Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa (raw, json)
Hash identifier:          Pmt5SUqegKKbX67+XN05Rb8x5KUt8+etynWa+QM164s=
Subject key identifier:   25:A7:1B:75:12:C8:AC:0C:66:10:7B:02:DB:2C:31:56:77:B2:81:92
Certificate issuer:       /CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
Certificate serial:       2E389421D22545AC1DC86ACA820409F6415DCD21
Authority key identifier: 90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa
Signing time:             Fri 10 Jul 2026 21:21:02 +0000
ROA not before:           Fri 10 Jul 2026 21:16:02 +0000
ROA not after:            Fri 09 Jul 2027 21:21:02 +0000
asID:                     268248
IP address blocks:        45.236.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl
                          rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:38:94:21:d2:25:45:ac:1d:c8:6a:ca:82:04:09:f6:41:5d:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
        Validity
            Not Before: Jul 10 21:16:02 2026 GMT
            Not After : Jul  9 21:21:02 2027 GMT
        Subject: CN=25A71B7512C8AC0C66107B02DB2C315677B28192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:b7:77:e7:15:f1:24:cb:a3:bb:1d:26:a1:
                    fd:93:38:86:0b:e1:d5:4b:4a:2c:dd:22:f9:55:06:
                    c6:62:ba:ed:e8:57:a3:98:1b:e9:d0:43:42:ea:93:
                    25:68:96:d9:4a:74:15:05:24:0f:f9:65:ae:88:20:
                    44:e0:d6:25:2b:64:e0:44:c0:b1:14:f5:76:a5:d0:
                    30:2e:8d:19:24:92:61:ab:a4:b6:5b:9f:8e:3f:3a:
                    05:c5:f4:d0:61:7a:b1:f1:e4:3b:01:45:3f:07:44:
                    4c:b1:a9:f2:da:b5:96:de:2d:56:f0:55:c3:d4:52:
                    52:e2:b3:69:ad:c9:21:e6:a0:32:82:6a:6e:f9:22:
                    05:0b:11:3f:b9:a7:bd:01:2d:6e:e0:6a:13:a5:2a:
                    b9:fa:48:f7:d5:5a:b6:da:94:3c:e2:7a:6c:4b:01:
                    4e:48:84:af:dd:00:d0:5a:23:00:47:56:82:a7:2e:
                    02:e6:22:bf:84:c0:6c:c2:b7:ad:83:b5:92:e3:0b:
                    f6:4d:1f:bb:25:95:5a:1d:2d:6e:db:91:e3:e9:9a:
                    d2:b4:d5:6a:52:c4:46:e7:96:7e:b0:5e:9f:09:69:
                    df:5d:a1:e2:b6:8f:50:7a:b6:2c:d1:d6:b4:1f:b6:
                    ca:af:38:b3:f5:38:2d:91:6c:36:d2:ea:38:61:f4:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:1B:75:12:C8:AC:0C:66:10:7B:02:DB:2C:31:56:77:B2:81:92
            X509v3 Authority Key Identifier:
                keyid:90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32322d3232203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:9c:d8:67:e6:2e:2e:c7:35:a4:db:41:64:f0:7d:51:cc:
         8c:eb:9f:27:76:0b:42:7a:40:be:6f:a8:17:c8:6c:e8:42:2f:
         84:48:0d:4f:1b:39:f2:ff:61:81:41:74:a2:1d:c8:78:36:23:
         e0:60:8b:0a:95:93:4f:6a:9d:97:c6:69:b0:fa:2b:53:da:1c:
         98:0d:46:9c:fe:ee:13:29:cf:01:7b:09:75:20:bd:4c:c5:7d:
         5a:3a:04:78:64:30:1c:9a:fb:40:3e:72:1e:13:e6:ab:e6:b5:
         74:44:96:29:f4:a2:10:da:62:93:9f:72:e0:52:d2:72:3d:4c:
         75:7e:d6:df:ba:30:47:0c:89:e4:4e:72:a4:14:24:cf:46:c2:
         c1:df:96:44:6a:f5:4a:da:48:2b:1c:4b:d8:f7:e9:34:94:91:
         36:a9:1c:5e:bf:c9:45:ca:10:08:fa:b1:a8:38:56:8d:9b:df:
         43:31:d8:9e:86:08:4b:16:a9:74:20:19:1d:be:9d:56:9b:71:
         a6:63:d4:f6:f0:0e:86:68:cd:49:b6:7b:92:f0:5c:27:14:3c:
         f0:e5:3a:8e:bc:6d:f5:e0:a6:68:78:b5:7f:1b:b0:2c:e3:21:
         8f:48:87:b9:3a:b5:aa:a8:86:52:3a:1d:bf:c2:62:7a:0c:81:
         a0:b7:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:25 2026 by rpki-client