Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa
File:                     34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa (raw, json)
Hash identifier:          js1ATq81mKsi1JMjqMQYhk2UNrpjJyneFGoy+4NpdMI=
Subject key identifier:   FA:59:0C:5E:09:0B:D1:77:A7:9F:EF:26:E1:BF:AE:E5:38:CA:E3:93
Certificate issuer:       /CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
Certificate serial:       6E59DDD0E5E4A7D92602857375B869DE1EF6C0FE
Authority key identifier: DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa
Signing time:             Fri 28 Aug 2026 22:16:29 +0000
ROA not before:           Fri 28 Aug 2026 22:11:29 +0000
ROA not after:            Fri 27 Aug 2027 22:16:29 +0000
asID:                     271582
IP address blocks:        45.165.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 09:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:59:dd:d0:e5:e4:a7:d9:26:02:85:73:75:b8:69:de:1e:f6:c0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
        Validity
            Not Before: Aug 28 22:11:29 2026 GMT
            Not After : Aug 27 22:16:29 2027 GMT
        Subject: CN=FA590C5E090BD177A79FEF26E1BFAEE538CAE393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:af:2f:19:62:9a:82:2a:14:fb:56:ff:5d:
                    5a:55:a4:49:2f:68:34:1b:ac:f8:55:3b:65:49:ee:
                    95:cc:89:22:99:b1:d1:dd:5b:b4:3c:64:13:e2:3a:
                    04:fd:3c:0d:ed:03:ab:ea:7d:2d:8e:e7:f5:c0:a0:
                    e5:b9:9f:73:37:52:b2:ce:db:e5:42:91:ac:41:ba:
                    10:8f:dd:da:ff:0c:68:16:3d:e7:81:0d:a5:ca:a7:
                    ff:68:81:3d:79:77:d8:83:b4:e4:ea:57:f8:62:01:
                    6b:63:81:07:34:77:06:d5:fc:0f:81:81:bf:8e:7a:
                    ce:18:50:4d:7a:f6:bb:ef:19:c3:4b:6c:30:dc:8c:
                    37:cd:7e:b2:76:63:6f:b6:8c:89:6f:31:f7:b4:d5:
                    89:8d:b0:13:9d:6e:45:dc:2e:09:db:fa:5c:b9:c5:
                    91:47:de:38:ec:b6:dd:29:8f:04:76:bb:5e:80:14:
                    c4:4f:95:e6:3b:89:3e:ab:ce:dd:19:e9:bf:52:b1:
                    ab:8f:c6:37:9f:bc:8b:6c:a8:62:51:6e:95:12:6e:
                    be:fe:4a:de:18:cf:27:9e:e9:4e:8c:6c:b4:90:01:
                    5c:9b:b1:99:22:4d:d0:cb:30:0b:59:9a:00:eb:85:
                    4e:13:a2:13:4b:06:7c:38:69:a5:7f:32:a5:26:6f:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:0C:5E:09:0B:D1:77:A7:9F:EF:26:E1:BF:AE:E5:38:CA:E3:93
            X509v3 Authority Key Identifier:
                keyid:DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/34352e3136352e3138302e302f32322d3332203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:3a:a3:4f:0f:3e:8f:bb:ee:24:1a:5b:ca:73:f9:ab:91:
         dc:64:99:8f:38:5d:ac:e0:02:ed:c8:22:7b:35:94:43:a7:30:
         cd:c8:d3:a9:d0:92:02:98:ba:d4:a7:49:37:9f:d8:9a:84:b4:
         c2:aa:d1:ab:5e:25:e2:1a:6e:23:79:7a:f9:3b:8b:28:51:92:
         43:04:94:a4:df:e8:e4:3d:f0:72:fe:5b:a2:c7:31:fc:85:69:
         80:a6:ed:5f:d3:b9:98:49:51:5a:94:63:92:ef:a2:f3:bd:13:
         79:15:11:71:be:69:2f:6a:e1:d6:c8:ba:97:c6:3a:06:9d:7a:
         4e:e9:3f:ab:2e:e9:30:5b:a9:db:17:1c:bc:4b:d3:a1:a2:75:
         e9:76:91:c4:27:03:85:f7:85:f5:02:ed:ee:99:0e:8b:ad:47:
         62:80:ab:df:23:c4:bb:f0:90:88:70:55:18:bd:64:42:77:9a:
         ad:25:d7:ce:3a:6e:0b:83:0b:2d:cb:08:a6:fd:d6:ad:1d:79:
         51:8b:50:52:23:4f:5c:e8:83:ba:e8:0d:8a:60:12:d0:90:ed:
         b7:89:69:04:ed:81:c5:11:8f:11:41:7c:de:e2:b9:c0:61:7b:
         81:ec:a9:37:11:82:68:22:87:29:37:6f:df:33:75:20:d4:03:
         61:0e:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:50:56 2026 by rpki-client