Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
File:                     34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa (raw, json)
Hash identifier:          Gl+PQFZyXPC8uacGHH171tzPPOnuzQX4L4iPfhC8UuM=
Subject key identifier:   AF:D4:2E:11:4A:A0:EC:97:0E:81:2D:07:BF:3E:A2:60:30:C4:55:0C
Certificate issuer:       /CN=1788A7E77B658ADF0067FF9C7324D45CC4342293
Certificate serial:       67285E61E6B0139569400A5EF0CBA824D029E876
Authority key identifier: 17:88:A7:E7:7B:65:8A:DF:00:67:FF:9C:73:24:D4:5C:C4:34:22:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1788A7E77B658ADF0067FF9C7324D45CC4342293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa
Signing time:             Tue 14 Jul 2026 19:18:38 +0000
ROA not before:           Tue 14 Jul 2026 19:13:38 +0000
ROA not after:            Tue 13 Jul 2027 19:18:38 +0000
asID:                     268876
IP address blocks:        45.171.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1788A7E77B658ADF0067FF9C7324D45CC4342293.crl
                          rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1788A7E77B658ADF0067FF9C7324D45CC4342293.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1788A7E77B658ADF0067FF9C7324D45CC4342293.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:28:5e:61:e6:b0:13:95:69:40:0a:5e:f0:cb:a8:24:d0:29:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788A7E77B658ADF0067FF9C7324D45CC4342293
        Validity
            Not Before: Jul 14 19:13:38 2026 GMT
            Not After : Jul 13 19:18:38 2027 GMT
        Subject: CN=AFD42E114AA0EC970E812D07BF3EA26030C4550C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:fa:db:f0:7c:aa:e4:dc:27:81:44:35:07:
                    64:7d:38:ab:62:a4:34:c3:74:14:bd:ef:ef:40:5c:
                    b4:d5:7a:80:f6:5a:3e:cf:0c:81:ea:86:c9:6a:65:
                    c8:ca:9c:92:12:ba:72:4f:55:b1:62:a1:f3:1d:7c:
                    04:0e:9f:0f:39:46:bd:32:bf:4b:27:5c:ed:e3:12:
                    fd:3e:6a:eb:cd:63:9b:37:f6:78:bb:34:44:22:f5:
                    50:0d:92:ce:ef:a8:4b:cf:bb:28:32:44:32:b3:e3:
                    2a:bb:70:78:e3:ed:a4:aa:93:60:09:ba:97:6d:9e:
                    ce:65:e8:d7:e7:70:eb:6f:2e:25:65:27:44:30:73:
                    3b:56:20:8d:41:90:bc:a2:eb:a2:e1:12:c7:5a:3b:
                    54:0e:d3:97:89:00:89:b0:22:a1:c5:7a:22:03:47:
                    a9:18:5c:fc:53:cb:0b:86:1b:97:56:49:3b:2c:24:
                    13:0d:f7:1c:9d:f2:4c:cc:a3:2e:ed:12:16:27:55:
                    2b:f8:e7:c0:0d:8e:35:58:e5:d8:5b:ec:f9:1d:14:
                    31:f2:4e:53:4f:ea:08:8b:7f:ab:35:47:c0:e6:d5:
                    d1:84:02:db:44:ac:e0:65:2b:e0:fa:93:61:7b:02:
                    9d:84:c7:ea:51:58:69:c8:f5:4e:64:71:38:ed:cc:
                    9c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D4:2E:11:4A:A0:EC:97:0E:81:2D:07:BF:3E:A2:60:30:C4:55:0C
            X509v3 Authority Key Identifier:
                keyid:17:88:A7:E7:7B:65:8A:DF:00:67:FF:9C:73:24:D4:5C:C4:34:22:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1788A7E77B658ADF0067FF9C7324D45CC4342293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1788A7E77B658ADF0067FF9C7324D45CC4342293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/34352e3137312e3132332e302f32342d3234203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:d7:85:f7:65:79:62:ca:7a:bf:10:ac:11:a8:55:3c:a1:
         65:18:a3:a9:73:95:a4:8a:81:49:f7:c1:0e:94:7f:e2:fb:0d:
         b1:72:8a:1f:1f:b8:d3:2b:72:0c:e0:71:b3:62:f3:10:b6:e8:
         07:4a:8e:12:4e:37:5b:3c:53:88:a2:a2:a9:ab:b2:9c:e7:31:
         ed:7e:0e:1d:31:79:0e:2e:e6:74:c1:c6:47:0a:54:5b:e2:0d:
         e4:51:dd:80:c0:05:d9:d1:cd:1d:f5:89:44:a4:ac:f8:4a:63:
         2f:ba:13:97:99:f9:ef:00:43:18:c2:a7:97:0e:42:ae:18:2f:
         4e:06:54:01:12:f3:cc:51:9e:30:3d:4f:1f:57:ac:b2:b8:ca:
         85:de:f8:a5:07:bf:18:50:76:32:d1:49:16:3f:55:33:29:4d:
         75:e0:2a:f4:18:f7:96:8f:1b:4f:3e:37:b2:dd:58:a9:de:6a:
         c8:ca:16:8d:c6:1f:16:6f:d5:fe:5f:2f:9f:9f:b9:4d:ce:23:
         93:21:dc:08:90:9e:41:24:49:b0:c4:45:04:f8:d8:f1:fc:86:
         43:5d:4c:25:8b:93:47:c5:8a:b6:7a:53:6c:45:40:8d:16:16:
         da:92:d1:79:31:f1:28:e5:aa:fe:bc:95:5a:ef:bb:b2:c0:ad:
         c7:34:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:07 2026 by rpki-client