Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32342d3234203d3e20323637333235.roa
File:                     34352e3233332e3137362e302f32342d3234203d3e20323637333235.roa (raw, json)
Hash identifier:          0pAiUwJTK3T43B8hQydrSp9EQ3ckXFyzxLov2BEOOiI=
Subject key identifier:   36:07:FB:6A:98:AA:52:7C:B3:55:B4:A3:45:07:AD:3E:3C:D5:BA:0D
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       5F76279A34064D6FF9D9CA685F76BD9577F000FF
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32342d3234203d3e20323637333235.roa
Signing time:             Thu 16 Jul 2026 12:59:41 +0000
ROA not before:           Thu 16 Jul 2026 12:54:41 +0000
ROA not after:            Thu 15 Jul 2027 12:59:41 +0000
asID:                     267325
IP address blocks:        45.233.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:27:9a:34:06:4d:6f:f9:d9:ca:68:5f:76:bd:95:77:f0:00:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Jul 16 12:54:41 2026 GMT
            Not After : Jul 15 12:59:41 2027 GMT
        Subject: CN=3607FB6A98AA527CB355B4A34507AD3E3CD5BA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:7c:67:3f:d7:ac:cf:37:93:5d:9c:da:12:
                    63:59:4b:18:83:75:f8:d3:f1:42:e5:85:15:a7:60:
                    7a:f9:eb:0e:a9:68:60:df:ac:e5:d8:65:f6:a3:6a:
                    1d:7b:35:8a:03:33:d1:f6:c9:fc:cc:2f:96:ff:86:
                    c0:1e:32:fe:68:e4:b6:ef:cb:b2:e9:63:70:5e:e0:
                    79:36:d5:ed:5b:26:23:2f:ab:f2:02:0b:e5:04:f0:
                    f0:46:e9:ca:6a:90:c8:04:8e:25:59:d9:d7:0b:28:
                    43:a5:37:d3:44:d1:40:44:f1:25:5c:ca:df:45:2d:
                    01:20:a9:d8:c0:1b:69:30:b1:3e:40:f2:08:72:cd:
                    24:4b:94:8d:2c:ac:75:8a:57:70:95:3b:8c:43:b4:
                    f1:e2:6f:91:b6:52:ae:78:c7:6d:7a:2e:9e:ae:c9:
                    cb:53:f3:1d:41:ba:c5:26:bb:48:f8:86:f3:ef:34:
                    db:02:2d:2d:9a:ba:3f:cb:bd:c6:0b:74:85:9a:bf:
                    c5:a4:8c:02:99:de:97:e7:93:e2:70:35:85:1c:46:
                    a3:a3:c5:bc:84:a1:d8:e9:5e:c5:75:70:2f:c7:18:
                    13:86:fb:bb:83:4f:1d:86:17:09:e7:0a:f3:aa:f3:
                    ab:31:7c:11:b8:f1:84:80:e2:e2:9d:aa:45:7b:ff:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:07:FB:6A:98:AA:52:7C:B3:55:B4:A3:45:07:AD:3E:3C:D5:BA:0D
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137362e302f32342d3234203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:3e:72:97:1c:f2:f8:dc:a0:f6:50:c6:07:01:f3:ca:67:5a:
         12:8e:b2:67:05:4b:dd:3e:2a:98:f3:2a:29:5f:ad:1c:58:34:
         a3:80:c6:68:b2:35:7b:f5:0f:14:96:dc:21:aa:2b:45:d5:d2:
         0f:c2:e9:05:51:ef:8c:69:49:ce:56:b8:7f:36:45:9d:a7:45:
         3b:3d:50:b4:b8:99:96:d8:db:d6:3a:33:ba:2e:d2:68:0b:67:
         4a:58:d5:20:ff:ef:c9:38:02:73:ca:5d:39:25:69:6a:9c:30:
         8d:e8:c4:c2:1c:20:1c:fb:d2:3d:7a:e9:90:01:cc:da:f5:2a:
         45:e2:22:74:39:f1:9d:b2:96:da:93:a3:ea:e3:0b:a8:66:6c:
         92:43:be:0f:a1:f0:ab:e9:87:54:55:e1:e0:9a:68:96:10:57:
         85:a9:9b:29:58:f4:c9:8e:f2:7f:cd:c0:19:8f:30:f3:93:0c:
         07:94:92:f3:43:91:58:13:60:ab:5b:4f:fe:c2:03:4c:82:23:
         14:9d:5d:8f:67:e5:fe:21:2f:c2:17:52:47:86:b9:34:19:8f:
         31:15:68:c1:a2:09:6a:10:8e:3a:62:1b:d3:ce:15:d4:d9:27:
         cf:d7:8e:c2:dd:08:fc:ab:00:de:1f:e6:b3:62:e4:2c:3d:62:
         ce:99:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:42:48 2026 by rpki-client