Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/34352e3233312e36302e302f32322d3234203d3e20323637323333.roa
File:                     34352e3233312e36302e302f32322d3234203d3e20323637323333.roa (raw, json)
Hash identifier:          X9wXT5Vu09vWyMaSlh0du3PfpwQRde50uQuTVm4aiDc=
Subject key identifier:   2A:57:F6:AC:FA:43:49:8A:7E:25:9B:8F:81:F8:7E:74:6B:83:6D:47
Certificate issuer:       /CN=B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1
Certificate serial:       0E44458DAA5C7A39AFEDF98150DAAC55C8E55121
Authority key identifier: B6:B4:63:A8:37:3A:B0:F3:B6:F6:06:01:FD:AD:D7:3F:2B:30:DE:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/34352e3233312e36302e302f32322d3234203d3e20323637323333.roa
Signing time:             Tue 09 Jun 2026 15:03:45 +0000
ROA not before:           Tue 09 Jun 2026 14:58:45 +0000
ROA not after:            Tue 08 Jun 2027 15:03:45 +0000
asID:                     267233
IP address blocks:        45.231.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.crl
                          rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:45:8d:aa:5c:7a:39:af:ed:f9:81:50:da:ac:55:c8:e5:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1
        Validity
            Not Before: Jun  9 14:58:45 2026 GMT
            Not After : Jun  8 15:03:45 2027 GMT
        Subject: CN=2A57F6ACFA43498A7E259B8F81F87E746B836D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:5c:65:cb:f5:dd:c9:b6:08:4f:1d:98:14:
                    46:de:b8:65:04:33:25:0a:2c:6b:6b:51:d2:cf:26:
                    c5:ae:cd:59:bb:a0:e4:01:fd:4a:15:99:42:76:dd:
                    62:1b:4b:5c:63:6c:3c:cf:fa:d7:4f:a5:09:40:b0:
                    0d:6f:fd:8f:0a:52:de:ff:c4:6d:78:8a:c1:f4:8e:
                    43:82:ee:e7:94:5a:e3:a9:31:b8:5e:10:66:91:0f:
                    29:45:37:1c:19:68:72:24:0e:a8:49:41:19:3b:5a:
                    2a:fb:8c:0c:7c:e9:e1:74:44:40:79:fa:71:7e:9d:
                    41:8c:52:7c:36:27:ee:7e:07:b0:23:ca:a2:42:7e:
                    cf:4b:94:36:e2:0e:a1:b8:e5:e1:ee:11:f9:34:89:
                    06:01:2d:19:97:66:0f:01:72:fa:c3:0d:9f:4a:df:
                    73:ce:4b:f9:38:e8:9f:8a:ab:d8:72:75:ef:fc:2b:
                    7d:c9:cf:65:c3:e9:57:ba:0d:8e:9d:73:4b:60:7c:
                    01:02:8f:23:83:01:06:98:45:cc:88:9f:6a:16:17:
                    94:15:6a:8a:81:84:fc:5c:15:57:f0:83:26:b6:d8:
                    7a:ed:cd:f5:92:ec:8e:14:e4:39:f2:c1:6e:c9:47:
                    5a:7e:61:9a:bf:bc:a2:60:9c:6d:52:42:7e:e0:2d:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:F6:AC:FA:43:49:8A:7E:25:9B:8F:81:F8:7E:74:6B:83:6D:47
            X509v3 Authority Key Identifier:
                keyid:B6:B4:63:A8:37:3A:B0:F3:B6:F6:06:01:FD:AD:D7:3F:2B:30:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B463A8373AB0F3B6F60601FDADD73F2B30DEC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdkZHEUZTn7TyWsMuJTDgfmNSywYCs5fdCt6vfVkfS5T/0/34352e3233312e36302e302f32322d3234203d3e20323637323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:b7:a6:e2:cc:20:8f:5a:dd:76:f8:dd:83:ce:ea:a2:1b:
         8c:8f:4c:6a:03:f5:63:3c:c9:a1:3b:b8:30:ea:77:f5:23:bb:
         dd:cb:2b:5f:42:cc:cf:74:74:b5:14:26:72:55:c1:35:98:25:
         ac:a6:15:99:e6:55:cc:8a:14:6e:b7:93:39:fe:ed:b3:be:77:
         7b:97:bc:ef:b0:f4:ae:0c:99:65:78:ec:e9:0b:6e:c3:58:0e:
         a6:8d:f5:4d:3f:44:55:ce:25:d9:b3:4d:04:8e:41:9c:90:0d:
         0d:b2:96:9b:4b:c0:52:c3:4d:c0:3b:9a:60:a2:b7:02:74:11:
         9f:58:bd:a2:31:51:80:31:51:a3:80:d2:c6:51:33:c5:3d:26:
         96:9a:c2:f4:e4:36:7f:5e:d7:75:b7:ae:9a:32:6a:b0:db:40:
         b2:56:08:9f:c6:94:30:bd:f9:68:36:0b:6e:95:8d:ab:ad:4b:
         48:14:8e:6a:03:39:31:b4:76:af:fe:bf:e0:5f:c8:cf:18:eb:
         46:1f:c9:a2:b0:ae:b6:03:61:d7:01:41:01:92:c5:7c:29:f7:
         06:1c:a7:5e:d9:8f:d7:da:2c:22:47:d5:cb:8f:1e:b4:7e:2a:
         3b:35:02:4a:6b:03:f2:32:1f:25:4c:b3:04:1f:ab:d7:d7:cd:
         02:62:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:31:28 2026 by rpki-client