Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/34352e3233312e3133322e302f32322d3332203d3e20323637323132.roa
File:                     34352e3233312e3133322e302f32322d3332203d3e20323637323132.roa (raw, json)
Hash identifier:          CQgICWrJ3uozFvkpJE6rhSdB8/JHouIdL5dVyKNQnJM=
Subject key identifier:   67:FA:C7:B6:E0:56:0C:CF:66:CE:5E:7B:79:20:87:C0:B0:B9:11:5F
Certificate issuer:       /CN=393022402359E408F7306B4E047CCAB6AFC0B4F3
Certificate serial:       0FD05E247E07C27458670716BECC873B5D61ADC7
Authority key identifier: 39:30:22:40:23:59:E4:08:F7:30:6B:4E:04:7C:CA:B6:AF:C0:B4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/34352e3233312e3133322e302f32322d3332203d3e20323637323132.roa
Signing time:             Thu 25 Jun 2026 17:29:02 +0000
ROA not before:           Thu 25 Jun 2026 17:24:02 +0000
ROA not after:            Thu 24 Jun 2027 17:29:02 +0000
asID:                     267212
IP address blocks:        45.231.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.crl
                          rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d0:5e:24:7e:07:c2:74:58:67:07:16:be:cc:87:3b:5d:61:ad:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=393022402359E408F7306B4E047CCAB6AFC0B4F3
        Validity
            Not Before: Jun 25 17:24:02 2026 GMT
            Not After : Jun 24 17:29:02 2027 GMT
        Subject: CN=67FAC7B6E0560CCF66CE5E7B792087C0B0B9115F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:aa:e1:e2:77:a3:2a:e5:bb:6c:04:8a:b9:
                    f9:e5:7d:67:8e:32:38:cb:31:a6:a0:b2:34:24:ca:
                    3c:f4:6c:10:f6:dc:41:6f:90:99:d0:33:8e:46:9a:
                    10:5b:9d:a7:4e:95:59:02:18:77:43:f5:e9:64:00:
                    00:15:c5:a5:10:26:1e:2a:71:66:17:a5:59:20:f4:
                    ce:9a:4e:05:1b:cb:bd:57:7d:30:05:3d:8c:fb:8f:
                    f9:f3:dc:ef:36:77:9f:af:8c:d0:13:66:a0:8c:ff:
                    26:43:72:fa:66:e8:80:ba:3f:18:01:6f:00:38:aa:
                    0b:c0:fc:5a:fa:6b:28:b4:57:01:36:cf:ab:c5:06:
                    d3:20:f3:a2:0b:ce:00:aa:27:b3:f1:79:ce:7e:6b:
                    c2:d3:fb:5f:0f:26:cc:7c:bd:ec:d7:8b:27:c5:a2:
                    16:08:6a:9c:00:9e:c3:74:bc:3d:83:7b:bc:99:53:
                    1c:73:44:b8:a8:77:f3:b2:2d:3e:03:d8:9a:67:09:
                    56:2b:28:9a:8f:68:38:69:39:97:0e:d8:10:36:9c:
                    e2:d3:2b:1b:38:00:5b:5a:7a:3f:10:38:b7:30:e2:
                    c9:5f:bd:d0:92:9f:1f:e1:ee:e4:a0:15:0b:37:94:
                    42:2e:f1:ec:ff:5b:56:74:88:e8:75:32:93:a2:89:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FA:C7:B6:E0:56:0C:CF:66:CE:5E:7B:79:20:87:C0:B0:B9:11:5F
            X509v3 Authority Key Identifier:
                keyid:39:30:22:40:23:59:E4:08:F7:30:6B:4E:04:7C:CA:B6:AF:C0:B4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/393022402359E408F7306B4E047CCAB6AFC0B4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/393022402359E408F7306B4E047CCAB6AFC0B4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M5ngF25xJKxTSD3euoWogJD2YeBrpfXfyo54gNWFzkK/0/34352e3233312e3133322e302f32322d3332203d3e20323637323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:c3:f9:d9:6a:ca:c5:18:a3:27:be:71:f3:a5:78:00:2f:
         40:79:bd:2e:43:83:f6:c3:64:e5:b6:1a:a4:2e:b6:30:24:f4:
         2f:1c:21:25:e5:fb:c8:c4:22:78:4d:8c:b8:d8:cf:d7:e7:bd:
         09:7e:f8:06:ca:5b:6b:c6:2a:c6:82:73:85:af:bb:2a:65:b8:
         5f:b7:30:78:e3:21:22:64:5f:6e:91:61:31:b6:ef:bd:0d:ba:
         b6:da:92:a3:c2:06:76:8c:d1:7f:78:b5:0f:2c:5a:80:87:7c:
         8e:4d:f3:72:59:f3:2a:93:14:a7:56:5b:e8:34:1a:c9:4f:31:
         01:f5:4c:2c:84:71:b9:67:0f:95:b0:71:95:62:44:1d:e6:4a:
         f0:45:b3:eb:ec:a4:8f:29:8e:a2:aa:ce:33:d9:4e:c9:c3:56:
         d0:2e:ca:35:6c:5d:6d:ab:ad:d4:3a:96:f4:9b:41:fd:d1:bc:
         7d:e7:6f:a9:32:a6:9f:ab:e8:1f:4c:97:d9:7c:8b:d9:13:60:
         11:9f:a1:58:f3:78:bc:14:42:08:c4:4f:10:19:ca:19:06:93:
         e9:6e:ab:b6:c0:28:61:aa:fc:2e:3f:61:7a:59:59:3a:2d:b3:
         03:f2:68:fd:7f:37:cf:0e:9d:60:b7:b3:f2:29:5d:b5:df:54:
         12:d4:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:56 2026 by rpki-client