Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/34352e3233352e3135322e302f32322d3234203d3e20323637343138.roa
File:                     34352e3233352e3135322e302f32322d3234203d3e20323637343138.roa (raw, json)
Hash identifier:          kpkU8+7rNp09l2G+4FBTi706lttJGak+j3LVD6+dgHc=
Subject key identifier:   B8:CA:F0:CE:C9:5F:12:24:12:CC:75:C1:C7:41:36:8D:C0:C1:B2:85
Certificate issuer:       /CN=789E686AAC6DA051CABE4483E816BFD4D37A2E3A
Certificate serial:       76238E70E4CD6A5FD7C1BA1513842A10E77BA3AA
Authority key identifier: 78:9E:68:6A:AC:6D:A0:51:CA:BE:44:83:E8:16:BF:D4:D3:7A:2E:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/34352e3233352e3135322e302f32322d3234203d3e20323637343138.roa
Signing time:             Sat 13 Jun 2026 19:51:25 +0000
ROA not before:           Sat 13 Jun 2026 19:46:25 +0000
ROA not after:            Sat 12 Jun 2027 19:51:25 +0000
asID:                     267418
IP address blocks:        45.235.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.crl
                          rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 08:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:8e:70:e4:cd:6a:5f:d7:c1:ba:15:13:84:2a:10:e7:7b:a3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789E686AAC6DA051CABE4483E816BFD4D37A2E3A
        Validity
            Not Before: Jun 13 19:46:25 2026 GMT
            Not After : Jun 12 19:51:25 2027 GMT
        Subject: CN=B8CAF0CEC95F122412CC75C1C741368DC0C1B285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:72:15:d3:d7:27:64:5c:44:d0:30:05:74:
                    c7:12:77:f0:6d:b7:a4:6f:93:68:1b:f4:8c:04:aa:
                    fd:77:61:b7:95:bf:6f:2b:19:89:6f:fe:af:eb:39:
                    85:d2:04:27:01:3b:c5:7b:b9:01:f1:31:be:62:db:
                    f7:42:be:63:f4:2c:4b:5c:81:62:18:f2:4b:46:07:
                    5d:e3:8c:a7:9b:9b:4c:be:78:76:12:14:2c:46:20:
                    f8:f7:a6:b0:04:ee:38:0d:fd:a9:c8:30:24:96:25:
                    a6:e0:02:02:51:e7:5f:bd:38:59:fe:48:dd:9d:f2:
                    5f:92:d0:bd:65:57:f9:6f:b3:32:a0:9e:10:8c:7e:
                    31:a4:b3:bb:10:04:43:0d:cd:3c:aa:9f:08:35:c0:
                    d8:1e:fb:16:03:d7:db:b9:4b:78:cb:26:a5:8d:e1:
                    87:a3:37:60:8c:47:94:35:1d:72:5f:66:0f:44:74:
                    e9:aa:57:6e:d5:32:7b:89:86:c4:6b:71:89:b9:23:
                    8a:2a:3b:48:0d:ef:b5:60:b5:75:80:d3:8f:e5:28:
                    94:c9:aa:3d:af:35:93:20:86:9b:bb:f0:d9:1e:de:
                    cf:0f:78:1e:94:e1:47:be:ba:a9:50:9e:05:d9:a3:
                    9f:14:13:c2:c9:0b:b0:6b:40:55:62:63:d5:08:25:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CA:F0:CE:C9:5F:12:24:12:CC:75:C1:C7:41:36:8D:C0:C1:B2:85
            X509v3 Authority Key Identifier:
                keyid:78:9E:68:6A:AC:6D:A0:51:CA:BE:44:83:E8:16:BF:D4:D3:7A:2E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/789E686AAC6DA051CABE4483E816BFD4D37A2E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AvM7YmRGJce7jJZ7MpGin3DVtkEj6ULeGEBmb72jHzb/0/34352e3233352e3135322e302f32322d3234203d3e20323637343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:3f:74:35:05:17:7f:cb:02:14:af:96:d8:77:38:94:98:
         7b:91:25:67:10:2b:ee:f0:43:3a:c7:7c:6d:ab:4d:af:e2:2e:
         4b:e2:aa:41:29:b4:c7:be:1a:c0:57:94:84:9f:24:ef:e0:1c:
         21:ee:ae:67:08:59:0c:be:ac:39:97:ab:e5:fc:2f:be:4e:4c:
         15:ee:92:1a:91:62:a4:0a:fd:9c:cb:78:45:5b:68:45:d2:d0:
         57:52:b1:b8:ce:2c:ca:ba:6f:a3:50:5f:38:07:52:4e:81:40:
         14:ef:d3:4f:dc:10:03:af:5a:53:ee:a3:77:8f:fb:bc:a6:b6:
         1c:41:65:55:f0:d4:50:9c:63:57:2d:7b:7d:10:bf:14:de:4f:
         0c:56:ec:22:25:6f:f4:96:ec:34:73:4e:4e:9c:c7:d3:14:7f:
         f7:34:24:ee:ae:17:e7:c8:b6:ab:54:b3:f1:61:7c:83:2e:f0:
         0b:28:df:3e:2b:a8:d2:4c:12:25:b8:2f:1d:a1:22:f2:f4:60:
         3c:a7:d3:48:45:69:3a:47:f3:51:10:fa:8a:09:2e:6f:20:42:
         80:b7:44:f2:f4:f9:86:88:65:ce:66:55:0e:f5:70:1c:71:aa:
         02:c6:8c:fc:04:bb:6e:da:3a:f9:1f:9a:9e:ba:7b:02:4d:e3:
         1f:16:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:33 2026 by rpki-client