Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
File:                     34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          AxDpxRYWogx0eYXkX/VjHu/sIyoEroE9trnoWTGFiso=
Subject key identifier:   A7:B7:01:09:67:71:C9:92:03:69:B9:36:05:62:B6:08:84:B2:D7:12
Certificate issuer:       /CN=1DF12D205527A7C4DCB093C121A532DC34AE0368
Certificate serial:       6FC99810ABAC62C33C3DB0E526DF792ED09018C1
Authority key identifier: 1D:F1:2D:20:55:27:A7:C4:DC:B0:93:C1:21:A5:32:DC:34:AE:03:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF12D205527A7C4DCB093C121A532DC34AE0368.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa
Signing time:             Fri 07 Aug 2026 21:30:12 +0000
ROA not before:           Fri 07 Aug 2026 21:25:12 +0000
ROA not after:            Fri 06 Aug 2027 21:30:12 +0000
asID:                     269537
IP address blocks:        45.188.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/1DF12D205527A7C4DCB093C121A532DC34AE0368.crl
                          rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/1DF12D205527A7C4DCB093C121A532DC34AE0368.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF12D205527A7C4DCB093C121A532DC34AE0368.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c9:98:10:ab:ac:62:c3:3c:3d:b0:e5:26:df:79:2e:d0:90:18:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF12D205527A7C4DCB093C121A532DC34AE0368
        Validity
            Not Before: Aug  7 21:25:12 2026 GMT
            Not After : Aug  6 21:30:12 2027 GMT
        Subject: CN=A7B701096771C9920369B9360562B60884B2D712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:23:58:ef:26:6f:fc:9d:15:b5:74:b8:2b:
                    41:28:65:32:dd:10:c6:17:23:cd:22:ad:08:24:41:
                    96:4d:0e:5d:66:13:e1:18:6c:9e:54:db:d3:df:b4:
                    3b:e9:cb:a1:fb:d4:75:3c:2c:96:bf:67:4e:91:1d:
                    91:04:74:9e:72:45:1d:6d:6c:97:56:72:04:f2:30:
                    e5:99:f9:c7:97:53:34:a4:dd:f5:7f:62:f9:a3:e3:
                    30:86:8d:2a:4b:aa:bd:d9:92:b6:64:aa:bf:c6:92:
                    93:37:3a:bd:54:0d:7b:e0:f7:46:74:53:84:9d:db:
                    b4:b6:d9:de:09:c7:aa:17:80:69:c1:b9:22:69:7b:
                    ee:11:30:0d:3c:4b:21:fe:29:10:c1:4e:ef:50:fa:
                    f9:b9:89:df:a7:1d:13:98:d9:05:35:da:0b:f8:b6:
                    7e:ce:b1:da:c1:3b:c1:07:98:4c:da:5c:fd:5c:fa:
                    81:45:a2:03:66:f9:a0:f6:c0:89:45:1c:cc:eb:b0:
                    d0:01:32:82:ad:c9:ac:a3:71:26:84:07:a2:09:bd:
                    d1:0c:99:5f:e0:4d:5f:dd:1e:64:04:d2:86:04:3f:
                    3e:28:39:17:5c:bf:de:ce:95:15:3d:aa:3e:61:f0:
                    d2:9d:de:72:74:ae:46:b2:8e:15:6e:a7:5a:cc:6d:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:01:09:67:71:C9:92:03:69:B9:36:05:62:B6:08:84:B2:D7:12
            X509v3 Authority Key Identifier:
                keyid:1D:F1:2D:20:55:27:A7:C4:DC:B0:93:C1:21:A5:32:DC:34:AE:03:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/1DF12D205527A7C4DCB093C121A532DC34AE0368.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF12D205527A7C4DCB093C121A532DC34AE0368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3137302e302f32342d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:23:b0:33:91:6e:87:83:41:fd:6d:0b:d8:bc:47:57:19:60:
         fb:ff:96:11:7f:59:bd:84:e3:93:0f:f9:62:65:18:25:fc:c5:
         93:ab:24:d0:62:7e:7b:51:c1:2b:2a:68:67:ae:9a:dd:4c:04:
         66:ee:8a:bb:51:ce:15:a0:7c:db:b5:7a:cd:ae:6f:03:d2:6f:
         60:21:3e:dc:e4:de:d4:fa:d9:5e:25:e1:2f:7a:2a:92:80:ea:
         ee:12:ad:93:85:e5:68:1e:24:a1:d4:07:9d:a8:b4:c9:71:54:
         1b:a8:a5:cf:12:be:90:6e:82:27:a2:d8:8c:ed:b2:26:99:be:
         d7:2b:06:76:cd:98:d8:0b:a5:61:1e:8e:f8:45:39:5f:bf:3c:
         4f:70:4e:eb:6d:63:82:fb:be:5e:79:71:17:cd:0e:e3:ce:f3:
         9b:78:ee:38:d3:f7:63:1d:90:5c:62:b2:85:64:df:91:bb:ab:
         58:83:34:2c:6d:7e:53:d6:0d:0c:ea:25:26:7b:00:1d:b7:f5:
         cb:c0:17:82:11:2e:6b:da:ad:c4:6c:34:8f:d4:94:f9:de:df:
         8d:5b:c8:49:64:c4:9b:51:e8:cc:92:1f:2d:26:20:77:30:3e:
         ad:d9:59:e6:d0:a9:2c:c6:b6:fb:a2:c0:81:b7:71:06:b9:3c:
         87:d5:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:49 2026 by rpki-client