Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32342d3234203d3e20323733333530.roa
File:                     34352e3232342e3133362e302f32342d3234203d3e20323733333530.roa (raw, json)
Hash identifier:          E2Oqu8R4FqtDLqcdBX4hCVhublgMX24Lry5WRmIreIc=
Subject key identifier:   D7:0C:C5:A8:A1:7B:C3:3A:7D:B0:59:B3:E4:6D:57:67:2D:2A:30:7F
Certificate issuer:       /CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
Certificate serial:       39A47A873B755D473608A0D008401F982B3B4F6E
Authority key identifier: C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32342d3234203d3e20323733333530.roa
Signing time:             Tue 04 Aug 2026 13:14:03 +0000
ROA not before:           Tue 04 Aug 2026 13:09:03 +0000
ROA not after:            Tue 03 Aug 2027 13:14:03 +0000
asID:                     273350
IP address blocks:        45.224.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a4:7a:87:3b:75:5d:47:36:08:a0:d0:08:40:1f:98:2b:3b:4f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
        Validity
            Not Before: Aug  4 13:09:03 2026 GMT
            Not After : Aug  3 13:14:03 2027 GMT
        Subject: CN=D70CC5A8A17BC33A7DB059B3E46D57672D2A307F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:e8:68:60:2b:3b:63:c0:c0:40:c2:d9:2d:
                    83:1a:1f:34:8b:6e:af:3d:bd:55:87:22:1e:4e:1b:
                    11:e0:8f:38:67:7c:13:d1:bc:0e:8f:5d:68:f4:83:
                    c2:1d:60:cb:aa:77:c3:d5:2a:da:d0:24:f0:0d:30:
                    b0:94:61:6d:9c:bd:58:73:5f:13:af:f2:b5:5f:1c:
                    bf:06:87:38:a7:e5:28:7d:fd:71:f0:ed:04:49:05:
                    7a:6f:29:19:58:ea:16:97:cb:2d:b0:2a:8d:ad:7a:
                    76:9d:91:fa:a4:b4:c0:d5:77:8c:a6:f0:4e:b1:3e:
                    ca:98:00:3c:8d:2f:b0:a8:1b:44:72:a8:f6:01:8d:
                    8c:40:c7:9f:de:fc:30:18:7b:73:0e:65:f2:2a:05:
                    2d:f4:6b:67:32:f8:e0:eb:74:ab:53:f2:a4:48:18:
                    80:15:6a:df:b0:b3:b1:8c:74:cf:50:59:ba:4e:90:
                    c6:b9:10:f0:f2:cb:90:ac:e4:aa:fa:e9:06:34:f0:
                    1c:4f:91:06:c7:bc:0d:88:5a:b0:e1:48:e7:0f:2f:
                    87:11:5a:4c:26:0c:d2:6d:4f:21:73:a9:76:30:28:
                    39:0c:2d:aa:ef:7c:57:94:a5:ba:92:de:f2:50:08:
                    9c:a5:fd:d0:7f:d1:bb:75:14:5d:4e:22:d2:ae:55:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0C:C5:A8:A1:7B:C3:3A:7D:B0:59:B3:E4:6D:57:67:2D:2A:30:7F
            X509v3 Authority Key Identifier:
                keyid:C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133362e302f32342d3234203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:64:04:81:eb:97:a4:9e:4b:a0:b8:b4:88:62:c8:d3:d5:2d:
         e5:2b:00:b7:2f:91:eb:82:ca:a8:4a:90:65:31:32:d4:9a:83:
         1f:cd:64:c8:e8:03:f7:af:0c:81:91:0d:24:28:2f:47:c4:01:
         2a:c0:cc:96:75:4b:5e:a8:44:2e:28:eb:e0:98:72:15:7f:95:
         52:6d:ef:67:8e:53:42:57:aa:74:b4:89:3b:9c:02:18:b7:31:
         9c:fa:93:b4:bc:71:d4:d5:f9:37:d8:27:59:71:1a:be:0e:a8:
         45:22:58:71:a1:f0:cd:c0:4d:6c:f8:41:41:2b:5c:8d:08:7a:
         8e:ad:ec:d6:5d:3c:5d:6a:95:30:07:47:99:68:dc:9d:b2:72:
         16:81:81:62:14:c6:60:9a:b6:d2:8f:a9:e1:2b:52:52:94:3e:
         b9:bd:45:f1:3f:ec:d3:1b:48:00:84:5e:b5:46:59:9e:73:2c:
         d3:81:47:23:fd:0b:4a:31:45:18:60:84:ac:a9:eb:99:e9:6d:
         8f:4d:b6:2c:bb:b3:79:ac:6d:0a:01:e4:c8:f1:21:f2:74:75:
         dc:3e:f2:d8:1e:ce:86:97:4d:40:32:0b:93:b1:47:c0:9c:8d:
         01:7f:f9:b5:3b:b2:62:1c:b2:1a:ba:00:33:d6:2f:de:42:e5:
         5c:6d:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:44 2026 by rpki-client