Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa
File:                     34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa (raw, json)
Hash identifier:          B2w1mx+cqJJXW8SGcMd4I5xte/m4ROuLm/Usg3/HBcE=
Subject key identifier:   B8:81:F2:E5:E3:2B:B7:61:7E:79:54:2A:6F:3D:DF:A5:A8:35:29:37
Certificate issuer:       /CN=294D4DFFE4D6A0D3386B99965995165FEE3B1A2E
Certificate serial:       24C9404CCE7CEC3E894D63E8152610D791962A23
Authority key identifier: 29:4D:4D:FF:E4:D6:A0:D3:38:6B:99:96:59:95:16:5F:EE:3B:1A:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa
Signing time:             Fri 28 Aug 2026 17:54:56 +0000
ROA not before:           Fri 28 Aug 2026 17:49:56 +0000
ROA not after:            Fri 27 Aug 2027 17:54:56 +0000
asID:                     269392
IP address blocks:        45.184.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c9:40:4c:ce:7c:ec:3e:89:4d:63:e8:15:26:10:d7:91:96:2a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294D4DFFE4D6A0D3386B99965995165FEE3B1A2E
        Validity
            Not Before: Aug 28 17:49:56 2026 GMT
            Not After : Aug 27 17:54:56 2027 GMT
        Subject: CN=B881F2E5E32BB7617E79542A6F3DDFA5A8352937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:6e:55:21:57:ec:c5:74:3a:1d:f7:cf:50:
                    a2:e9:3b:50:5b:fb:6d:01:ee:fc:56:fe:09:83:6a:
                    1f:bf:5f:d7:30:77:ae:32:fa:a3:22:d4:e3:d5:3a:
                    57:33:d8:95:8c:3a:ce:00:6e:42:58:1b:6a:2b:6c:
                    07:bb:ed:b9:d4:fd:ff:3a:31:5e:de:89:3f:29:80:
                    4b:49:60:64:5f:ee:8d:c2:7c:a7:d4:fb:0e:7f:57:
                    5a:2d:a5:39:1e:a8:11:c2:64:d2:77:9b:fa:b2:b1:
                    ba:ba:7b:b1:ab:cb:f2:41:bf:46:bf:3c:72:0f:22:
                    52:be:d2:74:50:f9:ef:b5:4c:c5:ba:44:db:15:9d:
                    e9:d6:11:0f:07:de:d6:ba:34:b9:2d:5e:04:63:60:
                    11:48:8b:ec:8c:30:6d:49:9e:3d:ff:67:9c:ae:71:
                    d3:bf:6e:3c:70:83:03:a4:b8:d9:c4:c1:7b:7c:cc:
                    47:d6:cf:fb:0b:c9:bb:2a:36:86:ae:e1:da:6a:58:
                    6e:7e:3e:da:56:a4:02:53:e2:17:ca:46:5a:30:8c:
                    e4:9c:69:45:dd:29:a9:b2:1b:03:22:05:b9:b1:4d:
                    4c:7f:b5:56:a6:1b:c8:da:7a:ea:85:03:e6:0f:7d:
                    fb:a2:62:58:56:02:94:a9:39:ac:be:c6:16:8c:40:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:81:F2:E5:E3:2B:B7:61:7E:79:54:2A:6F:3D:DF:A5:A8:35:29:37
            X509v3 Authority Key Identifier:
                keyid:29:4D:4D:FF:E4:D6:A0:D3:38:6B:99:96:59:95:16:5F:EE:3B:1A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137362e302f32322d3232203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:ad:cd:35:25:9a:17:db:c5:32:73:7a:b0:e0:3b:c7:66:
         0f:86:b9:08:06:92:cf:18:96:b4:d1:3e:3c:17:dd:b6:35:4a:
         d1:2f:ad:2a:e4:0c:cd:4e:a4:73:d9:5f:9c:37:e3:dc:ab:f1:
         22:c9:61:93:8b:8f:f6:27:df:2b:b4:27:48:9d:88:8f:8e:90:
         9e:45:69:74:a4:6b:c2:c9:6e:67:97:ab:62:49:c0:cc:ac:7e:
         e3:70:19:8b:f9:8d:ce:97:d5:ba:6a:4b:8c:d7:8d:68:d5:7b:
         89:d0:72:e4:e0:51:0e:b8:0b:d8:9e:05:5f:cb:ed:26:09:24:
         12:b4:d3:41:dd:1f:c5:97:27:6b:f5:6d:9b:05:44:41:77:8b:
         38:7c:2b:88:42:88:9a:8d:ca:5f:d6:c7:6a:14:1d:74:2f:c7:
         d9:76:d1:5a:86:a8:ff:4d:e8:19:87:cf:91:c9:b1:38:dc:be:
         76:cf:99:e8:e2:3b:55:19:d4:6f:9a:c3:fa:e7:2b:93:d5:6e:
         85:8c:2b:94:8d:8e:8c:62:6a:f7:1b:50:a1:9b:3d:1e:64:c4:
         0c:9b:2b:d1:56:dc:79:1e:40:97:1e:30:36:92:dd:8f:93:a9:
         88:0e:06:f8:59:f7:fb:62:e1:95:03:6a:c1:96:a3:88:8d:2b:
         01:ce:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:06:48 2026 by rpki-client