Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa
File:                     34352e3232372e32332e302f32342d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          ueRr9v3D+SVM2byENleJxfofwN1toEyZGt/3ut7DRvY=
Subject key identifier:   AA:35:DC:0E:5F:2B:D6:4E:F1:28:CA:22:EE:82:76:D9:2C:C6:D6:16
Certificate issuer:       /CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
Certificate serial:       7D5327917A9B28F4D81A3869AF224EB4DC04335B
Authority key identifier: F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa
Signing time:             Mon 24 Aug 2026 15:09:52 +0000
ROA not before:           Mon 24 Aug 2026 15:04:52 +0000
ROA not after:            Mon 23 Aug 2027 15:09:52 +0000
asID:                     267008
IP address blocks:        45.227.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl
                          rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 19:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:53:27:91:7a:9b:28:f4:d8:1a:38:69:af:22:4e:b4:dc:04:33:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3
        Validity
            Not Before: Aug 24 15:04:52 2026 GMT
            Not After : Aug 23 15:09:52 2027 GMT
        Subject: CN=AA35DC0E5F2BD64EF128CA22EE8276D92CC6D616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:a8:0a:d5:02:fa:2b:90:d2:38:80:56:ef:
                    dd:d4:c9:25:e9:58:bf:3e:7d:f0:af:75:4c:c8:80:
                    65:b8:3d:8e:a1:b8:e5:78:60:ca:ab:4d:b3:23:e3:
                    cf:a7:7c:2d:dd:37:8d:87:d7:60:14:14:87:ba:b8:
                    63:4d:b7:e9:70:0c:2b:df:92:25:a1:da:ce:4f:b7:
                    f2:36:1b:7b:e7:56:e5:d0:c0:b6:a8:12:6b:33:6a:
                    20:23:89:91:60:18:0c:0d:e8:e1:dc:7c:bf:b7:d1:
                    58:41:57:63:bf:ae:0f:2b:35:c8:a5:f0:68:b8:e9:
                    3f:d9:1b:f2:9d:e2:10:4f:46:d0:ce:27:db:f4:58:
                    64:c5:02:65:37:0c:05:9c:7c:96:d9:c3:eb:03:b4:
                    02:7b:7d:b1:11:6b:74:fb:ee:ff:13:be:b6:ba:d0:
                    4f:eb:eb:93:1d:2d:cd:12:06:17:89:2d:93:33:57:
                    6d:e0:34:fe:dc:e5:af:34:98:a9:17:c1:70:46:b2:
                    49:a1:33:41:77:bd:5b:0a:6d:9e:fe:34:c3:10:9c:
                    c5:b3:ff:e6:4e:02:03:19:e6:d6:5f:01:10:21:37:
                    0c:49:f7:ca:b2:cc:fe:be:57:13:77:99:09:b3:a0:
                    51:78:4a:e6:b0:1a:83:28:62:db:56:a8:cd:5b:4c:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:35:DC:0E:5F:2B:D6:4E:F1:28:CA:22:EE:82:76:D9:2C:C6:D6:16
            X509v3 Authority Key Identifier:
                keyid:F4:D8:F6:B5:5D:1C:3C:E2:B3:59:7A:4E:73:FC:44:4A:28:36:5A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4D8F6B55D1C3CE2B3597A4E73FC444A28365AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32332e302f32342d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:65:e1:15:90:5c:f8:24:ea:3b:ff:42:eb:d2:3a:b6:4d:7e:
         1e:7b:28:b2:7d:61:ff:11:66:97:d3:c0:b5:98:c3:cf:5b:8b:
         45:8d:fe:b4:41:2e:43:3f:51:b8:d2:2e:d1:ba:c0:f1:a4:b5:
         b1:bc:83:dd:cd:f6:49:64:79:58:cc:7e:8b:c6:76:b3:92:17:
         45:1c:eb:9f:d5:3f:62:28:5f:cd:24:ab:f2:11:c9:10:ce:9d:
         67:c3:35:49:fa:e4:13:2a:0d:d2:0b:cd:02:73:b1:70:4a:a2:
         25:67:b2:7a:42:b7:00:7f:a6:04:7c:f9:1b:85:35:62:7d:de:
         1c:2b:99:05:ec:dc:9e:de:c2:8d:4c:a8:08:17:1a:2e:27:16:
         d2:2d:d6:83:21:d2:f4:09:c4:92:7e:85:8b:42:c5:d0:6b:cd:
         9d:36:c1:a5:cc:56:e8:f4:18:03:1f:64:02:b6:23:8f:c9:52:
         c0:f2:4c:90:7a:6b:79:60:06:6c:19:45:c3:59:f7:8e:cc:17:
         34:b1:26:3c:2e:70:f5:71:f2:a7:92:22:e6:7c:5d:83:b1:50:
         83:5f:b1:6b:05:4b:52:5f:0b:62:b0:3a:6e:d9:e7:e2:c4:2c:
         5a:2e:bd:07:74:a7:bc:96:c5:49:77:21:dd:33:43:3a:9d:01:
         66:ef:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:28:45 2026 by rpki-client