Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3233203d3e20323637313234.roa
File:                     34352e3232392e35322e302f32332d3233203d3e20323637313234.roa (raw, json)
Hash identifier:          8u/VUJlZac0HFb6LiPEX1u46ECMpY8Kojs+2H5+RSDM=
Subject key identifier:   50:6C:21:89:A2:0C:23:5F:8D:8A:55:CC:E0:DC:E4:C0:F9:49:19:E1
Certificate issuer:       /CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3
Certificate serial:       56D0C9C522C71EEC9AF06214D04B410C8849C434
Authority key identifier: D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3233203d3e20323637313234.roa
Signing time:             Wed 22 Jul 2026 20:58:48 +0000
ROA not before:           Wed 22 Jul 2026 20:53:48 +0000
ROA not after:            Wed 21 Jul 2027 20:58:48 +0000
asID:                     267124
IP address blocks:        45.229.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d0:c9:c5:22:c7:1e:ec:9a:f0:62:14:d0:4b:41:0c:88:49:c4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3
        Validity
            Not Before: Jul 22 20:53:48 2026 GMT
            Not After : Jul 21 20:58:48 2027 GMT
        Subject: CN=506C2189A20C235F8D8A55CCE0DCE4C0F94919E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:17:5b:f8:d3:2a:51:13:3e:c6:f9:e4:60:
                    f5:bf:5a:f4:70:31:64:7a:d7:ca:80:a0:f5:54:b3:
                    8d:64:84:84:76:be:56:c3:c0:c2:ec:86:82:6d:ea:
                    22:25:ed:d0:98:44:fd:1b:c4:2f:4d:d3:8f:47:b4:
                    23:bf:0f:88:79:5c:1c:4a:59:1e:b8:7a:c8:43:16:
                    e3:89:4d:bf:71:f9:3a:71:da:40:c3:21:58:9a:85:
                    a6:5e:e4:d1:c4:9d:56:72:d2:8f:2b:42:5f:c4:2b:
                    07:d5:67:b3:aa:eb:3b:9a:39:2a:72:f8:cb:77:49:
                    aa:0a:ef:59:87:65:ff:7e:11:ff:b0:cb:40:3e:15:
                    43:0d:79:7c:c8:70:19:a0:ac:30:e3:d5:44:59:dd:
                    c3:d1:07:5c:85:d7:87:b0:c6:ee:76:53:56:80:c2:
                    00:27:eb:80:f8:b7:aa:20:78:37:13:64:f5:f3:bc:
                    cf:5f:26:16:61:6e:ac:8a:0a:b8:b8:ee:c4:a9:e0:
                    29:69:33:e9:48:46:07:aa:b1:21:90:ce:e6:0b:45:
                    c4:62:da:e0:a4:be:c5:26:ae:2f:45:fe:dc:ee:81:
                    76:42:b4:a7:47:e8:53:d3:de:fc:8c:25:9c:29:c2:
                    a2:ea:b2:5a:bd:81:4b:51:76:bb:af:f7:90:d7:ce:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6C:21:89:A2:0C:23:5F:8D:8A:55:CC:E0:DC:E4:C0:F9:49:19:E1
            X509v3 Authority Key Identifier:
                keyid:D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3233203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:d4:98:6d:1d:bc:71:37:38:26:d5:80:e9:8c:65:39:2b:
         b7:cb:55:99:8a:ec:76:be:02:7d:cd:86:f2:d1:01:90:a0:cd:
         17:78:3e:20:1d:c3:ce:d9:e6:1c:b3:bc:46:db:5b:8c:4d:23:
         1d:2d:b1:51:d1:3c:71:24:59:0a:1f:76:7a:bf:6c:a2:7c:54:
         e5:0c:2a:4a:69:44:65:d6:00:83:6e:17:cd:66:1f:2d:e5:32:
         4b:17:a3:56:7d:4d:fb:b4:e1:66:da:a7:7b:af:c1:1b:78:27:
         9a:0b:14:13:ff:ec:33:1c:87:22:ab:1b:ac:c8:c3:fe:5f:7b:
         c5:0d:fb:57:90:75:2a:0e:24:28:08:74:64:1b:74:0d:41:b5:
         d5:b3:13:e2:4e:22:f5:22:93:3b:a1:59:1a:aa:e9:dc:03:33:
         9f:fd:4b:af:37:a0:89:83:8a:10:43:d3:be:ee:e2:66:fe:bf:
         0f:47:1a:e1:b9:7a:a3:17:a2:c6:38:93:d1:cb:3b:23:a5:86:
         db:c1:3f:bf:9f:e9:16:f2:ed:1e:ae:8f:9c:8c:85:bd:e2:ce:
         e6:a9:28:9f:5c:b9:7e:e9:29:54:90:8f:bf:f4:ff:a1:b7:04:
         74:49:53:07:c0:aa:d0:94:5c:d1:42:c7:c9:42:60:3a:9c:eb:
         f6:3b:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:04 2026 by rpki-client