Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3332203d3e20323639313032.roa
File:                     34352e3137382e3233362e302f32322d3332203d3e20323639313032.roa (raw, json)
Hash identifier:          9I6GmpSbT1w2sGj1WxFk9VyvdPNidPdTei4ISoWJo70=
Subject key identifier:   74:43:BD:01:AF:34:C7:52:45:FF:43:B1:0F:11:4D:0D:04:61:95:C9
Certificate issuer:       /CN=7575D027902527F62EDD0F27A5AFEF9DC2A1EC45
Certificate serial:       239BE4AF73004543C290FF4FA53F8D2EA92E8B93
Authority key identifier: 75:75:D0:27:90:25:27:F6:2E:DD:0F:27:A5:AF:EF:9D:C2:A1:EC:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3332203d3e20323639313032.roa
Signing time:             Thu 20 Aug 2026 19:14:17 +0000
ROA not before:           Thu 20 Aug 2026 19:09:17 +0000
ROA not after:            Thu 19 Aug 2027 19:14:17 +0000
asID:                     269102
IP address blocks:        45.178.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.crl
                          rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:e4:af:73:00:45:43:c2:90:ff:4f:a5:3f:8d:2e:a9:2e:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7575D027902527F62EDD0F27A5AFEF9DC2A1EC45
        Validity
            Not Before: Aug 20 19:09:17 2026 GMT
            Not After : Aug 19 19:14:17 2027 GMT
        Subject: CN=7443BD01AF34C75245FF43B10F114D0D046195C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:f4:a1:9f:8e:6f:73:39:3f:21:20:c8:24:
                    a2:aa:44:22:78:a4:14:7e:f7:1f:77:cc:bf:c1:8d:
                    b0:fa:6d:c2:e0:fb:a7:c2:de:cd:6e:9e:f9:52:92:
                    89:cf:b2:f7:61:c0:5c:8c:7a:7b:b5:a8:fa:27:89:
                    b2:7b:81:56:56:6a:21:c8:8d:1c:98:c9:ba:b8:e2:
                    a6:bc:ce:e4:5f:7b:f0:77:98:aa:5c:ed:aa:4e:58:
                    17:b4:d6:7e:09:d7:27:29:57:77:0f:8d:b2:f0:08:
                    f4:67:73:d8:4a:f8:a2:22:25:bd:da:9a:c2:49:ee:
                    66:39:e9:08:22:c0:d1:ff:ff:1d:cf:96:6a:35:c7:
                    93:c7:db:4e:6a:52:00:76:06:31:aa:c1:c3:98:53:
                    0a:70:63:90:e8:70:23:4f:c4:00:5d:da:9f:46:bb:
                    e0:41:f7:a8:27:e5:aa:4c:e8:ef:3c:4d:da:25:16:
                    f6:6e:6f:61:1d:cd:91:e5:54:76:8d:c4:a5:36:f0:
                    05:38:9f:5c:01:b7:69:eb:6b:c9:83:3d:76:31:af:
                    f6:43:f1:80:a4:53:da:74:92:33:03:95:4a:04:1a:
                    72:98:53:c9:59:17:cc:74:5d:1f:49:04:3e:4b:7e:
                    15:14:6e:28:26:95:12:2f:fd:e1:50:da:ec:02:fc:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:43:BD:01:AF:34:C7:52:45:FF:43:B1:0F:11:4D:0D:04:61:95:C9
            X509v3 Authority Key Identifier:
                keyid:75:75:D0:27:90:25:27:F6:2E:DD:0F:27:A5:AF:EF:9D:C2:A1:EC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7575D027902527F62EDD0F27A5AFEF9DC2A1EC45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3332203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:fe:70:b2:3a:19:80:bc:57:e6:ce:c4:ea:a4:e3:ad:14:38:
         53:ee:37:9b:29:c8:79:2c:a3:ec:bd:0a:ad:53:c0:ac:b9:ec:
         93:9c:63:31:40:c1:b9:fa:a3:54:69:61:3d:17:cf:f9:81:9d:
         d4:ee:90:d9:d5:c3:c7:dc:77:33:1b:d4:4f:b0:fb:3c:6b:5d:
         72:79:41:45:f5:5f:4c:7d:2e:c2:4f:83:61:be:9c:bf:bf:16:
         69:c9:79:1d:3f:fe:b5:f7:13:73:b8:08:ae:a2:13:af:55:62:
         85:96:91:07:64:11:21:2c:e6:2e:b3:4b:cf:af:b5:40:14:e4:
         dc:60:f0:38:5e:7a:c8:a1:4f:36:9f:ab:90:81:7a:98:ae:93:
         0b:24:5c:45:af:91:86:ab:53:b9:a3:2a:76:bf:e2:7b:7d:a7:
         60:5c:7c:08:02:24:ed:1e:e4:5f:e3:60:27:6e:51:35:c5:f3:
         11:63:cb:b1:5b:eb:95:87:03:6e:0a:2b:2e:ea:40:18:5c:e0:
         de:94:28:e5:13:8d:c1:a7:ab:80:17:f8:c1:82:68:98:dd:bc:
         7a:b4:a8:a6:2a:a8:1a:7b:02:bd:d7:bc:6a:b5:e7:7b:ab:0e:
         5e:dd:56:a0:12:d6:ed:bb:8f:47:dc:6a:bb:9b:83:5a:00:5b:
         a7:49:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:36:55 2026 by rpki-client