Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
File:                     34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (raw, json)
Hash identifier:          iGoPfuv5a8xbZyojHqaOJ+85NhOUpuLkcf803sv4O6I=
Subject key identifier:   D8:6A:1F:1A:6F:25:EA:2F:18:8F:CF:6E:13:EF:ED:BC:FB:B6:DC:42
Certificate issuer:       /CN=DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B
Certificate serial:       5E0AE43090DB6D42A77AB2AEE2646590E8D36188
Authority key identifier: DF:34:A5:76:EE:A8:B0:B9:4A:35:AB:35:57:DD:3D:99:2B:9D:B0:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa
Signing time:             Mon 27 Jul 2026 18:17:02 +0000
ROA not before:           Mon 27 Jul 2026 18:12:02 +0000
ROA not after:            Mon 26 Jul 2027 18:17:02 +0000
asID:                     269671
IP address blocks:        45.191.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0a:e4:30:90:db:6d:42:a7:7a:b2:ae:e2:64:65:90:e8:d3:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B
        Validity
            Not Before: Jul 27 18:12:02 2026 GMT
            Not After : Jul 26 18:17:02 2027 GMT
        Subject: CN=D86A1F1A6F25EA2F188FCF6E13EFEDBCFBB6DC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:67:ad:f7:ef:23:cc:38:ad:fe:3d:f9:6b:
                    3a:fb:3e:96:f8:31:90:dc:fa:65:31:5e:f9:5a:05:
                    e3:75:c6:d2:a5:5f:f4:8c:c0:95:b2:cd:74:d6:d5:
                    2d:d2:41:85:50:c9:5e:07:03:30:86:47:33:fd:22:
                    b4:68:59:4d:40:ab:ec:a8:c0:a5:7a:fa:b8:28:6d:
                    49:d8:48:f2:07:6a:4b:b5:83:0c:c9:06:c2:61:30:
                    cd:25:99:cd:40:13:09:04:bd:79:fd:ba:c9:88:b3:
                    7d:a7:04:39:61:86:49:d1:e9:26:49:14:e4:8c:67:
                    0d:48:96:e7:d7:fc:e0:b7:20:a7:ff:31:77:06:ec:
                    96:c3:bf:20:ad:57:22:4c:d9:49:74:80:09:78:42:
                    16:eb:b6:27:32:43:1c:d7:f0:13:b7:73:49:2c:37:
                    fd:8b:24:e6:f2:14:5f:c2:a8:37:54:d2:85:77:6c:
                    4f:f2:1a:0b:cd:a9:11:43:75:87:13:6d:4d:0a:37:
                    87:f7:27:dc:ae:b5:95:fc:a0:aa:f2:d7:db:93:88:
                    d7:7e:7f:c7:1f:60:bb:f1:68:ed:06:fe:f4:63:96:
                    c6:d9:ce:31:31:22:f3:a6:68:48:c8:62:bc:75:23:
                    b7:71:c7:e3:7e:69:ba:eb:ce:46:cb:22:c3:e2:31:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:1F:1A:6F:25:EA:2F:18:8F:CF:6E:13:EF:ED:BC:FB:B6:DC:42
            X509v3 Authority Key Identifier:
                keyid:DF:34:A5:76:EE:A8:B0:B9:4A:35:AB:35:57:DD:3D:99:2B:9D:B0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:a5:d6:49:5c:b3:27:32:3d:a2:d4:3b:8f:95:1b:2d:3e:
         99:54:9f:0a:d3:0b:ee:1e:13:4b:0f:8b:1c:74:1c:66:a7:35:
         37:8c:b4:07:85:be:eb:65:26:ae:83:92:a4:4f:79:ee:05:c9:
         c7:bd:45:52:a7:14:2d:a3:23:8d:37:24:21:8c:e1:75:e1:fd:
         80:d9:53:70:0d:15:a1:0e:0e:ce:ae:ce:fc:f5:49:48:76:3a:
         0f:4e:dc:19:4d:01:3c:61:19:95:dd:5e:c6:34:ce:5e:f4:4a:
         53:7f:a8:ab:f3:37:1b:8a:37:85:d7:5d:51:f6:cd:85:8a:06:
         93:79:f3:39:a8:32:4c:87:39:35:b5:f2:39:50:da:84:fb:d1:
         35:20:42:75:cd:7b:5c:44:ce:48:43:f7:86:6d:ee:eb:7b:cd:
         e2:d0:6b:1a:89:18:1a:6a:22:e8:91:76:1a:17:bc:42:69:7c:
         c6:59:ea:e1:2c:62:46:1a:f5:58:4c:4e:f3:54:f3:f0:f7:f0:
         c0:97:c1:91:fa:e9:17:6a:fa:c0:bb:9f:99:85:a5:8b:2f:d2:
         11:3c:c9:35:0b:43:2c:2f:0a:8c:b4:2d:47:5b:c8:a1:15:81:
         d5:b2:1c:c9:bd:1b:6f:66:f5:1a:c9:2e:f2:87:9c:90:28:4b:
         22:59:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:25:13 2026 by rpki-client