Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230372e302f32342d3234203d3e20323638373837.roa
File:                     34352e3137322e3230372e302f32342d3234203d3e20323638373837.roa (raw, json)
Hash identifier:          vframjhHXCfjiZFLPYq5Q5//HvnuTlH4oE7ukoVOEcw=
Subject key identifier:   2F:36:96:86:AA:05:B0:4A:5F:29:34:BD:83:05:5D:2A:EA:EE:17:50
Certificate issuer:       /CN=C580056AB029AC3AF008F0645E34ED32ECFADF01
Certificate serial:       7F253CB68FD09FD5DBCF76802F2F54B32ABE6A39
Authority key identifier: C5:80:05:6A:B0:29:AC:3A:F0:08:F0:64:5E:34:ED:32:EC:FA:DF:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230372e302f32342d3234203d3e20323638373837.roa
Signing time:             Fri 17 Jul 2026 11:54:11 +0000
ROA not before:           Fri 17 Jul 2026 11:49:11 +0000
ROA not after:            Fri 16 Jul 2027 11:54:11 +0000
asID:                     268787
IP address blocks:        45.172.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:3c:b6:8f:d0:9f:d5:db:cf:76:80:2f:2f:54:b3:2a:be:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C580056AB029AC3AF008F0645E34ED32ECFADF01
        Validity
            Not Before: Jul 17 11:49:11 2026 GMT
            Not After : Jul 16 11:54:11 2027 GMT
        Subject: CN=2F369686AA05B04A5F2934BD83055D2AEAEE1750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:ab:b0:1f:d1:0f:bc:08:cf:10:f9:b6:9e:
                    36:f9:55:9b:12:cc:d6:e1:67:d8:45:42:46:e0:c5:
                    7a:d3:5d:15:8b:a5:11:eb:f6:cb:d5:0a:12:6e:76:
                    05:4b:7c:aa:e6:b9:d7:6e:20:a9:5a:8a:03:1b:85:
                    b8:69:7a:70:5b:9b:3f:a1:0e:ba:09:be:4f:bc:bb:
                    3c:da:8b:ad:e6:de:10:27:f7:11:2f:8b:37:c8:d0:
                    15:56:0e:99:38:42:31:6d:77:0f:5b:8e:8f:46:3a:
                    8c:e8:b6:41:d2:8c:7f:17:ca:9c:c2:24:4f:18:00:
                    90:6a:98:65:a6:a4:20:b0:d4:ab:50:78:ab:8c:6d:
                    8f:74:30:22:75:20:ff:00:26:1e:15:bf:d5:5e:b3:
                    12:6a:b8:f8:3a:25:1c:17:54:0f:f7:60:31:66:3b:
                    46:4b:7c:63:35:b2:f5:47:d7:68:f3:27:5b:75:ea:
                    01:f4:91:97:45:0e:66:68:e3:4a:88:5b:fc:b7:4a:
                    f5:56:93:5c:89:de:eb:04:67:f7:b3:cb:08:1d:99:
                    4f:95:96:cb:52:e2:80:2e:0d:cf:dd:a5:1a:af:80:
                    7f:5a:d2:d0:ed:70:37:b6:61:f4:cb:9e:d0:e9:2f:
                    da:80:d4:34:b7:76:de:19:4e:bf:d7:c4:fa:06:84:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:36:96:86:AA:05:B0:4A:5F:29:34:BD:83:05:5D:2A:EA:EE:17:50
            X509v3 Authority Key Identifier:
                keyid:C5:80:05:6A:B0:29:AC:3A:F0:08:F0:64:5E:34:ED:32:EC:FA:DF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/C580056AB029AC3AF008F0645E34ED32ECFADF01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C580056AB029AC3AF008F0645E34ED32ECFADF01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/0/34352e3137322e3230372e302f32342d3234203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:90:73:cc:60:83:7b:60:68:d6:26:4e:01:b7:f1:c7:b7:
         e9:91:23:01:e7:8f:34:c4:c1:20:69:81:6b:ce:99:71:1b:de:
         b0:64:82:a8:45:09:cd:9e:f1:5e:2a:af:3d:58:bd:82:17:fd:
         3b:d4:be:d2:ca:b1:44:c3:57:15:75:98:69:2d:a2:4e:92:69:
         6c:09:62:75:b5:2b:41:9e:d0:06:93:93:d0:2e:fa:8e:e8:6c:
         28:b5:a9:4e:77:a6:81:41:8c:89:a0:e9:e8:98:cf:c9:60:66:
         00:e5:80:b7:7d:71:03:97:72:f1:c1:98:12:b5:8c:3c:68:4d:
         2a:80:f3:10:7e:03:4c:b3:62:a4:75:94:cb:49:0e:65:d0:d3:
         db:ea:a9:fd:0a:10:b8:4f:9d:90:4e:6f:bc:a5:50:fa:12:b7:
         91:35:7f:60:a8:40:03:dd:1b:ba:43:62:92:d2:54:9b:c9:0b:
         d6:2a:6d:e5:ba:da:a8:94:b2:18:e7:4a:96:c9:e7:c3:fe:06:
         23:86:b5:9a:66:cb:ec:00:ea:0b:68:8c:e7:1f:83:3f:80:62:
         6b:0f:79:cc:35:04:28:4c:af:21:27:b1:f8:2e:6d:a9:ff:66:
         80:eb:ca:b1:5b:88:82:05:e3:b9:40:bc:85:78:b0:59:fa:47:
         86:62:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:11:40 2026 by rpki-client