Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa
File:                     34352e37312e32382e302f32322d3332203d3e20323638373338.roa (raw, json)
Hash identifier:          9CfkrsueiQG9JMQ5JKcS08CFLLV0qFp9PLWv6XibVv0=
Subject key identifier:   6C:FB:31:C0:BB:C6:09:F5:BE:31:BF:D5:F3:9D:84:CB:46:A1:29:F5
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       61634A3EA6D4057595B83B83698EA485D68CE8D6
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa
Signing time:             Tue 28 Jul 2026 17:16:17 +0000
ROA not before:           Tue 28 Jul 2026 17:11:17 +0000
ROA not after:            Tue 27 Jul 2027 17:16:17 +0000
asID:                     268738
IP address blocks:        45.71.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:63:4a:3e:a6:d4:05:75:95:b8:3b:83:69:8e:a4:85:d6:8c:e8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Jul 28 17:11:17 2026 GMT
            Not After : Jul 27 17:16:17 2027 GMT
        Subject: CN=6CFB31C0BBC609F5BE31BFD5F39D84CB46A129F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:6d:c8:d6:79:43:d7:96:f9:1e:01:75:f7:
                    3a:12:bf:29:66:94:07:43:f3:a2:7e:23:c0:8b:d9:
                    2c:67:d0:a5:bf:cb:58:4f:48:91:70:a5:d9:6d:bb:
                    8b:b3:e1:32:53:9e:9c:bc:85:8a:bf:b7:22:2c:7e:
                    f8:69:84:4e:17:67:6e:e9:8b:ef:7d:30:fe:1e:79:
                    be:4a:fa:b6:b6:f2:61:63:94:e7:a6:a8:98:1a:27:
                    c8:40:9d:49:e6:d0:81:12:a0:c4:95:64:59:7b:df:
                    f8:a7:5f:62:44:6e:bd:3e:02:df:64:a5:cb:6d:97:
                    dd:41:9f:95:14:8d:30:73:b7:5f:3f:a9:22:47:5b:
                    80:5c:30:70:42:bf:12:51:36:a7:96:54:a4:eb:ad:
                    ce:2e:6f:75:6a:60:df:e9:ca:36:ed:5a:89:53:dd:
                    7c:7a:74:ea:f0:e0:43:40:f6:b0:45:26:51:58:9c:
                    ac:70:bd:47:fc:c8:7e:51:f6:43:48:45:3e:c2:25:
                    25:d3:d9:29:ba:2b:f8:6e:20:0f:25:4f:ab:76:46:
                    29:c6:66:e8:aa:e0:de:50:48:3b:ec:ae:d2:b9:0b:
                    4f:29:55:57:8a:39:25:4a:b8:a1:47:fe:09:aa:2d:
                    cb:7a:6a:c2:2b:a4:cb:74:6d:18:ef:98:44:45:03:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:31:C0:BB:C6:09:F5:BE:31:BF:D5:F3:9D:84:CB:46:A1:29:F5
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/34352e37312e32382e302f32322d3332203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:63:7a:0c:f2:65:f0:18:c9:0f:73:9c:1b:e9:2d:dd:5e:67:
         a1:0d:05:4b:b6:0c:39:5a:08:8a:5e:6c:ff:90:e8:b8:0a:3e:
         1f:55:d5:4f:a2:f9:2d:f7:7f:f3:af:17:c4:3a:73:26:96:5c:
         b3:f6:cc:76:30:e0:34:df:50:3c:cb:ae:3b:47:8e:56:4d:07:
         b5:01:f4:97:84:c9:68:f3:72:c0:4a:3c:de:93:43:56:e2:ee:
         21:7d:ba:d1:49:16:75:c7:74:a5:6c:e2:37:08:11:35:73:89:
         a7:c5:17:96:84:f4:d7:be:df:a9:42:18:d3:2c:07:88:fa:01:
         fb:31:b0:aa:14:21:77:8d:1c:ed:f4:4a:14:6a:25:cb:27:32:
         3f:ce:8b:b2:76:91:bd:32:99:a8:88:d0:bd:63:fd:58:af:39:
         87:8e:3d:62:3b:ac:8c:b8:55:34:72:de:0c:30:a8:79:12:2d:
         82:ef:90:e0:b2:65:f2:c3:96:d1:94:32:16:22:a0:b8:d6:ca:
         47:5e:5b:9f:26:3b:48:99:d4:41:cc:4f:f8:20:f8:20:4a:51:
         42:37:71:c4:86:d4:fc:75:73:d8:55:7a:2c:77:4b:81:4d:60:
         d0:41:e5:39:f3:0e:b8:6e:91:13:14:d8:54:64:c6:e3:6f:34:
         76:8b:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:39:51 2026 by rpki-client