Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32342d3234203d3e20323637323837.roa
File:                     34352e3233332e31322e302f32342d3234203d3e20323637323837.roa (raw, json)
Hash identifier:          acc12GXr/fBTdAzeptB0fDP1gVpkarLoz4AdukIVLLw=
Subject key identifier:   A0:57:79:B7:3A:E8:9B:A5:2E:07:7D:97:DE:59:78:CA:C2:00:D3:41
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       576424F59B9A996831C6B8CA422AC3947886610B
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32342d3234203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 22:03:42 +0000
ROA not before:           Tue 08 Sep 2026 21:58:42 +0000
ROA not after:            Tue 07 Sep 2027 22:03:42 +0000
asID:                     267287
IP address blocks:        45.233.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 14:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:64:24:f5:9b:9a:99:68:31:c6:b8:ca:42:2a:c3:94:78:86:61:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:58:42 2026 GMT
            Not After : Sep  7 22:03:42 2027 GMT
        Subject: CN=A05779B73AE89BA52E077D97DE5978CAC200D341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:ae:9c:b2:e1:ce:9a:3e:6b:cd:f5:b4:86:
                    d7:e5:c5:60:4f:be:46:20:10:ff:08:3e:9b:a2:f1:
                    d3:6d:ce:30:f6:89:86:f9:f1:b8:b8:fd:aa:1f:2f:
                    35:c6:66:03:17:b0:39:9e:9c:94:68:69:cd:d1:1e:
                    73:5c:29:1f:46:72:d9:db:60:39:35:c7:9e:12:97:
                    64:02:a6:f1:b9:13:c5:71:38:b0:bb:a1:10:cd:b3:
                    99:e4:6c:db:0f:a2:62:7b:5f:76:5a:11:b7:59:51:
                    fe:10:1c:b8:d2:20:d6:52:dc:6e:75:b5:38:5f:25:
                    25:33:92:a9:f7:e0:6a:a4:59:72:74:d0:89:3a:51:
                    df:7f:66:8c:0b:b7:78:e3:75:91:65:6d:18:8e:47:
                    04:57:4a:2a:c6:47:02:3d:f5:42:65:6d:b7:36:9a:
                    bb:74:d7:23:18:96:0f:39:64:87:8b:e9:91:68:be:
                    e1:8a:93:66:2d:e7:36:d0:dd:53:e0:c8:d2:f7:6f:
                    cb:51:6b:21:8f:9f:27:de:91:ef:34:68:b7:2d:40:
                    6b:22:19:19:31:a1:2f:49:84:0b:53:ec:22:7e:dd:
                    e0:b5:0a:f1:10:9c:70:a5:29:a0:a0:f5:b8:c3:73:
                    dc:f7:76:5a:e4:20:b9:45:fe:38:25:7f:dc:90:92:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:79:B7:3A:E8:9B:A5:2E:07:7D:97:DE:59:78:CA:C2:00:D3:41
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/34352e3233332e31322e302f32342d3234203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:63:07:5f:a0:3a:b7:b1:16:7b:d3:b9:32:80:2b:95:e1:
         18:a5:2c:50:54:82:04:dc:dc:cc:03:7a:3f:86:79:36:93:c5:
         d3:26:b2:ae:33:da:f9:ec:02:75:85:81:fe:a5:ec:83:3f:93:
         4f:62:84:4d:77:61:f0:e2:78:71:81:3b:fc:b1:48:8c:ba:a6:
         c0:dd:51:60:6d:71:9d:a1:4f:44:93:52:fa:d5:b9:d3:fd:4b:
         81:e8:10:87:5d:36:3c:1c:34:ae:0a:cd:6b:60:df:08:f6:6c:
         1d:0a:c3:e8:5b:5d:9d:87:2d:46:4d:a4:67:f2:87:2a:6f:00:
         31:ee:07:7f:dc:93:05:42:94:1c:85:ab:f9:ce:79:4f:2e:14:
         cd:b0:f2:36:b1:89:51:e1:ec:16:8c:83:0e:af:96:5b:f7:2b:
         06:e7:e4:f1:47:38:83:a0:9d:84:f3:49:c0:8b:54:c9:1d:62:
         3b:c7:4c:67:5c:97:77:5d:4f:f0:67:39:d3:fc:df:ba:96:4f:
         1c:0f:b7:14:5b:ec:03:03:38:03:f8:76:59:4a:35:82:2b:0c:
         ee:6b:16:68:f1:9c:de:a7:51:92:d2:74:5b:13:5a:5a:ff:d0:
         af:13:b4:6b:cf:26:5b:d0:06:fa:a3:5e:05:75:da:8a:91:5c:
         04:35:4b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:54:07 2026 by rpki-client