Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3332203d3e20323637303739.roa
File:                     34352e3232372e34342e302f32332d3332203d3e20323637303739.roa (raw, json)
Hash identifier:          WdmK9VKwMXRGp/7heAc7MkpWxEqzTiCT03J9UQmhtW4=
Subject key identifier:   96:6D:52:1B:81:82:72:94:54:CD:BE:08:B6:F7:41:68:A5:E8:8B:47
Certificate issuer:       /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
Certificate serial:       689ABD1F26D4D5BDB6BE582227D630F343F6F4E1
Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3332203d3e20323637303739.roa
Signing time:             Mon 06 Jul 2026 11:09:14 +0000
ROA not before:           Mon 06 Jul 2026 11:04:14 +0000
ROA not after:            Mon 05 Jul 2027 11:09:14 +0000
asID:                     267079
IP address blocks:        45.227.44.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9a:bd:1f:26:d4:d5:bd:b6:be:58:22:27:d6:30:f3:43:f6:f4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
        Validity
            Not Before: Jul  6 11:04:14 2026 GMT
            Not After : Jul  5 11:09:14 2027 GMT
        Subject: CN=966D521B8182729454CDBE08B6F74168A5E88B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:fa:03:06:d7:81:08:41:53:df:6e:d2:d8:
                    4f:57:f7:e2:70:c1:68:00:18:8d:3a:70:a6:ef:0d:
                    21:a6:67:28:91:fd:23:8d:f3:bf:83:6e:fd:6f:26:
                    99:b3:37:b6:2c:01:48:b5:4c:20:aa:f3:36:c3:6b:
                    4d:f6:44:1f:91:43:d3:f0:89:9c:bf:fe:10:cb:66:
                    2a:f4:e9:68:88:2a:74:4b:70:ed:e1:b3:86:af:5f:
                    d0:03:99:03:f9:28:8e:6d:be:07:ba:32:96:d2:8e:
                    b4:31:a4:29:72:9c:3e:3a:21:88:d1:39:df:bf:fa:
                    7e:d7:18:61:1d:c6:39:7d:8f:e2:c3:2d:6c:0f:1d:
                    e7:bb:bd:af:f4:75:cf:1b:f1:2b:37:9a:69:11:1c:
                    21:f5:69:f5:8c:e0:a3:52:4c:99:1d:7a:3e:53:58:
                    12:65:5d:e9:a4:c4:1e:91:40:57:b0:a6:c4:43:cd:
                    82:de:93:70:ca:7d:88:17:b3:42:e1:b8:87:a2:bc:
                    2b:1a:20:96:ad:9d:69:73:c7:44:a2:66:5e:25:c1:
                    69:20:8b:65:9d:53:80:d1:8b:99:d8:a0:4c:5a:ee:
                    84:72:a1:02:a7:27:8e:05:e3:86:e5:96:2b:d4:24:
                    52:bc:2d:60:76:8d:50:f0:c4:8b:60:3d:c2:0f:5c:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6D:52:1B:81:82:72:94:54:CD:BE:08:B6:F7:41:68:A5:E8:8B:47
            X509v3 Authority Key Identifier:
                keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3332203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:67:0b:b3:f2:cd:45:08:40:c8:73:ef:94:41:b4:49:56:04:
         a5:c1:a2:5d:3e:d4:b2:64:3b:49:67:1f:ab:24:ed:de:20:d1:
         2c:56:31:53:32:12:89:2a:ec:0d:68:d7:d6:01:e1:65:b8:b1:
         b3:d5:79:fa:47:dd:50:99:d3:5a:a6:f9:b3:9d:c3:b5:c2:c7:
         3c:59:23:54:73:0a:5a:65:95:93:62:72:bc:a4:07:ab:ff:8f:
         5f:52:31:d5:b8:10:10:4c:db:6a:65:2c:4d:40:9d:f1:11:ce:
         0c:d3:e4:cb:d7:ef:05:ce:70:6b:f8:a2:f8:03:39:90:43:1f:
         04:95:b1:12:8e:25:42:8e:40:0f:c9:05:02:94:49:fe:f7:c1:
         45:d8:90:a8:67:fc:b3:b3:4e:be:b0:05:ae:06:ed:6c:da:74:
         a6:48:25:bb:aa:25:14:e1:95:e7:3d:3d:aa:5f:d6:43:b5:2d:
         01:be:b9:66:17:1f:d6:9b:77:b7:4c:58:52:50:97:58:31:6c:
         1c:a7:15:21:33:00:1c:d2:8f:5c:a2:8f:39:73:46:b2:21:62:
         bd:3a:a6:55:c7:4a:fd:72:ce:31:b5:21:f9:8e:1c:cf:2c:a2:
         ab:bd:01:d9:17:61:b5:bf:59:8a:ba:31:e9:7d:d4:35:13:72:
         c8:2a:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:15:01 2026 by rpki-client