Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa
File:                     34352e3233372e35392e302f32342d3234203d3e20323638333030.roa (raw, json)
Hash identifier:          s3JAlvWtYliowIvVsEV2xROY6A3igkj9hId3SNoLdy4=
Subject key identifier:   57:62:D1:38:F7:CA:0E:09:7B:9A:81:C4:B3:0C:EA:AF:1A:52:AF:5D
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       500F6A2B3854EE0C4A226F0CF51A63BAAB4DDE8A
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa
Signing time:             Mon 03 Aug 2026 15:36:53 +0000
ROA not before:           Mon 03 Aug 2026 15:31:53 +0000
ROA not after:            Mon 02 Aug 2027 15:36:53 +0000
asID:                     268300
IP address blocks:        45.237.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0f:6a:2b:38:54:ee:0c:4a:22:6f:0c:f5:1a:63:ba:ab:4d:de:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: Aug  3 15:31:53 2026 GMT
            Not After : Aug  2 15:36:53 2027 GMT
        Subject: CN=5762D138F7CA0E097B9A81C4B30CEAAF1A52AF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:b2:1b:1a:9a:d7:80:6d:76:5a:2c:20:5a:
                    02:4a:8f:8d:ab:fd:84:a1:bf:4b:1d:e3:e0:b1:95:
                    86:12:1a:7f:e9:ac:0c:38:b0:cf:eb:f7:06:d0:3e:
                    9a:71:93:83:43:cd:0c:e6:55:30:62:38:88:3c:7d:
                    79:01:6a:45:b7:fa:de:70:22:ae:86:d7:52:f4:d6:
                    51:4b:71:a1:1b:c8:c3:36:64:3a:4e:6c:9e:59:6d:
                    d9:b4:cd:25:f1:59:2f:e4:06:15:96:b3:36:c8:ed:
                    f3:6d:f6:e6:82:d6:f1:3f:c9:60:17:1f:0e:6b:26:
                    75:0a:9b:d9:16:7b:c4:68:18:49:aa:7c:38:2e:e0:
                    1c:77:76:92:0c:fe:26:a0:21:5e:0d:d7:9f:e9:71:
                    36:f5:e2:1e:09:c0:57:83:0c:68:14:05:b5:8b:10:
                    bf:47:8c:96:f6:dd:cb:0e:16:1b:eb:e5:52:97:f9:
                    af:14:77:48:64:ad:2a:3d:ec:07:1b:82:b4:9c:de:
                    23:aa:72:7b:bd:eb:1c:d4:1f:61:44:c1:3f:dc:c6:
                    1c:14:dc:1d:53:d0:cf:07:e5:40:7b:21:06:dd:1f:
                    f8:ed:22:eb:b7:f6:fb:0c:5c:77:09:a7:ff:d7:9a:
                    90:6b:a6:c3:79:de:7c:c6:81:f7:8f:4c:1a:d7:9c:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:62:D1:38:F7:CA:0E:09:7B:9A:81:C4:B3:0C:EA:AF:1A:52:AF:5D
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/34352e3233372e35392e302f32342d3234203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:98:15:c5:00:57:bc:88:d7:e4:49:64:07:d2:da:41:a3:
         f4:18:ad:24:89:49:fd:d8:59:3e:77:5d:ea:87:ec:c0:ce:17:
         86:79:8e:a3:ef:87:b8:45:7e:c0:da:7c:63:c0:0b:d4:2d:a6:
         56:3c:24:c2:94:a9:1c:2e:df:f5:85:e7:ad:d1:d3:43:39:00:
         12:78:37:53:2e:92:b9:2d:45:73:f9:82:0e:f5:db:2f:f5:f7:
         00:98:97:01:53:d8:de:b1:5c:2f:e7:01:75:cb:56:30:3c:11:
         ef:ae:59:bc:40:b7:a2:03:a6:5f:2a:1c:f0:5d:2e:a8:c7:59:
         4f:55:d1:e9:6e:23:f8:de:70:43:fb:e9:88:0f:9b:0e:c2:4a:
         82:f6:7b:44:fe:df:f7:39:5e:2c:c2:cb:e3:0c:09:84:4b:aa:
         df:68:e7:ea:5c:54:be:d3:8e:06:c5:4a:ec:54:9a:60:7b:21:
         da:fa:c8:61:bf:e2:42:b6:d9:7a:b8:f7:1c:57:0a:b4:58:b7:
         f8:04:4b:57:4a:cf:83:3f:82:09:67:1c:3b:93:62:4b:50:2c:
         7b:b7:98:b4:da:56:93:0b:53:8d:ef:1b:6f:e0:fc:dd:1d:76:
         0e:95:ce:61:59:40:53:17:e8:3d:42:d1:74:54:40:8a:88:a2:
         17:5f:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:56:22 2026 by rpki-client