Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa
File:                     34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa (raw, json)
Hash identifier:          VGicZUg6haQdkAP0V5ul+HJ27gXPATdek9K4ymsel5M=
Subject key identifier:   95:A0:BD:29:06:B6:C9:C7:BE:AD:D1:DC:98:F8:B0:E2:8A:EA:6C:E8
Certificate issuer:       /CN=15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078
Certificate serial:       432529175334C22FDB0589205359DA3B76D38255
Authority key identifier: 15:F9:B3:FE:DF:A0:38:63:C8:A6:C2:27:A0:B0:18:FC:4F:3B:40:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa
Signing time:             Sun 26 Jul 2026 07:20:10 +0000
ROA not before:           Sun 26 Jul 2026 07:15:10 +0000
ROA not after:            Sun 25 Jul 2027 07:20:10 +0000
asID:                     267108
IP address blocks:        45.229.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.crl
                          rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 17:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:25:29:17:53:34:c2:2f:db:05:89:20:53:59:da:3b:76:d3:82:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078
        Validity
            Not Before: Jul 26 07:15:10 2026 GMT
            Not After : Jul 25 07:20:10 2027 GMT
        Subject: CN=95A0BD2906B6C9C7BEADD1DC98F8B0E28AEA6CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:b8:75:49:36:50:87:c1:13:22:b3:f8:46:
                    5d:ad:c6:7a:11:98:fa:4d:fd:73:e1:da:5d:4f:28:
                    ba:99:12:00:7c:44:aa:b4:0d:f2:a1:f1:b0:cf:a3:
                    08:f6:0e:c0:52:dd:0c:7c:19:8f:93:29:93:49:ec:
                    53:2f:f0:2b:99:0e:29:4f:97:73:11:b8:15:56:5f:
                    f5:dc:26:73:0b:6f:1c:55:74:65:9b:db:64:d1:24:
                    c2:c5:2b:14:99:b8:df:63:5d:15:ad:97:43:8f:7a:
                    11:1b:d2:72:2b:44:1a:95:f0:43:4f:7a:19:a6:ac:
                    7d:7c:16:1d:15:5f:d5:a5:64:0b:d9:86:23:83:d3:
                    dd:27:59:1b:c2:05:e4:0f:e1:af:3d:f0:e2:cd:2b:
                    a1:8f:33:bb:ec:db:d9:1b:bb:5a:2f:eb:95:51:ba:
                    80:0b:23:3a:c8:61:cd:dc:c0:cc:94:db:54:9e:db:
                    48:d7:16:08:b1:30:ae:9a:d6:dd:58:31:ad:5e:17:
                    77:24:3c:a7:12:15:61:e4:52:09:47:19:84:76:d9:
                    8b:10:ab:94:93:eb:ad:a8:9f:84:c9:ac:73:6d:20:
                    d6:2d:ab:1b:3f:c3:4e:00:7f:c5:5a:db:a9:1e:43:
                    6b:b8:e5:48:60:be:f1:ac:79:33:d2:ad:49:80:8d:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:BD:29:06:B6:C9:C7:BE:AD:D1:DC:98:F8:B0:E2:8A:EA:6C:E8
            X509v3 Authority Key Identifier:
                keyid:15:F9:B3:FE:DF:A0:38:63:C8:A6:C2:27:A0:B0:18:FC:4F:3B:40:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/34352e3232392e3130382e302f32322d3234203d3e20323637313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:cb:29:ef:dd:1d:80:d0:29:d6:7c:f3:5f:48:f1:34:16:
         cb:e3:ff:72:3a:4c:9d:85:16:f8:c5:3d:92:63:38:e8:64:cc:
         36:42:45:a7:e7:9d:a2:f7:df:8b:ec:41:73:34:3c:2e:fb:1a:
         9f:4f:e7:ae:9f:65:52:74:86:1c:b9:be:7a:a3:57:91:33:48:
         72:ee:d4:54:c0:49:46:a5:96:56:37:ae:ba:a3:09:37:bb:3e:
         d0:81:f8:08:94:48:50:db:f8:39:21:3b:d1:f5:9c:a0:e7:43:
         b5:8e:dc:c6:82:2b:1f:02:f4:c1:d1:f4:a5:58:0e:51:36:26:
         9b:fc:9f:19:19:d4:09:97:96:f3:5a:51:71:e4:84:09:c8:86:
         a1:cb:03:30:5e:40:43:94:7f:15:f4:02:bc:6b:b5:64:7c:61:
         30:80:7e:9b:8e:9b:a4:ae:fc:3b:7f:38:14:ad:8f:38:c8:99:
         24:1f:5f:07:90:5b:d8:4c:94:43:9c:f8:ae:a4:51:1f:16:e8:
         5b:68:16:96:f3:68:84:96:23:12:7e:59:18:b0:0d:3b:ef:97:
         8c:c8:77:14:e8:c1:5c:00:03:8f:0d:a1:cd:19:2c:38:66:c6:
         45:72:34:da:ad:47:6f:eb:da:68:da:05:79:9f:74:73:08:05:
         55:53:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:39 2026 by rpki-client