Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3232203d3e20323637333235.roa
File:                     34352e3233332e3137362e302f32322d3232203d3e20323637333235.roa (raw, json)
Hash identifier:          sa0dPDcjBmiTx0+mGLkjm/3unnHGLXlOlbQAGdsfEHc=
Subject key identifier:   FA:76:40:AE:59:81:03:33:05:96:8A:58:CA:13:4A:58:E5:0E:22:67
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       3FABDB98B5CC02A94935A80BB4670CDB6D6AF155
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3232203d3e20323637333235.roa
Signing time:             Thu 16 Jul 2026 12:59:42 +0000
ROA not before:           Thu 16 Jul 2026 12:54:42 +0000
ROA not after:            Thu 15 Jul 2027 12:59:42 +0000
asID:                     267325
IP address blocks:        45.233.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ab:db:98:b5:cc:02:a9:49:35:a8:0b:b4:67:0c:db:6d:6a:f1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Jul 16 12:54:42 2026 GMT
            Not After : Jul 15 12:59:42 2027 GMT
        Subject: CN=FA7640AE5981033305968A58CA134A58E50E2267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:60:3e:98:fb:da:60:9b:08:e6:9d:84:a9:
                    26:de:06:6a:b4:c5:da:e0:bf:bd:89:74:8f:ad:ba:
                    93:ac:9a:eb:21:6b:3b:1e:3f:f9:ef:85:1a:78:90:
                    79:67:2f:f2:12:74:e0:ba:e0:8d:5a:dd:5b:d9:b6:
                    86:3c:4e:56:e5:ef:22:f4:c6:8a:ca:74:33:7d:7f:
                    d2:31:26:a0:c3:48:71:3e:25:ce:61:5f:e7:a2:1a:
                    f7:53:cb:f8:71:86:e6:33:9d:e7:9c:48:c5:94:19:
                    61:d6:51:2f:18:ed:46:e9:9c:f9:ba:04:08:60:9d:
                    8e:86:01:9c:4f:6a:21:b0:41:b1:cc:1b:af:0c:94:
                    8c:55:61:d3:27:48:69:ed:9e:bd:40:cf:12:f3:c4:
                    6d:4a:5e:21:22:0f:5b:bc:b7:0e:f4:d3:15:38:99:
                    0d:a8:db:57:eb:6d:4e:7f:22:3d:ae:95:f8:01:df:
                    04:9d:a3:36:96:c8:08:1f:02:fc:68:20:80:8b:bb:
                    4a:e5:65:9b:20:d7:bd:69:13:5b:30:3e:0a:26:97:
                    41:7f:0e:1e:a0:c9:0e:28:39:36:dc:a4:1a:03:01:
                    b2:cc:22:91:eb:f1:e4:ba:6f:b2:b4:5e:91:3f:26:
                    29:a1:e8:7f:e5:db:68:3a:c1:d9:b3:bb:25:6d:f6:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:76:40:AE:59:81:03:33:05:96:8A:58:CA:13:4A:58:E5:0E:22:67
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32322d3232203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:99:a7:30:ac:4b:4a:cc:36:dc:92:c4:d4:f5:c5:f9:b7:b2:
         5a:ed:98:0e:ef:d5:3c:1a:0b:d4:45:93:33:e1:83:18:99:45:
         bc:7f:4d:68:0c:80:e3:ac:6c:b8:a0:a5:da:a7:ba:c1:b6:0c:
         6e:cc:3c:c4:8c:f3:0f:31:8d:a7:42:f3:d6:e4:b0:17:7a:19:
         ba:13:f8:06:29:0b:f8:09:61:6e:ba:de:a7:7d:29:ff:3d:5e:
         57:fc:ba:9c:eb:e3:f0:7e:6c:f5:8c:27:05:a9:90:e3:13:45:
         08:38:5f:76:ce:26:be:35:32:7a:e1:39:2f:c4:9f:8b:73:6e:
         fe:35:c2:5f:c1:bb:c2:77:8a:1b:0f:e7:14:8a:03:d9:9d:75:
         ab:e5:de:a8:91:dd:d6:c1:0f:ae:31:d5:cf:30:df:c5:c1:97:
         f8:81:04:7f:bf:dd:37:e4:c7:bb:7c:c6:3f:49:ba:3e:5d:8f:
         aa:e9:37:63:63:7c:c2:3f:db:2b:e3:46:06:b4:6d:ed:1f:a4:
         6e:5f:ce:88:4a:8c:3a:1c:f8:ff:4f:3d:ea:9e:10:db:cd:20:
         3f:e0:b1:fe:50:13:96:56:70:62:73:a4:63:ab:c4:eb:07:98:
         2d:88:58:1e:a7:96:5f:f0:32:49:ed:d6:bf:8a:39:be:97:67:
         e0:55:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:33:51 2026 by rpki-client