Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235322e302f32322d3232203d3e20323637323337.roa
File:                     34352e3233312e3235322e302f32322d3232203d3e20323637323337.roa (raw, json)
Hash identifier:          G1lIfbZB6xZ8o0GiJY8BavutglT4bXB9Fyoa0XiHCE8=
Subject key identifier:   67:62:94:72:CD:EF:AB:03:1B:89:8B:52:10:4A:FA:C5:56:25:C5:4D
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       01EF1929C0079349857CE91E8EDD05AB847BF24C
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235322e302f32322d3232203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:31:02 +0000
ROA not before:           Tue 07 Jul 2026 17:26:02 +0000
ROA not after:            Tue 06 Jul 2027 17:31:02 +0000
asID:                     267237
IP address blocks:        45.231.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:19:29:c0:07:93:49:85:7c:e9:1e:8e:dd:05:ab:84:7b:f2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:26:02 2026 GMT
            Not After : Jul  6 17:31:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:ad:b9:4b:e7:3e:c3:0d:ff:31:0b:4b:0c:
                    d4:14:43:12:f9:b3:cf:9c:e7:cf:65:75:51:10:fe:
                    e2:0a:17:73:bd:9f:0a:d7:b1:8a:c4:4d:fa:bc:6d:
                    e5:c9:e6:b9:e1:f2:db:50:87:37:2b:5f:71:6e:3c:
                    16:7e:ce:ae:1c:3c:0a:ca:a1:20:cc:fd:ca:02:e5:
                    ea:84:92:77:57:94:d8:d5:2f:8b:8a:bc:c6:07:73:
                    f5:8b:19:0c:2b:5e:21:3a:e2:cc:be:65:da:9a:94:
                    cf:f7:24:aa:4d:dc:76:99:9d:4c:a0:eb:69:b0:cb:
                    90:6d:67:9b:21:d3:13:8f:c9:1e:4e:5f:4c:27:c2:
                    27:42:0d:00:d5:76:2c:f1:21:81:3b:28:fe:eb:53:
                    6b:65:9f:b9:ad:74:55:d6:10:b8:e3:eb:7c:48:4f:
                    45:02:2d:a3:ff:ad:f5:b8:28:e9:5d:63:57:74:47:
                    3c:df:6a:53:73:51:06:54:df:b6:f4:f6:c5:75:10:
                    f7:df:b9:9a:f5:69:3a:60:38:9f:91:f2:55:74:86:
                    84:9c:37:22:d9:46:2b:75:e6:a1:ee:25:71:9c:fb:
                    1f:8a:4c:f1:a0:3d:28:dd:cb:b8:5a:e5:d0:b1:65:
                    fb:b2:62:f8:b9:f1:29:df:d0:98:c8:5f:cb:e9:3b:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:94:72:CD:EF:AB:03:1B:89:8B:52:10:4A:FA:C5:56:25:C5:4D
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235322e302f32322d3232203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:e5:e9:be:ce:41:2f:32:f5:20:90:1a:0f:6c:18:4e:1a:
         c3:2f:26:16:ad:19:70:c6:64:15:7a:1d:1c:65:86:eb:0c:81:
         be:b0:f4:f4:f8:6e:ab:d0:a1:95:42:c5:8f:1c:b2:7a:0f:4a:
         fd:76:8a:b0:9e:0f:01:04:f2:c7:e3:88:c1:27:d0:47:77:50:
         64:6c:f0:1f:9a:9b:02:d8:26:16:da:53:cd:00:5a:21:b8:41:
         3d:31:7d:c8:d2:06:38:5f:c5:15:af:3a:14:39:8a:db:88:d6:
         20:3d:af:ef:9d:9e:fd:e6:ca:60:8b:94:bf:c8:39:53:e1:33:
         c1:77:8b:b1:73:29:08:47:b9:c3:2f:11:b3:3c:5d:3f:c0:66:
         bc:7a:6f:03:c7:3f:c9:39:32:b1:47:59:f3:6f:23:e5:04:04:
         b2:5d:a0:61:7d:1d:0f:44:3a:7f:f1:c3:5c:7c:7d:e0:a1:f4:
         ef:0d:68:ca:ca:4c:5b:9e:08:44:a2:ab:1c:07:44:63:d0:bf:
         5d:5a:d0:69:98:0f:fe:5b:4c:a4:e0:ef:bf:80:d3:f1:96:a3:
         32:f8:e0:b3:df:c4:88:94:4e:60:44:13:43:14:e6:82:61:e6:
         eb:52:73:84:34:cb:10:59:54:95:25:52:7b:db:07:2c:6b:d7:
         4a:d0:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:25 2026 by rpki-client