Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
File:                     34352e3136322e34302e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          cJc+UlczvMpgVLoX72DXO3crCiLPtyODp1qDK2oGkb4=
Subject key identifier:   F7:45:38:FA:66:12:78:B4:BA:6A:7D:84:C2:3D:1B:85:03:22:B1:6E
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       6825A3818DBFD426ED7353DD74426ED96632D5AE
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:39 +0000
ROA not before:           Thu 23 Jul 2026 16:00:39 +0000
ROA not after:            Thu 22 Jul 2027 16:05:39 +0000
asID:                     28158
IP address blocks:        45.162.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:25:a3:81:8d:bf:d4:26:ed:73:53:dd:74:42:6e:d9:66:32:d5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:39 2026 GMT
            Not After : Jul 22 16:05:39 2027 GMT
        Subject: CN=F74538FA661278B4BA6A7D84C23D1B850322B16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:e5:72:a2:64:a5:db:08:27:91:16:4b:20:
                    10:4a:e1:f8:2d:e2:8c:2a:7b:22:e4:5c:de:18:3e:
                    90:b4:f5:f6:92:00:1e:1a:80:c9:88:61:65:bc:e2:
                    0b:1e:79:81:4b:bd:8a:85:6e:0f:86:ab:05:3a:04:
                    29:32:9d:57:9b:84:cf:d8:8c:4f:f5:22:40:9a:f9:
                    b7:af:80:ea:6f:81:0b:ca:65:aa:7c:5b:f5:77:51:
                    2c:e1:4b:da:4a:df:2c:eb:4f:ac:48:80:f5:c3:05:
                    b3:21:8d:8e:3a:57:bb:2b:98:82:81:31:f1:fa:7b:
                    91:cc:4c:4b:ff:a5:c2:20:2e:0e:5c:d3:b4:49:05:
                    09:b0:56:35:a9:b2:f9:d8:34:e6:12:69:1c:ce:56:
                    f9:25:fd:a2:d3:fb:80:6e:d8:b3:47:50:38:0f:eb:
                    cd:07:c1:69:6c:78:51:1a:08:cc:df:fc:7e:de:fd:
                    83:09:a6:09:43:1c:37:98:59:dc:2d:bf:72:c4:ed:
                    f1:03:56:11:58:32:d4:bd:98:98:e7:15:f7:db:72:
                    5e:53:72:04:93:da:85:62:40:b9:20:49:bf:8c:28:
                    dc:87:2a:17:41:f9:46:64:49:44:73:bd:be:7e:79:
                    30:a3:18:ec:e1:6f:b4:d1:5e:6d:d2:54:e2:1a:a0:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:38:FA:66:12:78:B4:BA:6A:7D:84:C2:3D:1B:85:03:22:B1:6E
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/34352e3136322e34302e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:08:3b:1e:a5:d1:19:d6:c5:bb:61:4e:1a:49:af:b6:eb:85:
         d8:b8:f7:3b:53:40:af:58:fd:2c:5b:a1:fd:bc:59:ae:ca:f5:
         bf:d0:02:84:f8:1c:4e:ed:d5:7c:6b:6c:3f:4a:5b:e9:30:b1:
         4c:72:62:fc:3e:4b:98:61:f5:9a:82:3d:ec:33:34:67:82:af:
         03:7a:66:bc:f1:23:cb:68:82:33:37:25:11:4c:39:5c:14:2c:
         a2:fa:d7:19:ed:bc:2e:2b:cf:43:a9:0f:e9:3e:11:8f:f9:1b:
         b9:ba:42:38:61:24:ce:78:80:9d:19:ae:ec:88:44:6c:69:28:
         6f:70:01:c5:b2:28:e9:89:04:99:7b:2d:87:2c:8a:1b:ec:83:
         d7:85:ed:32:6b:44:a3:e6:94:97:bf:48:8c:6b:1b:b9:92:fd:
         ed:f3:eb:6e:12:0d:91:b7:52:39:25:09:51:6e:a4:21:2a:2a:
         f3:33:d1:28:3a:84:c2:8e:6c:30:0e:6a:6a:b1:d5:04:a5:4d:
         30:6a:49:c4:e0:9f:35:e0:79:6b:2c:07:9d:b3:ae:ba:77:17:
         70:7d:bf:13:92:af:ca:bb:88:f6:80:0b:31:71:0e:8a:ef:0a:
         9a:cd:fb:c1:c2:75:6b:01:66:6e:0b:58:a7:97:8b:7c:3d:9c:
         40:05:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:30 2026 by rpki-client