Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36392e302f32342d3234203d3e20323639333539.roa
File:                     34352e3138342e36392e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          bvXj+zRydr9RSfK2TD95rcUdXpujAy0jvz3PyfUOByc=
Subject key identifier:   83:D0:98:0D:22:FB:9C:1B:A1:C3:4C:2A:B2:73:11:05:21:DC:20:0A
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       26125A3E1070A968F1EB1B26417C26B87C3151D3
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36392e302f32342d3234203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:34 +0000
ROA not before:           Thu 03 Sep 2026 18:45:34 +0000
ROA not after:            Thu 02 Sep 2027 18:50:34 +0000
asID:                     269359
IP address blocks:        45.184.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:5a:3e:10:70:a9:68:f1:eb:1b:26:41:7c:26:b8:7c:31:51:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:34 2026 GMT
            Not After : Sep  2 18:50:34 2027 GMT
        Subject: CN=83D0980D22FB9C1BA1C34C2AB273110521DC200A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fb:d0:7b:78:0d:01:5c:cd:4b:58:ed:c5:e5:
                    fa:fa:3b:54:ec:95:31:0e:10:0b:76:54:99:a0:f4:
                    7d:aa:50:b2:66:20:6b:3a:81:51:c7:28:7a:53:84:
                    c4:90:b0:7d:d4:f8:1e:24:d4:46:2e:b9:7b:ce:5e:
                    23:2c:7d:e5:01:9d:6b:e6:3b:f6:e1:20:5b:fa:84:
                    8f:09:08:0b:d4:89:24:b5:6f:1f:bb:f4:66:6b:ad:
                    39:2b:b6:54:6f:39:0d:9e:2b:19:af:66:7e:2e:49:
                    87:1c:19:f8:a4:cc:00:42:e3:2a:04:96:96:bd:78:
                    84:87:0c:3d:4e:cc:0c:15:41:53:b9:69:9c:6f:95:
                    9e:b8:24:a0:97:20:6c:c8:53:9f:c5:67:42:c2:2f:
                    7d:d8:6c:38:01:29:42:58:4c:85:78:69:c3:17:26:
                    c7:95:e1:a9:48:dc:23:4e:8a:58:54:82:7a:46:e6:
                    cb:22:0f:39:bc:52:71:95:53:3f:01:63:c5:1d:5b:
                    50:71:bd:a4:3c:05:f4:12:af:fd:18:19:8f:6e:b1:
                    f2:43:ea:1d:bd:c3:03:56:fd:85:c7:da:7b:e7:c3:
                    49:22:68:71:09:66:0c:1f:ef:40:e5:7a:3a:cf:6e:
                    7a:b7:b9:ba:eb:9b:0e:33:1f:9f:00:36:3b:3a:72:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:98:0D:22:FB:9C:1B:A1:C3:4C:2A:B2:73:11:05:21:DC:20:0A
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36392e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:ab:19:7b:68:c9:b9:fb:cb:b2:18:9b:fe:0f:6a:65:32:
         f2:f9:0f:a4:3f:b8:f8:83:9a:6e:f9:20:2f:5b:de:8f:e8:d4:
         eb:06:f1:d7:ef:a4:23:cf:55:ff:42:01:66:2b:7c:21:d2:b8:
         15:28:02:f7:31:f1:84:ce:24:26:ae:89:c4:81:2f:06:ea:7e:
         46:a6:10:ed:1f:e9:56:f1:da:e9:9b:99:89:39:ce:fb:12:63:
         87:3b:fd:30:7e:cf:f8:f5:9f:fb:18:39:b4:15:3d:7c:62:cd:
         57:4f:01:5e:2c:36:2a:26:8f:d7:7e:8f:a6:7d:8d:6b:c6:ba:
         68:ba:1a:ce:57:44:05:18:c5:ae:1a:72:0c:59:99:ee:12:b2:
         e6:16:03:5b:54:c3:68:21:b7:7e:5b:96:05:a6:44:13:91:ca:
         cb:41:ea:0f:f0:cd:46:d9:a0:a6:1a:7b:4e:56:45:97:f4:31:
         da:2b:10:eb:a2:68:6c:ed:71:5b:a6:46:3d:60:1f:3e:85:41:
         c4:5f:77:57:b9:b9:9e:c0:eb:d7:07:6f:2d:81:d1:92:c1:55:
         73:33:9d:d7:69:b6:ec:02:d4:b6:f6:ed:39:7d:7f:b6:19:13:
         e3:14:8a:3d:91:6c:72:2c:e2:0f:09:0f:52:33:19:22:0e:8a:
         d8:ae:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:25:05 2026 by rpki-client