Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
File:                     34352e37302e37322e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          wKaTisBAYZPhzqDU0i0tujt3ZA71ozvBJsWeSAPvSRg=
Subject key identifier:   B2:37:97:66:CC:13:E5:A7:22:C8:FA:B8:FE:A0:BD:38:7F:B6:FF:5D
Certificate issuer:       /CN=FCCA57D4980B85B26F304690E0624598D83FB794
Certificate serial:       18226FF956B4672EBA8497B176FFA29A6D089650
Authority key identifier: FC:CA:57:D4:98:0B:85:B2:6F:30:46:90:E0:62:45:98:D8:3F:B7:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 19 Aug 2026 14:50:52 +0000
ROA not before:           Wed 19 Aug 2026 14:45:52 +0000
ROA not after:            Wed 18 Aug 2027 14:50:52 +0000
asID:                     265447
IP address blocks:        45.70.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:22:6f:f9:56:b4:67:2e:ba:84:97:b1:76:ff:a2:9a:6d:08:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCCA57D4980B85B26F304690E0624598D83FB794
        Validity
            Not Before: Aug 19 14:45:52 2026 GMT
            Not After : Aug 18 14:50:52 2027 GMT
        Subject: CN=B2379766CC13E5A722C8FAB8FEA0BD387FB6FF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:ca:3e:cc:b7:24:ea:3e:85:97:95:fb:22:
                    47:6a:61:cb:bf:f3:ab:cb:23:83:f9:33:41:5a:ee:
                    81:1c:37:3c:c1:b6:1b:e1:44:e7:44:87:cf:eb:4e:
                    82:be:3a:31:2a:4a:0c:54:63:79:18:25:01:74:d5:
                    8f:ac:d0:3d:54:ae:0a:37:23:d5:9f:f9:30:60:52:
                    98:44:b8:e7:0f:ed:09:cd:5f:34:ca:8d:d2:88:bd:
                    c3:e8:61:a7:6a:ef:b8:24:7f:d2:6e:f0:75:ed:cb:
                    90:f1:08:b0:1e:36:47:1c:13:90:d6:5f:a2:b3:f3:
                    11:a0:ad:ae:b2:ec:c5:41:17:36:31:16:c5:73:c4:
                    86:dc:aa:fb:ff:9e:9a:2d:87:fe:e8:82:59:cc:7a:
                    f6:f3:42:fa:13:d4:f0:c1:10:d1:d6:e5:4e:b5:6d:
                    86:49:c4:91:a0:9b:d1:20:da:c8:a1:96:83:f5:ce:
                    52:8c:41:d7:5f:ea:87:38:b0:77:9f:e9:04:7a:d2:
                    72:f4:12:91:87:cb:2d:bf:d4:ec:f0:e8:ca:d3:4a:
                    d4:82:d0:23:c3:6b:34:02:a2:cb:e0:c1:e1:ce:fb:
                    a3:f9:ba:15:6f:7a:2b:4f:64:09:36:c1:30:5e:db:
                    2b:e8:db:0b:d7:60:82:22:c6:66:fe:a4:44:5f:aa:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:37:97:66:CC:13:E5:A7:22:C8:FA:B8:FE:A0:BD:38:7F:B6:FF:5D
            X509v3 Authority Key Identifier:
                keyid:FC:CA:57:D4:98:0B:85:B2:6F:30:46:90:E0:62:45:98:D8:3F:B7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/FCCA57D4980B85B26F304690E0624598D83FB794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCCA57D4980B85B26F304690E0624598D83FB794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:00:35:dc:5d:51:e0:dd:74:ed:70:89:29:48:58:a5:3e:
         ff:70:bc:64:eb:a6:06:25:ed:f4:b2:9f:9a:c4:ec:bd:f1:aa:
         e5:ca:62:dd:a0:7b:22:0c:ec:38:37:f2:59:0b:0f:31:69:22:
         c5:a3:34:ff:6c:9a:d2:f7:e1:27:cd:13:45:f4:65:35:80:5d:
         e3:a9:33:c4:c0:ab:93:4a:c1:fb:2b:ee:4f:db:53:d8:05:f9:
         bc:71:26:32:83:f4:1e:74:31:a6:32:04:95:43:45:ae:ee:63:
         ff:5f:a2:96:a5:e6:58:f5:88:12:42:44:f2:7c:db:41:67:01:
         bb:c8:1a:0b:e4:a1:0f:22:22:f9:20:70:50:22:59:36:ec:d5:
         98:a2:6f:f8:b7:b4:3d:37:5e:5f:f8:bc:ad:43:67:63:e1:de:
         58:e7:27:ce:5a:4c:af:43:21:5a:aa:bd:94:84:28:76:bf:6b:
         90:38:01:cb:45:6a:6c:d0:4a:2e:8b:26:61:09:e7:e6:eb:1e:
         5b:6f:7f:4d:89:6e:ac:b7:f7:61:b9:e7:bd:50:52:78:38:47:
         b6:45:9b:ec:e2:f6:17:9e:1c:a8:1c:e2:6f:26:ff:b3:0c:48:
         e2:cf:34:19:80:50:14:84:b5:44:cb:52:70:50:93:59:40:be:
         4a:64:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:29:34 2026 by rpki-client