Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233332e302f32342d3234203d3e20323639323630.roa
File:                     34352e3138322e3233332e302f32342d3234203d3e20323639323630.roa (raw, json)
Hash identifier:          R2F7wUrmqEDjKGr4E0MUgq9gaDMnn0mO/ttwKy5lUTE=
Subject key identifier:   66:0F:23:E9:31:95:38:1C:D1:BC:9B:DB:0C:30:E7:D1:3F:88:10:F4
Certificate issuer:       /CN=C0E122946327FEE7B6C863D65951CF364128033D
Certificate serial:       0EBDF3D2898FB26EBECE2B75702B00B0D68C5C97
Authority key identifier: C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233332e302f32342d3234203d3e20323639323630.roa
Signing time:             Thu 25 Jun 2026 14:34:47 +0000
ROA not before:           Thu 25 Jun 2026 14:29:47 +0000
ROA not after:            Thu 24 Jun 2027 14:34:47 +0000
asID:                     269260
IP address blocks:        45.182.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl
                          rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 20:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:f3:d2:89:8f:b2:6e:be:ce:2b:75:70:2b:00:b0:d6:8c:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E122946327FEE7B6C863D65951CF364128033D
        Validity
            Not Before: Jun 25 14:29:47 2026 GMT
            Not After : Jun 24 14:34:47 2027 GMT
        Subject: CN=660F23E93195381CD1BC9BDB0C30E7D13F8810F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:17:c5:20:ba:1c:bf:0b:63:9f:2d:6b:a4:
                    8d:be:37:cd:bb:7d:3e:19:05:13:68:39:a7:5e:6d:
                    58:15:ad:20:8b:dc:69:59:69:75:20:23:11:76:e9:
                    23:47:65:8f:e3:af:a5:45:79:ed:42:5d:df:73:ea:
                    bf:19:39:1a:6f:74:fb:ea:bd:a1:0f:20:73:4c:61:
                    37:b1:e2:ef:13:d0:1f:ab:12:07:2b:fe:c6:61:f7:
                    d1:28:fa:fa:84:f6:fa:c7:f7:c6:8d:e5:69:45:6d:
                    50:f1:66:61:bc:c6:24:3c:e3:77:f2:3e:89:43:fd:
                    2e:4b:07:40:72:fa:b1:b6:7e:ab:5b:b5:76:19:48:
                    84:f0:94:c8:0a:95:dd:33:76:0f:67:ca:eb:6f:8f:
                    64:33:e4:84:a2:8b:79:23:2a:b7:26:1b:6c:f5:17:
                    09:ed:81:ab:ba:4d:4b:e3:4c:76:84:6b:3e:49:d4:
                    63:32:96:97:7d:81:38:f5:77:28:b8:b4:7a:db:0f:
                    90:76:f7:b1:fd:f5:f5:95:67:3a:db:32:0b:3d:1b:
                    a9:1e:a2:f5:af:bc:e6:9a:7a:a9:85:37:ae:bf:79:
                    96:68:5f:c5:12:98:c4:1c:d7:cf:08:cd:c8:e5:37:
                    b5:b6:96:12:f0:2e:8c:ac:e6:d6:fa:7c:57:63:3b:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:23:E9:31:95:38:1C:D1:BC:9B:DB:0C:30:E7:D1:3F:88:10:F4
            X509v3 Authority Key Identifier:
                keyid:C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233332e302f32342d3234203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a2:82:5b:9c:1a:77:8e:53:e5:c9:41:29:6c:3d:61:99:ba:
         3a:43:26:45:cf:a3:cc:6e:ff:f5:63:bb:0b:ee:0f:3b:df:89:
         86:1b:24:1f:ef:7c:db:4c:87:8a:aa:60:c5:4a:a6:f7:8a:04:
         7f:47:d5:63:c3:d2:9e:aa:7a:79:79:b6:7a:2c:6b:6b:80:d4:
         1e:18:84:09:7f:a9:20:66:73:a9:d5:c4:ab:eb:87:64:6d:01:
         81:6d:14:b6:a9:79:7f:aa:62:b3:ed:29:90:b9:19:62:42:88:
         ef:8b:7f:dd:6b:16:a8:ea:47:13:03:0d:48:96:88:c7:77:84:
         f4:cb:39:40:0e:13:ae:13:d3:13:ee:74:54:36:42:d2:f6:bc:
         1c:81:ea:7a:e2:9c:75:05:cb:5f:69:2a:c2:46:e9:f1:ee:7c:
         d2:8d:59:f1:a8:10:ef:22:b0:53:c0:1c:2c:cd:0e:b1:08:15:
         a3:f8:43:0d:c6:87:5b:cb:bf:ff:37:b8:2f:53:4d:ed:3c:e6:
         59:52:a8:b0:94:78:8c:98:c2:78:a6:9c:9c:05:6d:dd:27:0a:
         f9:b4:66:15:c8:1c:29:47:8f:9e:66:d0:43:22:c5:b2:36:3e:
         86:b8:f1:01:0a:05:d3:ca:f3:46:45:1e:1b:0d:8e:e6:af:3c:
         4b:31:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:00:17 2026 by rpki-client