Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
File:                     34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (raw, json)
Hash identifier:          2iJaPOobwA6YVW4nDH9PlpNOw+aypNzez6FqtS+/RiY=
Subject key identifier:   50:1B:29:28:D9:73:16:4F:15:FA:E6:06:F8:5F:49:7C:A6:45:53:61
Certificate issuer:       /CN=A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D
Certificate serial:       3E2A3A482EC09A21341544E10D346D403A87E894
Authority key identifier: A8:21:09:DB:2D:DD:42:65:EE:BB:8A:E7:9D:7D:7C:20:66:FA:36:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa
Signing time:             Mon 13 Jul 2026 15:32:52 +0000
ROA not before:           Mon 13 Jul 2026 15:27:52 +0000
ROA not after:            Mon 12 Jul 2027 15:32:52 +0000
asID:                     268727
IP address blocks:        45.171.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.crl
                          rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:3a:48:2e:c0:9a:21:34:15:44:e1:0d:34:6d:40:3a:87:e8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D
        Validity
            Not Before: Jul 13 15:27:52 2026 GMT
            Not After : Jul 12 15:32:52 2027 GMT
        Subject: CN=501B2928D973164F15FAE606F85F497CA6455361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:1a:ab:09:21:ce:98:cf:db:c9:de:e2:bb:
                    1a:5a:86:51:66:b7:50:a4:00:fd:7a:f5:c8:80:01:
                    bd:3a:c0:ef:05:17:7c:fd:07:03:27:18:93:98:92:
                    9d:ae:1d:71:7d:bd:0f:8b:3b:5d:18:5c:c0:cb:fe:
                    26:01:fe:04:2c:5c:5b:d7:07:0a:5f:81:1f:fd:cd:
                    c9:f6:ad:3d:44:8c:c0:bc:f4:c9:24:39:d5:00:ba:
                    83:34:a6:19:12:d8:e9:4e:f3:ed:68:a7:e7:29:80:
                    12:c5:b1:3c:7a:20:47:6b:88:7c:df:72:c0:49:11:
                    e1:e1:59:55:e2:5a:9f:27:c0:f9:64:05:05:c6:3b:
                    26:eb:a1:09:19:bc:18:f8:0e:ec:f4:b9:b0:fb:53:
                    d1:19:4d:a7:ef:73:cc:a6:5d:6a:48:98:e7:b2:7b:
                    5a:f7:f5:00:6e:b2:c2:ee:65:64:d0:da:21:dd:59:
                    00:ce:d4:19:e0:3f:4c:29:30:11:c4:7c:bc:c2:b6:
                    a5:37:cb:67:e0:4a:c3:25:c0:c6:60:75:84:6b:5e:
                    8b:4a:64:89:81:a8:ba:26:9b:79:a6:04:0b:fb:9d:
                    ab:23:7f:a5:56:fe:7a:c8:72:50:06:c1:3a:3e:46:
                    fb:db:62:bb:c5:4b:41:9c:93:3b:b8:33:17:62:38:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:29:28:D9:73:16:4F:15:FA:E6:06:F8:5F:49:7C:A6:45:53:61
            X509v3 Authority Key Identifier:
                keyid:A8:21:09:DB:2D:DD:42:65:EE:BB:8A:E7:9D:7D:7C:20:66:FA:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A82109DB2DDD4265EEBB8AE79D7D7C2066FA368D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:5c:18:95:16:39:a4:ef:77:42:cc:cc:bb:c9:ff:ca:bd:
         9a:28:dd:12:af:0d:ba:10:41:62:b6:ba:aa:9f:d5:b9:65:f4:
         f7:ac:9a:a3:39:61:f9:13:db:8a:a0:27:bb:a0:f3:d9:d9:3f:
         1a:d2:e2:5a:06:c7:60:3c:16:e7:54:28:c9:03:9c:7a:e4:a5:
         d4:c5:25:ea:05:f7:de:44:3f:59:84:b3:55:b0:0b:98:c7:7b:
         8c:4d:d3:08:4f:92:da:f8:45:22:2a:2f:2a:b9:a1:c2:4c:bd:
         ee:82:5c:d0:06:8a:ff:e6:c5:cb:da:f3:74:a4:dc:76:86:d4:
         f7:85:72:e9:2d:63:14:cf:bb:47:a0:61:fc:12:39:b7:8b:fb:
         6a:4b:46:e1:c9:4e:30:21:a6:69:c9:f6:8a:11:fb:e1:69:93:
         da:a4:ae:2c:25:46:d0:b5:8b:ff:c6:73:aa:34:76:4e:51:64:
         7f:18:5a:ff:11:a7:4f:89:3d:01:ea:d9:6c:72:2a:85:b4:c6:
         73:e9:26:35:40:71:61:62:34:2d:00:47:9e:ec:7f:97:a0:d9:
         32:d9:f8:c3:09:d6:91:46:22:f9:1f:5d:87:65:eb:eb:fb:b4:
         46:0f:8c:6b:aa:90:4b:61:67:fc:41:74:3a:95:ac:9a:3f:9e:
         f6:ed:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:36:06 2026 by rpki-client