Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35302e302f32342d3234203d3e20323637333533.roa
File:                     34352e3233342e35302e302f32342d3234203d3e20323637333533.roa (raw, json)
Hash identifier:          BDOU+8lQQPLovGDyFVF6D6LiaXe/TZZmDjUlP2QAbQY=
Subject key identifier:   CF:76:9C:2E:ED:D1:D2:0D:91:B9:08:26:0A:5C:07:5E:9D:EF:54:0F
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       1C11488C178E6A75E8F5917075107749246C0BCC
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35302e302f32342d3234203d3e20323637333533.roa
Signing time:             Sat 08 Aug 2026 13:21:46 +0000
ROA not before:           Sat 08 Aug 2026 13:16:46 +0000
ROA not after:            Sat 07 Aug 2027 13:21:46 +0000
asID:                     267353
IP address blocks:        45.234.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:11:48:8c:17:8e:6a:75:e8:f5:91:70:75:10:77:49:24:6c:0b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Aug  8 13:16:46 2026 GMT
            Not After : Aug  7 13:21:46 2027 GMT
        Subject: CN=CF769C2EEDD1D20D91B908260A5C075E9DEF540F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:5b:16:c0:e9:6c:95:09:64:bb:b9:0d:d0:
                    26:11:73:1d:60:9e:83:07:bc:19:7c:f3:0b:30:cf:
                    7f:3a:7a:7e:8e:d3:dc:05:a6:61:58:02:d3:be:5c:
                    27:be:f2:31:2f:1d:92:1c:ac:59:8a:1d:a8:5e:fe:
                    03:75:2b:43:a9:43:38:01:9a:6c:b6:f2:a0:e0:e2:
                    ac:aa:16:46:84:84:c4:ed:9d:45:e8:a8:eb:d8:0b:
                    d1:59:5d:48:3b:e3:20:fc:14:d2:51:71:0e:d5:5a:
                    32:5e:f3:9e:f7:16:2e:dd:27:69:28:00:44:09:21:
                    51:83:5d:f4:0d:da:ed:3b:e4:1d:2d:8f:8c:d0:91:
                    a6:a0:73:1f:65:28:11:69:e9:42:17:db:2d:79:ed:
                    d5:bf:a9:f7:45:6e:13:6e:02:4f:08:5a:50:a6:78:
                    c8:ef:2a:92:ea:56:03:ee:5e:c2:6b:f7:2f:b8:07:
                    8d:73:b1:b3:22:39:50:86:49:c3:fa:67:7c:06:5e:
                    71:4c:01:e6:c2:a3:4a:16:3c:2c:37:a5:71:b3:f4:
                    9d:f8:a6:68:2c:5b:a0:0d:2a:f5:8a:7e:a4:97:2c:
                    41:7f:fb:ad:4d:0b:19:e6:04:e2:0a:48:72:37:76:
                    d0:29:4d:3e:3f:d3:80:92:cc:eb:39:82:76:ac:a2:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:76:9C:2E:ED:D1:D2:0D:91:B9:08:26:0A:5C:07:5E:9D:EF:54:0F
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/34352e3233342e35302e302f32342d3234203d3e20323637333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:e8:47:c6:20:9a:ac:3f:4f:86:f7:f2:71:3f:ee:3e:dd:
         50:03:c7:ca:bf:26:b9:57:37:b2:8b:63:04:c7:94:c3:6f:46:
         9a:5e:66:9b:5d:42:06:91:18:17:74:fd:1e:3e:44:35:97:ff:
         2e:e0:c9:dd:c5:11:b6:4b:3a:79:52:d5:45:1a:b4:7c:ef:06:
         7e:25:35:74:02:06:e5:10:d5:db:14:93:58:a4:f9:a3:51:aa:
         c4:18:e2:09:d5:ad:f4:66:21:15:c0:71:f9:13:14:5c:1f:c0:
         fb:fe:88:ef:7b:8c:30:72:55:7b:06:49:25:de:ff:85:14:7a:
         dc:42:fb:5f:e5:f7:55:e3:c2:98:5f:26:18:bd:fb:44:b8:a5:
         e7:20:fd:e5:4f:67:81:da:7f:05:9b:a7:e3:cc:3f:01:e1:99:
         7a:b4:da:96:35:eb:eb:a3:e5:40:97:75:d5:51:3a:e1:98:69:
         4c:73:2e:ef:9f:fd:a2:54:10:a3:21:43:93:96:1b:4d:6f:8e:
         23:7b:0a:77:a9:94:fd:eb:2c:95:c0:fe:1e:19:77:8b:0c:f4:
         ad:d0:4c:d9:a0:a1:0e:5a:83:94:50:77:24:be:8c:bd:70:d7:
         8e:62:32:74:54:26:02:54:30:7a:32:17:d0:6a:54:42:4b:41:
         3b:f5:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:34:15 2026 by rpki-client