Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32342d3234203d3e20323634333836.roa
File:                     34352e362e3234302e302f32342d3234203d3e20323634333836.roa (raw, json)
Hash identifier:          ohj6xx9H7nC2rKr2MHCaOk1hS2bW3wub8m++gKA2dpQ=
Subject key identifier:   30:C1:5A:79:F5:3E:1E:CA:57:37:75:5C:60:4E:90:D6:63:F3:DA:A3
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       15C794DF8347B345BA2E47636E10135F3FA38E78
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32342d3234203d3e20323634333836.roa
Signing time:             Wed 10 Jun 2026 16:49:04 +0000
ROA not before:           Wed 10 Jun 2026 16:44:04 +0000
ROA not after:            Wed 09 Jun 2027 16:49:04 +0000
asID:                     264386
IP address blocks:        45.6.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 09:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c7:94:df:83:47:b3:45:ba:2e:47:63:6e:10:13:5f:3f:a3:8e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Jun 10 16:44:04 2026 GMT
            Not After : Jun  9 16:49:04 2027 GMT
        Subject: CN=30C15A79F53E1ECA5737755C604E90D663F3DAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:de:49:a3:54:c2:58:a7:6f:f7:de:a0:f8:
                    f9:f6:91:f1:83:a4:b1:ea:49:f9:30:e9:ca:e1:0e:
                    95:d6:31:e5:bf:68:56:a7:10:45:eb:cc:cf:47:e7:
                    15:69:1b:fb:2d:3b:d9:12:1d:ab:f6:e1:56:8e:60:
                    eb:c3:e3:e8:a7:68:13:9f:cc:80:71:e4:9f:04:36:
                    fe:48:c2:1e:52:ba:94:9e:42:56:68:ce:6b:52:10:
                    91:62:b4:23:74:b6:f9:5f:f6:62:b5:7d:7c:36:90:
                    cb:bc:81:e9:6a:71:f6:2a:41:dc:35:73:02:70:d1:
                    a3:16:1f:30:38:1d:bc:bc:33:6c:d7:55:f5:61:36:
                    4a:21:b5:9b:22:d9:30:d7:32:45:78:2b:3c:62:66:
                    72:28:5c:70:4b:7e:b8:20:62:2e:53:10:a1:41:00:
                    dd:9f:51:cf:a9:06:79:0c:ef:6d:4b:d6:ed:02:a0:
                    4b:0f:48:d2:7b:67:ad:98:79:13:d7:60:28:ee:c6:
                    d7:3e:91:ae:1c:39:ce:bd:f8:e3:c4:7b:f1:71:20:
                    10:5c:0e:98:a1:f3:0a:18:6e:12:29:7a:47:f7:33:
                    cd:3c:00:8f:c8:0a:52:bc:54:e3:30:50:9d:d4:75:
                    03:9e:00:ce:87:c8:0e:8e:4f:27:8d:e2:d1:ef:ee:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C1:5A:79:F5:3E:1E:CA:57:37:75:5C:60:4E:90:D6:63:F3:DA:A3
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32342d3234203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:01:29:10:ea:8a:f3:40:d7:20:11:ec:b3:23:08:af:a2:
         e3:cb:65:00:fe:df:48:d8:44:32:7a:49:ae:e8:85:fc:f5:35:
         e4:54:e0:5f:fc:e0:d9:c7:01:75:2e:0b:59:3b:2b:63:8a:9a:
         5b:ab:f6:53:5a:4c:5a:a9:fa:d4:40:11:c6:e5:42:6c:76:a9:
         6e:aa:6a:a5:14:ba:25:da:aa:ee:6d:07:58:48:1f:6f:90:79:
         e5:d6:99:a3:8b:4f:cb:ae:04:95:87:51:d5:54:1c:a4:bf:a2:
         48:18:a4:1c:34:4a:b0:9e:99:3f:65:c9:8f:60:95:e4:88:56:
         8d:e9:09:85:1b:95:56:ec:c1:6c:db:b8:7a:bb:f3:23:33:a5:
         1e:74:7b:5f:0e:6e:e6:21:a1:d2:09:78:a5:b8:71:07:5e:ee:
         c2:1f:25:bd:55:00:18:f4:b9:ad:19:99:e1:85:b8:0d:4c:8d:
         0b:37:e9:0b:82:ce:1e:3d:43:5d:20:55:e8:87:15:33:a4:32:
         f5:a1:b1:cb:d0:f8:0d:ae:4c:5a:53:b5:7d:7a:ce:d4:7c:1f:
         96:f5:83:28:86:c1:83:37:f8:ea:c4:98:5b:86:e3:21:3d:8f:
         7e:63:ed:70:81:8d:f6:99:d9:04:0a:12:76:a8:63:74:a3:d7:
         0c:c6:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:53:14 2026 by rpki-client