Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa
File:                     34352e3232372e32312e302f32342d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          EL9Y4nbDJccF/B+3tE9gTEQgU0OJhxXw7sp6YYi2wPU=
Subject key identifier:   04:BB:F8:5B:56:FF:91:56:8B:34:4B:B5:BD:D4:1A:37:A1:60:B0:25
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       6DBFAE22E0EB7125FDB35F1215708F6CF83547B9
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa
Signing time:             Mon 24 Aug 2026 15:09:53 +0000
ROA not before:           Mon 24 Aug 2026 15:04:53 +0000
ROA not after:            Mon 23 Aug 2027 15:09:53 +0000
asID:                     267008
IP address blocks:        45.227.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 19:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bf:ae:22:e0:eb:71:25:fd:b3:5f:12:15:70:8f:6c:f8:35:47:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Aug 24 15:04:53 2026 GMT
            Not After : Aug 23 15:09:53 2027 GMT
        Subject: CN=04BBF85B56FF91568B344BB5BDD41A37A160B025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:d2:5f:e1:d8:5d:44:4c:96:69:43:3a:52:
                    65:cc:40:04:ee:ec:fa:58:42:77:97:f1:f8:20:2a:
                    3c:d4:22:36:29:71:93:81:93:30:b5:ff:49:1e:e6:
                    26:09:47:83:90:2b:f4:c0:84:7f:5c:86:34:29:93:
                    e6:69:63:0b:f4:18:6d:b8:8f:50:4d:94:c3:eb:cf:
                    87:8a:91:a1:be:a8:ec:57:3b:06:68:7d:67:44:5e:
                    b2:5c:59:fd:fb:b2:63:3d:d2:7d:ba:94:1e:3a:8a:
                    bd:d5:aa:b5:a0:a6:c1:b5:93:1b:33:09:20:41:20:
                    60:c6:ec:3c:ab:6b:8d:e9:51:05:9e:ea:da:0f:7a:
                    d5:63:5b:7b:53:9b:1c:3b:e0:75:3b:49:39:0d:8d:
                    79:88:15:6d:34:cd:11:cc:1d:cb:69:74:d7:3c:ca:
                    b8:92:19:b1:e6:5c:ef:6d:12:a2:ba:d8:34:1a:2b:
                    ec:a1:de:8e:98:d9:68:eb:c0:10:f0:88:bd:e8:44:
                    53:9a:6a:58:87:60:31:d0:55:87:6a:aa:07:7b:0d:
                    c9:21:b8:30:1c:a1:0f:e1:cf:5d:b9:56:e0:9a:27:
                    84:c3:40:82:54:d1:bb:e0:a6:01:fd:e3:e9:d3:38:
                    3c:3a:3f:c4:bc:82:26:a8:f2:28:62:a5:95:58:81:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BB:F8:5B:56:FF:91:56:8B:34:4B:B5:BD:D4:1A:37:A1:60:B0:25
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1e:9a:d6:9c:21:40:49:e3:27:d2:32:8a:5b:c8:5c:cc:5d:
         e5:ec:e7:f0:9a:45:2d:ad:c9:35:77:19:1f:85:3f:44:42:79:
         07:be:02:e2:59:f1:cd:aa:16:5c:d9:2d:b3:50:f5:c2:d1:b0:
         d1:2f:99:9f:0b:f8:64:bd:6d:e3:d7:6a:f1:42:75:07:9f:f2:
         4b:79:a0:c8:cd:e4:d9:ef:19:45:5d:55:48:ec:6e:19:7b:45:
         bd:b8:a3:e7:15:93:ff:90:95:6c:e2:46:1a:74:dc:c5:b0:2f:
         db:07:04:87:41:d3:80:f4:de:ce:aa:84:0b:c2:fb:14:64:ee:
         74:07:64:fd:ad:ea:68:bd:a8:c3:2b:c0:9c:9c:82:5e:fc:f5:
         2c:c7:5f:56:d8:c5:3c:92:4b:32:6c:bc:f3:e1:8a:ca:ff:16:
         7a:a4:f8:99:f8:d5:82:5e:f4:7c:d8:26:7e:a5:52:02:fb:f0:
         26:9b:c4:02:0b:e4:81:b6:90:09:9c:2a:45:3f:76:58:d8:68:
         ef:de:b1:c2:9e:b0:8b:d2:ab:8a:5b:db:b0:35:98:fe:45:c6:
         e8:23:f6:f2:8e:22:23:b6:b3:3b:84:0f:5f:d0:db:e7:63:7c:
         67:3c:f1:1c:85:95:be:8b:ee:df:fa:99:39:63:f5:84:51:eb:
         1f:18:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 02:21:24 2026 by rpki-client