Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
File:                     34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa (raw, json)
Hash identifier:          ERpDkB/i1Abxt0XJzrg/ub1J9yAy4LIlFVIuyFwHunM=
Subject key identifier:   69:AB:DA:C0:2D:9C:16:F8:91:B8:B3:D9:5E:7A:35:E9:3C:93:44:A3
Certificate issuer:       /CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
Certificate serial:       7CA8A672FB7D78DCD06C636394F7F402BB829D82
Authority key identifier: 7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa
Signing time:             Thu 06 Aug 2026 14:07:05 +0000
ROA not before:           Thu 06 Aug 2026 14:02:05 +0000
ROA not after:            Thu 05 Aug 2027 14:07:05 +0000
asID:                     267270
IP address blocks:        45.232.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 05:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a8:a6:72:fb:7d:78:dc:d0:6c:63:63:94:f7:f4:02:bb:82:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Validity
            Not Before: Aug  6 14:02:05 2026 GMT
            Not After : Aug  5 14:07:05 2027 GMT
        Subject: CN=69ABDAC02D9C16F891B8B3D95E7A35E93C9344A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:e9:f7:88:8e:33:8a:46:6d:16:56:71:23:
                    40:9f:3f:4c:6c:30:ab:f0:36:b3:9e:0d:fc:7d:7e:
                    b2:a8:35:25:4d:31:da:46:48:4d:72:81:fd:05:10:
                    b7:6a:35:2f:e2:53:88:30:b7:30:7a:c1:2e:98:3f:
                    7a:31:59:a5:08:41:76:15:48:b6:43:60:6c:8f:86:
                    b0:60:f5:a5:57:bc:bc:c0:58:8f:6b:cf:e5:10:a1:
                    bd:dc:35:1f:ed:44:3d:94:3f:b7:f1:65:92:d9:1c:
                    80:f8:64:88:5f:fb:f8:7b:f2:4d:a3:2a:2d:c4:68:
                    9f:42:5b:05:1f:40:34:71:73:4f:bd:1c:33:ef:88:
                    8c:49:35:b6:86:e4:df:48:82:74:b3:15:6b:6a:3b:
                    10:e4:a7:78:d1:b7:a5:29:49:12:7b:50:54:ef:1f:
                    a2:37:50:c3:c4:df:6e:e2:79:bb:c9:43:7a:66:2d:
                    23:17:4c:14:1e:38:a4:60:33:08:d6:37:af:5c:84:
                    d2:69:4e:4c:ce:17:2f:a5:9c:a8:dc:af:1a:82:fc:
                    97:2d:ab:d7:ce:b6:4a:2e:fa:96:9c:14:88:b3:ce:
                    0f:55:df:de:cc:5b:a1:0e:1d:77:2f:77:b1:a4:7e:
                    3e:6d:b6:02:e2:b4:9f:8b:b3:7f:34:b8:2a:c8:ff:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AB:DA:C0:2D:9C:16:F8:91:B8:B3:D9:5E:7A:35:E9:3C:93:44:A3
            X509v3 Authority Key Identifier:
                keyid:7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/34352e3233322e3135362e302f32322d3332203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:80:cc:76:a0:28:72:10:fa:c9:b8:29:39:7f:b2:02:35:91:
         c7:8d:60:ab:b7:f3:39:e0:47:ad:69:b1:d0:ae:be:ea:50:b7:
         f4:98:79:f0:64:49:b5:62:12:2a:d4:69:53:02:a8:8c:35:2f:
         bc:b8:51:1e:f4:8d:61:50:ea:1e:1f:35:ed:af:31:cb:55:29:
         0d:a9:5b:c8:34:ad:9c:b3:f1:60:6e:86:86:05:68:c6:63:2d:
         2e:7b:9f:17:b5:bd:1a:0a:e7:21:5b:d1:76:38:5d:cb:fe:3d:
         d3:6c:83:9e:0f:1f:a0:be:23:c9:b9:3e:0f:4f:c2:72:6a:99:
         21:d4:32:09:1f:32:75:ca:f0:94:7f:f8:c4:0e:46:c5:32:a8:
         68:2e:72:8a:53:ca:5e:c3:7d:d9:d6:74:00:54:a1:d8:69:28:
         99:00:a2:2e:47:22:d4:93:96:59:62:d6:2d:c6:31:4f:72:17:
         6a:64:d6:24:fc:f0:46:87:65:92:71:c7:79:6e:ab:6e:3a:97:
         3b:97:c8:79:b8:72:a2:ae:a5:45:77:31:e1:32:c8:b4:f8:e9:
         8f:d1:42:ca:12:f2:fd:de:5f:ad:1a:df:72:b6:d7:5b:d3:14:
         48:65:7b:de:90:ff:34:86:3f:6a:6b:08:43:50:de:f9:5d:ab:
         a6:a7:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:38 2026 by rpki-client