Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32342d3234203d3e20323731323534.roa
File:                     34352e3233322e38362e302f32342d3234203d3e20323731323534.roa (raw, json)
Hash identifier:          Gn07QQD00nNzGV3mWuzfbRf3lLZRRB6EjrL7i9S0ZDk=
Subject key identifier:   BF:3D:52:9C:9C:3F:0D:23:31:FA:F0:E0:CE:BF:EC:BE:F6:DE:18:7D
Certificate issuer:       /CN=8E7B024B7C905166ED586783639EEF35A25E8F5F
Certificate serial:       1DAD40A107FC9F5BED844552AD73B088C6EA9A06
Authority key identifier: 8E:7B:02:4B:7C:90:51:66:ED:58:67:83:63:9E:EF:35:A2:5E:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7B024B7C905166ED586783639EEF35A25E8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32342d3234203d3e20323731323534.roa
Signing time:             Mon 15 Jun 2026 21:50:00 +0000
ROA not before:           Mon 15 Jun 2026 21:45:00 +0000
ROA not after:            Mon 14 Jun 2027 21:50:00 +0000
asID:                     271254
IP address blocks:        45.232.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/8E7B024B7C905166ED586783639EEF35A25E8F5F.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/8E7B024B7C905166ED586783639EEF35A25E8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7B024B7C905166ED586783639EEF35A25E8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:40:a1:07:fc:9f:5b:ed:84:45:52:ad:73:b0:88:c6:ea:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7B024B7C905166ED586783639EEF35A25E8F5F
        Validity
            Not Before: Jun 15 21:45:00 2026 GMT
            Not After : Jun 14 21:50:00 2027 GMT
        Subject: CN=BF3D529C9C3F0D2331FAF0E0CEBFECBEF6DE187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:4b:48:68:90:7a:36:85:ce:47:36:19:9f:
                    49:eb:a2:1c:00:c4:03:95:96:8b:bb:58:f2:56:23:
                    8c:d1:d4:05:75:c8:57:b5:d9:53:37:7a:e6:c4:c5:
                    49:69:6c:b9:67:de:71:cd:dc:d6:69:e2:f6:f8:9a:
                    8b:e3:9f:72:b8:3f:57:f3:d8:f2:87:15:b7:87:6b:
                    ae:f4:5c:72:69:70:4b:4d:06:4e:1c:69:f1:99:47:
                    5b:b6:60:ef:3b:83:d3:0d:e8:56:e1:1e:78:d2:c1:
                    45:9d:bd:a7:ac:93:c7:8a:fe:7d:88:70:c0:58:d4:
                    32:a4:d7:bc:c2:7c:25:8e:6e:da:b4:04:45:6f:45:
                    8d:09:c3:a2:05:78:cc:1a:07:e2:5a:5f:bd:0e:fb:
                    9b:e7:1d:59:d7:c4:f3:16:2d:39:7a:7c:ff:13:01:
                    97:11:68:7c:31:97:b5:4a:c1:ee:a0:c5:05:2a:45:
                    45:b5:f3:3b:15:5b:c8:59:0f:c7:72:5b:a6:8e:8c:
                    31:3f:6e:ac:2d:e4:2f:28:63:23:99:b5:e0:56:31:
                    91:d3:9e:1f:39:55:a5:71:5d:fc:b5:6d:b5:e9:02:
                    b4:48:58:1c:69:75:46:d8:06:f7:27:e4:dc:24:32:
                    d0:15:ab:55:52:f3:ec:99:74:23:d7:14:dd:c9:d3:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3D:52:9C:9C:3F:0D:23:31:FA:F0:E0:CE:BF:EC:BE:F6:DE:18:7D
            X509v3 Authority Key Identifier:
                keyid:8E:7B:02:4B:7C:90:51:66:ED:58:67:83:63:9E:EF:35:A2:5E:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/8E7B024B7C905166ED586783639EEF35A25E8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7B024B7C905166ED586783639EEF35A25E8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/34352e3233322e38362e302f32342d3234203d3e20323731323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:89:d5:f7:62:68:25:97:55:ec:f3:af:35:68:e0:d0:b9:
         41:4c:a3:80:eb:20:67:f5:30:8a:b4:5b:42:45:3c:08:9f:d7:
         14:5d:79:d2:84:d9:91:68:41:5f:94:cf:64:6b:03:f8:6b:1d:
         19:0f:12:7b:5c:cc:a1:23:ef:4a:d4:3d:33:e7:5d:0f:52:f0:
         83:dc:f1:b2:83:ad:06:eb:7a:c2:29:8f:c2:53:f1:80:7e:c7:
         71:98:8b:e9:88:ae:88:d0:d5:c3:32:59:7e:7a:6c:bf:c8:63:
         b7:d4:56:68:12:12:8c:45:0c:3e:02:5c:33:06:e9:1e:23:44:
         f2:0b:03:d1:34:1f:54:0d:0c:fe:d5:c5:58:71:98:44:ab:95:
         96:d5:15:88:1e:4f:58:63:bd:5a:e6:22:50:63:2a:7b:57:a8:
         3e:9e:86:d0:06:6b:39:2c:f7:c1:43:36:36:f1:93:34:bf:42:
         7f:bb:9b:0b:a4:ea:09:cb:8c:0c:38:d8:58:e3:17:2d:b9:ec:
         23:52:f3:96:b0:f7:c3:b7:d0:59:1b:53:f6:f7:11:ee:c0:e0:
         06:e1:f6:ec:b1:7e:60:00:a1:04:9c:10:d9:a1:ee:0a:e7:38:
         a5:d0:eb:00:05:d0:da:9f:4c:71:32:e0:d0:b6:63:a8:48:82:
         52:20:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:06 2026 by rpki-client