Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          6e/IZiUwN3cagwlm1A9swSt9svV15UaC2xZjjS1hZTg=
Subject key identifier:   C3:FF:49:61:B4:74:B5:6D:F6:9A:CE:9D:5B:13:B3:50:C2:CD:03:94
Certificate issuer:       /CN=E623553538E00E63657BFD8F27CC352EDDF522D9
Certificate serial:       2D6F70D0D0365BB60022813D9FFB8DBB3FBACEB6
Authority key identifier: E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
Signing time:             Thu 02 Jul 2026 22:19:04 +0000
ROA not before:           Thu 02 Jul 2026 22:14:04 +0000
ROA not after:            Thu 01 Jul 2027 22:19:04 +0000
asID:                     268205
IP address blocks:        45.236.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6f:70:d0:d0:36:5b:b6:00:22:81:3d:9f:fb:8d:bb:3f:ba:ce:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E623553538E00E63657BFD8F27CC352EDDF522D9
        Validity
            Not Before: Jul  2 22:14:04 2026 GMT
            Not After : Jul  1 22:19:04 2027 GMT
        Subject: CN=C3FF4961B474B56DF69ACE9D5B13B350C2CD0394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:1b:66:2f:64:92:50:3f:29:2a:ab:02:ed:
                    8f:bb:6a:49:48:79:8c:42:1f:a7:63:1a:43:f2:33:
                    97:d7:d4:11:e7:52:2e:4c:0a:bf:c3:bd:91:97:81:
                    d2:65:5a:58:56:a3:4f:86:b9:a9:db:6f:f9:cb:7d:
                    71:75:c6:19:01:c9:56:4c:6c:26:af:a0:55:18:54:
                    38:93:36:7d:3d:c1:e2:ef:d9:44:39:3b:54:9a:1d:
                    80:23:20:26:09:5a:8d:3c:eb:2b:65:8d:11:3b:74:
                    9b:d3:7e:b6:91:3e:a6:05:a2:db:fa:f6:bf:c8:96:
                    a7:e2:2a:b4:b7:01:a7:a5:1a:ea:e1:cb:ed:36:fe:
                    d8:db:4c:fc:18:ac:4c:5e:8d:7c:5f:8c:c6:91:6b:
                    23:36:ca:1b:49:55:5c:f6:aa:6a:b9:f8:af:1d:81:
                    14:0a:15:10:fa:72:1f:db:76:ee:8b:06:74:8e:82:
                    07:9b:2a:71:ef:a6:eb:c0:b2:11:1f:df:30:2d:1b:
                    45:23:c9:2e:6c:55:59:a0:de:db:73:90:5a:a1:2c:
                    c6:bd:24:2e:99:24:d3:b2:7c:7f:d6:fb:03:3f:65:
                    23:73:f5:e8:41:82:4e:d4:9a:85:79:9c:00:65:db:
                    d4:9c:e6:a8:61:8c:bf:61:fd:6e:47:a3:81:0d:f0:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:49:61:B4:74:B5:6D:F6:9A:CE:9D:5B:13:B3:50:C2:CD:03:94
            X509v3 Authority Key Identifier:
                keyid:E6:23:55:35:38:E0:0E:63:65:7B:FD:8F:27:CC:35:2E:DD:F5:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/E623553538E00E63657BFD8F27CC352EDDF522D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E623553538E00E63657BFD8F27CC352EDDF522D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:44:32:a5:15:f6:1a:ca:bf:ce:ce:fc:21:e4:9d:ac:84:a5:
         92:03:88:47:01:7a:5d:93:ca:87:e0:75:9a:bf:e5:02:27:1f:
         bb:8b:a5:d9:1b:4d:4a:6c:aa:92:f4:1d:e0:bc:d6:31:7a:02:
         74:29:07:72:15:e3:89:ea:06:be:fa:c9:ed:41:5d:bb:e0:84:
         fa:af:77:98:d7:48:1e:e0:5a:b3:22:1b:57:6a:2e:04:14:b5:
         7b:5f:db:17:2e:4b:4b:00:21:a9:2e:a3:d6:89:9c:b8:19:ff:
         6b:a0:4e:ef:83:5e:6d:98:ca:2c:12:1b:78:6b:3e:dd:3f:af:
         aa:ae:7e:36:e5:fc:1e:56:02:e8:55:eb:fa:a5:a6:33:58:f7:
         a3:e5:7c:a1:9b:65:49:15:0d:6d:72:a0:6f:03:02:b6:28:37:
         bc:c5:56:f6:d8:4b:83:1b:49:31:47:d4:e3:70:41:72:22:61:
         1e:3b:65:38:5c:4e:19:8f:61:89:86:1f:bd:7e:29:9c:43:5a:
         02:d3:b3:fb:e1:c7:5c:86:d9:0a:92:1c:af:b4:1a:bc:92:4e:
         95:54:62:aa:da:9a:7f:61:82:ba:43:0b:50:bb:01:d4:cc:f0:
         ef:68:e1:e0:38:80:8e:ec:94:89:44:d0:9f:17:7e:8d:a7:36:
         cc:3b:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:11 2026 by rpki-client