Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
File:                     34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa (raw, json)
Hash identifier:          0VsumeHDzXqdwcbHYzKhlV4xRAbg1XXRQ/OaEnrGtV4=
Subject key identifier:   0A:33:03:D2:F8:42:CF:D6:6D:BC:EA:C0:16:8E:09:45:A2:F5:D1:C8
Certificate issuer:       /CN=1868D2CD2F78C791ADA7475822735FBFE8F64B8B
Certificate serial:       0393819DA9E5E3CDBDB0CE848B7228D387DB7E52
Authority key identifier: 18:68:D2:CD:2F:78:C7:91:AD:A7:47:58:22:73:5F:BF:E8:F6:4B:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
Signing time:             Thu 16 Jul 2026 14:05:59 +0000
ROA not before:           Thu 16 Jul 2026 14:00:59 +0000
ROA not after:            Thu 15 Jul 2027 14:05:59 +0000
asID:                     268297
IP address blocks:        45.237.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.crl
                          rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:81:9d:a9:e5:e3:cd:bd:b0:ce:84:8b:72:28:d3:87:db:7e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1868D2CD2F78C791ADA7475822735FBFE8F64B8B
        Validity
            Not Before: Jul 16 14:00:59 2026 GMT
            Not After : Jul 15 14:05:59 2027 GMT
        Subject: CN=0A3303D2F842CFD66DBCEAC0168E0945A2F5D1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:e8:da:d6:60:8b:7c:9a:74:04:27:82:b0:
                    3a:db:4c:ce:69:5d:31:ce:4a:4c:c5:9d:93:cb:06:
                    b3:a7:17:71:c7:27:98:21:d2:a9:36:50:56:69:b4:
                    55:04:20:27:0a:a1:ab:a4:0a:51:45:45:82:2b:1f:
                    a0:c2:bd:7b:af:6a:73:d9:a5:7d:f8:9b:66:0b:14:
                    44:0c:c3:27:e8:53:e5:87:4a:4b:ed:31:47:3f:c1:
                    eb:34:e1:4f:be:14:73:7d:0c:15:eb:99:58:c7:94:
                    3a:e6:d1:f3:85:93:c9:39:36:19:38:94:0f:30:5f:
                    5e:88:39:09:4e:73:1d:7c:d5:55:37:b2:0e:c6:e8:
                    ee:74:c3:bf:4f:79:01:7e:a3:8a:de:89:a1:22:3f:
                    bf:4d:a8:c9:9f:7b:c7:4c:d0:5f:cd:3f:dc:39:5a:
                    bf:9a:f8:33:9e:f5:40:19:06:6f:fe:ef:b0:d6:20:
                    ef:03:4d:f6:30:83:ed:59:42:dc:6a:ee:55:b6:d5:
                    fc:a7:8d:2a:0e:fb:c8:73:df:f1:c3:9b:08:77:de:
                    03:a6:bb:02:bb:10:f8:3f:dd:62:48:24:d1:0a:13:
                    24:78:a1:84:51:fb:8e:1a:4c:3b:dc:7e:fe:dc:dc:
                    62:df:ce:0e:fd:b3:14:5c:1c:9a:d5:c5:47:1e:80:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:03:D2:F8:42:CF:D6:6D:BC:EA:C0:16:8E:09:45:A2:F5:D1:C8
            X509v3 Authority Key Identifier:
                keyid:18:68:D2:CD:2F:78:C7:91:AD:A7:47:58:22:73:5F:BF:E8:F6:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1868D2CD2F78C791ADA7475822735FBFE8F64B8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:8f:42:38:e4:4c:1c:72:fa:1e:c4:17:ab:b5:0f:8d:5f:
         04:56:70:7c:4b:14:eb:e9:96:d1:25:bc:10:2c:b5:a4:8e:79:
         af:2a:77:9b:e4:33:58:05:62:47:a6:e9:99:e7:e7:d8:8e:47:
         16:61:12:da:40:dd:29:5c:a8:5a:59:7e:b6:ef:9e:83:5c:f8:
         46:6b:2e:96:e5:65:0e:15:8a:27:d9:bb:45:0e:c0:8d:d9:a0:
         af:81:6e:e9:73:12:29:56:33:8f:6f:39:db:c6:ca:8e:8f:ac:
         1c:a4:79:59:87:06:f7:4c:fc:90:1e:38:e1:e7:31:08:3d:80:
         5d:6b:c3:f3:35:57:2c:a6:f8:70:8b:81:e6:fc:ad:db:18:11:
         db:9c:10:d0:21:d6:ac:3a:de:04:7d:a7:13:37:a7:a3:48:36:
         24:d0:d1:39:82:c1:ed:fd:fc:0c:21:e6:e9:b7:69:70:da:92:
         c6:ec:d9:f3:fe:23:4c:76:12:b1:12:18:25:31:04:91:09:16:
         56:83:fd:96:36:9e:c1:c4:26:24:35:8d:ab:ed:b7:ab:27:71:
         ff:77:19:b9:a1:9d:65:e7:bb:be:4f:28:86:43:d4:e2:2b:66:
         f4:c4:a3:99:92:09:35:21:cc:5c:d2:a3:7c:b3:8f:01:69:da:
         bc:f6:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:49 2026 by rpki-client