Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32322d3232203d3e20323733373734.roa
File:                     34352e3137372e3234382e302f32322d3232203d3e20323733373734.roa (raw, json)
Hash identifier:          /lHjTH9Q92rNiWZLB2M76UTO+FnNZcNj9BP5lRf6sgc=
Subject key identifier:   8B:29:C7:31:31:F2:8F:A1:6E:15:4B:A4:7F:7C:F5:35:4F:DD:1C:02
Certificate issuer:       /CN=E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C
Certificate serial:       123C2BE01314513A772AA30C7E9A4CAECDC12784
Authority key identifier: E6:8D:4F:7F:DC:68:C9:5F:3C:F5:BC:5E:D2:6F:0F:93:4B:D7:CB:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32322d3232203d3e20323733373734.roa
Signing time:             Mon 03 Aug 2026 12:33:55 +0000
ROA not before:           Mon 03 Aug 2026 12:28:55 +0000
ROA not after:            Mon 02 Aug 2027 12:33:55 +0000
asID:                     273774
IP address blocks:        45.177.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.crl
                          rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:2b:e0:13:14:51:3a:77:2a:a3:0c:7e:9a:4c:ae:cd:c1:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C
        Validity
            Not Before: Aug  3 12:28:55 2026 GMT
            Not After : Aug  2 12:33:55 2027 GMT
        Subject: CN=8B29C73131F28FA16E154BA47F7CF5354FDD1C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:08:33:99:f8:66:af:2c:1b:e6:4d:4f:b8:
                    57:57:05:7b:5f:5a:ab:8a:92:eb:79:98:23:97:21:
                    2c:ad:01:92:e7:2c:2a:d1:6b:2f:52:8a:bc:96:ce:
                    a9:1b:26:18:e2:af:dd:f6:ea:83:ea:ae:90:62:dc:
                    2e:68:b7:e6:4d:36:fb:d2:1a:42:d4:d9:1a:30:cd:
                    9a:7e:0b:8a:02:70:25:85:bb:9a:ca:72:f3:43:66:
                    d5:1c:fc:10:74:3d:01:0e:af:17:7c:4a:67:7a:38:
                    14:35:7c:8a:c9:0d:1c:8c:ca:58:77:26:e4:2c:9d:
                    78:77:7f:4e:6b:b4:09:fd:a4:1f:9e:b1:7b:b1:d8:
                    23:47:f4:79:6c:19:2f:c7:75:ef:1d:de:cb:90:41:
                    a6:9f:44:2a:bc:db:80:c5:69:81:e7:3c:f3:8e:e4:
                    fb:b9:6b:6e:35:d8:3b:13:30:8a:e0:dc:dc:61:e1:
                    5a:05:eb:4c:e1:38:b0:25:46:46:4f:fc:fb:fa:48:
                    8f:f8:43:d4:b8:fc:71:73:b2:f3:c7:1d:28:7d:d4:
                    92:d0:3c:7a:06:d5:69:d4:cd:6e:23:d9:ae:c1:ba:
                    ad:d4:1a:56:0b:a8:df:e2:2f:bf:7c:7d:29:62:37:
                    40:3a:0b:8b:ee:1f:cd:bf:9f:01:6f:aa:95:ca:bb:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:29:C7:31:31:F2:8F:A1:6E:15:4B:A4:7F:7C:F5:35:4F:DD:1C:02
            X509v3 Authority Key Identifier:
                keyid:E6:8D:4F:7F:DC:68:C9:5F:3C:F5:BC:5E:D2:6F:0F:93:4B:D7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3234382e302f32322d3232203d3e20323733373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:85:16:02:f4:03:2b:6c:38:61:02:bf:33:0c:37:a1:0a:a8:
         70:9c:b4:1f:25:8d:9c:9e:e9:d2:d7:9d:cf:f0:5f:15:21:82:
         0c:16:14:0b:71:b6:5a:59:b6:e4:de:6c:52:12:88:0d:b4:c9:
         b6:24:db:37:e5:29:42:a0:b0:e5:22:3b:c1:b5:6e:c7:c0:8d:
         3c:20:c2:40:84:a5:f4:05:1a:fb:95:24:30:a0:c8:35:03:a8:
         7b:b1:45:22:97:cf:ae:58:f1:ff:e0:0e:dd:51:40:30:bc:05:
         f8:e2:76:38:30:1b:a1:23:21:d2:b6:00:c6:02:df:a4:c1:f9:
         bc:8b:be:8e:5b:94:5e:5a:23:c1:77:1e:68:95:17:f7:9d:b6:
         0b:34:8c:0b:31:3d:fe:dd:07:50:33:3b:d6:94:97:ad:d0:0f:
         44:99:a6:e5:16:0b:f7:fd:12:59:34:c1:e7:f4:87:46:35:ae:
         f4:14:1b:2d:34:e0:12:4a:b2:0b:08:c9:f3:c5:89:2c:43:9a:
         c3:42:b5:cc:76:7e:e9:ff:34:ef:81:c5:8f:e3:72:96:75:77:
         e0:dd:22:81:63:ea:f2:bd:25:3d:d3:f6:81:fe:6d:25:7a:26:
         20:e2:41:2f:45:43:65:bc:f9:41:70:41:06:9e:06:9c:a4:e7:
         44:bc:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:06:10 2026 by rpki-client