Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa
File:                     34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa (raw, json)
Hash identifier:          LEseaS50hrZJ8YVjjNnL9O/HHOcMzI3cQNPsgRrvas4=
Subject key identifier:   A4:DE:CF:35:78:07:94:EA:72:52:3F:26:08:B3:D5:F8:4A:23:B3:B2
Certificate issuer:       /CN=294D4DFFE4D6A0D3386B99965995165FEE3B1A2E
Certificate serial:       3812A112E993AC8080F2D5C19416BA0DC79F5D61
Authority key identifier: 29:4D:4D:FF:E4:D6:A0:D3:38:6B:99:96:59:95:16:5F:EE:3B:1A:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa
Signing time:             Fri 28 Aug 2026 17:54:56 +0000
ROA not before:           Fri 28 Aug 2026 17:49:56 +0000
ROA not after:            Fri 27 Aug 2027 17:54:56 +0000
asID:                     269392
IP address blocks:        45.184.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.crl
                          rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:a1:12:e9:93:ac:80:80:f2:d5:c1:94:16:ba:0d:c7:9f:5d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294D4DFFE4D6A0D3386B99965995165FEE3B1A2E
        Validity
            Not Before: Aug 28 17:49:56 2026 GMT
            Not After : Aug 27 17:54:56 2027 GMT
        Subject: CN=A4DECF35780794EA72523F2608B3D5F84A23B3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:a3:77:11:02:e9:28:cd:cb:44:1c:2c:87:
                    fa:d1:ab:7d:25:5c:fe:05:fa:c6:13:18:44:9c:e4:
                    4f:3f:35:6d:62:a8:8c:fc:dd:e8:d3:3d:23:e6:53:
                    a8:bb:ac:7d:df:ce:17:ca:f6:61:1c:46:a5:e3:2c:
                    7d:cf:ed:ef:b3:16:9e:ac:bc:96:ec:3f:19:1e:c0:
                    e4:8e:e8:09:dd:13:fe:48:3a:82:1c:e9:fa:54:65:
                    b6:e6:5c:e4:e2:e8:65:31:00:a3:f5:9e:62:45:9e:
                    31:fa:8d:64:a6:cb:cc:98:bc:11:85:b2:9d:b5:7e:
                    93:68:85:60:e2:f0:c3:29:39:70:91:62:58:f0:89:
                    be:a8:3f:d9:2b:3a:3e:b7:2f:95:c3:3a:74:a5:6f:
                    37:58:47:0a:c6:0c:d3:50:34:97:44:ce:53:44:8f:
                    7e:fc:e3:e3:5c:e0:0c:db:da:09:52:bd:fe:2e:52:
                    bf:05:90:e2:34:36:53:f8:3b:c0:47:c3:7c:49:bd:
                    62:2f:db:9a:da:63:0e:87:f8:de:e8:ea:14:95:d2:
                    24:d3:d6:78:4a:2c:0a:00:1c:3d:7e:de:1f:81:53:
                    29:31:71:a0:9e:a6:8f:6f:ba:86:6a:09:73:ec:8b:
                    8a:30:8f:e3:11:76:6e:cd:d6:44:a1:6f:fa:cb:6e:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DE:CF:35:78:07:94:EA:72:52:3F:26:08:B3:D5:F8:4A:23:B3:B2
            X509v3 Authority Key Identifier:
                keyid:29:4D:4D:FF:E4:D6:A0:D3:38:6B:99:96:59:95:16:5F:EE:3B:1A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294D4DFFE4D6A0D3386B99965995165FEE3B1A2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF6FnH59oYW5aeLKoK5D5hKoukmVUx8KPf8ytqJLequt/0/34352e3138342e3137382e302f32342d3234203d3e20323639333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:d9:6b:46:e0:f3:1f:2f:76:36:f9:89:6b:88:a5:ef:91:
         a2:87:f0:55:d4:52:04:d2:32:8f:96:04:d3:9e:c1:e0:a6:bd:
         4f:b5:ae:ea:45:a8:9f:62:35:f5:19:6f:f2:7f:c8:ec:77:c2:
         66:1f:3b:78:d0:ea:15:61:1e:8a:f8:f1:0e:9d:35:d6:a9:8a:
         6c:b5:be:7a:52:fa:ae:0b:70:6e:97:41:9b:46:aa:97:47:5c:
         10:c4:87:9f:92:eb:63:21:5c:72:77:e3:c4:44:68:d1:ac:17:
         04:a4:72:f5:20:0d:72:f2:6b:7d:34:94:62:28:5d:47:79:3a:
         43:a7:de:fb:d5:5c:44:21:df:55:76:0d:25:db:cb:eb:20:79:
         03:25:1b:d2:fe:4d:d6:02:cc:c9:d3:a6:c6:01:fb:ef:29:2f:
         41:b5:62:25:1f:11:c2:c2:04:9c:30:30:93:49:48:d0:21:2a:
         b6:3a:44:23:da:d7:3f:17:aa:20:d6:42:e9:55:40:15:a8:ef:
         d4:87:86:be:9a:8c:e6:c3:98:58:c4:26:87:a7:2a:80:17:c3:
         ae:fe:a7:f4:97:1a:e1:3b:ce:00:2e:b9:68:68:f8:b5:11:a2:
         90:96:aa:b9:fc:52:e3:dc:87:26:4d:79:06:e3:a2:39:ff:41:
         5e:46:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:59:32 2026 by rpki-client