Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
File:                     34352e3233302e38352e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          M3acVu+51nwVcq9ypFNFy3N80DiVH9vhX24UDSSu96Y=
Subject key identifier:   B4:01:59:82:62:EB:84:C6:FE:B3:9E:4A:CE:A2:B5:30:13:50:39:69
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       2673A4CCA65CF43C4723DAE2131E2DE27213FA30
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:34 +0000
ROA not before:           Thu 03 Sep 2026 18:45:34 +0000
ROA not after:            Thu 02 Sep 2027 18:50:34 +0000
asID:                     269359
IP address blocks:        45.230.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:73:a4:cc:a6:5c:f4:3c:47:23:da:e2:13:1e:2d:e2:72:13:fa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:34 2026 GMT
            Not After : Sep  2 18:50:34 2027 GMT
        Subject: CN=B401598262EB84C6FEB39E4ACEA2B53013503969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:ee:93:9e:c1:2d:d9:ad:2a:8f:00:e6:61:
                    88:a8:d1:a4:ef:1b:d7:7c:23:7d:d1:5d:ca:6c:06:
                    79:75:8b:2b:89:be:1d:7b:5b:1b:79:0a:34:14:42:
                    81:78:f8:73:21:2c:71:c2:1a:9e:4e:c2:5b:5e:54:
                    f6:60:e1:da:1a:05:45:76:c6:15:31:f8:dd:e6:9b:
                    bf:14:cd:73:6d:2a:3b:3f:e3:4e:fa:cf:c6:66:f7:
                    cf:e2:45:93:62:ca:be:da:76:e3:5e:fd:95:b1:75:
                    a4:25:c9:60:20:bb:47:a0:59:97:8c:13:2c:b8:af:
                    06:9b:ac:9e:12:c1:10:23:08:19:de:84:80:8c:ab:
                    75:39:8c:a4:27:a2:10:e3:23:32:59:95:d1:a6:88:
                    2f:72:0b:d5:76:17:1e:8f:50:87:95:2c:25:ea:09:
                    c4:80:b4:0e:47:75:f6:94:c2:51:0d:31:8e:b4:d3:
                    83:d9:77:c9:9c:f0:fb:66:9f:f2:83:a0:75:1d:66:
                    29:be:ad:51:70:19:95:4d:c9:1e:9e:f2:b3:14:11:
                    bc:e1:79:3e:ee:a1:66:58:37:e4:30:9e:8a:53:36:
                    df:a0:90:fa:26:a6:4a:f1:5d:76:33:89:28:a7:47:
                    b3:0c:44:83:2b:13:0b:7b:26:41:ae:22:2c:93:6e:
                    8d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:59:82:62:EB:84:C6:FE:B3:9E:4A:CE:A2:B5:30:13:50:39:69
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:58:cb:2c:2b:b0:99:f9:a7:71:29:fd:9b:df:0c:e8:8d:b9:
         74:05:95:7e:b5:11:84:87:af:6e:82:54:46:6b:d9:f0:62:09:
         74:ee:cc:cb:d5:77:d7:0d:26:2e:7e:d2:00:70:47:87:e2:44:
         b2:4f:ee:26:76:d8:f7:f8:79:33:b7:6b:57:56:b6:4c:28:50:
         bd:52:cd:c7:18:7b:03:57:43:95:a8:9b:2b:c6:24:d1:db:70:
         aa:de:a8:61:ed:b3:41:9f:f1:6e:47:1e:03:81:e4:a7:5f:31:
         cb:9a:a9:4b:fb:91:7d:61:bd:74:32:46:22:e5:c3:89:69:ca:
         7f:40:93:d8:40:af:3a:ea:c7:46:eb:4c:1f:6b:cd:d3:68:72:
         7f:a0:cd:8a:16:3c:ea:10:3b:8c:3b:e6:96:64:54:69:b6:87:
         94:63:0c:4c:9d:4d:b4:11:c3:35:76:18:64:3d:ee:6f:4c:fc:
         2b:ee:56:bb:3c:03:98:04:30:3a:f5:44:69:eb:b7:9e:5b:5f:
         25:91:a1:17:a3:50:93:aa:00:a2:e8:dc:5e:ff:a6:9b:72:e1:
         1d:af:f6:34:a8:38:49:d4:1e:97:61:26:87:1f:fc:9f:35:67:
         12:49:1e:be:31:6c:ae:c2:b5:5e:7c:39:cb:73:37:41:5f:57:
         1a:f3:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:51:28 2026 by rpki-client