Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
File:                     34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa (raw, json)
Hash identifier:          O8VvfqHVRyC/7aVwFO1kTnT1trLuiIKofG7LMjfJeNw=
Subject key identifier:   00:07:70:F1:DD:3A:DF:1A:CE:83:05:0C:0A:40:2D:62:7A:FC:E8:93
Certificate issuer:       /CN=E733AA153674F005E1E2420E2120F1E954A2110F
Certificate serial:       710E64456C28DAAD8B4167D72CF8A17F3E8BA5BE
Authority key identifier: E7:33:AA:15:36:74:F0:05:E1:E2:42:0E:21:20:F1:E9:54:A2:11:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
Signing time:             Wed 26 Aug 2026 16:10:55 +0000
ROA not before:           Wed 26 Aug 2026 16:05:55 +0000
ROA not after:            Wed 25 Aug 2027 16:10:55 +0000
asID:                     266973
IP address blocks:        45.225.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.crl
                          rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 04:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:64:45:6c:28:da:ad:8b:41:67:d7:2c:f8:a1:7f:3e:8b:a5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E733AA153674F005E1E2420E2120F1E954A2110F
        Validity
            Not Before: Aug 26 16:05:55 2026 GMT
            Not After : Aug 25 16:10:55 2027 GMT
        Subject: CN=000770F1DD3ADF1ACE83050C0A402D627AFCE893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:ec:33:e1:bd:de:27:3a:e9:0e:15:b9:88:
                    d1:6b:2f:36:b8:4d:8a:26:19:35:18:5c:1b:4c:74:
                    62:af:aa:24:c1:ab:9b:d0:59:d3:cd:00:d2:c1:35:
                    e8:f6:be:b2:b2:73:1c:b6:cf:bc:c3:37:f0:31:3c:
                    b7:60:28:b0:38:02:a4:80:04:b1:3e:5c:aa:21:69:
                    48:81:f3:d7:85:e1:c1:29:ba:96:48:46:ad:86:09:
                    2a:1f:a4:67:89:c2:db:5b:b7:6b:51:f7:31:50:6a:
                    93:f9:f3:73:ee:1c:9f:24:66:03:a6:09:2b:13:da:
                    24:89:c4:e8:73:3d:3d:2d:64:fd:23:9d:90:3f:c7:
                    05:42:4a:83:c1:a2:04:2e:f7:96:04:05:dc:c1:8d:
                    37:e1:de:b3:5a:94:59:98:3f:20:9b:61:ff:b3:e5:
                    bd:eb:d8:72:02:6a:13:a1:78:c7:e9:27:ee:f2:c7:
                    56:02:d6:55:97:70:8c:30:e2:dd:7c:8f:c0:7d:63:
                    7e:1f:35:c0:a9:03:79:96:c9:2c:da:df:e9:a3:3f:
                    09:76:11:6e:22:76:ac:54:a9:71:2c:33:7d:73:8a:
                    06:b5:29:74:9b:1a:1b:ee:24:33:70:9c:af:48:9b:
                    98:1e:14:b2:03:70:0e:32:89:65:ef:17:23:8f:1a:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:70:F1:DD:3A:DF:1A:CE:83:05:0C:0A:40:2D:62:7A:FC:E8:93
            X509v3 Authority Key Identifier:
                keyid:E7:33:AA:15:36:74:F0:05:E1:E2:42:0E:21:20:F1:E9:54:A2:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:9f:30:f2:1c:38:b7:6d:68:84:81:1a:e8:24:a0:0f:f2:37:
         47:09:2e:28:67:80:8f:c1:a4:db:ec:c0:66:6f:55:2a:01:3a:
         3d:21:5b:1e:a4:ef:36:a4:64:df:af:55:e0:7d:8c:f5:02:5c:
         c2:fa:94:61:63:ab:21:3b:be:d8:7b:cd:b2:b0:a4:b6:46:11:
         7a:96:50:af:28:d3:d5:c6:a6:ef:17:c0:09:c3:c8:7e:a2:a2:
         80:49:22:c9:22:19:94:3c:7a:d0:fb:9f:64:dd:e9:59:49:38:
         c9:b1:c3:af:75:9d:53:5d:88:e0:72:2b:c5:13:95:82:2a:26:
         75:a5:7f:ec:0b:76:4c:03:aa:77:ad:bd:92:e1:92:e7:fd:01:
         26:9b:51:a8:81:35:be:59:6a:8e:d8:04:53:61:e2:4e:c7:93:
         7c:0e:47:8a:c0:09:6a:bf:e5:77:ff:fa:69:93:92:b7:58:1a:
         7f:a9:f1:26:e1:d9:08:5d:17:30:b6:70:c9:c9:87:d7:2a:c4:
         13:94:4d:01:8a:60:db:e7:08:4a:11:88:4e:af:35:48:71:af:
         4b:3d:77:db:29:cf:33:3b:3e:27:f6:f6:b5:52:cd:b4:94:5b:
         58:c4:e7:3f:66:c2:0d:ce:1e:16:22:1d:c4:5c:cf:6b:0e:85:
         ef:2b:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:23:59 2026 by rpki-client