Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34342e302f32332d3233203d3e20323637353635.roa
File:                     34352e37302e34342e302f32332d3233203d3e20323637353635.roa (raw, json)
Hash identifier:          L7yrUg963N/1gbYR1qVNhQZaVIMYRE1ntAauPcw+wLU=
Subject key identifier:   11:36:DC:14:4F:77:74:2C:24:BE:81:8F:B0:A8:31:86:6F:CB:0D:5C
Certificate issuer:       /CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
Certificate serial:       3EC2C888E3F69B88C5A26F8C147C9AB8FC71B74F
Authority key identifier: D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34342e302f32332d3233203d3e20323637353635.roa
Signing time:             Tue 28 Jul 2026 18:43:25 +0000
ROA not before:           Tue 28 Jul 2026 18:38:25 +0000
ROA not after:            Tue 27 Jul 2027 18:43:25 +0000
asID:                     267565
IP address blocks:        45.70.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl
                          rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c2:c8:88:e3:f6:9b:88:c5:a2:6f:8c:14:7c:9a:b8:fc:71:b7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
        Validity
            Not Before: Jul 28 18:38:25 2026 GMT
            Not After : Jul 27 18:43:25 2027 GMT
        Subject: CN=1136DC144F77742C24BE818FB0A831866FCB0D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:dc:6d:2e:31:3f:dd:ff:c8:65:70:37:15:
                    ef:64:87:95:e1:13:97:1f:59:ba:17:eb:dc:a7:2f:
                    24:ef:2d:0b:50:dc:7f:a0:94:11:07:54:dc:ed:ad:
                    63:f7:10:32:0f:93:e4:72:7f:45:5c:2a:ff:0f:f8:
                    46:24:e2:57:3d:bf:5e:4f:6e:16:8c:90:6c:51:de:
                    37:51:43:f1:fb:4b:ef:43:9a:b4:64:64:17:2d:a4:
                    dc:c5:7e:bc:d2:f3:b0:b1:bb:c0:53:4b:12:68:96:
                    73:ec:9d:42:34:40:24:45:c0:e0:2d:60:90:d8:88:
                    a1:b9:27:79:03:26:ad:4a:8e:1e:c8:d5:21:8e:7f:
                    d9:b4:b2:f4:be:f4:ab:f8:39:ed:29:6f:e6:78:2a:
                    c3:a4:74:28:78:3b:8e:2d:a4:5c:dc:50:93:10:a3:
                    04:f9:83:6e:ac:1e:29:d8:a0:7c:f2:18:a4:7f:60:
                    01:43:1a:bf:94:8a:0a:72:c6:ab:3e:5f:da:18:d8:
                    6b:12:b9:4b:bb:ad:90:ba:6a:1e:c0:39:11:dc:e7:
                    ed:43:07:05:1a:aa:c6:06:7a:83:88:0c:be:4a:a9:
                    a7:03:61:c6:82:bd:ed:6f:f8:a0:a0:1b:a0:76:99:
                    b0:b1:4d:c7:d7:3e:9e:3a:1b:92:28:5c:06:d3:2f:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:36:DC:14:4F:77:74:2C:24:BE:81:8F:B0:A8:31:86:6F:CB:0D:5C
            X509v3 Authority Key Identifier:
                keyid:D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34342e302f32332d3233203d3e20323637353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:13:d0:c8:92:74:fd:b9:29:45:de:9c:90:4f:03:dd:6d:20:
         e9:73:08:96:32:a0:3b:8b:77:ff:c2:bf:ed:58:ee:44:72:3b:
         61:da:cf:2a:dc:5b:0c:91:e3:06:c7:f2:39:e4:29:b0:96:7e:
         48:ec:8a:fe:e5:83:11:65:81:b3:b9:ee:69:50:2f:c1:7d:7a:
         d2:6b:70:c9:ec:94:9f:18:7b:9b:34:cb:08:a8:f8:f5:41:5a:
         21:ec:3d:2e:4a:c6:e5:f2:9a:6d:73:1a:aa:1f:05:f0:42:12:
         3f:53:4e:09:9b:f1:93:6d:62:c0:32:8c:03:15:83:5c:03:f1:
         c2:f4:09:9d:81:da:28:10:10:8b:19:ee:cb:7c:10:59:46:9e:
         a6:e7:43:38:28:e6:c7:ed:46:61:9f:d6:24:5b:5d:f5:e6:f5:
         0c:c6:7e:48:af:21:d4:d0:f3:11:06:9e:b6:d5:58:fb:48:51:
         1b:a4:ba:2a:30:99:43:32:e4:2a:7d:15:15:d2:2a:21:f4:57:
         19:62:e2:58:c0:a7:91:b7:a5:93:c0:d4:21:b5:c8:e5:b3:88:
         d1:ed:01:41:be:81:5f:7d:40:aa:c8:ca:90:78:6d:e9:d4:63:
         4c:e8:5a:1b:51:a0:17:db:2e:30:58:e0:43:6e:45:5f:0e:64:
         43:5b:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:26 2026 by rpki-client