Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32332d3233203d3e20323634333836.roa
File:                     34352e362e3234302e302f32332d3233203d3e20323634333836.roa (raw, json)
Hash identifier:          JYMfsngkxmwg3lWZHsw1iS7+r/fZ/h7TcXk+HW/vnv8=
Subject key identifier:   C6:27:0B:A3:3F:1D:A4:59:7E:E5:7B:F4:59:11:C1:19:34:3A:63:C4
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       33C3B14AFEB296BA4D698ABC837FB4DBA7831657
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32332d3233203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:21:22 +0000
ROA not before:           Fri 21 Aug 2026 20:16:22 +0000
ROA not after:            Fri 20 Aug 2027 20:21:22 +0000
asID:                     264386
IP address blocks:        45.6.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c3:b1:4a:fe:b2:96:ba:4d:69:8a:bc:83:7f:b4:db:a7:83:16:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:16:22 2026 GMT
            Not After : Aug 20 20:21:22 2027 GMT
        Subject: CN=C6270BA33F1DA4597EE57BF45911C119343A63C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:38:94:f0:f1:2e:1a:e1:54:10:9e:72:10:
                    94:b3:a3:d6:70:c3:6e:c7:87:16:68:3c:0a:9e:59:
                    65:9b:fd:ea:d9:10:cc:e5:47:a6:28:d2:d5:b9:b5:
                    50:28:0b:8f:6a:95:e4:78:ff:74:47:c4:a7:aa:0b:
                    15:d6:a1:63:f0:9f:2b:a2:c5:69:9e:14:d8:c1:a1:
                    c2:bd:d8:74:1b:f0:63:78:b6:02:42:37:77:2e:c9:
                    a7:ea:7c:95:ef:ff:d7:67:0a:d2:e6:56:e7:ac:4f:
                    72:3f:84:d5:5a:28:2c:43:cb:53:08:77:42:75:23:
                    17:79:dc:3d:70:b9:c5:45:b2:c0:0e:39:7a:b6:75:
                    43:be:4f:60:c5:64:92:36:68:4b:3b:c4:68:ed:94:
                    3d:86:03:54:81:2e:bc:d5:65:a8:b2:da:d1:35:53:
                    5c:6c:82:63:bb:bc:2c:70:ac:8b:34:e4:34:4c:80:
                    96:4b:04:1c:ab:45:9f:57:60:65:f4:43:c6:83:36:
                    44:90:07:83:57:80:f9:af:86:d6:1b:9a:e9:3b:f8:
                    1e:95:ff:02:a0:66:73:3e:50:08:49:ae:dc:20:5c:
                    01:6e:63:e4:26:b8:ea:5b:a3:57:64:81:ad:62:82:
                    e4:c5:17:a5:52:64:40:6b:c3:ba:4d:29:3c:28:f5:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:0B:A3:3F:1D:A4:59:7E:E5:7B:F4:59:11:C1:19:34:3A:63:C4
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32332d3233203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:cd:b5:4d:20:fc:08:5d:5d:48:73:53:e2:cf:af:ed:0d:
         5f:5d:41:72:2a:5d:ef:b6:06:b0:bb:3f:25:5a:f8:7d:f9:cb:
         eb:84:e1:4e:89:a9:80:ce:f5:be:64:bb:7e:fc:60:2d:93:df:
         91:5f:b1:a9:00:5e:f0:a4:64:15:d7:cb:05:34:76:8f:33:cd:
         b0:61:39:e9:74:df:48:5b:a4:47:70:4d:5f:36:37:59:d0:c4:
         49:8c:a2:53:f7:0c:dc:f0:08:ef:15:e2:57:78:a2:c2:c7:42:
         54:c4:ad:4f:51:51:b7:3e:c7:5d:10:90:45:11:cc:c6:e2:e6:
         a7:d0:be:e5:ae:a6:79:df:0f:c9:98:cf:9a:20:b8:5e:a5:20:
         b3:89:88:f3:fb:24:c5:69:8a:02:b9:bc:0b:17:17:98:e5:30:
         7c:07:0b:3f:43:b6:7c:54:b4:38:89:07:3c:a3:8c:1f:e6:d1:
         3c:d7:f9:87:e6:78:cd:8e:ca:4e:ab:bd:78:c3:a9:45:e2:7d:
         d7:ae:41:bc:cc:4b:90:47:c1:d9:e5:83:99:23:3a:1d:75:9d:
         e6:cf:42:22:be:f9:65:e6:29:e7:d3:70:3b:6a:49:ec:31:22:
         72:a1:22:93:d1:87:6d:1d:d5:ec:db:37:f5:64:35:53:98:9b:
         b1:d2:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:19:23 2026 by rpki-client