Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32332d3234203d3e20323636393337.roa
File:                     34352e3232352e3133302e302f32332d3234203d3e20323636393337.roa (raw, json)
Hash identifier:          BZN8ymxacAHpUGfa4PLimlSSgZYL8639onipZmwE4ng=
Subject key identifier:   C6:27:D5:24:F0:F9:55:55:2A:D1:24:88:E7:8C:EB:C9:3D:54:59:CA
Certificate issuer:       /CN=9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4
Certificate serial:       51F501D1F6F97C515A9F7BCBB98FCC8BF5210C14
Authority key identifier: 92:20:AF:CE:99:7A:70:26:62:FC:F7:B7:5F:7E:FC:4E:FC:AC:62:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32332d3234203d3e20323636393337.roa
Signing time:             Wed 01 Jul 2026 09:23:14 +0000
ROA not before:           Wed 01 Jul 2026 09:18:14 +0000
ROA not after:            Wed 30 Jun 2027 09:23:14 +0000
asID:                     266937
IP address blocks:        45.225.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.crl
                          rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:01:d1:f6:f9:7c:51:5a:9f:7b:cb:b9:8f:cc:8b:f5:21:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4
        Validity
            Not Before: Jul  1 09:18:14 2026 GMT
            Not After : Jun 30 09:23:14 2027 GMT
        Subject: CN=C627D524F0F955552AD12488E78CEBC93D5459CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:21:f8:2f:c8:a0:1d:ea:91:78:07:35:15:
                    a1:3c:87:1c:b8:05:ac:f7:75:e8:31:7e:3b:2f:a3:
                    64:50:bf:2c:57:9f:91:ca:40:2e:10:ab:b0:79:e4:
                    d5:cb:d4:20:9b:4f:92:ff:03:68:15:2a:92:15:f4:
                    c8:22:ec:e7:14:50:83:7e:e0:0e:6e:f5:a9:46:17:
                    28:1f:3d:bc:4c:78:87:dc:3c:cd:60:00:b5:b4:c8:
                    33:68:d2:5a:da:16:08:16:38:bd:a3:06:f3:ad:04:
                    13:71:84:d2:54:a4:ec:0e:97:0d:cb:a0:9e:1a:ee:
                    4c:82:de:b5:f4:e2:c8:84:5a:3d:47:51:b8:7b:0f:
                    24:21:82:a0:bc:4d:eb:fb:b7:3e:83:4a:c0:e4:1d:
                    0e:51:76:f4:bf:8c:9b:26:71:43:09:87:14:b3:9c:
                    a6:cc:9a:8d:26:2d:01:45:41:f5:2a:cf:ec:47:4f:
                    14:15:de:71:48:a5:a4:ab:99:fd:04:39:32:85:8f:
                    9b:bb:e5:40:fd:f7:6a:79:c0:89:ef:48:40:0b:df:
                    d0:ad:ec:f1:77:6a:e6:a5:03:fa:55:b5:85:50:c7:
                    91:dc:c6:e6:82:b3:34:b3:f6:6b:0d:81:dd:b0:77:
                    5c:3a:ba:9a:59:6c:22:89:b1:66:8d:1f:e0:25:07:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:D5:24:F0:F9:55:55:2A:D1:24:88:E7:8C:EB:C9:3D:54:59:CA
            X509v3 Authority Key Identifier:
                keyid:92:20:AF:CE:99:7A:70:26:62:FC:F7:B7:5F:7E:FC:4E:FC:AC:62:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9220AFCE997A702662FCF7B75F7EFC4EFCAC62A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32332d3234203d3e20323636393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:14:be:6c:81:82:ee:f4:0d:62:20:50:b5:3d:de:ba:71:85:
         2e:d0:2d:29:13:d9:f8:77:1a:4e:d7:e4:00:6c:74:04:8c:38:
         6a:c8:a6:65:e7:df:0b:6c:9e:28:15:e7:01:5a:c5:68:76:a3:
         93:55:6f:d9:a9:61:2b:20:ab:da:cd:2e:5c:5c:a8:f3:0f:63:
         04:b0:ca:30:ff:ab:fa:b4:15:38:e9:cf:c0:cd:f2:97:2c:3c:
         b9:03:c7:cf:f0:3f:b6:f4:14:1f:10:d3:23:c2:78:58:bd:8f:
         69:24:9a:01:c2:e3:85:f2:7d:23:b2:ab:51:78:a7:25:34:6d:
         4d:d4:48:00:6b:e1:09:51:6b:17:97:eb:e8:1a:5b:34:87:da:
         ad:9b:0e:89:02:26:6c:2c:fc:55:4e:f4:be:97:8f:73:12:5a:
         39:d4:b2:b7:9d:13:fc:1b:de:81:9e:39:0f:b5:b6:54:fb:9f:
         5a:2e:d9:b5:66:31:78:aa:8c:e4:3b:68:c0:93:fe:53:80:68:
         99:7f:1f:19:79:c4:e2:b1:d5:a7:7b:cc:08:d0:54:71:b6:17:
         72:18:67:55:56:3f:74:c9:6c:cc:0e:9e:3b:e4:01:50:1b:64:
         b7:1d:dd:89:56:41:02:ca:b8:a8:bd:47:a1:d5:66:e6:7f:0d:
         b3:aa:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:52 2026 by rpki-client