Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
File:                     34352e3137312e34342e302f32322d3332203d3e20323638373338.roa (raw, json)
Hash identifier:          n+HLOqD2aSJm264tqUbA1ldNWPtCCkbkMb4U/bi5TNM=
Subject key identifier:   93:0E:A6:EF:7F:67:7B:88:AB:5C:48:08:5D:AC:30:96:13:E4:36:FA
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       1AF05D2131249D61D6E5E0B99EBC0E3EDD0B664F
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa
Signing time:             Tue 28 Jul 2026 17:16:17 +0000
ROA not before:           Tue 28 Jul 2026 17:11:17 +0000
ROA not after:            Tue 27 Jul 2027 17:16:17 +0000
asID:                     268738
IP address blocks:        45.171.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:5d:21:31:24:9d:61:d6:e5:e0:b9:9e:bc:0e:3e:dd:0b:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Jul 28 17:11:17 2026 GMT
            Not After : Jul 27 17:16:17 2027 GMT
        Subject: CN=930EA6EF7F677B88AB5C48085DAC309613E436FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:1c:6b:2a:42:4a:a7:cd:cf:58:3f:06:71:
                    4e:0b:3f:48:6a:ad:68:ab:cc:75:91:04:77:d6:41:
                    cc:0e:88:2f:c3:21:e7:9f:34:1d:29:47:41:1d:a6:
                    03:67:9d:33:35:20:15:f6:f4:60:d1:08:47:71:a9:
                    27:6a:6c:2f:51:84:33:b3:e3:60:09:7d:95:41:59:
                    57:2b:83:de:4a:f1:65:42:37:12:9d:bd:ab:9d:9a:
                    d8:5c:bd:22:d5:05:82:a7:d5:3b:33:1c:71:d2:76:
                    48:96:64:08:28:6d:e1:93:7b:78:06:54:05:83:c3:
                    fb:9b:14:25:96:24:fd:ef:e8:ff:a1:15:e7:94:a5:
                    a8:01:88:28:6b:42:a5:b2:9e:2a:0f:bb:e2:c0:9d:
                    51:2d:95:f9:f9:99:c6:59:63:48:af:57:a7:cd:06:
                    48:48:60:12:40:a8:df:a5:54:32:d8:82:8f:6b:df:
                    70:a4:60:c8:19:47:30:f0:77:35:13:72:49:b2:2a:
                    13:94:63:e1:ae:bd:e6:e2:df:a7:bb:56:54:fe:1e:
                    d4:35:e0:ea:40:66:80:e6:c5:12:73:a9:d3:6e:db:
                    35:d6:0f:d3:39:ab:fb:e3:7c:ec:ca:c5:0e:3e:72:
                    b4:58:1c:a3:4f:62:10:20:da:10:54:3a:87:d4:bc:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:A6:EF:7F:67:7B:88:AB:5C:48:08:5D:AC:30:96:13:E4:36:FA
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e3137312e34342e302f32322d3332203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:5d:e7:11:2e:24:ab:0b:6e:7f:d5:bb:d5:a2:db:87:56:6c:
         2d:39:d7:b9:8b:2a:d2:8b:33:f1:da:3a:96:0e:dd:8e:06:3a:
         a5:14:0d:e2:22:19:db:db:53:d9:d9:32:06:d0:44:b2:32:f8:
         a3:11:f9:de:db:f6:88:a2:5a:f3:9e:19:72:2d:4d:9a:18:68:
         4f:b1:b2:85:75:27:4a:9d:9d:52:85:3e:6d:d3:97:1a:60:6d:
         9f:0f:2b:33:f1:fc:81:df:a8:37:d8:60:40:a6:9f:41:35:3b:
         6d:fd:64:d6:2b:43:20:b8:48:a6:99:c9:ee:1f:9e:84:c0:62:
         b2:a1:07:af:16:24:d5:93:6b:ab:11:b7:37:18:90:c2:9d:f1:
         07:39:ae:5d:8f:54:76:53:3c:9b:62:93:38:35:ab:43:1b:11:
         92:12:b0:48:1b:8e:e5:bc:4b:26:f8:d4:e5:8f:60:b8:14:79:
         e2:98:e4:a2:24:15:9e:20:6e:b1:01:9b:0c:02:6b:11:26:f6:
         ba:6b:8e:fe:ea:d3:5f:5a:53:6a:81:9b:19:ba:39:ac:63:0e:
         eb:53:de:92:a6:be:b3:f6:24:9e:84:26:34:60:ad:d4:8e:b1:
         7a:d4:ba:1d:60:23:bc:2d:e7:c2:03:f6:bb:ea:74:9c:62:88:
         f5:4c:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:40:14 2026 by rpki-client