Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137382e302f32342d3234203d3e20323637333235.roa
File:                     34352e3233332e3137382e302f32342d3234203d3e20323637333235.roa (raw, json)
Hash identifier:          MXjT++Nj+D9+WaytXZaK9plCWXxIiT65p/F+IMiKqHw=
Subject key identifier:   00:AD:79:D8:25:B8:0F:3E:56:9C:BD:EA:77:41:1D:87:9B:98:A8:5D
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       083EA6441B082F6C31CD9216E5083156A5C32204
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137382e302f32342d3234203d3e20323637333235.roa
Signing time:             Thu 16 Jul 2026 12:59:42 +0000
ROA not before:           Thu 16 Jul 2026 12:54:42 +0000
ROA not after:            Thu 15 Jul 2027 12:59:42 +0000
asID:                     267325
IP address blocks:        45.233.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:a6:44:1b:08:2f:6c:31:cd:92:16:e5:08:31:56:a5:c3:22:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Jul 16 12:54:42 2026 GMT
            Not After : Jul 15 12:59:42 2027 GMT
        Subject: CN=00AD79D825B80F3E569CBDEA77411D879B98A85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:77:77:43:19:19:a7:dd:a6:20:4b:60:d0:
                    2e:f6:99:7f:f2:37:a1:b3:eb:ae:cb:2c:04:42:27:
                    d0:e3:b4:52:75:77:d1:d3:fe:31:ee:70:e3:d1:0e:
                    cb:e5:5c:eb:b7:c4:0e:69:07:3b:75:9e:77:ef:ff:
                    f0:b2:1a:f9:b7:dd:48:62:ea:36:d2:8d:93:fd:c3:
                    ab:a9:e0:70:32:e3:97:a1:79:90:4e:9c:9c:bf:ae:
                    15:56:e1:87:6d:31:02:63:2c:3d:f0:14:0f:5f:4d:
                    e8:87:74:47:ae:c0:ed:8e:b0:ef:26:97:23:97:95:
                    90:b6:e2:a1:63:c3:13:4d:a9:b1:62:c4:52:50:d3:
                    f9:bc:4a:b6:96:3c:4a:f8:e5:4c:79:af:e6:03:f0:
                    d2:6f:00:78:ec:78:f3:54:43:4b:9d:5e:1d:57:18:
                    aa:c7:d4:b5:59:cf:ef:00:91:b9:1f:77:94:50:eb:
                    cb:e8:7f:36:d2:a8:91:26:83:53:6f:b2:1b:70:eb:
                    b2:f7:a3:70:80:18:17:62:0b:64:d5:96:7b:66:b4:
                    30:31:27:fe:47:25:6a:17:1a:31:43:01:f8:4d:3b:
                    51:b8:fc:db:a5:20:e2:52:06:5f:dd:60:5b:96:78:
                    ce:90:06:be:8c:29:1d:d0:4b:d4:24:95:43:f5:70:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:79:D8:25:B8:0F:3E:56:9C:BD:EA:77:41:1D:87:9B:98:A8:5D
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/34352e3233332e3137382e302f32342d3234203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:81:86:0e:c1:ff:4c:0e:20:f1:a3:1e:39:c7:d1:40:c0:
         71:e5:86:00:54:38:3e:e8:48:48:43:73:53:70:10:36:6f:0f:
         54:47:39:0a:a1:b9:8d:23:a0:73:40:91:ac:04:38:a5:ba:9f:
         1b:31:18:88:c1:49:37:3b:d3:c6:1b:42:dd:d8:ff:05:32:89:
         81:9b:e1:6e:f4:ac:7f:dc:4b:58:44:86:45:50:e4:08:07:c7:
         b8:d6:b3:94:18:a5:c1:49:46:b6:36:d5:82:52:91:a7:5b:d9:
         83:d7:69:22:12:5c:ad:06:0a:be:35:78:52:8d:77:d7:9c:75:
         80:14:a5:2e:33:3f:1f:5c:0f:d5:78:6e:8d:0b:a9:02:68:8c:
         80:2f:79:db:95:d8:e1:58:5c:86:c9:c3:7d:a1:c2:3b:71:ae:
         4b:63:02:9e:cb:51:fb:91:93:77:9c:57:22:a8:ad:c7:c2:5f:
         29:1e:9c:74:df:a2:97:94:a6:7d:35:ce:a8:56:28:0b:2f:8d:
         ac:05:9d:3d:78:96:77:a7:a0:47:e3:6d:f0:c3:f1:26:ce:8e:
         63:cf:74:01:fc:71:61:8e:60:d1:00:4d:4b:71:b7:b7:2e:56:
         8c:ef:96:86:bc:68:b1:a8:17:55:f9:49:33:0d:24:b9:03:ef:
         76:b7:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:53:18 2026 by rpki-client