Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3235302e302f32332d3233203d3e20323733373734.roa
File:                     34352e3137372e3235302e302f32332d3233203d3e20323733373734.roa (raw, json)
Hash identifier:          TZhpj+VVWhnLSmejiBxAABUCpmJlCK7bQKm22bkBAx4=
Subject key identifier:   20:B4:A9:E1:98:9E:A7:BB:32:9E:AB:E0:DE:7C:F8:61:A8:D3:37:F7
Certificate issuer:       /CN=E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C
Certificate serial:       6A52380D2DC68EE28EC7F64727F263B7F680A294
Authority key identifier: E6:8D:4F:7F:DC:68:C9:5F:3C:F5:BC:5E:D2:6F:0F:93:4B:D7:CB:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3235302e302f32332d3233203d3e20323733373734.roa
Signing time:             Mon 03 Aug 2026 12:33:56 +0000
ROA not before:           Mon 03 Aug 2026 12:28:56 +0000
ROA not after:            Mon 02 Aug 2027 12:33:56 +0000
asID:                     273774
IP address blocks:        45.177.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.crl
                          rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 00:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:52:38:0d:2d:c6:8e:e2:8e:c7:f6:47:27:f2:63:b7:f6:80:a2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C
        Validity
            Not Before: Aug  3 12:28:56 2026 GMT
            Not After : Aug  2 12:33:56 2027 GMT
        Subject: CN=20B4A9E1989EA7BB329EABE0DE7CF861A8D337F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:5e:34:e0:9f:84:b8:f2:62:be:9b:9c:b0:
                    2b:17:3a:bb:ba:81:83:37:0d:a7:ed:e6:64:25:9e:
                    17:99:ac:3e:52:db:6e:bb:5c:00:19:a0:e4:df:a1:
                    3d:65:3f:df:5d:dc:db:79:4a:38:50:9f:12:ac:e8:
                    54:14:28:f0:01:7f:e6:c1:7e:54:8b:ee:1f:e7:e8:
                    c4:54:43:fe:b5:6b:c0:74:2a:1f:63:de:b4:50:8a:
                    19:09:04:7c:be:ee:59:63:99:28:80:72:f9:88:16:
                    02:b7:c8:d6:e2:3c:a0:64:56:ac:25:7d:99:f4:b3:
                    85:ef:47:58:d7:dd:0b:df:3e:78:de:c3:09:ec:52:
                    cd:20:71:a3:f6:b1:27:24:f1:f8:10:1c:27:fc:41:
                    53:6d:f3:48:58:f6:9a:b6:a7:6e:34:2c:2e:95:6a:
                    9b:73:22:ae:f1:c8:be:d3:71:be:f8:41:f8:99:e4:
                    8b:f2:3b:25:2a:81:e5:cc:68:c0:43:e7:68:07:18:
                    aa:d3:06:6e:7c:0b:5c:a7:23:fe:6e:f6:c0:44:00:
                    47:cb:28:be:5a:ae:61:d4:64:bd:56:28:61:bc:c1:
                    2f:64:93:fd:db:d9:fa:5c:92:38:12:78:33:55:24:
                    dd:0c:45:22:5b:76:30:57:bf:e1:ea:20:60:dc:54:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:A9:E1:98:9E:A7:BB:32:9E:AB:E0:DE:7C:F8:61:A8:D3:37:F7
            X509v3 Authority Key Identifier:
                keyid:E6:8D:4F:7F:DC:68:C9:5F:3C:F5:BC:5E:D2:6F:0F:93:4B:D7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D4F7FDC68C95F3CF5BC5ED26F0F934BD7CB9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/34352e3137372e3235302e302f32332d3233203d3e20323733373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:38:d6:20:7b:5d:74:d9:54:3b:74:61:55:65:d0:dd:4f:
         29:27:02:5d:27:8b:bc:db:3d:4b:d4:44:40:fa:3c:9c:d4:22:
         8c:a8:ad:20:3e:ad:04:db:13:0f:90:c9:bc:01:42:61:5f:b2:
         41:84:75:2f:6d:4b:c9:9f:1d:e5:be:58:86:69:00:a0:8a:86:
         11:17:88:da:2d:12:80:8f:0c:db:70:b4:aa:36:cd:be:a7:c1:
         b5:5e:97:f3:83:a9:39:f6:1f:eb:d7:ba:d5:1a:5a:8a:dc:2c:
         2a:ce:b9:41:c6:97:9a:15:a2:76:30:cc:41:e1:98:44:58:36:
         d9:37:ea:26:2d:ef:0a:a0:29:d9:0a:0c:c1:dc:69:58:1d:b5:
         6c:eb:3d:8f:1d:9d:f3:78:2c:05:f8:6e:a7:19:12:07:94:e7:
         56:01:4c:dd:fd:59:05:47:e6:72:a0:85:11:8e:3a:69:5d:ff:
         e2:e1:62:d3:81:a4:bc:b1:19:c2:0e:ad:90:7a:55:4a:84:c0:
         21:81:f2:5d:55:93:c0:b7:09:74:23:1b:7a:28:41:16:85:79:
         5a:34:b3:7a:69:f2:9a:85:de:e1:a7:09:53:37:10:c3:bf:5a:
         39:16:51:06:69:11:a7:8d:bf:9d:0e:49:36:11:5d:58:0d:f4:
         83:1c:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:14:28 2026 by rpki-client