Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230352e302f32342d3234203d3e20323637303330.roa
File:                     34352e3232372e3230352e302f32342d3234203d3e20323637303330.roa (raw, json)
Hash identifier:          7F3/VCIPGXqwn4LMwi/GYeB25VSubg96IpDsUupTFvQ=
Subject key identifier:   19:B0:8F:FB:1F:0B:B8:90:CE:71:FB:9A:A0:40:40:6A:2A:03:4E:77
Certificate issuer:       /CN=541B978FF1E0442599DD2C4370AA37746009FC8E
Certificate serial:       69BC4B72ABEC668F462C1DC0AFBBF57A30BD0946
Authority key identifier: 54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230352e302f32342d3234203d3e20323637303330.roa
Signing time:             Wed 19 Aug 2026 12:52:11 +0000
ROA not before:           Wed 19 Aug 2026 12:47:11 +0000
ROA not after:            Wed 18 Aug 2027 12:52:11 +0000
asID:                     267030
IP address blocks:        45.227.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl
                          rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bc:4b:72:ab:ec:66:8f:46:2c:1d:c0:af:bb:f5:7a:30:bd:09:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541B978FF1E0442599DD2C4370AA37746009FC8E
        Validity
            Not Before: Aug 19 12:47:11 2026 GMT
            Not After : Aug 18 12:52:11 2027 GMT
        Subject: CN=19B08FFB1F0BB890CE71FB9AA040406A2A034E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e5:94:c4:47:08:62:33:54:7f:ba:1f:d1:3a:
                    8a:70:74:66:f7:d7:82:01:88:dc:ed:20:31:97:79:
                    27:1a:27:ca:66:5a:54:4d:bb:78:4e:cd:fa:3f:dd:
                    6f:83:57:f4:b1:c0:f3:1a:1f:de:a8:9f:3d:7e:34:
                    bf:85:9c:36:4e:36:6c:70:bb:74:64:08:d3:fe:d5:
                    57:75:8f:0e:bf:70:ea:45:15:2e:e9:27:df:d2:a9:
                    ed:f2:46:d2:3c:dd:01:1f:74:69:65:0f:38:db:6b:
                    59:83:68:3f:92:d5:61:2a:a2:62:25:aa:3c:0a:cb:
                    ab:3e:da:aa:43:57:e8:46:fd:15:9a:a2:cb:49:7f:
                    cb:04:ed:77:90:e4:48:a9:1a:0b:7f:95:5a:d6:7f:
                    51:3a:d3:02:6a:50:0d:cf:14:e7:2d:0d:d0:f4:af:
                    f0:41:f5:3f:27:3c:6e:60:51:5e:3f:65:f0:02:bf:
                    1e:b1:a1:0c:1c:e9:c0:d5:a1:01:24:4d:a9:c2:39:
                    f1:b4:d6:4c:e6:61:8f:1b:22:f3:10:3e:2a:34:11:
                    c4:dd:cc:30:a7:7e:f6:cb:03:34:1b:5f:0e:65:59:
                    c1:05:ea:b7:de:1d:9c:bc:52:ed:bf:46:53:a6:d2:
                    af:6d:5e:91:58:73:3a:80:85:cc:2f:c9:25:a7:aa:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B0:8F:FB:1F:0B:B8:90:CE:71:FB:9A:A0:40:40:6A:2A:03:4E:77
            X509v3 Authority Key Identifier:
                keyid:54:1B:97:8F:F1:E0:44:25:99:DD:2C:43:70:AA:37:74:60:09:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/541B978FF1E0442599DD2C4370AA37746009FC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/541B978FF1E0442599DD2C4370AA37746009FC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPM5hJDBym9WooeUQw1xdjhpjCP7JQ8vGUaCtorKSHu/0/34352e3232372e3230352e302f32342d3234203d3e20323637303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5e:50:3f:27:cb:e0:a9:da:8a:c5:4e:8c:b3:99:20:55:4c:
         4b:76:68:ad:6a:9e:e0:ee:60:3d:f9:f3:81:cd:a3:2f:67:57:
         cc:57:ab:76:88:a0:c5:88:e2:43:f9:1d:ea:d4:6f:d6:f3:5c:
         ea:92:d1:b9:05:84:00:69:6f:88:0f:30:53:40:d8:46:70:66:
         27:45:9d:f7:4e:2f:46:00:7d:97:36:cf:f8:c1:35:70:45:16:
         0d:f6:76:27:89:c0:24:52:9e:7a:12:ad:b0:d0:d9:58:b7:2f:
         6e:cf:30:07:48:7c:3c:05:b3:69:a7:d1:a6:b1:7e:66:6d:c9:
         3a:cf:74:6d:65:19:73:f1:67:10:31:ee:58:45:c6:52:bf:00:
         81:35:06:c8:1f:c2:83:60:8b:24:8f:ba:22:29:6c:a9:59:96:
         0b:31:a7:d0:49:07:24:57:54:3a:fb:8a:31:6c:68:6f:7e:75:
         be:38:76:76:16:c8:6c:d3:10:18:d1:63:6d:00:58:36:c6:66:
         b8:d7:1f:6c:09:58:46:f7:2b:11:3a:27:f3:cd:14:04:13:44:
         c9:01:60:13:fc:b6:a9:51:f6:6d:26:83:14:d9:ab:f7:d0:a0:
         3f:8f:a8:57:13:3d:a7:9d:84:85:4f:4a:e2:b8:2a:84:34:bb:
         ef:f6:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:19 2026 by rpki-client