Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa
File:                     34352e3137342e39362e302f32332d3234203d3e20323633353734.roa (raw, json)
Hash identifier:          vPvDlBVOgStgjpok80eSHLJDNFw5FP74fH+jWS+QJzI=
Subject key identifier:   65:0A:55:F7:C9:B7:6F:75:5F:AD:31:DF:92:DF:88:C7:09:92:94:84
Certificate issuer:       /CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
Certificate serial:       1771FDFF13CCB4FE3447B294B7615487F8DA5580
Authority key identifier: 72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa
Signing time:             Wed 09 Sep 2026 17:58:40 +0000
ROA not before:           Wed 09 Sep 2026 17:53:40 +0000
ROA not after:            Wed 08 Sep 2027 17:58:40 +0000
asID:                     263574
IP address blocks:        45.174.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:71:fd:ff:13:cc:b4:fe:34:47:b2:94:b7:61:54:87:f8:da:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
        Validity
            Not Before: Sep  9 17:53:40 2026 GMT
            Not After : Sep  8 17:58:40 2027 GMT
        Subject: CN=650A55F7C9B76F755FAD31DF92DF88C709929484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:7e:c1:4a:08:05:5b:14:36:7c:2d:2d:20:
                    6c:bd:3e:de:89:b3:51:a3:c7:40:38:51:87:4c:51:
                    42:c3:85:85:07:a5:e2:f5:67:3f:e8:d6:cc:59:dc:
                    95:4c:84:fe:7d:d1:a0:5e:6d:7c:3c:4e:90:74:5c:
                    82:74:99:52:bd:9f:cb:9d:b0:7e:fb:29:2c:8a:a8:
                    63:de:65:de:d3:41:0f:d3:a0:ac:02:87:d2:7d:17:
                    17:ec:41:d4:54:ee:16:3d:7d:9f:54:c7:9f:b3:70:
                    b3:db:8c:e4:db:d5:45:06:e2:d0:a8:70:5b:aa:00:
                    bc:7b:e1:cf:fe:34:86:b2:05:ff:b6:6b:ba:73:ef:
                    42:52:d7:40:7f:91:79:11:4c:2d:e0:48:46:7c:c8:
                    97:d9:87:fc:79:34:09:07:e7:05:ff:eb:fd:3e:6c:
                    06:f4:36:db:be:d6:ad:d2:eb:8f:09:3a:4f:a4:63:
                    65:e9:50:ba:28:9a:17:5a:d1:ed:14:d9:3e:30:31:
                    8a:d8:cd:3e:b5:29:6e:2a:8e:57:37:1a:ee:cc:ed:
                    6d:cc:1a:9f:de:f5:81:34:b3:f9:0a:c5:64:52:07:
                    54:48:14:f6:7a:15:85:30:2b:b9:d2:a3:ae:99:0c:
                    c0:95:df:c5:2d:33:0a:8c:62:b2:66:79:51:00:04:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:55:F7:C9:B7:6F:75:5F:AD:31:DF:92:DF:88:C7:09:92:94:84
            X509v3 Authority Key Identifier:
                keyid:72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/34352e3137342e39362e302f32332d3234203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:db:df:6e:7e:8f:d3:a6:ce:2d:90:45:b0:ed:fd:1b:e4:
         82:23:6d:4f:0c:1c:22:d0:6b:27:3c:39:08:90:ae:54:cd:d1:
         34:c6:f8:a6:18:f3:36:0b:d7:3e:2c:1f:a4:3b:8f:ec:cf:f0:
         5a:7a:76:07:0f:3d:c4:29:7b:15:53:57:e0:ad:bf:0f:18:8e:
         b7:67:b5:f0:86:de:a9:bd:1b:92:e9:79:7b:55:25:a2:16:a4:
         92:5f:b6:52:13:8d:41:3a:22:f6:86:bb:a1:79:b0:3e:37:c5:
         d7:aa:09:47:cb:02:60:04:2f:71:b4:93:ce:37:07:0e:4b:4b:
         31:61:2c:00:4a:61:82:1a:06:14:58:c6:6d:d6:88:b5:7a:44:
         10:f0:99:9f:a6:48:f4:82:09:7d:a3:dc:5d:5f:7d:11:36:2d:
         f2:8d:ac:7e:09:b1:f0:d2:17:f5:ba:ea:b2:63:4b:f2:3b:5f:
         34:7e:42:c2:72:44:f4:89:b1:14:8e:2e:93:a0:57:fd:1e:da:
         4d:ef:32:cd:41:b7:25:cc:bf:c0:ec:f6:bb:e4:72:49:55:8e:
         05:d8:2b:a6:62:06:a4:de:78:26:80:2f:69:f9:57:02:f6:c1:
         89:db:6a:3c:26:32:8c:4c:94:82:ae:ee:7a:e0:cc:5f:66:37:
         34:be:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----