Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35382e302f32342d3234203d3e20323638333030.roa
File:                     34352e3233372e35382e302f32342d3234203d3e20323638333030.roa (raw, json)
Hash identifier:          1fpoYqnM9NAw51kLZlYqQa7wbr+RL2YsJrfwbWl7pNg=
Subject key identifier:   76:F6:70:41:26:80:9C:9B:BC:7F:EE:D9:64:36:02:70:0E:CF:95:4C
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       595F0944A6F9728422473455C90D669AA7551AEF
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35382e302f32342d3234203d3e20323638333030.roa
Signing time:             Mon 03 Aug 2026 15:36:53 +0000
ROA not before:           Mon 03 Aug 2026 15:31:53 +0000
ROA not after:            Mon 02 Aug 2027 15:36:53 +0000
asID:                     268300
IP address blocks:        45.237.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:09:44:a6:f9:72:84:22:47:34:55:c9:0d:66:9a:a7:55:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: Aug  3 15:31:53 2026 GMT
            Not After : Aug  2 15:36:53 2027 GMT
        Subject: CN=76F6704126809C9BBC7FEED9643602700ECF954C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:b8:83:6c:53:c5:7f:8b:79:dc:b7:8c:78:
                    b9:e0:44:b3:a3:dc:0d:cb:76:73:61:65:60:c2:1d:
                    fa:ee:d6:7a:81:1f:b1:31:8a:af:3e:17:53:ba:6f:
                    89:87:ca:a3:df:5f:f6:b3:3a:5f:97:2f:17:74:e0:
                    87:13:5c:ee:01:8a:ec:cd:7e:06:8a:e5:87:c6:b9:
                    c3:e1:8e:57:78:4c:ea:70:ad:0b:69:ac:84:71:87:
                    7e:46:8f:6b:a9:59:88:7d:da:ae:88:7d:68:ae:61:
                    2f:8a:4d:c0:25:ef:42:ec:3d:ea:75:cf:33:75:49:
                    29:5b:27:08:bc:ee:1a:82:b4:13:1e:50:4d:84:e5:
                    a5:86:ba:ff:71:50:eb:45:ce:09:af:07:82:11:89:
                    22:6f:e6:ae:24:5a:40:bc:ae:f7:aa:98:6c:ee:18:
                    02:26:7c:64:6e:64:0d:87:f7:8a:84:a1:41:dd:f4:
                    98:f3:01:2e:d9:a3:c6:10:af:a2:62:1b:fa:7c:70:
                    05:65:75:92:71:dc:4b:70:28:63:c7:bf:0f:c3:7e:
                    40:d6:16:d8:a3:55:fe:8d:7b:a4:e9:cd:e6:d5:42:
                    e5:26:8d:80:a7:24:48:47:02:6f:ab:19:44:99:0a:
                    e2:68:88:47:4d:91:f7:49:79:65:6d:7d:7b:4d:5c:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:70:41:26:80:9C:9B:BC:7F:EE:D9:64:36:02:70:0E:CF:95:4C
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35382e302f32342d3234203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:38:41:f5:02:36:90:9d:90:76:2a:82:e5:c1:45:49:30:
         fc:41:f6:22:d5:f8:a9:3c:9b:c9:78:e3:a8:55:48:51:79:d2:
         ba:7e:b9:10:fc:ee:2b:3e:8b:50:13:d7:c0:d1:89:14:b3:8b:
         99:29:97:5e:e4:32:8c:0e:25:90:76:84:5e:38:97:3c:07:a8:
         05:ca:c1:ab:db:9a:40:fa:35:52:1c:c9:33:65:f9:19:c2:e4:
         f1:53:b0:f3:0b:97:d4:ef:96:92:bd:7c:c6:fb:f2:ed:97:d3:
         b5:ad:47:ec:6f:00:ef:b4:6a:b8:d4:b7:45:71:01:30:c1:15:
         ea:a6:70:fd:3e:c0:6c:49:e3:1a:fa:43:23:a1:ca:c3:36:1f:
         64:16:9d:f8:ce:e8:89:11:09:be:0a:94:91:72:29:67:1e:15:
         b3:b3:84:8e:25:6d:b7:47:f5:2c:da:fd:79:32:47:be:ee:6b:
         3e:0b:b7:64:fc:cd:20:72:b3:cf:90:18:a8:16:74:75:92:f6:
         83:03:97:db:c1:04:28:4b:ef:27:fe:14:1b:c1:5e:37:a6:de:
         0d:c7:0d:f5:19:aa:68:a1:dd:8b:29:c4:c9:d9:58:21:78:5d:
         76:10:d4:8f:3c:ed:3f:f9:c1:28:55:a1:f9:55:a3:61:62:f8:
         b5:71:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:56:28 2026 by rpki-client