Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
File:                     34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (raw, json)
Hash identifier:          iwDcpb3f3skzqDkA1oaaJ8OBHQ1VORiE1On34Q58HmM=
Subject key identifier:   69:D0:74:37:DD:2F:A8:42:6B:59:AD:8D:13:74:92:97:32:FE:ED:A6
Certificate issuer:       /CN=7D4EA03C3446B400E958B5CF0E81D4F71D9946DD
Certificate serial:       52022F74F2CF57FD5D6E33C430C602C3C8EE91C9
Authority key identifier: 7D:4E:A0:3C:34:46:B4:00:E9:58:B5:CF:0E:81:D4:F7:1D:99:46:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
Signing time:             Mon 03 Aug 2026 15:00:01 +0000
ROA not before:           Mon 03 Aug 2026 14:55:01 +0000
ROA not after:            Mon 02 Aug 2027 15:00:01 +0000
asID:                     269526
IP address blocks:        45.186.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 16:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:2f:74:f2:cf:57:fd:5d:6e:33:c4:30:c6:02:c3:c8:ee:91:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4EA03C3446B400E958B5CF0E81D4F71D9946DD
        Validity
            Not Before: Aug  3 14:55:01 2026 GMT
            Not After : Aug  2 15:00:01 2027 GMT
        Subject: CN=69D07437DD2FA8426B59AD8D1374929732FEEDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:8a:2d:b1:96:41:d2:ee:f3:14:4f:8b:20:
                    eb:d5:d5:97:ea:7c:b2:1c:8c:e1:53:d0:da:60:c0:
                    8b:18:5a:4c:60:93:dc:6b:8d:bb:a4:77:ac:af:30:
                    44:09:7c:35:bd:04:13:8e:e4:f9:cb:a6:89:f9:cd:
                    8a:02:63:95:bd:96:17:4e:16:2d:23:4a:6d:3b:64:
                    c0:d6:82:34:ab:17:f7:08:48:6a:2f:b5:b9:ce:78:
                    f1:4f:b9:cc:98:7c:8f:58:af:cc:10:15:09:1b:28:
                    1c:8a:49:2d:1e:fa:b0:fd:32:6d:61:ac:b2:78:7a:
                    a7:29:d1:0c:1e:28:48:5b:6a:99:98:80:13:50:86:
                    a5:df:71:3c:e1:ad:19:f4:08:9a:e1:16:36:ae:0a:
                    6b:11:6b:a3:6c:8c:05:de:ea:53:57:d5:1a:40:ee:
                    ef:e7:ec:9f:51:e0:63:99:b7:17:bd:fc:c0:88:20:
                    c1:a5:4b:cf:01:d1:02:58:9e:b1:7f:ff:c7:be:09:
                    2f:66:a1:8e:29:a0:30:33:6a:e2:5b:8b:cc:60:9c:
                    2a:b8:54:aa:f9:e1:4a:d0:6a:67:38:f2:0d:10:bc:
                    a7:85:55:0d:fa:cf:20:37:5c:a1:cd:71:87:2c:78:
                    8c:e2:9c:f3:e4:d6:f0:3d:a8:ab:b6:08:9d:fa:d8:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D0:74:37:DD:2F:A8:42:6B:59:AD:8D:13:74:92:97:32:FE:ED:A6
            X509v3 Authority Key Identifier:
                keyid:7D:4E:A0:3C:34:46:B4:00:E9:58:B5:CF:0E:81:D4:F7:1D:99:46:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4EA03C3446B400E958B5CF0E81D4F71D9946DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:88:16:6b:c8:9b:ec:b7:93:80:86:e7:9d:03:b0:29:59:
         1b:81:1b:4d:98:cc:04:68:6e:a8:fd:ae:32:89:e5:cb:27:73:
         4d:d0:b9:30:1e:bf:4b:02:9b:24:91:ec:b0:65:77:96:2e:19:
         55:5f:9e:a9:bd:37:3b:1f:e7:a5:d9:03:a9:6a:bf:a3:91:c7:
         2f:92:13:14:10:fd:27:19:d6:cc:95:1d:21:aa:73:d9:dd:c3:
         c2:b7:a0:4e:75:6a:a7:26:f2:68:45:36:78:a1:42:27:65:45:
         cd:76:fb:da:c5:ae:10:fc:2a:61:3f:b7:22:f5:f7:0f:4d:d5:
         da:0f:0b:be:71:42:98:07:60:a5:63:9f:e4:3a:df:24:44:2f:
         b7:79:8e:76:c3:ed:91:df:5f:78:0a:69:47:fc:23:a0:2c:c5:
         d3:ae:0d:75:5a:3f:dd:7c:e3:d3:a4:10:39:fc:23:c5:34:fc:
         87:34:86:93:99:1d:04:5c:ed:f0:a6:31:6e:33:49:1f:4c:3a:
         8f:0b:b4:08:c9:da:7d:47:bc:cf:5d:73:6e:da:b1:af:e9:5b:
         52:9f:66:e3:6a:24:22:14:8a:63:33:65:a7:3e:ab:94:cd:cd:
         80:80:ba:6b:9c:f8:ab:78:a6:f4:dd:39:f9:f9:ac:5d:b8:a9:
         46:10:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:42:47 2026 by rpki-client