Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa
File:                     34352e3233312e39322e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          +T6qH57SM5Z/wq/3+vDDBD9BRyGBZ8ggxgNHgA9JaeE=
Subject key identifier:   45:BE:99:CB:19:D7:22:75:BE:CA:C5:46:05:34:FD:FB:D7:64:6D:24
Certificate issuer:       /CN=4273B563259728F1EFD6BB3011E0F26828FB113D
Certificate serial:       46AD3E9496773562A3320D3A6498AFE9F6CA50EF
Authority key identifier: 42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa
Signing time:             Mon 10 Aug 2026 22:00:00 +0000
ROA not before:           Mon 10 Aug 2026 21:55:00 +0000
ROA not after:            Mon 09 Aug 2027 22:00:00 +0000
asID:                     198949
IP address blocks:        45.231.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl
                          rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ad:3e:94:96:77:35:62:a3:32:0d:3a:64:98:af:e9:f6:ca:50:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273B563259728F1EFD6BB3011E0F26828FB113D
        Validity
            Not Before: Aug 10 21:55:00 2026 GMT
            Not After : Aug  9 22:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:c7:b7:81:dd:69:77:4b:ab:10:79:46:d5:
                    32:0d:01:00:5a:54:e7:d3:70:a8:12:50:3f:e5:e3:
                    6e:0e:76:15:0b:06:ec:8d:34:c2:90:44:61:fc:94:
                    26:3b:c5:52:dd:ab:d8:5a:8b:8e:60:69:44:3b:56:
                    c5:87:97:7f:7d:12:1b:ed:07:b1:8f:e9:ca:18:84:
                    57:94:ef:7d:f6:bd:9d:c1:dd:66:86:c2:66:81:08:
                    65:61:62:ca:64:cf:b4:9f:77:09:9d:78:ce:6b:b6:
                    ab:98:cc:64:f2:17:10:39:f3:4a:59:ff:a2:de:c8:
                    8d:97:88:33:23:56:18:a2:60:64:54:10:26:3b:f1:
                    be:44:54:e2:c6:23:6e:3f:48:54:df:b7:72:99:76:
                    39:f2:ae:f1:50:c7:0d:d4:05:33:92:9c:09:26:5c:
                    51:06:00:9a:cd:ec:9e:99:b2:a6:8f:20:26:25:67:
                    b9:54:11:ac:3c:60:c8:a8:f7:6f:b1:c0:e5:3a:23:
                    13:cc:27:55:48:4e:b3:ce:9b:52:bc:cd:f3:01:a3:
                    82:83:bb:9b:1b:fe:87:60:71:2f:5f:bb:8e:64:5a:
                    26:ca:af:69:8c:b1:17:be:23:c7:af:b9:76:8e:81:
                    e8:ab:07:80:2b:6e:1a:ed:3a:b3:d6:78:74:47:c4:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:99:CB:19:D7:22:75:BE:CA:C5:46:05:34:FD:FB:D7:64:6D:24
            X509v3 Authority Key Identifier:
                keyid:42:73:B5:63:25:97:28:F1:EF:D6:BB:30:11:E0:F2:68:28:FB:11:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/4273B563259728F1EFD6BB3011E0F26828FB113D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4273B563259728F1EFD6BB3011E0F26828FB113D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gam2s5zPGWK6ALGGvBUJwuqChgRLdgS3v29BoppNEbt/1/34352e3233312e39322e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:10:f2:c8:d0:26:b5:92:23:38:5c:4f:29:88:19:70:69:
         cd:1a:22:e4:cf:18:e1:4d:bd:1b:16:f9:a0:32:41:73:2a:9d:
         e3:b5:b1:a3:f0:78:62:5e:68:68:1b:50:ee:72:60:fc:2b:8f:
         f6:97:b7:42:74:e8:8e:21:64:0a:c2:de:1e:ab:ce:b4:c8:97:
         d7:0a:0a:be:73:cc:ea:16:6d:2a:e3:26:5e:b2:a5:ac:a1:eb:
         b4:c5:b5:91:1e:01:0e:86:df:87:04:66:d0:94:0d:4a:26:4e:
         45:d1:32:d1:32:f5:aa:56:22:1d:96:e7:8d:90:3d:0f:17:f4:
         1a:2d:9c:1e:49:a2:4b:5e:ca:91:4d:b7:8f:54:1e:e1:a8:ef:
         c0:12:10:a1:8e:d4:8e:10:28:9c:4d:b4:fd:7a:cc:e4:08:22:
         63:ab:91:30:da:15:8c:36:94:75:40:c5:d7:ac:6c:6d:a4:8c:
         7d:f5:30:26:2d:b4:cf:c1:79:fb:60:d1:e3:3f:e0:89:60:7c:
         ea:ee:de:c2:5f:fb:00:74:bb:56:9a:e0:f2:e0:28:00:7b:c5:
         0a:e5:28:a1:16:60:ed:a9:6d:d6:a5:55:1c:84:bf:fd:47:d6:
         59:0c:92:69:ef:6d:a7:14:3d:9f:de:21:3d:c7:60:2e:f7:11:
         f1:89:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:13:57 2026 by rpki-client