Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133372e302f32342d3234203d3e20323733333530.roa
File:                     34352e3232342e3133372e302f32342d3234203d3e20323733333530.roa (raw, json)
Hash identifier:          Z5G9ziXnAflvqH21Wf+I9rRn1tmqOE3XUNXHcNDbUAM=
Subject key identifier:   07:50:5B:21:B5:63:65:0F:E7:02:8E:29:BB:8A:34:33:E3:A9:DD:BF
Certificate issuer:       /CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
Certificate serial:       2B17BA428226E3BA2133F8DDB744F17E3E5493D9
Authority key identifier: C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133372e302f32342d3234203d3e20323733333530.roa
Signing time:             Tue 04 Aug 2026 13:14:02 +0000
ROA not before:           Tue 04 Aug 2026 13:09:02 +0000
ROA not after:            Tue 03 Aug 2027 13:14:02 +0000
asID:                     273350
IP address blocks:        45.224.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl
                          rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:ba:42:82:26:e3:ba:21:33:f8:dd:b7:44:f1:7e:3e:54:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06DCE0C5EB51A8205D1036C5B9C08013C182332
        Validity
            Not Before: Aug  4 13:09:02 2026 GMT
            Not After : Aug  3 13:14:02 2027 GMT
        Subject: CN=07505B21B563650FE7028E29BB8A3433E3A9DDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:f1:e4:6c:43:a9:b9:8b:ac:4c:57:62:00:
                    1e:3c:22:86:cd:8f:49:a9:e4:5e:9b:e9:67:01:40:
                    50:17:cd:f1:26:e8:92:ff:ed:f0:10:7d:89:82:21:
                    57:27:f1:60:7b:d3:e5:87:c0:7c:6e:2a:46:b0:61:
                    9f:d5:b2:39:97:3c:c7:65:ab:8d:ac:ba:ab:22:3d:
                    ee:73:42:c8:62:5c:80:9b:5b:73:ee:20:f7:89:db:
                    b1:ea:c0:8c:6b:8d:4c:8c:4c:9d:03:4e:f7:d4:a8:
                    45:4b:ce:39:f7:4d:84:76:cf:83:db:73:ee:13:d3:
                    d4:94:14:38:90:6c:d1:52:a4:a2:fd:22:0e:57:3c:
                    a6:34:dd:a7:a5:47:51:1a:6a:f8:e9:5e:e3:ed:92:
                    07:3b:60:e1:12:cd:32:fd:82:d9:06:de:e3:53:1b:
                    82:dd:37:3d:60:e8:78:e7:fa:83:c8:e8:2f:cb:7b:
                    cb:c9:b3:03:07:1a:25:ca:0f:18:ed:99:27:0a:43:
                    81:b7:6e:23:1c:57:d6:de:48:11:18:f4:6c:68:e2:
                    28:07:18:a7:32:62:9a:25:32:05:a9:73:60:03:e5:
                    33:b8:75:e5:5f:7e:37:85:a5:02:a8:67:9a:c8:89:
                    fe:38:d5:98:1d:64:6e:f3:e9:f6:41:5c:41:5e:0f:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:5B:21:B5:63:65:0F:E7:02:8E:29:BB:8A:34:33:E3:A9:DD:BF
            X509v3 Authority Key Identifier:
                keyid:C0:6D:CE:0C:5E:B5:1A:82:05:D1:03:6C:5B:9C:08:01:3C:18:23:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/C06DCE0C5EB51A8205D1036C5B9C08013C182332.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C06DCE0C5EB51A8205D1036C5B9C08013C182332.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHidhMLhbm2YKKuPL5QWjYxL79CEm2VG1TLR9HKPduT1/0/34352e3232342e3133372e302f32342d3234203d3e20323733333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:81:f6:50:28:53:b5:64:6d:1d:8c:a8:ec:eb:99:98:c1:1b:
         73:5d:54:60:56:4f:76:96:69:ba:e9:ff:7e:cc:c9:ee:af:89:
         c6:c3:da:c0:0f:13:9e:61:fe:1c:cb:51:bf:b8:c1:74:48:4b:
         84:9a:18:41:5a:bc:0b:11:4e:bb:2a:36:40:35:52:9f:9f:50:
         54:36:5b:fe:6c:be:bf:51:e3:a2:8e:f6:9a:d5:03:b7:ad:b7:
         1d:ba:1b:e6:a8:73:a3:5f:43:22:88:26:2d:75:2d:8c:ae:04:
         84:4f:e2:e1:cc:d7:c1:2d:f5:b5:76:09:e1:e8:0a:80:d8:70:
         8e:21:02:f8:4e:10:74:f6:87:71:6c:38:ce:90:b8:c1:af:9b:
         f4:fb:96:a1:32:55:a6:27:b5:43:40:08:37:19:88:30:07:6e:
         7a:31:2b:a3:68:16:f2:7b:e5:26:72:ea:78:cd:86:5b:bf:71:
         ad:5d:b4:12:ac:3a:d7:75:2a:5b:77:7d:39:25:3b:be:b8:8c:
         2f:c5:3f:a4:ee:14:d7:7b:f1:be:7b:de:3f:aa:19:96:b6:3e:
         4a:76:07:e8:f7:57:74:72:84:ec:73:ac:84:0b:f0:2a:55:eb:
         64:cb:ba:81:33:5c:9c:17:9a:28:95:99:3f:5e:d7:b3:80:27:
         ec:c5:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:47 2026 by rpki-client