Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3234342e302f32322d3233203d3e20323633393830.roa
File:                     34352e3233322e3234342e302f32322d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          BmmG97Oex8IPwkUN7DEyMhatQnxf8iPbubBJ2RpZjJk=
Subject key identifier:   CB:58:7B:90:7C:B3:EF:EE:38:4D:AC:06:58:71:3D:FE:AA:5A:F4:9F
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       044591A178A67E7F0B9DF8F8726D028EB40023AB
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3234342e302f32322d3233203d3e20323633393830.roa
Signing time:             Tue 27 Oct 2026 13:10:13 +0000
ROA not before:           Tue 27 Oct 2026 13:05:13 +0000
ROA not after:            Tue 26 Oct 2027 13:10:13 +0000
asID:                     263980
IP address blocks:        45.232.244.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 00:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:45:91:a1:78:a6:7e:7f:0b:9d:f8:f8:72:6d:02:8e:b4:00:23:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Oct 27 13:05:13 2026 GMT
            Not After : Oct 26 13:10:13 2027 GMT
        Subject: CN=CB587B907CB3EFEE384DAC0658713DFEAA5AF49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fd:f5:93:9c:ec:9f:24:c3:9d:2e:52:f9:6f:
                    7d:29:d7:57:01:3b:52:f5:12:ef:27:70:ba:46:df:
                    95:99:ab:25:40:90:be:34:f7:4e:aa:b3:c1:d5:6f:
                    10:55:a4:f9:b5:ff:4e:14:5f:d2:f5:83:fb:6c:75:
                    62:54:08:5e:1f:de:66:25:fc:c8:86:8f:24:ca:dc:
                    31:02:40:5f:e7:b3:8c:2e:31:5e:c1:a6:35:69:57:
                    61:a2:e0:45:d0:e4:df:74:59:f9:ee:ad:8b:ed:4c:
                    65:2c:17:f4:a0:09:6c:08:43:d8:5f:74:69:80:d2:
                    de:44:1e:7d:05:a3:40:b5:31:b4:f2:34:c5:63:82:
                    5d:7a:be:c4:35:f7:50:53:a8:24:da:79:e3:dd:7a:
                    c1:ca:8e:1a:2e:1a:39:bd:96:31:58:7b:c8:21:5f:
                    0e:4d:52:d5:5f:53:80:c2:c1:e3:4f:9f:d4:15:6e:
                    25:39:d9:32:21:28:31:1e:ad:97:1f:50:ba:bf:0a:
                    28:b5:db:9d:df:cb:aa:31:a0:b4:88:86:a1:e1:e9:
                    c8:bc:d9:7d:d5:36:0c:10:4e:09:c8:bb:1d:b7:3b:
                    22:87:63:fb:41:95:3f:2e:b8:95:7c:fb:2d:29:ab:
                    b1:4d:34:78:02:f4:cb:e5:8a:4b:9f:5a:7c:d0:96:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:7B:90:7C:B3:EF:EE:38:4D:AC:06:58:71:3D:FE:AA:5A:F4:9F
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/34352e3233322e3234342e302f32322d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:2a:58:1b:59:3f:8c:fe:ab:4d:a7:ec:2c:be:c3:40:05:7d:
         94:1e:f2:90:8c:1a:42:1f:b3:b0:3b:46:ce:8a:17:93:ce:52:
         9e:d6:c4:1e:d6:dc:42:8c:38:60:0c:02:d8:2c:b3:bc:c6:79:
         67:6f:3e:81:51:96:ff:42:a4:37:3f:37:a2:89:04:66:07:b0:
         5c:86:ef:51:66:8f:83:e5:04:25:0c:10:f1:bd:1d:48:09:9a:
         f6:37:44:db:c6:a6:e1:78:c4:7a:ec:a3:c3:77:cc:87:00:e8:
         7c:43:a9:7d:1b:68:b5:62:cb:1a:99:40:bb:27:ae:40:dc:b3:
         8a:2e:5d:a6:ca:39:ce:83:90:57:32:15:02:dc:4a:73:41:3d:
         78:e8:3c:1e:98:6e:26:f0:79:e3:65:24:c0:fb:fa:6d:8c:d5:
         4a:d3:83:4a:5a:95:44:ba:e7:0e:ea:7c:09:e8:91:a8:fe:59:
         a1:89:10:24:56:ba:72:da:64:cb:31:0a:dd:34:33:71:77:5a:
         3f:05:70:86:e2:cd:f0:5b:e2:cd:e1:7f:33:61:73:b1:e5:b7:
         6f:85:ae:e7:d7:6f:b9:00:f9:ba:88:2d:38:0e:f4:4e:d5:65:
         54:27:c9:69:62:cd:65:b2:86:fd:a9:fa:5b:20:fa:e3:f6:bc:
         9f:6c:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:59:46 2026 by rpki-client