Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/34352e3138342e3231322e302f32322d3332203d3e20323639333434.roa
File:                     34352e3138342e3231322e302f32322d3332203d3e20323639333434.roa (raw, json)
Hash identifier:          zxsVGXyutY37gcXdVo7B0F2SvNcSZYMHO1gEnits8jk=
Subject key identifier:   64:99:1A:A0:63:04:00:74:BA:D0:37:C4:88:D3:29:05:8C:AF:B1:DE
Certificate issuer:       /CN=230EFCB699C0FEA1A2484670B3A15A4FBF2162B3
Certificate serial:       3B360D8D7817A19BB7CEBAD625A5D297A5791AE1
Authority key identifier: 23:0E:FC:B6:99:C0:FE:A1:A2:48:46:70:B3:A1:5A:4F:BF:21:62:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/34352e3138342e3231322e302f32322d3332203d3e20323639333434.roa
Signing time:             Mon 27 Jul 2026 12:45:22 +0000
ROA not before:           Mon 27 Jul 2026 12:40:22 +0000
ROA not after:            Mon 26 Jul 2027 12:45:22 +0000
asID:                     269344
IP address blocks:        45.184.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.crl
                          rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 01:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:36:0d:8d:78:17:a1:9b:b7:ce:ba:d6:25:a5:d2:97:a5:79:1a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230EFCB699C0FEA1A2484670B3A15A4FBF2162B3
        Validity
            Not Before: Jul 27 12:40:22 2026 GMT
            Not After : Jul 26 12:45:22 2027 GMT
        Subject: CN=64991AA063040074BAD037C488D329058CAFB1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:e0:a6:70:61:d8:90:40:b9:31:98:50:41:
                    61:5f:ea:dc:28:01:ea:c4:0f:e0:2d:87:e0:29:54:
                    86:d4:95:0f:7e:55:49:45:83:56:fd:94:74:a0:08:
                    bb:67:73:9d:fd:da:1b:95:26:24:df:3d:d2:22:40:
                    09:b1:ff:a6:10:18:35:b5:6f:45:6d:12:18:88:8e:
                    01:76:08:33:5a:79:7c:7c:bd:f5:b8:50:db:bd:3c:
                    03:5c:bc:2d:c1:60:fd:51:2c:f8:62:71:b2:c1:a8:
                    b4:3e:82:21:d8:3a:65:80:de:32:50:ec:b1:9d:52:
                    d3:2d:62:e5:d9:aa:9c:ba:87:fb:87:61:ad:fd:0d:
                    4c:a5:11:8e:74:c2:98:9e:40:fa:b5:e5:42:9c:8d:
                    5e:1d:b5:1e:b2:d0:b9:86:16:f7:de:2d:fa:20:1d:
                    f7:68:b6:df:d2:fa:a0:c8:d4:eb:7d:43:2b:e1:47:
                    d1:54:6b:3f:86:dc:05:2d:d2:5e:cc:a6:ea:44:ba:
                    8f:6a:a5:51:c8:26:c9:79:ab:29:5a:03:23:48:5c:
                    e7:0d:48:d7:bb:87:fb:2d:71:95:fa:3e:38:da:c5:
                    2f:7d:9a:f1:3c:43:6a:31:cf:12:a7:ed:af:f8:ea:
                    0f:81:c7:f4:34:fd:6d:02:43:2d:6f:d6:35:47:9f:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:1A:A0:63:04:00:74:BA:D0:37:C4:88:D3:29:05:8C:AF:B1:DE
            X509v3 Authority Key Identifier:
                keyid:23:0E:FC:B6:99:C0:FE:A1:A2:48:46:70:B3:A1:5A:4F:BF:21:62:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230EFCB699C0FEA1A2484670B3A15A4FBF2162B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xwwCV8rtwXSecjxzuNyh8mdA8ok6V3cAabr5HuX4TQ9/1/34352e3138342e3231322e302f32322d3332203d3e20323639333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:48:6b:b9:14:be:d3:38:3c:6c:f6:77:a4:4d:65:42:24:58:
         ba:59:f5:f9:79:2c:fa:27:b8:eb:c0:b7:bd:0e:91:46:a0:30:
         ca:9a:b7:d7:41:f8:1b:d6:c4:5a:95:38:1d:b5:dd:07:87:67:
         68:ff:e1:09:f3:e1:0d:dd:9e:30:f2:4b:e9:c0:98:78:3f:93:
         0c:05:7b:ff:0c:d9:38:9e:27:06:7c:4f:ed:b1:14:4b:15:9f:
         35:d1:c9:44:cf:a5:08:2d:6c:7a:d1:14:82:fb:5a:67:7a:8b:
         86:88:a2:90:9e:47:f4:5b:26:9a:b4:bf:b4:21:64:e3:e5:49:
         e0:9f:ee:24:15:27:35:34:d1:bf:46:0a:b1:6a:58:6b:2c:00:
         89:f3:85:2a:1e:a7:d1:b9:53:ec:4f:4a:33:be:22:9a:f4:8c:
         f1:2b:c2:08:54:40:d8:8d:0d:07:6d:a1:3b:b4:8d:58:da:62:
         f8:f2:aa:49:61:77:08:26:ed:da:35:55:cf:76:d3:1e:5c:42:
         76:07:46:da:08:fb:06:c8:9e:0b:1d:f3:f4:e2:6f:8e:e2:4c:
         cc:75:8a:e6:bf:e9:75:6b:f6:b7:64:a7:d6:da:e7:ee:fa:bb:
         91:6f:3a:ff:1a:9b:81:7f:ae:a6:d3:43:1b:86:dd:4b:d9:06:
         6b:d2:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:29:11 2026 by rpki-client