Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          IRMcdDYMJUIi84hIQudAnkzawh8bu0N+yPYOseBk0P0=
Subject key identifier:   70:06:94:6A:9D:93:3C:CA:2C:AF:62:CA:2C:B9:77:45:D8:F3:AE:CA
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       4292A16D64A37C6EC4DCF23FB4156D209C20B84E
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:31:01 +0000
ROA not before:           Fri 28 Aug 2026 18:26:01 +0000
ROA not after:            Fri 27 Aug 2027 18:31:01 +0000
asID:                     264996
IP address blocks:        45.179.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:92:a1:6d:64:a3:7c:6e:c4:dc:f2:3f:b4:15:6d:20:9c:20:b8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:26:01 2026 GMT
            Not After : Aug 27 18:31:01 2027 GMT
        Subject: CN=7006946A9D933CCA2CAF62CA2CB97745D8F3AECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:70:0e:cf:be:80:80:c9:d4:74:be:25:5d:
                    81:72:95:34:98:b6:cb:41:31:82:1d:c8:4d:a4:21:
                    02:40:54:f3:dd:97:d4:5e:bd:5b:96:21:94:be:4c:
                    a2:d8:98:99:c6:95:a2:9c:89:a2:be:4d:11:af:92:
                    5e:9d:bd:b0:13:a4:f0:9c:b7:99:2f:01:6d:25:14:
                    a2:d5:03:64:a4:5c:dd:fb:48:40:76:4b:1e:76:c9:
                    27:27:14:db:a7:fe:39:a4:0d:12:81:3d:1a:c4:33:
                    db:ae:86:6c:99:dc:f4:96:4e:b5:5b:80:00:20:b3:
                    3f:13:77:5f:a4:f4:ec:14:15:20:61:b5:ff:fc:21:
                    cf:c3:4b:88:d0:35:f8:f2:4f:a2:70:44:ca:fc:47:
                    4d:79:1e:d3:96:c8:44:b4:f1:2d:95:32:8d:b0:4e:
                    70:a4:6a:65:68:23:99:83:31:5d:09:c9:66:73:0f:
                    7a:e5:ae:4d:90:8d:56:5d:c6:14:9b:ee:28:f1:c8:
                    83:b9:6f:07:df:a2:5d:c5:84:a7:6f:65:93:36:c7:
                    1d:51:94:ec:a5:d2:a6:3c:c0:4d:4a:7e:ac:fc:4d:
                    e6:33:c7:52:bd:be:31:67:94:2d:ba:83:13:be:01:
                    f5:c3:40:99:c2:9b:74:a1:6a:fd:99:68:cd:bb:60:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:94:6A:9D:93:3C:CA:2C:AF:62:CA:2C:B9:77:45:D8:F3:AE:CA
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:b1:11:15:4a:93:47:ea:7b:b3:0d:50:f3:65:f6:15:bb:
         43:ca:fa:03:b5:13:1a:e6:24:63:36:d7:ff:ff:6d:c7:61:ae:
         34:5e:0b:c7:95:fc:2e:21:b0:61:36:37:f1:89:62:44:9d:d7:
         3a:e1:40:28:e1:88:46:cf:7d:fa:f2:ce:ba:97:dd:c1:c4:b6:
         8b:9c:a8:7c:34:8c:c0:d3:bf:27:b7:50:4d:98:c7:e5:13:b3:
         07:83:bc:f0:d4:cc:ff:4c:bd:be:78:2f:c1:26:17:7b:8d:3c:
         dc:4e:7c:95:30:5e:66:d0:41:cc:6a:76:00:92:39:b5:86:95:
         9d:c4:41:f4:3b:e4:19:15:86:14:ed:32:13:0f:04:6f:bc:ab:
         d4:2c:9d:38:96:16:7d:d6:75:e5:10:52:16:b2:1c:6f:dd:e4:
         9e:06:d5:05:64:36:d2:12:fd:e1:3e:3a:17:44:18:33:4b:27:
         2c:53:dc:d5:d6:39:4a:7c:11:97:0c:b1:b1:1b:cb:aa:fe:6d:
         65:af:6d:7f:df:05:e4:37:5f:28:2d:2d:19:3f:71:b0:39:e6:
         d2:58:77:99:ec:d4:4f:8d:ef:e8:8f:fc:8e:b6:90:61:76:5a:
         f1:9b:4e:d9:8d:2f:6a:b9:61:f7:79:df:71:77:05:ac:5a:fd:
         0c:8e:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:14:50 2026 by rpki-client