Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233342e302f32332d3332203d3e20323638373431.roa
File:                     34352e3137312e3233342e302f32332d3332203d3e20323638373431.roa (raw, json)
Hash identifier:          xCj2MQ1mVApkUogKW9jcgT37lOKC9BWXhi03qKCmSmA=
Subject key identifier:   76:DB:85:F9:F0:48:AE:A7:D1:A8:6F:66:D0:1F:B0:8D:E7:B2:46:52
Certificate issuer:       /CN=5B627EC76062D165EB3251C9ACBCAF7A7AEE925C
Certificate serial:       48162A303AC63960FBDF2566B364DBF3F2B183FE
Authority key identifier: 5B:62:7E:C7:60:62:D1:65:EB:32:51:C9:AC:BC:AF:7A:7A:EE:92:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233342e302f32332d3332203d3e20323638373431.roa
Signing time:             Thu 20 Aug 2026 23:25:17 +0000
ROA not before:           Thu 20 Aug 2026 23:20:17 +0000
ROA not after:            Thu 19 Aug 2027 23:25:17 +0000
asID:                     268741
IP address blocks:        45.171.234.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.crl
                          rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:16:2a:30:3a:c6:39:60:fb:df:25:66:b3:64:db:f3:f2:b1:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B627EC76062D165EB3251C9ACBCAF7A7AEE925C
        Validity
            Not Before: Aug 20 23:20:17 2026 GMT
            Not After : Aug 19 23:25:17 2027 GMT
        Subject: CN=76DB85F9F048AEA7D1A86F66D01FB08DE7B24652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:6e:85:e9:b3:7c:3f:6e:86:3a:62:b1:c3:
                    e5:6a:1b:05:56:67:b6:8f:f9:40:06:af:50:38:24:
                    6d:b7:3c:1a:cc:d3:3f:8d:c6:4d:66:07:3f:0b:85:
                    b5:63:5b:46:e2:0a:0c:2d:50:38:b5:1f:c7:8c:6d:
                    0c:54:80:fc:02:62:58:2c:e5:ca:64:85:6c:e1:2d:
                    8f:67:72:cb:b4:7b:5f:0a:99:8a:0a:8a:42:5a:bb:
                    9c:87:da:2d:ea:01:77:f8:78:9a:36:5b:85:59:ca:
                    24:c7:d4:b4:86:79:a0:da:72:cc:a5:38:6e:e2:cf:
                    42:38:60:ff:56:37:3a:b1:40:d3:06:e1:51:00:b0:
                    51:69:70:fa:62:4a:0c:0b:c0:b3:d7:54:aa:36:f0:
                    63:bf:62:b5:d1:b4:cb:c1:77:6b:a7:22:ce:46:a4:
                    b9:0d:bc:9e:bf:34:36:4a:b7:61:72:b4:a2:fb:2a:
                    a8:97:03:3a:4c:6b:88:a1:d9:10:6e:62:77:45:23:
                    9c:0e:6d:2d:bb:c0:7d:35:80:ce:42:eb:99:fe:17:
                    35:b2:c7:ee:eb:a6:e6:b0:71:7f:20:3b:4b:aa:39:
                    ca:5d:04:9e:f6:e6:f5:aa:74:62:2c:1f:8c:8b:8e:
                    c4:91:2f:c2:96:13:3b:24:6e:aa:8e:f1:7f:11:84:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DB:85:F9:F0:48:AE:A7:D1:A8:6F:66:D0:1F:B0:8D:E7:B2:46:52
            X509v3 Authority Key Identifier:
                keyid:5B:62:7E:C7:60:62:D1:65:EB:32:51:C9:AC:BC:AF:7A:7A:EE:92:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B627EC76062D165EB3251C9ACBCAF7A7AEE925C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/27mQ1dXRJhckRh8RGUxsqmyxoquR2HcKPsQ79ULyp1G3/0/34352e3137312e3233342e302f32332d3332203d3e20323638373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:78:76:30:42:3c:b3:82:2c:43:21:02:e2:3c:9a:5b:f8:
         07:27:63:f2:8d:5e:1e:7d:f5:6c:d8:66:0d:26:25:dd:6f:20:
         04:16:61:13:fc:d9:f2:6e:b1:c0:c6:5c:1e:01:08:c5:dd:46:
         09:40:aa:17:d5:7c:d9:b3:eb:01:78:da:36:eb:88:69:c1:5f:
         54:6f:89:09:de:ba:ee:14:b5:c9:0e:53:48:f2:f8:a1:83:f2:
         94:eb:88:c9:49:5c:f7:9f:ca:0f:49:6b:ed:27:28:19:ef:f2:
         06:10:5c:43:bc:3d:ea:4e:90:bf:48:88:f9:38:e3:93:53:ef:
         60:6a:8f:8f:49:7b:3d:f5:24:f4:de:17:d4:23:c5:4a:62:b7:
         e9:64:2e:4b:e2:f2:05:9e:12:d6:4b:f3:d3:02:31:27:3a:e2:
         a5:f2:30:d5:70:8c:d9:09:84:ac:1b:cf:55:11:e8:2a:b7:0a:
         d5:51:de:71:cb:c2:f1:91:99:7a:f9:50:6b:71:7d:6e:bd:8b:
         06:6d:71:27:44:da:4e:12:32:e5:58:c1:6c:d9:3c:16:e4:ca:
         e7:3b:47:f5:50:59:ef:1d:9a:3e:63:03:5f:b3:19:8c:0a:44:
         8c:66:ee:58:76:5b:72:ba:21:0a:e4:2c:c0:32:91:89:4d:f2:
         cc:e5:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:45:03 2026 by rpki-client