Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa
File:                     34352e3138342e38382e302f32322d3332203d3e20323730323535.roa (raw, json)
Hash identifier:          7iKgz8+FwZjSU4n8n5mZ9ZBjjfcW2rNsoTCDZdVdxJY=
Subject key identifier:   3E:75:D8:60:41:40:46:51:71:85:C2:7F:EB:56:84:83:FA:43:37:72
Certificate issuer:       /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
Certificate serial:       1A2B5D028D6BD3A5E206770E92C05C3A993D830A
Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa
Signing time:             Tue 14 Jul 2026 13:18:24 +0000
ROA not before:           Tue 14 Jul 2026 13:13:24 +0000
ROA not after:            Tue 13 Jul 2027 13:18:24 +0000
asID:                     270255
IP address blocks:        45.184.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl
                          rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:5d:02:8d:6b:d3:a5:e2:06:77:0e:92:c0:5c:3a:99:3d:83:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
        Validity
            Not Before: Jul 14 13:13:24 2026 GMT
            Not After : Jul 13 13:18:24 2027 GMT
        Subject: CN=3E75D860414046517185C27FEB568483FA433772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:0a:4c:40:54:09:56:19:0b:cd:a4:af:af:
                    b7:a0:e7:dc:92:8f:1e:06:24:f9:0f:74:90:3a:39:
                    e1:c9:3a:e5:b5:d5:54:21:fd:63:97:44:06:d8:91:
                    73:a7:e3:ec:86:e2:28:89:b8:8f:5b:7a:03:a8:72:
                    5d:44:6c:81:2b:f4:46:66:29:ed:fe:1d:ad:5c:e1:
                    76:49:28:f5:57:b5:91:c3:12:f6:f9:fd:92:72:4a:
                    84:89:57:38:59:68:6f:83:ea:43:aa:1b:04:88:1a:
                    ef:0f:4f:57:93:87:1e:00:0b:18:b8:64:a7:31:83:
                    9e:53:cd:f4:12:7c:41:51:24:6c:62:e8:41:72:29:
                    2d:0c:eb:32:9a:9d:ff:16:dc:56:60:6c:b9:de:65:
                    1e:24:08:79:9b:26:92:15:3a:ad:d0:33:55:1d:8d:
                    87:54:66:07:75:70:61:bf:73:09:86:d1:6e:c6:c4:
                    70:5d:6d:da:28:93:8b:b4:a4:4b:08:f8:86:ed:43:
                    20:33:1a:da:a3:32:82:e8:de:b6:14:4f:08:1b:fe:
                    87:c8:c0:5b:ee:83:b9:46:9d:a2:a8:cb:a3:aa:3f:
                    b5:64:e2:b6:47:f5:91:b2:54:07:10:da:fd:0a:a0:
                    71:22:9c:c4:a5:d4:1b:e8:0b:bd:6f:18:3f:5a:1a:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:75:D8:60:41:40:46:51:71:85:C2:7F:EB:56:84:83:FA:43:37:72
            X509v3 Authority Key Identifier:
                keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/34352e3138342e38382e302f32322d3332203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:04:8b:d4:63:83:cd:f7:bc:76:a0:99:58:fa:6a:58:cb:e7:
         66:4a:12:28:6f:2b:db:60:e5:0c:6c:da:c4:19:3a:3e:70:ce:
         d8:96:8b:65:53:f7:a9:37:86:fc:e3:b9:93:32:5f:09:75:d7:
         7e:88:50:36:a9:bf:9a:d9:01:88:85:16:1d:af:38:a8:27:39:
         8d:9d:fd:5c:1e:37:5a:5f:6c:87:ba:28:20:ab:36:bb:3b:02:
         39:6f:4a:51:a9:0c:98:7c:7e:ad:11:50:0a:7b:03:da:fa:4e:
         36:de:28:61:62:7c:e6:ef:91:2e:16:ec:8f:e5:59:60:d6:ad:
         ff:d0:45:21:83:7c:46:d4:b6:57:67:b4:17:34:0b:bd:3a:32:
         16:ee:57:ef:aa:79:86:da:19:f5:fe:18:3e:5c:da:d3:10:c6:
         1f:ff:d1:da:4e:8d:1f:38:77:fa:c8:d6:39:2a:14:d1:e2:76:
         e0:1a:81:87:5c:31:b6:d9:97:41:e3:55:f5:96:0f:53:c6:a0:
         ba:3b:7b:d6:e7:57:6a:39:26:94:13:72:eb:cd:24:19:cb:34:
         e5:68:7c:12:fc:0c:8b:f2:9f:57:ee:de:8b:75:78:4a:d7:f3:
         93:67:42:c6:56:1e:9a:0d:33:c2:0d:c7:b0:86:d0:fe:88:0e:
         26:ba:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:35:51 2026 by rpki-client