Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235352e302f32342d3234203d3e20323637323337.roa
File:                     34352e3233312e3235352e302f32342d3234203d3e20323637323337.roa (raw, json)
Hash identifier:          QqXNgXJU/AuUT7+K0Jq2gtdqx4/LYZ6+9ycYvdr3jBU=
Subject key identifier:   0E:B5:BA:2A:D3:DE:58:5A:38:D3:C6:DD:E2:F4:41:CD:F9:21:8D:60
Certificate issuer:       /CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
Certificate serial:       7E2AB41B10C23BCEF948BFE4FF88F080BE0C5844
Authority key identifier: DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235352e302f32342d3234203d3e20323637323337.roa
Signing time:             Tue 07 Jul 2026 17:30:39 +0000
ROA not before:           Tue 07 Jul 2026 17:25:39 +0000
ROA not after:            Tue 06 Jul 2027 17:30:39 +0000
asID:                     267237
IP address blocks:        45.231.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl
                          rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:b4:1b:10:c2:3b:ce:f9:48:bf:e4:ff:88:f0:80:be:0c:58:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332
        Validity
            Not Before: Jul  7 17:25:39 2026 GMT
            Not After : Jul  6 17:30:39 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:ef:ba:5d:8f:4d:18:63:8d:0c:bc:4a:bd:
                    aa:2b:48:04:dd:8a:4a:8a:23:cc:5a:d2:83:4e:a6:
                    4b:21:aa:de:25:d7:2e:1b:60:85:c1:28:7b:3e:b5:
                    32:b4:99:4f:61:d0:f0:4c:99:1d:86:ee:1b:17:b4:
                    8a:0f:77:27:11:c2:fe:bc:4a:7a:1e:e1:73:0c:87:
                    b9:9b:ba:33:b0:ff:fd:c4:31:60:bd:bc:e6:14:61:
                    7b:ed:96:d2:19:ce:38:da:f9:fd:70:ac:1c:48:25:
                    73:96:f6:99:a3:27:0c:dc:29:25:c5:4e:81:0d:1d:
                    eb:6b:e7:d9:d5:61:12:88:c2:0e:b3:69:50:f0:3b:
                    ab:31:a3:bc:e7:f3:f7:35:21:36:cd:4d:2e:7e:7c:
                    ad:ac:0d:30:d2:de:cf:37:5b:6e:c9:ec:38:0d:b5:
                    17:dc:9f:f9:a4:5d:5c:36:b8:49:86:80:13:bb:78:
                    eb:ce:c0:8e:20:02:66:4f:3e:2c:df:38:01:ae:5a:
                    47:7c:36:b1:2d:54:1a:3e:0b:c2:5e:19:6b:8d:f3:
                    85:ea:44:1e:cc:8d:de:d9:6e:39:30:79:3c:e5:f8:
                    1b:6e:45:c6:fb:bd:bb:59:27:d0:b8:79:5c:ac:27:
                    af:f8:0a:37:53:22:97:1a:0b:f3:30:b8:7b:c5:5b:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:BA:2A:D3:DE:58:5A:38:D3:C6:DD:E2:F4:41:CD:F9:21:8D:60
            X509v3 Authority Key Identifier:
                keyid:DA:1D:EB:02:D6:4A:CF:26:A0:DE:3E:FC:48:CF:27:3C:87:DB:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA1DEB02D64ACF26A0DE3EFC48CF273C87DB2332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HL38UQhKYqbN5WNh5JsrzodZr87PYQKGthuvnSWNxY8/0/34352e3233312e3235352e302f32342d3234203d3e20323637323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:11:f1:c9:e6:d7:c4:94:d2:5e:43:d8:6c:7b:1b:54:a2:1b:
         aa:02:2e:7f:41:04:ba:5e:fd:df:5a:34:c9:8f:9d:42:e3:f8:
         0d:91:db:08:8c:da:95:a9:13:8c:a1:70:a9:e4:6b:fc:5d:56:
         4e:19:42:26:29:0f:83:db:b3:ab:e1:85:6f:96:69:e8:0f:81:
         63:c2:b7:b5:5b:da:cd:0c:04:3e:67:5e:b3:1a:c8:93:48:47:
         4d:09:af:30:ac:91:a2:37:e3:d4:01:7f:11:3d:a8:62:d7:d4:
         bb:ea:62:a6:c3:bd:b1:4a:bf:d2:2a:32:a2:5e:0e:db:cd:b5:
         d2:e3:26:13:e7:79:58:99:6e:73:63:5b:da:a2:92:ca:30:e6:
         c5:2d:e8:f4:87:7a:94:33:aa:77:be:60:d8:a3:11:46:9f:91:
         0e:79:90:6a:2f:68:1d:6b:ca:97:20:a3:44:57:57:0b:33:88:
         e5:f1:f7:db:3c:88:a2:9a:bc:36:fc:b5:9e:8e:94:b4:28:7c:
         6c:48:26:a0:24:f4:42:e1:e5:6c:8b:e6:b0:a7:31:42:cf:1d:
         3a:b6:cf:66:eb:ad:ed:7f:a8:6d:89:53:e2:0f:50:af:84:ce:
         02:4a:cc:2c:b1:b6:08:e1:53:24:5f:7e:11:de:47:a2:82:1a:
         1f:94:dd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:39 2026 by rpki-client