Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
File:                     34352e3232382e33372e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier:          64W7QdFra9AOWOBvAgKchn4cSCrRUEM04mGU54FE9co=
Subject key identifier:   70:2A:84:49:80:3C:F5:76:7B:D3:51:6C:4F:22:4F:0D:9E:EE:8F:34
Certificate issuer:       /CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
Certificate serial:       225891B953932AFA848767E3BD56C50B6086264B
Authority key identifier: 90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa
Signing time:             Fri 31 Jul 2026 12:41:23 +0000
ROA not before:           Fri 31 Jul 2026 12:36:23 +0000
ROA not after:            Fri 30 Jul 2027 12:41:23 +0000
asID:                     271699
IP address blocks:        45.228.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:58:91:b9:53:93:2a:fa:84:87:67:e3:bd:56:c5:0b:60:86:26:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
        Validity
            Not Before: Jul 31 12:36:23 2026 GMT
            Not After : Jul 30 12:41:23 2027 GMT
        Subject: CN=702A8449803CF5767BD3516C4F224F0D9EEE8F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:18:ac:9f:f8:ad:36:59:da:26:63:dd:91:
                    9e:84:8f:24:a1:69:5c:21:77:f6:95:92:9e:4c:a8:
                    47:e8:ea:80:4e:3d:98:24:82:ff:23:79:83:ef:55:
                    cc:6e:57:9d:27:86:9f:85:cd:e1:f5:b7:2e:0a:62:
                    d9:76:bd:a5:30:fb:fb:f1:f2:9c:be:e6:f8:cf:24:
                    b8:b0:cb:6b:08:74:ee:59:87:70:4f:95:83:23:3f:
                    dc:e3:73:46:43:34:80:20:4a:47:18:ef:cc:5e:65:
                    f7:ee:c3:d2:ad:b8:f4:b0:6e:54:3d:1f:cd:89:de:
                    2a:1f:93:ea:99:fd:fc:26:4c:e6:3c:bc:b1:e4:f4:
                    96:61:97:e3:92:90:8f:18:19:e8:44:47:80:e2:90:
                    51:1b:05:55:cf:46:bb:f5:d7:ef:ed:20:d4:8f:25:
                    b3:48:9e:4d:9f:08:4c:d3:e1:9d:6b:a3:cb:1d:66:
                    0a:22:b5:0b:79:d7:05:ca:d7:b5:de:86:ed:00:b4:
                    ff:53:b5:1a:d0:50:78:1b:5a:2d:8e:6b:c6:b8:35:
                    a0:9c:b7:92:20:ba:e2:8c:17:84:27:45:3b:1f:04:
                    0b:96:f2:cd:85:be:eb:7b:cf:d0:7e:c6:a5:51:39:
                    bc:e2:a8:0b:6c:73:2d:12:97:bc:f0:3a:61:38:c6:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2A:84:49:80:3C:F5:76:7B:D3:51:6C:4F:22:4F:0D:9E:EE:8F:34
            X509v3 Authority Key Identifier:
                keyid:90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33372e302f32342d3234203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:6c:dd:31:99:35:a3:32:4c:f5:e3:47:e2:44:6c:50:02:
         a0:28:23:06:6f:da:be:91:c8:41:3e:80:29:e6:83:0b:fc:44:
         e4:56:aa:e2:67:0c:c6:00:2b:72:27:2f:85:c0:4e:41:13:95:
         c0:2a:c7:e6:e6:ac:59:b6:be:af:cb:14:e1:6c:ca:c1:cc:2e:
         1b:cf:e1:f7:be:93:74:5a:07:ad:85:7c:85:10:16:ab:b8:c6:
         8c:98:e4:9b:46:07:f8:0e:89:76:c7:64:48:8a:7c:c7:47:dd:
         15:fe:73:bf:e6:21:45:32:eb:19:11:97:a8:97:c9:84:1f:ff:
         51:81:68:6b:d7:2f:b3:51:13:64:d6:c4:5c:44:d1:42:c2:9c:
         ef:8c:f4:6e:ca:85:e7:ad:da:9b:aa:27:cd:93:20:1e:b7:0f:
         e9:d2:5f:d7:08:2d:4d:08:03:21:f1:0b:31:1f:43:25:76:7c:
         46:eb:5e:ee:61:d3:b3:23:56:1b:37:1b:35:3a:af:27:44:38:
         84:23:ec:65:d5:d5:23:b0:a2:6f:c5:04:6b:d1:97:e2:af:4f:
         39:7e:89:81:44:57:20:73:b1:fc:18:9f:3b:96:bd:3c:59:67:
         01:0a:10:22:37:c7:8c:39:d4:f5:8e:8f:88:4f:cd:29:cd:c0:
         a0:6b:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:52:02 2026 by rpki-client