Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa
File:                     34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa (raw, json)
Hash identifier:          LcE27lbvVzsluJ8Cpr0hNSDvuKgpYUvFu42PoO9/QYI=
Subject key identifier:   5D:74:3B:45:18:01:93:BD:3E:2A:53:11:44:69:1B:29:87:29:94:60
Certificate issuer:       /CN=5B3063587DF2EE02343EDE8C096577BFF9F55403
Certificate serial:       18A0BAB282DC57129F5C1EC33A9C29DEF5418B19
Authority key identifier: 5B:30:63:58:7D:F2:EE:02:34:3E:DE:8C:09:65:77:BF:F9:F5:54:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa
Signing time:             Sun 26 Jul 2026 15:02:48 +0000
ROA not before:           Sun 26 Jul 2026 14:57:48 +0000
ROA not after:            Sun 25 Jul 2027 15:02:48 +0000
asID:                     267235
IP address blocks:        45.230.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.crl
                          rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 16:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a0:ba:b2:82:dc:57:12:9f:5c:1e:c3:3a:9c:29:de:f5:41:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B3063587DF2EE02343EDE8C096577BFF9F55403
        Validity
            Not Before: Jul 26 14:57:48 2026 GMT
            Not After : Jul 25 15:02:48 2027 GMT
        Subject: CN=5D743B45180193BD3E2A531144691B2987299460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:82:0b:74:c9:cd:2b:76:a7:5f:ea:56:34:
                    4d:d9:9a:06:b2:ef:51:6a:5f:71:34:8a:29:1a:42:
                    40:b7:46:77:e0:34:3c:05:92:e4:bc:aa:60:bf:db:
                    20:34:f2:4d:f9:2d:62:5b:d0:8e:70:33:c4:f5:59:
                    a6:32:0a:cd:05:67:e1:fa:4d:c8:19:5a:a7:71:f1:
                    0b:0f:72:9f:92:4c:21:40:25:c8:f2:14:54:1a:15:
                    19:71:ff:62:eb:36:bf:6d:57:da:24:6c:7a:09:d5:
                    02:e3:e3:b8:89:70:61:2c:11:f2:28:b2:62:de:3d:
                    ac:4c:8b:c0:a8:1e:64:4f:e4:44:c0:67:50:ae:a5:
                    70:06:04:83:81:0a:6c:37:22:84:1a:f5:56:40:24:
                    f3:e7:1f:75:c7:eb:97:01:59:2e:fa:8f:be:e3:4e:
                    7d:84:2b:d3:30:96:8e:6d:c8:dc:75:da:13:12:4b:
                    4a:6b:10:e0:8a:6d:48:93:88:bf:9c:70:0f:66:85:
                    81:34:dc:87:19:d1:f0:22:95:95:d9:54:0c:f7:5a:
                    44:73:65:d0:d8:a1:8c:58:a2:15:dd:1a:a0:ce:30:
                    82:5f:06:f9:e1:bf:5a:bf:48:54:88:fa:fb:d9:a0:
                    8f:25:76:3b:da:4f:04:8e:8b:38:36:71:16:12:d6:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:74:3B:45:18:01:93:BD:3E:2A:53:11:44:69:1B:29:87:29:94:60
            X509v3 Authority Key Identifier:
                keyid:5B:30:63:58:7D:F2:EE:02:34:3E:DE:8C:09:65:77:BF:F9:F5:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/5B3063587DF2EE02343EDE8C096577BFF9F55403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B3063587DF2EE02343EDE8C096577BFF9F55403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ynfi8nMgexmNRXaxyEYKsgn2K2WdyyBobjnRog6XG1f/0/34352e3233302e3138302e302f32322d3234203d3e20323637323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:35:1f:75:07:44:40:7d:f5:c9:81:4f:67:1c:c3:62:0c:
         02:c4:66:80:7a:8f:c0:75:8c:28:f3:4b:11:b2:04:42:36:de:
         62:3e:aa:2f:dc:6c:84:a7:44:af:41:3f:1a:c2:15:31:e6:68:
         67:62:04:2e:89:67:94:09:98:4a:08:bd:e1:eb:2c:32:db:8e:
         fc:09:6a:7e:61:fb:91:84:68:df:06:f4:e6:ab:67:5d:e8:7a:
         0c:58:a6:4a:4e:1c:46:94:3e:58:f8:1c:b5:00:37:da:f1:c3:
         d3:4e:b8:1c:c9:8c:bb:89:15:92:3b:e5:c1:36:54:16:40:14:
         ee:ac:49:0e:ef:2d:8f:07:8a:2d:c9:19:8c:78:cf:84:24:c5:
         2e:f0:43:87:08:c3:86:75:41:57:16:b1:7f:1a:d2:15:63:9b:
         2c:a2:9e:35:56:ca:49:d8:01:f4:71:e6:1c:68:c7:52:69:51:
         ff:98:43:47:cb:46:43:0e:eb:a8:a9:12:8e:2d:6c:ed:1c:60:
         cf:4e:d5:97:67:d5:27:cc:7c:20:b6:1f:b8:6f:77:24:96:82:
         97:7e:4c:fe:5f:70:54:5d:95:79:da:7e:e6:13:50:ad:6f:eb:
         48:8a:b0:35:27:5b:ef:45:32:3f:bf:08:f6:4b:63:8c:9b:3a:
         c0:be:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:43 2026 by rpki-client