Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32332d3233203d3e20323638333437.roa
File:                     34352e3233382e3136302e302f32332d3233203d3e20323638333437.roa (raw, json)
Hash identifier:          3XWVf9bf4bb0XnMf78r/jjGbjdNLcPiWi45ZQdfSbso=
Subject key identifier:   E7:1D:6A:94:41:27:13:4F:D6:30:FB:A0:EA:95:CD:C2:C0:FF:63:15
Certificate issuer:       /CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
Certificate serial:       29F9EE6C50D032C46E166E025080D3254F49DBE4
Authority key identifier: EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32332d3233203d3e20323638333437.roa
Signing time:             Fri 24 Jul 2026 05:21:41 +0000
ROA not before:           Fri 24 Jul 2026 05:16:41 +0000
ROA not after:            Fri 23 Jul 2027 05:21:41 +0000
asID:                     268347
IP address blocks:        45.238.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl
                          rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 23:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:ee:6c:50:d0:32:c4:6e:16:6e:02:50:80:d3:25:4f:49:db:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901
        Validity
            Not Before: Jul 24 05:16:41 2026 GMT
            Not After : Jul 23 05:21:41 2027 GMT
        Subject: CN=E71D6A944127134FD630FBA0EA95CDC2C0FF6315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:2c:b4:0e:31:e2:00:e4:12:b3:1b:0e:1e:
                    64:60:e8:1c:6e:38:e2:a1:72:f3:03:ee:cf:22:1d:
                    84:c8:fb:02:3a:c7:e9:dc:64:ba:71:2b:6e:6f:34:
                    a9:4c:9e:ea:a6:7a:4f:db:69:d5:dc:46:65:58:5c:
                    34:59:57:bc:66:30:d7:4e:bd:c8:a1:78:d6:b4:d8:
                    bf:7b:0a:16:37:ec:74:1a:2c:4a:75:e5:3c:85:25:
                    55:e7:92:b9:86:83:66:fc:93:a1:a6:2d:cf:a6:49:
                    73:cd:07:0c:84:c7:01:3e:1e:ae:1d:06:ec:19:8e:
                    e1:ae:2c:b9:81:4d:06:37:30:cf:ca:79:b4:96:d3:
                    dc:9b:b6:2d:2b:29:86:15:37:55:e0:fe:dd:94:fb:
                    17:4b:0b:20:a1:a9:f6:2c:b0:c5:31:ab:6a:b6:28:
                    83:26:57:69:71:53:55:a7:40:01:68:f6:68:5b:d7:
                    bd:96:9b:f2:99:fb:48:46:25:6b:66:e1:bf:47:bc:
                    c4:a4:80:13:d5:b0:69:5d:e6:fb:67:f7:71:37:58:
                    13:63:9a:03:3f:67:29:82:40:23:dd:f7:3c:e9:c0:
                    6e:4f:ba:28:20:5f:aa:b9:27:d5:f0:1c:62:e8:e8:
                    99:70:4c:f8:59:3a:74:a3:3e:4c:3c:c2:98:24:7b:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:6A:94:41:27:13:4F:D6:30:FB:A0:EA:95:CD:C2:C0:FF:63:15
            X509v3 Authority Key Identifier:
                keyid:EA:0C:6D:51:FF:8F:6F:AC:2D:B3:B5:0E:82:62:EE:39:7B:63:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA0C6D51FF8F6FAC2DB3B50E8262EE397B63E901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PTYDW3BMMieeMXTwEvGX46C4RZqWqhFJZRsLNzUCErH/0/34352e3233382e3136302e302f32332d3233203d3e20323638333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:4c:be:73:c4:0b:50:e0:cf:86:47:a6:aa:b1:53:a8:97:
         b3:06:61:46:05:5a:9a:c8:fb:08:b4:46:d1:c1:03:7a:fc:3b:
         73:ba:fe:1c:09:f4:8d:78:99:e0:92:bd:e7:47:0a:c2:8b:f6:
         8f:de:c5:03:f0:75:16:47:b2:c0:c5:fd:b5:e7:d7:52:b3:58:
         30:b2:02:db:0f:67:9c:03:d3:a8:2c:d3:a4:62:c4:73:8b:30:
         b5:d2:d8:c1:35:ec:79:d2:28:c9:3e:85:39:57:aa:88:b3:dd:
         1a:f0:d8:e3:e0:d6:bc:49:d4:34:5c:21:0d:f7:06:26:d6:a4:
         af:d9:c9:b9:da:c7:35:02:a7:d1:9c:4a:e9:46:d9:95:c3:34:
         5a:ff:5b:f9:e0:3f:e3:28:b9:af:af:f7:76:99:1a:56:6f:2f:
         52:b0:7a:17:a9:97:f7:57:fd:e1:90:4b:5d:52:dc:ab:52:78:
         71:f6:c9:ae:0f:ac:40:f2:34:17:f3:48:cd:38:92:22:93:b0:
         ff:48:6e:fb:19:a9:03:39:ee:75:5c:be:27:6c:92:a2:15:59:
         4d:6f:1b:ad:50:83:4c:8d:77:f9:35:69:e9:4f:8f:43:94:0f:
         a6:8c:38:7d:49:2b:a7:76:0e:fc:c1:54:f7:86:a7:7c:1a:7f:
         69:42:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:16 2026 by rpki-client