Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa
File:                     34352e362e3232382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          27rMtwq7rw+6p9UJ+glxvNNqd2hWPeAn+awFjsf+6aQ=
Subject key identifier:   EA:A7:2A:D6:63:01:1B:02:57:C2:18:9C:2F:8D:F9:50:0F:28:A8:CE
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       545273A1CCEAE101B4988D6AE3975322BC9727B0
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa
Signing time:             Fri 30 Oct 2026 13:41:27 +0000
ROA not before:           Fri 30 Oct 2026 13:36:27 +0000
ROA not after:            Fri 29 Oct 2027 13:41:27 +0000
asID:                     52573
IP address blocks:        45.6.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 15:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:52:73:a1:cc:ea:e1:01:b4:98:8d:6a:e3:97:53:22:bc:97:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Oct 30 13:36:27 2026 GMT
            Not After : Oct 29 13:41:27 2027 GMT
        Subject: CN=EAA72AD663011B0257C2189C2F8DF9500F28A8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:62:40:3a:2e:a4:b8:7c:0d:56:d1:ee:c0:
                    31:c0:68:08:d1:88:64:88:67:af:90:de:fd:be:ec:
                    76:b7:f7:25:1d:da:ca:00:2d:bb:f3:9e:71:10:eb:
                    0b:63:34:95:0b:83:af:96:ee:a6:99:31:14:76:5b:
                    0b:e5:d5:15:01:c6:2a:72:a4:8f:34:b1:28:b3:a4:
                    16:a6:f0:3e:94:0c:d6:e8:99:f5:ec:9e:30:a5:d5:
                    60:89:ee:94:dd:15:e3:6f:fe:b0:86:e2:76:21:61:
                    fd:65:00:5f:2e:b1:8f:89:70:3b:ee:7a:45:3c:9a:
                    a4:d8:53:2d:c9:5d:79:12:f7:1b:20:3b:20:62:62:
                    b4:08:16:6a:75:3a:5d:10:82:38:e7:76:49:5e:69:
                    39:38:35:40:6b:48:b3:9e:cd:c0:b5:4b:da:72:5e:
                    e6:6f:92:60:1a:43:80:95:7e:a7:39:9a:97:68:19:
                    8f:bd:6a:7d:8e:be:c7:11:2a:0e:5b:62:a2:93:bc:
                    89:52:40:bb:0b:92:47:95:a5:89:80:97:78:03:cc:
                    a0:b4:c1:68:4b:1f:0b:35:3e:68:19:39:f7:b3:c5:
                    ba:d5:a9:42:c9:21:ad:1c:20:0b:de:65:a2:bf:7f:
                    bc:fd:51:95:bb:20:67:9c:76:15:91:3d:fd:19:67:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:2A:D6:63:01:1B:02:57:C2:18:9C:2F:8D:F9:50:0F:28:A8:CE
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/34352e362e3232382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:36:f2:fa:ae:78:7e:18:ad:e5:0a:f1:96:81:3e:33:95:9d:
         a4:63:91:d9:8a:cc:ff:e3:9b:12:aa:a9:35:15:f1:48:ea:ca:
         b7:00:04:c3:17:0d:49:e4:b6:a8:75:70:ee:ff:5e:dd:8d:32:
         60:cd:79:0c:08:9e:8b:80:c4:60:a3:b2:ef:89:d8:7c:76:e3:
         0c:30:9b:6c:b0:1b:33:40:cd:01:2b:c5:b4:15:e5:21:31:f8:
         e1:b9:4d:e5:8c:0b:14:bf:0d:0f:a8:6b:21:74:a9:16:f1:cd:
         fc:43:bf:35:7b:3d:5e:05:4f:ad:b8:c1:de:47:c2:dc:ef:ac:
         60:34:44:30:dd:5a:37:78:5d:26:49:81:0c:fa:b3:42:bc:7a:
         bb:ff:f5:24:8f:0e:86:a0:5e:49:ab:5e:2c:1f:4b:f1:c3:71:
         9a:77:ee:72:d1:f6:d4:d9:f8:03:e8:61:d3:c3:6b:aa:8a:e6:
         a0:2b:0f:7b:be:be:8e:7b:1c:20:61:6f:f0:9e:76:26:88:ad:
         5f:77:71:74:70:b2:db:50:54:b6:db:87:81:79:c6:7a:ac:7b:
         65:8f:01:9f:7e:ae:ae:40:5c:cf:3a:fe:5b:5e:da:74:c3:43:
         f5:3f:51:70:c7:19:07:95:46:d8:39:80:c9:9f:5e:84:fb:96:
         bd:70:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:29:41 2026 by rpki-client