Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235332e302f32342d3234203d3e20323637323337.roa
File:                     34352e3233312e3235332e302f32342d3234203d3e20323637323337.roa (raw, json)
Hash identifier:          vTUxfwoviMlEUzgXhDQ5J9vXT+f/L1k/pmnJLhOJ9+o=
Subject key identifier:   54:D2:E8:5D:C0:44:63:6B:E0:CF:0C:19:EF:FA:B1:29:82:05:09:72
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       1BC1F640BE8DEF8C43C0B56B56EA07734774E4FA
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235332e302f32342d3234203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:30:51 +0000
ROA not before:           Tue 07 Jul 2026 17:25:51 +0000
ROA not after:            Tue 06 Jul 2027 17:30:51 +0000
asID:                     267237
IP address blocks:        45.231.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c1:f6:40:be:8d:ef:8c:43:c0:b5:6b:56:ea:07:73:47:74:e4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:25:51 2026 GMT
            Not After : Jul  6 17:30:51 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:9c:98:27:0f:c9:51:8c:28:89:8d:4e:0f:
                    d0:43:95:0d:4a:1c:d0:f7:17:94:7e:1f:13:86:e9:
                    1d:af:b9:e6:31:a4:64:ef:2d:b6:6c:76:8c:5a:0d:
                    32:40:42:cf:a2:2e:f3:2e:a5:ef:48:0e:fa:45:60:
                    92:be:eb:c1:b0:37:09:d2:f8:73:62:88:4e:aa:cf:
                    76:b6:38:7d:6d:d7:aa:90:75:40:54:ff:c8:0e:75:
                    22:88:50:f9:3f:79:0c:34:ef:36:b8:90:45:03:91:
                    72:50:dc:6b:fa:a9:85:cc:d1:ad:ec:74:41:1b:47:
                    f7:21:f1:6d:2d:6d:c4:78:46:d2:09:e9:8f:76:e7:
                    ea:6e:ac:45:d0:74:ac:24:a1:8b:7d:a7:2b:78:0f:
                    61:72:79:0f:c1:1f:ff:92:af:c6:3d:43:26:49:cb:
                    54:97:69:e8:9b:52:9e:1a:4d:7f:2c:5f:27:d1:2f:
                    ac:c1:72:47:25:14:c3:5e:13:ef:38:47:9b:47:7f:
                    04:dd:92:79:a2:54:b0:e4:ad:e0:6c:fd:51:92:d0:
                    cf:18:1b:5c:27:97:52:af:3f:0a:4b:0f:e9:04:a1:
                    ac:44:65:49:70:7e:bd:92:8e:4c:99:e8:22:48:70:
                    62:16:d4:dd:d2:1f:89:68:36:f5:91:02:54:29:cd:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D2:E8:5D:C0:44:63:6B:E0:CF:0C:19:EF:FA:B1:29:82:05:09:72
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235332e302f32342d3234203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f0:d2:76:73:17:33:30:a2:64:30:d0:c0:22:a6:fd:4f:6d:
         80:31:bc:05:30:71:41:16:0c:5b:95:c3:fc:55:fc:f5:46:f4:
         b0:3c:c8:01:54:04:8b:47:bc:ce:2e:cf:e0:de:ef:b5:8a:10:
         9b:b5:8b:64:dc:1c:6f:93:18:ce:b0:b6:78:ee:fc:76:be:00:
         aa:b0:40:25:4e:16:c9:e6:8d:09:b1:fa:f7:28:ff:51:fa:95:
         98:75:db:ae:29:9a:65:f9:be:f6:a1:69:35:24:e4:1e:f1:00:
         7e:f9:54:94:92:8f:10:c8:bd:be:fb:2d:a7:5c:83:fd:4b:06:
         62:5d:ba:e6:cf:a0:e3:83:fb:5d:a9:aa:0f:71:4e:03:e1:22:
         78:f6:21:12:22:77:0f:41:7f:c6:d3:42:56:56:fb:a4:ad:d8:
         c7:24:bb:9e:39:f2:7d:e5:89:12:4b:26:c3:b2:82:86:9c:53:
         ae:f4:d5:b1:e7:91:f4:02:b5:7b:60:c6:aa:98:45:a8:7e:7c:
         e4:2f:93:7d:7c:5b:68:9c:07:02:ac:6f:d4:07:5d:c2:7b:6b:
         82:eb:91:37:bf:bf:a1:e2:7a:c3:66:26:0c:ba:44:2f:b3:5e:
         20:a8:fb:de:a1:c9:77:3c:df:06:43:a7:ab:e3:f7:77:e2:ef:
         21:bf:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:36 2026 by rpki-client