Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235342e302f32342d3234203d3e20323637323337.roa
File:                     34352e3233312e3235342e302f32342d3234203d3e20323637323337.roa (raw, json)
Hash identifier:          ADtq7B+5Cp3TA+gfciHyAcEN0e5S4rpDtvSOo9Vww4U=
Subject key identifier:   80:B6:0E:D1:12:95:4B:11:10:B9:A8:81:E8:39:DC:2B:6B:CA:35:77
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       6F08E5069A4A53FAF912EE6EEE47482A3D64697E
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235342e302f32342d3234203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:30:43 +0000
ROA not before:           Tue 07 Jul 2026 17:25:43 +0000
ROA not after:            Tue 06 Jul 2027 17:30:43 +0000
asID:                     267237
IP address blocks:        45.231.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:08:e5:06:9a:4a:53:fa:f9:12:ee:6e:ee:47:48:2a:3d:64:69:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:25:43 2026 GMT
            Not After : Jul  6 17:30:43 2027 GMT
        Subject: CN=3082010A0282010100CD542B0B7139D013DABE089EEEC438042DEFDE3EAEFB53335A042CE9AC656BE338706B1D08FF11C9B092570E6BE837BEF2764FCC77D2ACDBFA68B5B05DE5DC250A6DA58A9EA8EBEAB3EEA9461B45228F0A8F3C7464FCFD0BFCF2BF1CEE9B612EE882DA49DA60250DDD8AE7F1F5A25D170D06DA83326C6FB51E6978A8DFF9B7191BA6C8485BDB1DA7CD9DF2020B27A06DB1A0369075BFF5E43CCBBBEC4722192B23A7662EC66B90CE7640558ED8E85A14EEC6A2C8A3741302AB29F21590437F021434A9966EBF7C9CD4CE796FFDEC7FB24B361D75925AB44ED4C2B5E232E02EEC129C4357FB299E39DB2AFE52B417F3C095C669972127B12B6ED515E90A0047970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:2b:0b:71:39:d0:13:da:be:08:9e:ee:c4:
                    38:04:2d:ef:de:3e:ae:fb:53:33:5a:04:2c:e9:ac:
                    65:6b:e3:38:70:6b:1d:08:ff:11:c9:b0:92:57:0e:
                    6b:e8:37:be:f2:76:4f:cc:77:d2:ac:db:fa:68:b5:
                    b0:5d:e5:dc:25:0a:6d:a5:8a:9e:a8:eb:ea:b3:ee:
                    a9:46:1b:45:22:8f:0a:8f:3c:74:64:fc:fd:0b:fc:
                    f2:bf:1c:ee:9b:61:2e:e8:82:da:49:da:60:25:0d:
                    dd:8a:e7:f1:f5:a2:5d:17:0d:06:da:83:32:6c:6f:
                    b5:1e:69:78:a8:df:f9:b7:19:1b:a6:c8:48:5b:db:
                    1d:a7:cd:9d:f2:02:0b:27:a0:6d:b1:a0:36:90:75:
                    bf:f5:e4:3c:cb:bb:ec:47:22:19:2b:23:a7:66:2e:
                    c6:6b:90:ce:76:40:55:8e:d8:e8:5a:14:ee:c6:a2:
                    c8:a3:74:13:02:ab:29:f2:15:90:43:7f:02:14:34:
                    a9:96:6e:bf:7c:9c:d4:ce:79:6f:fd:ec:7f:b2:4b:
                    36:1d:75:92:5a:b4:4e:d4:c2:b5:e2:32:e0:2e:ec:
                    12:9c:43:57:fb:29:9e:39:db:2a:fe:52:b4:17:f3:
                    c0:95:c6:69:97:21:27:b1:2b:6e:d5:15:e9:0a:00:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:0E:D1:12:95:4B:11:10:B9:A8:81:E8:39:DC:2B:6B:CA:35:77
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235342e302f32342d3234203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:67:98:6d:8e:48:66:d3:94:c6:c4:6b:67:3f:12:67:71:42:
         49:57:19:2e:94:8e:9c:da:fd:bd:38:62:98:eb:ad:a4:38:97:
         ef:0d:93:a8:82:06:6e:54:08:01:18:e7:85:3f:19:f5:18:dd:
         9f:c7:c2:bc:e9:ee:85:86:00:42:66:6a:e1:f5:98:28:6e:e0:
         1c:0e:9a:8c:5c:c6:5c:6f:a5:26:52:39:d2:fe:3a:70:e2:15:
         a2:16:6d:eb:d3:f7:12:8f:6a:a7:6f:fb:34:89:45:91:11:97:
         15:3f:38:1c:98:2c:eb:f5:2f:94:b0:17:fa:4f:a6:38:11:ab:
         0f:b5:f7:be:7b:3c:5c:bd:31:48:00:82:d1:04:94:c0:3f:ab:
         4a:29:ed:da:fc:2a:90:e1:88:38:e7:6e:07:32:1a:dd:80:da:
         12:74:f9:1e:c3:55:45:7d:36:6b:40:71:44:14:82:6e:63:ff:
         7f:ec:96:6b:92:4b:cb:53:24:74:d7:56:3c:7b:f9:6c:cc:9a:
         23:dd:6b:cd:d6:03:01:c8:c4:9e:9e:10:c5:3d:4a:6e:00:ea:
         e5:70:0e:c6:63:ee:b5:66:ee:82:b2:7e:96:25:22:b1:a1:90:
         55:17:83:8a:c9:a9:9b:0e:2c:f9:67:22:18:3b:20:3c:29:ac:
         4e:54:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:37 2026 by rpki-client