Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
File:                     34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa (raw, json)
Hash identifier:          RprGmheaAlDo/4PTpVA/Fovdy5gip1Q6bZHFiJlSROw=
Subject key identifier:   83:5D:36:F1:23:46:36:09:AC:CB:F2:F3:CA:D8:71:CC:07:05:55:2C
Certificate issuer:       /CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
Certificate serial:       1B380F83F8AEB167D70C45AE160BC40FBA567F62
Authority key identifier: 90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa
Signing time:             Fri 10 Jul 2026 21:21:06 +0000
ROA not before:           Fri 10 Jul 2026 21:16:06 +0000
ROA not after:            Fri 09 Jul 2027 21:21:06 +0000
asID:                     268248
IP address blocks:        45.236.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl
                          rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:0f:83:f8:ae:b1:67:d7:0c:45:ae:16:0b:c4:0f:ba:56:7f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079
        Validity
            Not Before: Jul 10 21:16:06 2026 GMT
            Not After : Jul  9 21:21:06 2027 GMT
        Subject: CN=835D36F123463609ACCBF2F3CAD871CC0705552C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:65:98:96:36:e2:d9:49:cc:a3:83:06:f4:
                    c0:2a:18:4f:18:b7:60:4e:f6:3c:17:2d:e2:bb:b9:
                    31:0f:ae:d7:74:ee:0c:7c:7e:b8:8d:57:cc:4f:ee:
                    74:ae:82:48:9f:ed:f0:af:1c:4a:ea:63:83:1a:0f:
                    22:f2:cb:59:3a:d7:d9:20:49:8f:39:ac:68:01:0b:
                    9a:02:be:cc:e7:fa:24:90:40:22:c3:ca:14:95:a8:
                    28:ca:77:74:b1:ef:74:56:86:b4:db:bb:53:b8:2a:
                    db:f2:75:b3:ed:ff:4e:e3:d5:27:4d:d3:ba:ca:e8:
                    76:19:54:b5:0c:2e:c9:1b:74:79:d6:16:b7:81:ee:
                    af:46:27:14:36:e0:83:e6:d7:5b:a5:1c:9c:96:7c:
                    b8:4b:cf:da:c2:d1:7f:c9:d9:6a:6d:a9:1c:1b:e5:
                    8e:ee:1c:43:c7:64:2b:72:dd:bf:b4:1a:6b:3c:fe:
                    90:27:06:67:6e:70:57:5c:d4:ad:b9:e1:27:7e:52:
                    d0:5f:22:6c:ce:de:6a:df:40:93:08:0b:1f:18:59:
                    be:51:b7:10:a8:08:82:93:2b:11:4f:fd:23:62:73:
                    78:bb:f3:af:e9:d8:4d:1f:0f:84:2c:b5:47:0c:28:
                    55:83:49:9a:91:06:f0:db:cd:3c:75:29:9f:9b:f7:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5D:36:F1:23:46:36:09:AC:CB:F2:F3:CA:D8:71:CC:07:05:55:2C
            X509v3 Authority Key Identifier:
                keyid:90:C4:BA:CC:27:BC:CE:E2:9B:E2:D7:36:9E:98:A5:EF:FF:9A:C0:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90C4BACC27BCCEE29BE2D7369E98A5EFFF9AC079.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVVDDZeP8JKzC2mRwaFuHAtb2znaNHCzx4U5EHtVYPHL/0/34352e3233362e3232302e302f32342d3234203d3e20323638323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:09:ba:69:47:4f:72:a8:36:66:41:3f:ff:88:3b:cf:ac:52:
         1d:7e:bf:7c:0b:ce:c7:a0:09:17:cd:34:e2:36:55:5f:f3:26:
         c8:3a:a5:f5:91:5b:67:5d:41:63:37:eb:90:7e:2c:05:6c:70:
         ea:4c:70:a1:c5:a1:f4:d4:98:f7:95:b2:58:0e:74:71:c9:28:
         22:83:4d:3a:13:c2:79:a8:b5:c4:e3:27:b1:f1:08:50:ad:0a:
         fa:76:ce:1f:df:df:90:f5:7b:90:12:6f:d8:91:17:15:f1:02:
         b1:af:0f:bd:95:5e:ef:ff:7f:70:90:be:4c:a5:60:96:f2:a5:
         44:24:99:4c:4e:d8:59:3f:16:9d:0f:b7:a8:83:f5:d7:11:f5:
         8d:d0:fa:d9:72:1f:b7:4c:eb:62:6e:0f:2f:9d:8f:b3:9d:f5:
         c4:c9:67:8b:d1:82:b2:a2:e3:43:84:6e:16:4d:c2:5a:36:3c:
         a1:22:34:2e:3e:76:83:12:4a:a2:cf:0f:60:6b:12:d9:39:47:
         74:74:c8:61:87:5e:7c:83:ec:a0:8f:39:58:73:ea:33:96:8c:
         88:a6:b9:67:b8:9f:3a:24:14:73:36:76:f7:9c:19:5e:fa:1e:
         d3:54:19:4d:94:0f:7a:9a:52:8b:75:a0:dd:d3:40:5a:6c:71:
         af:de:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:20:48 2026 by rpki-client