Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31342e302f32332d3233203d3e20323637323837.roa
File:                     34352e3233332e31342e302f32332d3233203d3e20323637323837.roa (raw, json)
Hash identifier:          YhRbfQk47XqSR2WRKxgy0yilOLhZ/ny/30v+Bc1MvWE=
Subject key identifier:   8E:B7:3D:B9:98:27:1B:C2:D2:10:FB:61:DE:F6:B4:7E:22:23:C1:0F
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       310FF9492ADEF40640136053864510581A4DE7B3
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31342e302f32332d3233203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 21:33:27 +0000
ROA not before:           Tue 08 Sep 2026 21:28:27 +0000
ROA not after:            Tue 07 Sep 2027 21:33:27 +0000
asID:                     267287
IP address blocks:        45.233.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 06:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:f9:49:2a:de:f4:06:40:13:60:53:86:45:10:58:1a:4d:e7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:28:27 2026 GMT
            Not After : Sep  7 21:33:27 2027 GMT
        Subject: CN=8EB73DB998271BC2D210FB61DEF6B47E2223C10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:6b:0b:7e:6e:c5:95:90:3e:25:d1:a9:e7:
                    c2:c5:e8:69:27:0d:f4:f7:29:cd:ec:ea:bd:0f:73:
                    8e:9e:4d:c7:a2:97:b9:6e:5c:51:ac:40:12:9b:1c:
                    0c:8a:a1:11:25:36:6f:76:96:16:f6:06:8d:cc:45:
                    33:10:0a:fd:72:70:4a:bc:64:51:15:d2:a3:34:cd:
                    18:6d:18:f5:f3:c7:45:8b:a7:ea:d2:07:8b:1a:ef:
                    3f:b4:a5:86:87:f7:33:56:0b:71:bb:89:72:8c:8e:
                    2e:66:9c:c1:2a:58:68:76:40:ae:e2:42:ee:9b:cb:
                    db:b0:c8:bc:1e:4b:28:8d:1f:3f:54:19:65:d4:7d:
                    4f:f0:aa:ff:ac:50:97:a7:79:38:6b:f7:77:b5:e0:
                    6d:dc:d8:ea:cf:64:9f:e4:3f:23:41:86:ef:af:bd:
                    e1:bc:f3:f1:ac:c5:a7:0f:87:4d:35:e6:e7:01:e2:
                    bc:ee:59:96:2a:15:83:7e:81:64:bb:6b:f7:66:9b:
                    43:e6:c3:12:9c:9e:29:52:4c:b7:4b:bd:25:18:36:
                    6f:bd:6e:37:ed:c9:bf:e8:41:fc:76:e3:e2:99:eb:
                    5d:da:30:4c:07:5b:9b:b5:c2:e4:33:04:19:3b:c0:
                    82:dc:01:bd:36:b7:78:43:c0:ab:c2:88:d4:5c:7a:
                    14:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:3D:B9:98:27:1B:C2:D2:10:FB:61:DE:F6:B4:7E:22:23:C1:0F
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31342e302f32332d3233203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:9f:37:bf:fd:e8:75:42:fc:71:70:14:8f:55:29:ff:89:da:
         91:d4:e8:f9:e8:92:aa:c6:2e:0b:72:ca:7a:f4:a6:4d:f5:b4:
         e0:df:5a:93:63:72:0f:5a:89:2a:cd:83:46:95:c4:27:d7:9b:
         96:50:ac:d1:dd:ee:7c:76:0e:f1:35:5b:59:5e:45:34:bf:03:
         74:82:e9:a3:31:77:2d:92:86:b3:57:c9:3c:5c:f2:0c:e8:2b:
         64:4c:09:96:4f:dd:26:a7:31:fe:72:af:d6:50:bd:c4:f3:f4:
         fc:cb:51:63:41:9b:87:d1:63:cf:04:5b:d8:d4:0a:41:e1:75:
         b9:5e:dc:c9:c0:ec:08:87:b3:f8:7d:c8:85:c5:2e:54:dd:9f:
         72:af:93:38:8f:99:d0:90:74:b8:83:74:10:61:c0:80:ff:ea:
         57:f1:36:f9:98:c8:b7:6a:1f:98:63:42:8c:7c:a1:4d:71:95:
         00:59:43:77:6c:0f:af:f4:61:22:46:46:a2:89:08:f9:8d:b0:
         96:79:62:7c:33:ec:f4:b8:06:83:a2:23:21:c9:b4:9f:59:4a:
         c1:90:5b:1c:b5:46:1b:16:12:26:d6:49:56:f0:90:a7:ee:39:
         8f:d0:91:57:9e:7c:7f:85:2a:11:01:c9:21:dc:b1:d2:ef:83:
         84:cb:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:10:34 2026 by rpki-client