Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34362e302f32332d3233203d3e20323637353635.roa
File:                     34352e37302e34362e302f32332d3233203d3e20323637353635.roa (raw, json)
Hash identifier:          +t3r1N04CowJNLyrZ7P3kSjZL52ddPryRAnnjESwtMQ=
Subject key identifier:   86:D7:D9:04:88:6B:8A:A9:52:E4:6E:B6:5C:15:01:01:2E:0E:CF:36
Certificate issuer:       /CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
Certificate serial:       29253299EC73A677D96F71A5AF10AAA3349287ED
Authority key identifier: D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34362e302f32332d3233203d3e20323637353635.roa
Signing time:             Tue 28 Jul 2026 18:43:43 +0000
ROA not before:           Tue 28 Jul 2026 18:38:43 +0000
ROA not after:            Tue 27 Jul 2027 18:43:43 +0000
asID:                     267565
IP address blocks:        45.70.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl
                          rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:25:32:99:ec:73:a6:77:d9:6f:71:a5:af:10:aa:a3:34:92:87:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D237609A13C9C7211EAE97129E472BB772C3C6AD
        Validity
            Not Before: Jul 28 18:38:43 2026 GMT
            Not After : Jul 27 18:43:43 2027 GMT
        Subject: CN=86D7D904886B8AA952E46EB65C1501012E0ECF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:38:4e:cf:2f:22:ca:ca:ef:43:bf:f2:b1:
                    24:ee:40:9a:81:6f:15:91:76:cc:f9:53:49:40:ce:
                    f3:b4:33:b8:04:a6:41:c7:55:99:75:bd:0e:20:b7:
                    fa:33:7a:1b:33:0f:26:50:49:30:0b:7e:b0:3a:e2:
                    c2:44:1c:f2:e4:fd:71:fb:7b:10:e3:dd:5f:15:81:
                    42:82:50:f5:64:9b:cd:bc:b9:36:0b:db:8e:f3:24:
                    df:3f:9c:4b:2e:41:f0:13:fb:98:c6:df:d3:ce:82:
                    83:e2:44:7f:83:42:84:eb:30:34:eb:21:42:a9:2c:
                    e0:12:db:02:3d:25:a4:d4:08:ed:ab:f1:c5:d6:b4:
                    d7:a2:bd:2f:a7:94:c2:a1:6d:be:e5:9e:23:7e:ce:
                    06:5d:1b:fc:92:ee:a4:ea:74:21:35:be:20:6c:9a:
                    3b:e5:5c:54:5d:48:2a:9b:76:35:e6:bb:29:70:5d:
                    44:4c:f0:ba:72:b6:4f:b3:ef:e9:84:7a:24:bf:cd:
                    a7:2d:f4:79:f0:88:96:a6:4e:16:09:b7:8d:d8:44:
                    30:53:63:b1:ba:76:3c:2b:27:65:1f:f2:17:0d:74:
                    33:7a:10:44:44:99:ec:55:2c:2c:f2:c1:a5:ef:64:
                    d8:f6:f6:95:42:82:47:5e:11:8b:05:92:e2:89:84:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:D9:04:88:6B:8A:A9:52:E4:6E:B6:5C:15:01:01:2E:0E:CF:36
            X509v3 Authority Key Identifier:
                keyid:D2:37:60:9A:13:C9:C7:21:1E:AE:97:12:9E:47:2B:B7:72:C3:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/D237609A13C9C7211EAE97129E472BB772C3C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D237609A13C9C7211EAE97129E472BB772C3C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5qUGcsbDC3g9aBdvmRenu2R3ub1FYq41UtzW3TxGZ42/0/34352e37302e34362e302f32332d3233203d3e20323637353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:0c:06:e9:d5:1a:fe:3d:ce:6f:0d:a8:32:29:6f:c0:64:
         23:8a:f9:12:85:15:9f:19:43:a5:b4:4c:c9:c2:a5:76:04:1a:
         2f:7e:9a:89:e5:e5:42:67:9e:c0:39:62:30:04:44:02:cb:f1:
         47:94:76:e8:07:c7:4b:3d:2f:e9:e1:2e:d5:b6:c1:4b:3e:56:
         9a:9b:1a:d8:b1:80:17:69:0d:22:e0:7f:2c:bc:e2:68:57:2a:
         7f:b8:85:8a:bc:48:82:e7:5d:bf:9a:9d:a0:ea:b9:6d:e2:b3:
         0c:b1:be:58:96:e6:58:44:52:33:8a:3d:05:6b:b3:3c:aa:19:
         8b:a8:fe:4d:6b:d5:d8:5c:8e:a0:61:06:1b:94:ff:84:16:3f:
         60:ee:4a:27:e7:e5:6a:af:6a:0b:30:64:e4:32:ea:1f:f1:c7:
         91:44:aa:94:28:d4:9e:61:ba:44:ba:a8:12:11:0f:86:3c:57:
         39:01:48:d1:fb:d8:6f:9d:e2:f2:97:7f:0b:01:27:a7:f5:1b:
         6e:06:7c:aa:c9:35:93:4a:51:03:6a:fc:06:0d:15:e7:b6:c4:
         03:e8:a5:13:2b:eb:31:3a:fd:a4:50:68:52:c5:e6:5c:de:5d:
         2a:c7:b4:df:11:67:98:15:ff:ee:03:e4:d6:00:f9:a3:17:d5:
         d7:3f:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:25 2026 by rpki-client