Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/34352e3232352e3230392e302f32342d3234203d3e20323730333530.roa
File:                     34352e3232352e3230392e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          rU6tFIo4sS1YIrBfDrMuOjUIMN/bbQqS0Th5tdmvcKQ=
Subject key identifier:   44:ED:62:9F:CD:16:52:22:E8:6F:84:88:D1:9F:F4:CD:9D:14:0E:09
Certificate issuer:       /CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
Certificate serial:       668A10EBD86A7FDF7BD100DACD9F60401CD3ED71
Authority key identifier: 18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/34352e3232352e3230392e302f32342d3234203d3e20323730333530.roa
Signing time:             Thu 20 Aug 2026 19:18:16 +0000
ROA not before:           Thu 20 Aug 2026 19:13:16 +0000
ROA not after:            Thu 19 Aug 2027 19:18:16 +0000
asID:                     270350
IP address blocks:        45.225.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:10:eb:d8:6a:7f:df:7b:d1:00:da:cd:9f:60:40:1c:d3:ed:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
        Validity
            Not Before: Aug 20 19:13:16 2026 GMT
            Not After : Aug 19 19:18:16 2027 GMT
        Subject: CN=44ED629FCD165222E86F8488D19FF4CD9D140E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:e5:49:f7:5c:8d:30:aa:9e:7c:e2:d3:cd:
                    9e:6d:2b:b8:cc:32:bd:b5:72:d5:26:86:5e:bd:9a:
                    3d:1e:db:0f:ec:7a:6b:ec:f8:da:ed:45:6d:44:4b:
                    29:03:e8:6d:5c:9a:e2:0b:3a:aa:f6:9b:96:af:5a:
                    d6:e0:45:de:f3:ec:87:67:3f:a1:fa:55:57:6a:3a:
                    b3:28:88:f4:2c:cc:7f:33:6c:e7:c6:89:22:0c:d7:
                    9a:09:d4:55:9e:b2:5f:55:5d:8b:47:cf:3e:56:e0:
                    7d:4d:dd:f3:35:5c:5e:46:68:be:d2:b8:20:a3:75:
                    7e:5c:7a:d5:e3:54:00:7f:20:e1:43:04:5c:54:e0:
                    85:f3:a9:da:ad:ff:88:f4:dc:5c:22:9e:7a:8d:4f:
                    47:b7:63:d0:12:2d:16:35:7b:5a:83:d6:0e:69:22:
                    a2:d9:32:46:9c:85:65:79:3a:42:20:ce:c5:22:f6:
                    bc:ac:72:85:c7:5a:5b:6e:05:d6:7b:50:86:0f:b6:
                    5f:36:ad:dc:12:e8:e8:30:98:87:5c:df:ee:f3:a8:
                    ba:e3:9d:1f:2d:f0:c8:48:42:0d:4a:91:88:29:30:
                    f4:c5:30:09:53:27:50:4c:57:cd:49:48:6b:7b:7a:
                    0c:cc:e2:4a:5d:c4:2b:24:d5:4e:f6:ae:c0:54:a5:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:62:9F:CD:16:52:22:E8:6F:84:88:D1:9F:F4:CD:9D:14:0E:09
            X509v3 Authority Key Identifier:
                keyid:18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/34352e3232352e3230392e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:63:fd:0c:4c:e4:cc:64:3a:c7:f6:24:09:e6:d3:c3:3f:c3:
         bd:1b:56:6e:e0:f4:2d:78:ed:28:88:e8:81:c9:b9:a5:9b:34:
         7b:f2:78:c4:01:6f:c2:ad:ec:00:04:5a:30:ef:43:df:10:e8:
         79:9b:0d:b8:e4:33:2e:0c:4f:35:28:c3:fb:11:3b:f1:10:28:
         bb:bc:21:16:c3:7d:35:dd:7b:f6:6a:95:06:27:cc:53:12:f5:
         eb:78:eb:d5:14:b2:4f:0c:62:99:b1:19:54:23:e8:84:73:d6:
         0f:32:85:8d:74:21:c8:9f:c1:1d:0b:b9:50:0d:57:62:63:2b:
         0e:15:62:4e:c9:77:f3:b3:14:4a:2b:92:10:71:c2:65:2b:36:
         67:e8:dd:fb:a0:09:1d:0e:42:30:28:2e:30:3d:6b:04:ff:cb:
         5f:53:46:a9:6f:54:41:c6:9a:c5:02:b0:15:55:23:ed:c2:82:
         60:3f:4a:71:c4:74:ce:b6:0d:b1:48:58:a5:f9:a4:74:f0:53:
         08:2e:24:44:a1:e4:01:ff:7d:28:27:0c:c7:43:cb:1c:88:a9:
         9c:bb:c2:14:23:a4:16:db:a3:86:7b:4e:2e:f8:d9:b9:a0:24:
         4e:43:ad:c7:2c:39:98:26:1e:a9:e1:4c:73:8b:47:03:5b:3c:
         40:65:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:19 2026 by rpki-client