Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e302e302f32332d3233203d3e20323638323135.roa
File:                     34352e3233362e302e302f32332d3233203d3e20323638323135.roa (raw, json)
Hash identifier:          ergiA8ZscwsdguYj/MlWJOWHBurNL4F7kWfA21z0u30=
Subject key identifier:   7B:7D:D1:3F:4C:3E:80:A2:89:53:DE:AD:55:46:FE:EF:D6:30:E1:1C
Certificate issuer:       /CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
Certificate serial:       315D5D8C78C3575849FE8E27D85E676BA18C3B20
Authority key identifier: 77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e302e302f32332d3233203d3e20323638323135.roa
Signing time:             Tue 05 May 2026 17:00:26 +0000
ROA not before:           Tue 05 May 2026 16:55:26 +0000
ROA not after:            Tue 04 May 2027 17:00:26 +0000
asID:                     268215
IP address blocks:        45.236.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl
                          rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:5d:8c:78:c3:57:58:49:fe:8e:27:d8:5e:67:6b:a1:8c:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777F5EB1AB6BF554B838F847ED60E71F6A109C4F
        Validity
            Not Before: May  5 16:55:26 2026 GMT
            Not After : May  4 17:00:26 2027 GMT
        Subject: CN=7B7DD13F4C3E80A28953DEAD5546FEEFD630E11C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:0d:84:bc:27:5f:15:24:31:73:83:bb:67:
                    1f:28:8c:31:0b:eb:06:8d:ae:f9:ab:56:25:bb:d6:
                    8b:75:61:bc:60:86:c4:2d:30:4a:0d:6b:d8:c4:aa:
                    5f:1e:b2:5b:5c:52:f4:3d:af:1b:6b:d9:0d:34:6c:
                    24:54:a2:e1:59:2b:b7:5d:17:de:6d:e3:bd:cb:4c:
                    90:b8:60:86:e6:5d:2e:3e:b9:4b:dc:0a:81:92:37:
                    ae:69:bd:02:f1:fc:b8:f5:5c:f6:1a:26:37:06:5e:
                    84:d0:16:8c:ae:47:b2:21:ec:34:7d:96:14:4e:b1:
                    2f:67:cd:df:e0:a7:34:d8:43:95:79:0b:b2:ce:ba:
                    2d:36:a2:4c:e8:3a:a5:a6:2c:d0:f7:16:49:a3:87:
                    67:f0:26:ec:0b:8e:60:12:50:be:3c:d5:0f:f8:02:
                    f2:e2:cb:56:21:7d:ed:19:75:f0:36:2f:86:b1:b0:
                    b2:ec:1e:88:b5:3c:13:a3:f7:87:fa:39:4c:06:72:
                    ed:a5:fc:3b:5e:82:2a:53:c9:d9:58:af:90:3a:4d:
                    a0:49:a8:a0:f3:cb:57:e0:7e:5a:69:41:ee:b9:cf:
                    a7:35:9b:11:06:02:4e:cd:13:cb:3d:18:18:95:80:
                    6c:95:e5:6e:07:34:de:7e:da:c4:77:07:4f:2a:18:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:D1:3F:4C:3E:80:A2:89:53:DE:AD:55:46:FE:EF:D6:30:E1:1C
            X509v3 Authority Key Identifier:
                keyid:77:7F:5E:B1:AB:6B:F5:54:B8:38:F8:47:ED:60:E7:1F:6A:10:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777F5EB1AB6BF554B838F847ED60E71F6A109C4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MaFE7tA1drSy7BaD5s6NGKyfHrFhUpwLFXfR5ZaQvGh/0/34352e3233362e302e302f32332d3233203d3e20323638323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:f8:82:d9:13:38:c5:95:dc:08:96:03:ad:fd:f7:83:02:
         12:d9:af:4c:55:d7:f4:3c:14:41:f7:04:0f:13:f0:2b:12:bb:
         b6:a6:83:4a:81:d7:db:87:f1:df:2b:6c:90:d9:c2:cf:01:f0:
         b7:ef:8f:15:56:e9:73:25:04:bc:c7:6c:68:dc:22:90:71:10:
         69:9b:a1:06:5a:6e:e9:fd:63:cb:a1:a3:9b:93:8b:fc:5c:90:
         ae:80:5c:10:35:1b:71:33:39:e8:be:80:f9:65:db:fc:20:95:
         b2:63:30:e2:5f:58:b2:9c:79:cd:e1:cf:76:1e:fb:bc:5a:57:
         82:89:0a:7e:2f:97:3a:dd:1f:3a:8c:a0:64:f6:aa:01:43:6a:
         19:d9:82:b3:38:98:4a:55:69:e8:1c:2e:0d:d5:d3:5e:77:c0:
         9e:8f:ec:6d:6c:99:70:88:8f:ac:32:e9:74:4f:64:e6:1e:38:
         86:7f:87:b9:14:52:39:3d:33:e9:df:81:fa:32:50:37:d4:77:
         db:cf:02:1c:a2:2f:5f:dc:6a:47:c1:15:d5:62:bb:f9:d8:ff:
         0f:f6:14:66:5b:37:b5:89:f2:72:4d:bd:d2:2f:46:80:6b:74:
         09:54:39:ea:3f:f2:d3:11:99:45:5e:b4:c7:26:73:6c:46:07:
         c2:b8:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:25:23 2026 by rpki-client