Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/34352e3233302e3233322e302f32322d3235203d3e203631373438.roa
File:                     34352e3233302e3233322e302f32322d3235203d3e203631373438.roa (raw, json)
Hash identifier:          8iaxSukkDZAcXew2Wbca876oaVaGDLSzSws+Utf4Bvk=
Subject key identifier:   02:B1:B6:E7:51:1C:5C:C0:2E:6E:04:35:5C:2C:80:06:4E:5E:6C:8F
Certificate issuer:       /CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
Certificate serial:       0D17BF642BA4CD5F24CF82342196ED97DB3D8A83
Authority key identifier: A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/34352e3233302e3233322e302f32322d3235203d3e203631373438.roa
Signing time:             Wed 15 Jul 2026 19:54:54 +0000
ROA not before:           Wed 15 Jul 2026 19:49:54 +0000
ROA not after:            Wed 14 Jul 2027 19:54:54 +0000
asID:                     61748
IP address blocks:        45.230.232.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:17:bf:64:2b:a4:cd:5f:24:cf:82:34:21:96:ed:97:db:3d:8a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
        Validity
            Not Before: Jul 15 19:49:54 2026 GMT
            Not After : Jul 14 19:54:54 2027 GMT
        Subject: CN=02B1B6E7511C5CC02E6E04355C2C80064E5E6C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:a9:e0:cf:b2:9c:6d:28:00:90:fd:e5:3f:
                    2d:0b:6d:c1:6b:57:fe:63:e2:96:ac:b1:df:35:f1:
                    cc:0a:a1:1f:d1:c4:81:d0:8e:e4:67:f0:fd:8b:e6:
                    6d:3e:c2:31:eb:5d:42:03:c5:a4:71:ab:e2:39:ae:
                    f0:30:5f:e2:02:aa:f9:72:96:68:b0:81:8f:c9:4b:
                    18:7d:98:c7:9d:33:42:8f:d9:86:ae:00:5d:05:c8:
                    60:93:41:48:ab:48:a5:1f:e7:7b:ef:84:be:89:40:
                    a3:26:b1:aa:80:5b:11:29:b1:2d:95:ea:91:16:46:
                    63:18:e0:07:b0:c2:71:18:aa:a0:44:a8:74:eb:5a:
                    54:67:61:d8:ea:84:78:c9:ad:c0:3e:ce:0d:22:69:
                    60:ff:e6:a8:ee:d3:24:2d:ed:8c:39:3d:16:c1:63:
                    07:df:8a:40:bf:1e:f6:b1:a1:34:4d:82:6e:67:bc:
                    5c:1c:e3:27:d0:ad:b0:e4:ed:eb:45:b7:3a:00:bf:
                    05:fd:ec:7b:03:43:7f:68:d4:05:13:a0:3e:a9:eb:
                    12:5c:fb:82:63:d4:0d:c1:af:33:58:8c:01:2a:71:
                    62:ea:13:86:91:7b:bd:4a:cf:4d:90:07:11:58:f5:
                    61:f0:9d:45:d3:8b:2d:c0:36:9e:73:4f:67:8c:d7:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B1:B6:E7:51:1C:5C:C0:2E:6E:04:35:5C:2C:80:06:4E:5E:6C:8F
            X509v3 Authority Key Identifier:
                keyid:A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/34352e3233302e3233322e302f32322d3235203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:be:19:d4:70:4c:79:7f:c7:a9:2e:dd:64:46:94:85:eb:24:
         fa:dc:f4:dd:42:b8:48:0b:14:d8:57:0c:4d:5b:b7:e2:40:ba:
         f2:8b:1b:30:11:b4:30:df:3e:47:f3:fa:9d:4b:65:aa:32:cc:
         00:2f:8d:37:ec:51:df:41:d7:7f:6a:75:31:ec:7a:a0:8d:4b:
         9c:76:65:a7:3e:e1:64:d9:23:4d:18:ff:18:60:b5:43:8c:a1:
         ea:31:b0:7c:4c:a0:4d:ea:40:a1:ac:1d:fc:9c:4b:de:54:c4:
         59:16:fd:eb:09:88:bb:3b:c0:59:ef:3f:f5:6c:7e:08:a9:f6:
         b2:47:d5:9f:98:c8:38:21:df:9c:f5:2b:fc:41:db:40:be:7f:
         97:72:34:8d:92:19:27:e5:e2:f6:cc:4d:13:bd:4a:86:3f:4f:
         ea:2a:21:6f:80:3d:da:bc:d8:c2:15:8c:79:43:62:8b:1e:47:
         8c:e2:15:07:2a:06:d5:55:14:25:ef:55:92:7b:28:7b:c7:8f:
         19:bc:ec:9b:86:9c:ad:6f:39:27:69:2f:73:61:41:ef:72:46:
         a8:9d:ae:06:ec:35:64:7c:1d:0c:88:10:66:e7:f1:1e:49:7b:
         2c:0c:ef:f2:ea:fd:1b:26:df:bc:a2:5d:d8:d5:ab:e9:25:9a:
         02:a8:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:15 2026 by rpki-client