Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
File:                     34352e37302e37322e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          MBsrRsezt0j1svBJvNEc9g+1OKw4eeeUCshRvmInONs=
Subject key identifier:   F9:36:25:18:B2:EB:F3:CC:86:99:94:E7:82:39:BE:A8:7B:9B:38:27
Certificate issuer:       /CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
Certificate serial:       5E5536781F71D1D336D82239C9B24147D8B93B
Authority key identifier: 71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 22 Jul 2026 12:37:47 +0000
ROA not before:           Wed 22 Jul 2026 12:32:47 +0000
ROA not after:            Wed 21 Jul 2027 12:37:47 +0000
asID:                     265447
IP address blocks:        45.70.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:55:36:78:1f:71:d1:d3:36:d8:22:39:c9:b2:41:47:d8:b9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
        Validity
            Not Before: Jul 22 12:32:47 2026 GMT
            Not After : Jul 21 12:37:47 2027 GMT
        Subject: CN=F9362518B2EBF3CC869994E78239BEA87B9B3827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:25:46:4d:65:aa:3c:e7:7a:c7:82:5f:52:9d:
                    b1:4b:78:ea:c7:70:32:30:dc:b8:2b:ee:09:d1:89:
                    11:5f:ae:21:46:26:a1:61:42:ef:a6:d0:aa:2f:1e:
                    77:0d:bf:ab:a8:ca:7e:a4:a7:9f:89:52:6c:91:fc:
                    54:1d:ed:02:e1:75:4c:83:e0:6b:03:df:7a:97:03:
                    63:ca:fc:28:5c:1a:b7:54:82:c8:a5:11:fa:d8:cd:
                    80:e1:04:1e:e0:ed:0e:a4:a0:bf:59:a9:7b:46:24:
                    ac:61:8b:6e:1a:2a:99:fa:70:d0:01:bc:c8:19:37:
                    dd:54:66:96:de:ad:9a:53:05:b7:94:4c:17:2e:d0:
                    e8:3b:52:c0:11:f8:3b:36:71:d4:8b:2d:a9:5f:18:
                    e9:72:38:63:84:81:ed:e7:4f:f7:e8:63:9b:5f:9a:
                    9d:9d:f9:ca:22:3e:c7:f4:9b:4d:d0:ee:27:df:b2:
                    15:8f:fa:75:83:19:e2:9a:fa:7d:2b:34:f2:c2:73:
                    24:02:20:79:73:0a:48:25:fb:85:20:51:0e:5e:8e:
                    69:43:58:3d:59:81:18:30:07:e1:95:c3:71:7e:92:
                    d2:6d:77:7e:fe:a9:40:3b:41:e2:6b:ee:d8:09:1d:
                    58:30:29:9d:56:f0:b1:a5:6d:e5:b6:24:b6:83:e4:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:25:18:B2:EB:F3:CC:86:99:94:E7:82:39:BE:A8:7B:9B:38:27
            X509v3 Authority Key Identifier:
                keyid:71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:a5:48:89:48:79:ea:55:a1:dd:3f:41:60:e9:59:a1:68:
         23:ce:47:47:a4:f3:3c:ae:cc:5d:79:aa:cb:23:47:a5:d7:d7:
         32:1b:fe:50:e0:05:ba:82:e5:36:98:bd:8b:e0:c6:76:dc:f9:
         74:f9:70:b8:e8:b0:e5:b8:1e:49:17:b4:75:c9:19:39:da:a0:
         17:8f:88:7a:6d:8a:83:ed:99:ba:0b:9a:88:65:6b:e1:13:5e:
         d9:b7:3f:df:04:48:07:5f:ad:5e:d2:21:aa:48:6b:58:cd:f2:
         89:9e:6b:dd:c3:47:74:ae:73:ca:5a:14:05:fa:a1:a7:6d:eb:
         f8:4d:66:38:d5:d1:f6:0e:d6:7a:ce:3d:fd:40:73:30:e3:19:
         72:a5:a9:b8:d8:98:2f:5d:7d:cc:4b:c1:8b:39:6d:3a:e1:a5:
         89:b2:27:be:7d:fe:fc:55:08:ca:dc:13:bb:22:a2:35:f9:e8:
         ad:d0:d6:c1:30:c0:00:ae:dd:07:d7:44:57:46:01:5b:b8:57:
         21:0a:5b:af:75:f0:33:ff:de:36:1f:6e:43:13:ee:b7:f6:f3:
         0e:98:d1:96:f6:a9:7c:8a:e1:b5:d1:1e:f9:d9:f9:d8:40:cf:
         8f:6d:0d:ca:f3:45:00:8a:c7:c4:df:c3:56:80:ba:e6:ee:cf:
         02:2a:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:52 2026 by rpki-client