Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa
File:                     34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa (raw, json)
Hash identifier:          e68wfv/0Nd9fnifH1n+Lbksiw8g/toiUW3guwB32Juo=
Subject key identifier:   B7:43:66:FF:62:FA:46:DB:89:C8:EB:27:76:BF:5D:FA:D6:9F:C6:44
Certificate issuer:       /CN=5A0F08F602004CFD7CD63D60E645EBF66B1C96AD
Certificate serial:       64D851D4CE1F31359BB0BFA6279647265EF6A6EA
Authority key identifier: 5A:0F:08:F6:02:00:4C:FD:7C:D6:3D:60:E6:45:EB:F6:6B:1C:96:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa
Signing time:             Tue 28 Jul 2026 12:53:11 +0000
ROA not before:           Tue 28 Jul 2026 12:48:11 +0000
ROA not after:            Tue 27 Jul 2027 12:53:11 +0000
asID:                     267422
IP address blocks:        45.235.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.crl
                          rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 01:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d8:51:d4:ce:1f:31:35:9b:b0:bf:a6:27:96:47:26:5e:f6:a6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A0F08F602004CFD7CD63D60E645EBF66B1C96AD
        Validity
            Not Before: Jul 28 12:48:11 2026 GMT
            Not After : Jul 27 12:53:11 2027 GMT
        Subject: CN=B74366FF62FA46DB89C8EB2776BF5DFAD69FC644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:9f:b6:a8:47:12:ca:d8:4f:43:ae:4c:02:
                    e9:42:14:f0:f8:95:31:30:3a:88:f5:fd:87:a8:9b:
                    4d:f7:de:4e:24:12:d1:6b:7e:43:ed:8f:4e:27:ff:
                    b4:d9:17:6f:92:ed:c0:c3:06:ea:25:22:9f:0e:30:
                    76:9e:da:57:e3:6b:b3:c4:b8:d3:6a:4d:0f:65:bf:
                    b4:53:50:31:82:02:e8:0c:45:74:a0:0f:d5:55:18:
                    69:0a:f0:45:37:9c:2e:cc:7e:f3:fe:ac:26:94:e1:
                    3d:67:d5:76:fc:83:7c:d1:5e:88:ee:c4:cb:ae:0a:
                    01:03:ef:8b:ad:17:ee:9e:16:40:64:2b:0c:1c:72:
                    b5:f8:07:ee:d0:b5:4e:e4:54:c9:c2:3c:f5:f3:af:
                    34:64:92:97:6c:f4:33:4d:10:91:3a:60:00:04:06:
                    85:87:5a:88:f8:9c:83:07:39:a6:d0:7f:df:a9:87:
                    68:6f:89:ca:9c:6a:57:ec:ce:8a:b9:ff:eb:be:f3:
                    60:fd:69:28:86:9c:4a:04:d7:ae:34:fd:5a:0e:8a:
                    49:aa:4c:7c:e5:7b:65:81:b5:cc:5b:c9:87:e1:87:
                    87:0a:7c:79:f6:3e:26:3e:48:5f:9e:98:9f:d1:7b:
                    da:7e:81:72:0c:6b:e1:49:6a:7a:9c:56:4a:d5:44:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:66:FF:62:FA:46:DB:89:C8:EB:27:76:BF:5D:FA:D6:9F:C6:44
            X509v3 Authority Key Identifier:
                keyid:5A:0F:08:F6:02:00:4C:FD:7C:D6:3D:60:E6:45:EB:F6:6B:1C:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A0F08F602004CFD7CD63D60E645EBF66B1C96AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/34352e3233352e3133322e302f32322d3332203d3e20323637343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:f3:1f:0f:2d:43:b7:23:94:83:b6:73:c2:25:ad:69:50:
         a8:9e:58:6a:6c:76:68:c5:b9:2e:6f:9c:1e:26:ec:ad:f1:25:
         0e:71:bd:1b:8a:65:87:77:95:00:07:b9:4e:0f:ce:1f:54:a4:
         ce:12:81:ff:89:56:e3:3f:6b:ac:80:b6:f0:42:57:27:35:e9:
         3d:33:be:b9:5d:4a:53:9c:4c:a3:59:dd:fc:53:62:2e:04:f4:
         fd:df:0a:3d:58:f2:c9:80:c3:4c:cb:12:fd:c2:8e:a7:fc:a8:
         30:37:f8:65:de:b9:cf:79:d2:93:88:cc:09:f0:98:02:f5:06:
         a9:b8:12:45:93:7d:16:f7:c5:4a:ad:9d:87:47:b6:20:51:89:
         e0:14:ea:5e:ec:84:ee:4f:02:d8:72:82:d9:62:28:d0:07:10:
         ac:9c:27:83:dd:05:5b:e2:da:15:b0:51:11:5a:45:fc:3d:5c:
         7d:35:bf:07:4f:21:c3:f7:c7:a6:6f:6a:93:8c:5a:e3:ee:66:
         30:58:9f:81:d2:43:38:02:78:7f:04:4c:bb:7c:64:cc:ec:74:
         d3:60:28:7d:61:1f:5d:17:a6:f1:dd:43:92:93:6d:ea:d2:da:
         2e:8f:b9:94:64:62:8f:8d:d3:a1:d0:16:2b:54:67:3d:ab:55:
         2d:ec:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 03:00:29 2026 by rpki-client