Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/34352e3232382e3230342e302f32322d3232203d3e20323637303736.roa
File:                     34352e3232382e3230342e302f32322d3232203d3e20323637303736.roa (raw, json)
Hash identifier:          RrAvl10Vrfr49YIRz426+NW4VMBhcBCr4Ls1hoS251s=
Subject key identifier:   F7:32:E6:BD:B2:21:A6:A2:29:ED:09:D8:BE:49:0C:37:71:7C:A2:3C
Certificate issuer:       /CN=06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB
Certificate serial:       6A9620934C0360DF68D69C8C0697433A80374660
Authority key identifier: 06:B7:9B:10:F6:4E:F4:49:8D:AD:BB:71:40:FD:ED:AF:15:ED:9F:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/34352e3232382e3230342e302f32322d3232203d3e20323637303736.roa
Signing time:             Tue 21 Jul 2026 16:43:48 +0000
ROA not before:           Tue 21 Jul 2026 16:38:48 +0000
ROA not after:            Tue 20 Jul 2027 16:43:48 +0000
asID:                     267076
IP address blocks:        45.228.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.crl
                          rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:96:20:93:4c:03:60:df:68:d6:9c:8c:06:97:43:3a:80:37:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB
        Validity
            Not Before: Jul 21 16:38:48 2026 GMT
            Not After : Jul 20 16:43:48 2027 GMT
        Subject: CN=F732E6BDB221A6A229ED09D8BE490C37717CA23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:50:bc:e5:74:78:70:ec:a4:a2:e6:f8:15:
                    74:ae:05:cc:6e:44:f3:30:9c:d5:df:69:e2:8f:ec:
                    b6:6b:ae:e5:83:87:54:be:6e:b8:85:87:8d:3d:6c:
                    89:12:5d:d5:37:a9:b1:2e:b7:1c:12:71:df:b8:62:
                    45:f6:99:45:0c:28:fe:30:b7:27:50:ae:61:56:87:
                    ec:3c:04:9a:c8:d9:dc:66:e2:0e:e1:7e:cf:f5:a9:
                    71:cb:69:15:18:9e:78:37:67:14:c4:2c:c2:e0:a1:
                    39:ce:ec:3f:8e:d0:c2:cb:78:1b:ef:47:c8:c5:e4:
                    7d:4d:10:43:72:fa:43:6a:e1:11:0d:c8:a1:90:97:
                    e8:e4:db:cb:84:2a:eb:f9:4e:aa:75:05:31:94:03:
                    1d:3c:d4:0d:09:e9:0f:05:1c:82:87:2d:31:bc:69:
                    06:10:1e:2f:8a:62:91:ec:22:6d:27:a9:44:ff:2c:
                    7d:28:a0:69:02:e7:8c:cf:3b:b9:85:a1:9d:2a:aa:
                    11:fe:ec:93:50:0c:1e:a2:6d:fe:95:b5:f6:cc:7e:
                    28:f3:86:d6:56:a3:97:86:16:59:57:0c:37:c2:0e:
                    08:47:e4:44:f3:74:29:52:6c:55:e0:fb:7e:68:fb:
                    da:52:6e:7d:51:cf:2c:6f:7e:e5:1d:eb:35:a2:79:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:E6:BD:B2:21:A6:A2:29:ED:09:D8:BE:49:0C:37:71:7C:A2:3C
            X509v3 Authority Key Identifier:
                keyid:06:B7:9B:10:F6:4E:F4:49:8D:AD:BB:71:40:FD:ED:AF:15:ED:9F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06B79B10F64EF4498DADBB7140FDEDAF15ED9FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/0/34352e3232382e3230342e302f32322d3232203d3e20323637303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:0f:d1:ce:99:e4:dd:1b:dc:40:2e:e1:80:90:8a:45:f1:
         dc:78:28:07:b2:52:0c:ee:e9:a1:29:b2:80:b9:43:ca:0b:d3:
         e8:c4:9a:18:20:be:59:5b:08:56:44:6b:88:eb:5c:f3:e1:44:
         79:57:40:bd:31:1a:a0:44:b1:74:86:86:24:2f:97:a9:dd:61:
         93:c9:2a:b4:6a:32:fa:4e:4f:77:27:a0:df:bf:e4:c0:42:49:
         88:1c:44:a8:bf:ba:ea:18:d0:84:7b:c3:8c:06:28:b2:d5:f5:
         d3:ae:a5:01:d3:79:49:48:b6:a2:93:27:7f:3b:07:3e:e5:2c:
         e5:93:8a:22:27:74:bf:a9:98:9a:3b:b2:a2:2d:e6:36:e7:dd:
         e1:16:88:4f:12:99:9c:63:1d:ca:58:70:4b:b0:cd:8b:2e:b4:
         37:a2:c7:0d:de:6e:a0:97:58:38:06:92:c3:de:ab:35:25:14:
         52:29:ce:64:e7:b9:74:20:50:c5:c5:37:db:18:4a:1d:43:a7:
         5a:a0:2f:f0:14:cb:a4:a1:0a:68:4c:9f:75:19:66:3a:d8:a9:
         a1:1d:e0:74:57:ad:5b:70:f5:45:0e:a6:db:34:97:fc:27:92:
         45:5f:86:02:63:70:63:4a:f2:b2:6c:de:4f:51:56:f4:33:1e:
         b3:49:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:14:35 2026 by rpki-client