Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/34352e362e38302e302f32322d3234203d3e203238323133.roa
File:                     34352e362e38302e302f32322d3234203d3e203238323133.roa (raw, json)
Hash identifier:          fQXBq4YNEEd/NPjI4I1AFT7FRpPkgOU3dUz05sKZNso=
Subject key identifier:   F1:59:6D:44:BC:6E:59:25:A7:5A:31:2F:E0:40:FF:99:06:4C:E4:E4
Certificate issuer:       /CN=D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB
Certificate serial:       1AE87355B460533DE396614850E7CE26618C40D5
Authority key identifier: D6:8D:E4:23:FD:98:01:90:A1:B3:50:EC:EC:F6:AF:6C:B9:F2:CF:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/34352e362e38302e302f32322d3234203d3e203238323133.roa
Signing time:             Mon 03 Aug 2026 19:12:07 +0000
ROA not before:           Mon 03 Aug 2026 19:07:07 +0000
ROA not after:            Mon 02 Aug 2027 19:12:07 +0000
asID:                     28213
IP address blocks:        45.6.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 11:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e8:73:55:b4:60:53:3d:e3:96:61:48:50:e7:ce:26:61:8c:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB
        Validity
            Not Before: Aug  3 19:07:07 2026 GMT
            Not After : Aug  2 19:12:07 2027 GMT
        Subject: CN=F1596D44BC6E5925A75A312FE040FF99064CE4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:2f:e8:23:2f:40:8c:57:da:41:3e:e0:7b:
                    17:6e:84:d6:a9:87:34:36:61:b1:c6:82:da:89:a2:
                    be:6b:4d:ff:bf:c8:78:12:b4:7d:5c:9b:9c:42:41:
                    48:07:5f:b8:6b:0a:93:0e:50:32:54:71:bc:f2:13:
                    83:9c:21:93:67:55:10:46:27:7e:c4:78:42:de:17:
                    2d:c2:1c:30:b5:7f:4e:ab:b7:d0:2d:0d:68:fb:c2:
                    45:f5:f2:26:a9:f8:f1:f4:7f:27:f0:f8:56:b9:d9:
                    c0:55:43:80:6c:25:7e:2c:79:ea:72:f4:b3:35:e7:
                    32:34:50:37:b1:63:28:c2:bd:09:fc:5c:9f:8e:9e:
                    1e:34:54:28:03:0d:bd:94:be:cd:b2:90:2a:4b:81:
                    5c:01:b0:2a:7b:41:c3:54:89:c2:91:a6:f1:18:8b:
                    f0:2e:40:d0:a3:58:9b:1e:74:c3:d7:37:6b:c7:2e:
                    f0:02:85:3e:e0:6e:bf:f7:47:8d:f7:a4:bf:fd:3e:
                    9c:d7:00:e1:4a:7b:45:7d:73:74:c2:35:40:73:3f:
                    94:16:0a:72:40:22:b7:96:23:69:f9:e1:3f:93:15:
                    a4:c4:e4:9f:81:e0:90:76:d7:9d:61:3b:2f:df:e6:
                    a6:0b:e5:9d:f8:49:0f:3d:11:b8:13:d7:c1:c7:c2:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:6D:44:BC:6E:59:25:A7:5A:31:2F:E0:40:FF:99:06:4C:E4:E4
            X509v3 Authority Key Identifier:
                keyid:D6:8D:E4:23:FD:98:01:90:A1:B3:50:EC:EC:F6:AF:6C:B9:F2:CF:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D68DE423FD980190A1B350ECECF6AF6CB9F2CFFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/2/34352e362e38302e302f32322d3234203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:53:1e:35:da:bc:30:d2:ac:76:7d:83:e3:92:92:f7:64:e4:
         62:1f:1a:80:d7:3d:e1:8f:c8:71:43:c6:23:e5:46:30:bd:c4:
         b7:8f:e4:2c:de:3e:44:20:58:2f:f4:bc:12:da:20:29:5d:29:
         9a:b7:e4:06:c7:fd:7c:f9:18:fa:66:32:71:b9:be:23:fe:1e:
         3e:c5:87:10:dd:b8:60:16:84:18:63:49:ab:b2:d5:48:73:aa:
         54:15:1f:2c:0f:40:31:d6:32:c4:0d:bf:fb:af:b6:d4:78:3b:
         be:b4:80:50:57:66:73:8e:0e:04:73:b4:28:38:7a:be:cb:8a:
         3f:cd:62:e8:d8:69:45:5e:d3:37:dc:6a:44:3b:1e:99:df:4f:
         93:bc:1e:79:10:a3:97:c8:8a:cf:0c:81:a7:c8:63:2b:b5:29:
         d2:59:48:c9:dd:0c:f7:ec:fc:9b:24:27:1f:6d:55:9b:53:ab:
         21:22:ee:32:5a:77:b5:bf:29:14:8f:f7:b1:50:48:64:8d:77:
         5c:ab:95:7b:d7:7c:72:e0:78:3a:47:bb:b5:4b:d9:cd:65:88:
         37:18:ba:fd:4b:82:b6:37:8e:0b:b7:99:8f:34:57:45:3c:df:
         45:b7:e4:91:6f:f0:b6:a5:50:49:f5:2e:8a:f8:57:f0:c3:87:
         1e:e9:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:57:36 2026 by rpki-client