:47:0a:80:59:48:29:ea:d5:03:01:04:19:16:2d:
                    4b:aa:44:9f:2a:2e:ab:d5:a1:ea:12:4f:ea:85:a7:
                    8e:3c:23:6a:8c:04:b3:9f:4f:77:46:06:fc:19:49:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:D1:E3:F7:25:2B:1B:8B:41:47:57:37:62:71:99:CE:51:CD:78
            X509v3 Authority Key Identifier:
                keyid:20:6F:14:92:B1:B5:48:1E:32:DB:72:2B:D8:2E:36:56:41:16:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/206F1492B1B5481E32DB722BD82E3656411655C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206F1492B1B5481E32DB722BD82E3656411655C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/34352e3138382e3131362e302f32322d3234203d3e20323639353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:db:2d:d1:d2:15:d8:7a:2a:de:a6:d9:fb:be:bf:89:57:da:
         38:34:d4:3b:b4:99:ad:dc:95:36:08:9a:39:e7:01:50:d5:25:
         a2:ad:6f:35:d7:61:b1:f2:9a:96:eb:34:a7:5f:77:ac:e6:40:
         8a:79:7d:d6:80:3a:1f:c5:4f:f8:40:f6:0d:b1:5c:3b:84:03:
         49:69:cf:12:c3:54:23:6f:66:6d:78:11:a8:fc:35:d7:fa:e7:
         08:bd:60:80:fa:07:43:d6:4c:f4:1a:53:68:5a:f5:4f:4d:58:
         d8:5b:23:44:7d:8e:b8:29:a6:e0:fb:59:dd:79:58:7b:14:a1:
         74:5d:d0:e5:67:ca:cd:97:b2:73:77:b8:80:ec:67:dd:65:6e:
         97:3f:eb:9c:59:1b:ef:ef:b0:0c:32:ae:88:3b:4b:22:d3:d5:
         1b:3d:ea:af:13:ba:d1:c5:7f:c2:54:66:18:9b:de:81:ce:50:
         4a:a9:ac:ae:67:d9:7b:48:24:06:5c:0f:65:ca:40:d8:e1:cd:
         a1:d6:a4:6a:5c:6e:98:a0:a4:19:38:09:06:02:33:83:7b:98:
         44:88:ed:31:a1:e0:8e:1b:76:53:0a:3b:fe:89:6a:44:af:73:
         8c:02:70:e7:69:5e:df:f4:7c:6b:2a:16:73:d8:83:9e:0a:f8:
         b3:57:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:51:19 2026 by rpki-client