Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130372e302f32342d3234203d3e20323637333537.roa
File:                     34352e3233342e3130372e302f32342d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          gKME6GXP9vyB4/Zp+vwZlbeLceCgcapuhSIy+c6U+0s=
Subject key identifier:   33:34:E1:1D:53:77:64:08:5E:25:E2:80:89:62:11:8A:CE:F8:A3:94
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       34C5B0C22F59B60C984004CD0AEB2C8A18AFC43E
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130372e302f32342d3234203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:20 +0000
ROA not before:           Thu 02 Jul 2026 13:21:20 +0000
ROA not after:            Thu 01 Jul 2027 13:26:20 +0000
asID:                     267357
IP address blocks:        45.234.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c5:b0:c2:2f:59:b6:0c:98:40:04:cd:0a:eb:2c:8a:18:af:c4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:20 2026 GMT
            Not After : Jul  1 13:26:20 2027 GMT
        Subject: CN=3334E11D537764085E25E2808962118ACEF8A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e9:e4:43:65:c3:e9:08:fe:95:2f:3a:89:78:
                    31:12:20:aa:ed:cc:84:97:5d:ab:cf:a7:e2:22:df:
                    f7:32:99:41:71:21:a0:b6:b9:a5:2d:75:35:cb:ba:
                    16:e2:cb:f3:4e:58:a2:9e:50:26:c3:00:94:9c:e5:
                    6a:5d:c5:0f:58:7d:8d:54:2b:65:89:ac:10:a3:8c:
                    6d:f1:32:02:13:3b:dc:f7:fb:fa:2d:bc:07:15:e8:
                    20:7b:ae:85:e3:ee:ec:3c:be:9f:f2:7a:fe:67:29:
                    51:09:fb:f9:aa:d1:21:c0:92:92:2e:d6:73:eb:7e:
                    0b:ac:4f:e5:c9:39:d0:2a:07:ee:d8:1d:07:95:0b:
                    10:5b:e2:f5:06:36:26:07:20:cd:03:b1:b4:a2:d0:
                    70:9f:4b:d6:00:aa:29:14:04:c9:c5:ab:c6:e8:b5:
                    ff:44:8c:72:0b:ca:b5:ae:cf:32:d9:34:17:46:f6:
                    f2:79:b0:7a:7e:17:3d:3a:7a:6b:ca:6d:99:24:d9:
                    2a:4a:51:8f:6d:78:c0:82:f2:61:3a:41:c2:a0:ba:
                    0e:1e:59:af:62:36:55:47:2a:b6:f9:56:31:c1:5b:
                    b5:0c:68:76:52:50:50:b6:30:33:32:ac:57:96:3f:
                    e5:0a:c6:9d:01:77:7c:72:27:97:e8:ad:3d:ec:b4:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:E1:1D:53:77:64:08:5E:25:E2:80:89:62:11:8A:CE:F8:A3:94
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/34352e3233342e3130372e302f32342d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:a6:24:49:dc:20:95:8c:ef:f2:32:63:4b:86:ef:c4:ac:
         5c:4e:d6:92:43:5b:19:a8:5e:a7:d9:94:bd:f0:59:a8:b8:26:
         42:a4:67:62:6e:26:cc:4d:03:82:ec:ff:b6:60:2d:33:3e:88:
         de:e6:73:1f:f8:fd:19:b9:80:e7:b1:e2:99:84:d1:99:c8:08:
         a8:e1:92:51:23:0f:7f:58:08:d1:c3:de:dc:f6:43:7b:83:56:
         71:59:b1:8a:8e:a8:99:8a:20:c2:08:13:34:23:0d:49:1c:23:
         9d:d5:e4:c7:3a:ad:12:33:b9:30:4b:26:a1:9b:01:ea:ea:14:
         11:68:17:6f:a5:e2:20:89:8c:c9:f1:8e:94:fd:43:97:87:ad:
         95:ac:bd:d8:2e:75:95:4d:c8:18:d6:fb:86:75:09:aa:b9:55:
         b0:ba:71:d8:7d:30:9b:fa:fe:71:00:c7:27:8a:fa:9b:ba:36:
         3f:56:88:67:a4:45:b7:98:dc:ba:6f:2d:4a:a9:a8:c3:a4:c7:
         31:5c:4c:6c:2b:c4:a6:da:29:41:ad:4d:5f:d1:37:5c:a4:3c:
         d7:3a:66:69:93:57:08:f8:38:cb:de:5d:92:30:b6:33:bb:0c:
         1b:5b:57:10:b7:06:6e:33:61:aa:1d:f8:1e:22:7d:43:09:aa:
         f4:e9:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:08:51 2026 by rpki-client