Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32342d3234203d3e20323636363139.roa
File:                     34352e372e3231362e302f32342d3234203d3e20323636363139.roa (raw, json)
Hash identifier:          kJohcqJL7mhFFCQCQZskYVxxNCAuLxLNNfZbWdiYzPE=
Subject key identifier:   C2:32:7E:9E:F7:44:C3:34:DE:24:53:69:70:E6:93:7B:3B:07:1A:B2
Certificate issuer:       /CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
Certificate serial:       3AC74BD7FB14C11B4722725706E6371B7064922A
Authority key identifier: D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32342d3234203d3e20323636363139.roa
Signing time:             Fri 31 Jul 2026 12:27:17 +0000
ROA not before:           Fri 31 Jul 2026 12:22:17 +0000
ROA not after:            Fri 30 Jul 2027 12:27:17 +0000
asID:                     266619
IP address blocks:        45.7.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl
                          rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:4b:d7:fb:14:c1:1b:47:22:72:57:06:e6:37:1b:70:64:92:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B4E9A225C40D34F93E47E89982EB7C5C91D742
        Validity
            Not Before: Jul 31 12:22:17 2026 GMT
            Not After : Jul 30 12:27:17 2027 GMT
        Subject: CN=C2327E9EF744C334DE24536970E6937B3B071AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:e3:9a:a8:f3:00:2c:56:93:a3:b1:50:ee:
                    f2:05:57:2a:ad:3b:36:f3:d3:0e:9c:62:40:d2:3d:
                    ec:11:ec:0a:82:d7:0c:82:70:47:6e:bb:5d:3c:f9:
                    6a:aa:d6:cc:ef:64:32:38:3b:b6:dd:1e:a3:7b:3f:
                    f4:04:ac:81:21:69:ec:97:dd:21:7b:d9:74:c0:9c:
                    21:d9:9b:a0:54:f6:6d:95:5f:82:0e:5a:07:fb:5f:
                    75:e5:71:21:a6:4b:f4:07:00:ab:f0:bf:63:ac:81:
                    2e:c4:1a:e0:8d:35:92:e4:18:39:26:9c:56:78:0d:
                    52:94:03:9e:5e:37:19:ac:94:4b:40:1f:4c:2a:6d:
                    40:84:fb:9c:6e:60:d5:ee:72:7f:b8:a6:68:4b:8f:
                    05:ec:d8:20:15:b0:1f:c0:ad:40:12:df:d1:56:1a:
                    03:4f:86:50:e4:fc:77:9e:bc:e4:98:36:34:aa:44:
                    96:17:05:12:2a:f6:ff:90:bf:93:22:88:1f:5c:d2:
                    ea:d3:c1:f8:13:d9:7d:28:df:69:04:80:cc:c3:9d:
                    52:ba:2f:52:f4:92:5b:26:9a:98:2e:b7:8f:29:0c:
                    4e:d7:3b:bd:a8:4a:32:ad:1f:53:03:52:69:40:7a:
                    3a:63:56:79:2e:a1:72:54:8c:8c:98:47:0f:73:ce:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:7E:9E:F7:44:C3:34:DE:24:53:69:70:E6:93:7B:3B:07:1A:B2
            X509v3 Authority Key Identifier:
                keyid:D3:B4:E9:A2:25:C4:0D:34:F9:3E:47:E8:99:82:EB:7C:5C:91:D7:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B4E9A225C40D34F93E47E89982EB7C5C91D742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231362e302f32342d3234203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:af:69:d3:53:97:ec:30:98:8e:5b:60:f4:13:c4:2e:36:ca:
         28:23:ea:1e:77:b2:77:da:f5:5e:e6:a5:6b:87:05:4a:ee:df:
         e7:e7:44:6e:f4:f7:08:49:41:ac:1c:c9:ca:c1:64:a3:54:bc:
         61:c1:b3:bb:ba:a5:19:8f:ec:ca:8f:50:a4:61:54:31:68:2e:
         60:90:00:18:8f:3d:e4:3a:5b:47:ea:12:18:ea:60:48:13:22:
         f5:64:6b:ec:b2:a5:2d:7a:d6:7d:fd:00:82:8e:e7:71:8e:51:
         79:55:c4:41:57:71:be:4d:35:07:98:50:74:41:1b:9f:a4:12:
         aa:2e:e0:3f:5c:bd:ae:0b:78:33:58:0f:f0:1f:25:78:01:f6:
         80:d8:04:01:f2:87:86:05:27:35:9a:41:10:9a:68:59:1b:0c:
         00:99:17:af:e6:b1:6e:f3:49:61:e3:d3:06:95:c5:2e:6a:17:
         05:03:7e:b6:37:8f:30:b5:90:d8:8b:af:69:5d:9a:19:05:5a:
         41:ee:ab:8b:d3:ea:5c:02:46:67:f6:e8:fe:a1:48:e6:eb:48:
         d7:98:21:4a:8d:81:0c:40:90:41:4d:12:b1:ce:b2:67:92:37:
         11:47:f4:2a:e6:bb:e2:e9:0c:14:40:40:eb:7c:32:69:be:08:
         25:ee:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:13:30 2026 by rpki-client