Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa
File:                     34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa (raw, json)
Hash identifier:          7/lf4ZZ8tHrQu1s2gb2oNh4B1lx8Zu6LxkGoZk56Udk=
Subject key identifier:   DD:EB:6A:82:1D:63:F4:B7:9A:B6:51:42:EE:FB:E1:47:59:B7:D5:70
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       370F376CFBFB5D9D9F569378D11942F29E3BE409
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa
Signing time:             Sun 21 Jun 2026 12:46:18 +0000
ROA not before:           Sun 21 Jun 2026 12:41:18 +0000
ROA not after:            Sun 20 Jun 2027 12:46:18 +0000
asID:                     268134
IP address blocks:        45.169.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0f:37:6c:fb:fb:5d:9d:9f:56:93:78:d1:19:42:f2:9e:3b:e4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Jun 21 12:41:18 2026 GMT
            Not After : Jun 20 12:46:18 2027 GMT
        Subject: CN=DDEB6A821D63F4B79AB65142EEFBE14759B7D570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:53:19:71:3d:9b:db:0a:c6:99:33:71:03:
                    71:a7:8c:25:8b:24:d5:71:f7:0b:be:ae:91:2e:d6:
                    c3:43:04:e5:59:c7:73:21:15:6e:55:91:c3:41:ce:
                    98:a5:ee:1f:86:4d:fb:ab:1e:48:90:7c:e2:bb:f2:
                    03:2b:12:65:1e:e0:e9:3c:13:d1:72:b1:6c:48:58:
                    c4:c5:85:67:ec:94:3c:e6:2f:7a:4c:31:58:13:c7:
                    85:fd:f4:0e:f9:c8:ed:7b:ca:03:b5:23:09:bc:0a:
                    d4:44:fc:aa:92:46:f6:d7:52:31:d9:1a:de:0e:e6:
                    44:45:b7:6c:44:9a:2a:9b:0c:2b:e7:38:be:66:5f:
                    07:f2:40:e3:59:31:7d:58:2f:16:b3:bb:60:46:59:
                    c7:85:59:7f:84:56:b0:52:7b:f6:ee:2d:b5:c1:30:
                    1d:c4:05:29:b5:df:b4:71:a7:f4:e3:b8:b0:e3:2f:
                    4f:a1:0d:bb:5e:0b:9e:bd:bf:2c:d4:63:98:29:3e:
                    f1:40:6e:78:d2:e7:e6:41:21:f5:64:e0:ce:cd:5c:
                    d3:a6:ea:57:28:3a:a2:8d:18:9e:be:cf:28:4a:25:
                    97:ec:77:ba:45:5c:27:51:8d:c7:91:c5:5b:f0:ed:
                    cc:45:3f:f2:93:f0:73:7b:40:db:b5:0a:62:de:ac:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:6A:82:1D:63:F4:B7:9A:B6:51:42:EE:FB:E1:47:59:B7:D5:70
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/34352e3136392e3234322e302f32332d3233203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:9a:67:66:13:ea:cd:7d:31:e8:6d:ea:89:91:c3:14:4a:
         bd:9e:c1:ea:e4:c2:43:2b:c6:3d:cb:a2:bb:5a:2b:46:ea:c4:
         2f:47:5c:5a:60:13:4b:ba:d8:77:aa:3a:ad:d5:61:d7:3d:2c:
         8a:41:b2:6d:de:eb:8b:e1:74:77:1d:ab:2a:61:eb:3c:50:2e:
         32:5c:f8:29:0b:f5:5d:91:a3:e4:54:9f:3c:6c:73:5a:de:f9:
         2e:c6:46:92:57:b5:7f:36:cd:ae:0c:a2:84:e2:03:88:dd:58:
         4a:f2:5e:4f:80:e7:25:0b:54:ea:bd:57:4f:b9:1b:40:d7:3d:
         5e:6d:07:08:cb:6d:c1:bc:00:20:b0:4b:fc:fc:44:62:06:9e:
         c4:93:a9:f1:8a:cc:98:9a:0c:bb:81:c9:b7:90:c2:24:6a:81:
         fb:fb:59:08:34:4d:40:29:32:e5:c8:b8:f7:d7:75:ca:9f:fd:
         0f:bd:d4:b9:eb:f6:b6:6d:81:63:94:00:b0:48:3e:01:cb:d2:
         21:88:97:2b:bd:4b:6f:98:ba:1c:ea:ef:10:b7:9d:fc:0d:e4:
         8e:91:64:db:ae:57:ba:1e:ea:77:0b:b4:2c:b2:aa:57:9a:af:
         2d:c2:3c:7a:e5:f3:0e:75:78:58:97:d9:2f:ed:a3:87:36:82:
         7c:62:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:26 2026 by rpki-client