Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e382e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          K8kPx6C8nxMwlDklBsyuLoMxfJ91OHaxqVUgHgWGLD4=
Subject key identifier:   91:8E:0B:2B:E7:27:16:34:DE:45:CA:8D:D7:0D:51:4D:BD:15:FF:50
Certificate issuer:       /CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
Certificate serial:       016961190662A0A17028D704CE893A352D4020A2
Authority key identifier: 1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
Signing time:             Fri 07 Aug 2026 08:54:41 +0000
ROA not before:           Fri 07 Aug 2026 08:49:41 +0000
ROA not after:            Fri 06 Aug 2027 08:54:41 +0000
asID:                     269566
IP address blocks:        45.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:69:61:19:06:62:a0:a1:70:28:d7:04:ce:89:3a:35:2d:40:20:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
        Validity
            Not Before: Aug  7 08:49:41 2026 GMT
            Not After : Aug  6 08:54:41 2027 GMT
        Subject: CN=918E0B2BE7271634DE45CA8DD70D514DBD15FF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:4f:f2:fc:1f:dc:66:13:d5:bb:27:91:51:
                    30:cf:42:51:13:4e:0b:55:45:89:86:cc:e1:17:1f:
                    79:c0:1b:36:ce:a4:ac:38:94:83:d3:5c:7e:7d:43:
                    d2:3d:fb:38:09:b0:e3:1e:d8:94:e1:77:36:a1:ee:
                    8c:ce:c9:d9:3e:48:77:4c:20:60:c0:82:f4:0a:60:
                    8c:e9:b6:46:5b:eb:d3:cc:32:78:1d:28:3b:19:12:
                    32:38:b6:87:57:8a:f3:f1:8d:41:a8:78:6f:9a:dc:
                    9c:77:83:03:ed:54:24:94:9a:7f:2f:fe:80:e1:ef:
                    a7:38:8d:2b:86:46:07:9c:02:f1:be:39:52:c1:65:
                    10:5a:c3:cb:80:60:a1:e5:a4:56:6e:75:3c:02:c4:
                    80:1b:7f:66:b1:67:49:98:13:de:6f:03:1b:a7:db:
                    f0:cf:32:07:0e:c8:60:9c:54:31:90:c0:02:0f:88:
                    6a:c9:92:b5:27:7c:58:e0:66:b1:ff:9d:93:16:9b:
                    92:e4:8a:84:f2:c3:dd:aa:3f:0c:24:96:36:cc:45:
                    37:fd:0a:95:ea:de:64:75:50:80:41:db:0c:94:64:
                    eb:c0:30:ea:ce:02:45:b7:88:5c:d3:1b:e4:c4:96:
                    ae:fb:71:8b:d5:e4:ad:74:53:10:47:0c:22:18:eb:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8E:0B:2B:E7:27:16:34:DE:45:CA:8D:D7:0D:51:4D:BD:15:FF:50
            X509v3 Authority Key Identifier:
                keyid:1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:9c:76:1f:51:e2:d1:e8:e5:64:c9:fa:c8:42:3f:ac:85:
         1a:7c:7b:2a:59:d5:97:fd:4f:1a:9e:f8:98:e0:ee:e4:d5:0c:
         c2:12:cd:b9:d8:59:c8:da:43:cc:5b:85:87:3d:e4:2e:51:38:
         f4:a6:d1:28:cf:ed:c4:25:6c:4f:9f:93:36:8e:11:72:66:00:
         a9:85:92:de:78:12:6a:cd:8a:61:5c:9a:21:c9:52:51:97:05:
         9e:20:34:86:2f:b1:63:e5:a7:72:b9:09:52:c6:e0:39:c4:cb:
         f2:4f:37:0c:fb:06:e5:88:20:f1:82:19:69:2f:7a:f4:32:bf:
         8c:0f:cc:1f:b1:b3:3e:3f:6c:f5:67:c3:bd:d1:db:ce:fe:39:
         36:12:5f:2c:b3:c3:a5:cb:28:e6:cf:51:7a:33:c7:ea:71:22:
         0e:9a:6f:74:4b:6d:33:72:1a:6c:6e:9d:30:78:49:76:7e:15:
         34:7b:ae:7b:fd:4c:2e:59:1d:e0:19:24:7b:5b:54:f8:4d:a8:
         ad:8c:cc:69:49:07:0d:40:ba:e6:8f:35:03:23:fb:22:88:24:
         60:07:0a:d1:ff:8a:75:43:16:e4:6d:c9:7b:96:cc:38:70:b9:
         bd:3b:40:2b:2a:4d:8b:ab:52:3b:a4:42:a7:21:e6:e2:46:0f:
         69:57:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:10:41 2026 by rpki-client