Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
File:                     34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier:          CeaBJb/TCew2FjsMILotreWLdY/trFmKIwHMQkYBfqY=
Subject key identifier:   7C:0C:B8:F5:D9:C8:21:A3:E9:5F:53:9A:B3:72:5B:C7:63:BF:34:09
Certificate issuer:       /CN=DC0C93609E98EAFD96D42AB11B6E758911C2C03A
Certificate serial:       6C873A8AB5510B6B06F01F8EB6A77E9A4FE469BE
Authority key identifier: DC:0C:93:60:9E:98:EA:FD:96:D4:2A:B1:1B:6E:75:89:11:C2:C0:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
Signing time:             Thu 02 Jul 2026 17:37:05 +0000
ROA not before:           Thu 02 Jul 2026 17:32:05 +0000
ROA not after:            Thu 01 Jul 2027 17:37:05 +0000
asID:                     268801
IP address blocks:        45.173.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.crl
                          rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 22:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:3a:8a:b5:51:0b:6b:06:f0:1f:8e:b6:a7:7e:9a:4f:e4:69:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C93609E98EAFD96D42AB11B6E758911C2C03A
        Validity
            Not Before: Jul  2 17:32:05 2026 GMT
            Not After : Jul  1 17:37:05 2027 GMT
        Subject: CN=7C0CB8F5D9C821A3E95F539AB3725BC763BF3409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:20:41:6b:f5:2c:28:9a:e7:e1:23:2a:98:
                    e4:a1:9e:e6:a3:4a:ed:b6:5f:49:16:17:15:9a:19:
                    1d:25:04:4c:50:51:63:75:d5:cd:e1:31:ea:83:dd:
                    3a:ec:39:bf:d2:06:64:e8:f2:2e:2b:41:a2:db:15:
                    39:75:0b:99:c2:b6:fe:55:62:2e:95:91:91:e8:71:
                    12:7b:fa:5b:e1:fe:5b:cb:c0:73:e2:5d:c3:06:6b:
                    b7:ac:2c:db:06:ff:c6:3a:d3:b1:b5:62:0e:64:f7:
                    e4:03:5d:2a:71:8a:ca:be:08:d5:fa:5d:7d:ed:34:
                    37:95:54:ca:c2:1b:3d:a1:5e:8d:f9:d1:1d:4d:c0:
                    9c:de:2d:6d:0d:e5:62:f4:d5:8d:69:0d:6e:04:3a:
                    53:6b:f0:71:f6:d8:3a:62:41:5e:c7:d5:b8:bf:fa:
                    80:47:e9:c3:fd:51:4b:0f:70:47:e7:47:27:4a:0d:
                    f3:bd:d6:b1:47:02:41:a4:7d:08:4b:4c:9e:09:93:
                    ab:c1:87:c0:1f:61:e8:24:7e:e1:03:80:e0:dd:e6:
                    0e:80:78:f0:e8:c6:c8:f7:45:ef:e9:ab:4f:5c:dd:
                    50:87:02:14:7f:69:8c:07:1e:8d:9a:78:c5:ee:c3:
                    75:ee:e4:6a:4a:76:fa:42:99:21:37:4c:f7:09:8b:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0C:B8:F5:D9:C8:21:A3:E9:5F:53:9A:B3:72:5B:C7:63:BF:34:09
            X509v3 Authority Key Identifier:
                keyid:DC:0C:93:60:9E:98:EA:FD:96:D4:2A:B1:1B:6E:75:89:11:C2:C0:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C93609E98EAFD96D42AB11B6E758911C2C03A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:f6:8d:e0:62:10:6c:8f:d9:da:4a:3d:79:99:6c:06:01:
         c6:7b:48:1b:7f:4b:6b:ed:66:84:ea:e2:66:9c:ce:eb:af:e7:
         e9:88:5b:94:ad:ba:be:6d:67:b4:3b:dc:53:d3:22:cc:9f:a4:
         2b:b2:1f:7e:01:8b:5d:c9:82:8f:4b:08:76:1f:a1:38:71:d6:
         eb:6f:3f:12:a0:bb:37:9a:b8:55:d0:8a:cd:40:61:23:0f:da:
         80:d0:3c:bc:44:c3:df:61:52:14:fb:e7:93:c6:53:f0:58:e5:
         ec:b2:ff:36:95:da:80:1e:55:6d:fa:be:9f:d4:75:72:af:b0:
         41:13:64:78:b2:14:e1:64:03:7f:16:1e:cb:1b:98:57:d5:0a:
         7e:69:b0:43:3e:2b:0d:27:41:bf:be:64:6e:82:f9:21:0d:30:
         44:af:63:47:18:4f:d3:79:92:4e:9a:1c:04:a6:ef:52:e9:38:
         76:be:65:b0:5e:9c:cd:48:ac:33:6c:60:48:73:3b:1a:6b:b9:
         23:56:67:0b:16:52:67:91:89:8d:2d:66:1f:16:be:06:eb:61:
         8f:f3:98:0a:16:4f:2d:2c:ff:0b:7b:ba:3e:57:e1:bc:c2:64:
         ca:56:43:7b:e4:f9:bb:9e:56:f7:3d:4c:4c:09:47:62:a1:e4:
         ae:fa:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:11:29 2026 by rpki-client