Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa
File:                     34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (raw, json)
Hash identifier:          AA9UiLatjueRs7iomPgx781T/NgNDsfE3ejblmV3vRg=
Subject key identifier:   99:B1:8C:F4:FD:C4:9C:F9:6F:E9:4F:20:83:A4:FD:B7:28:22:93:0A
Certificate issuer:       /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial:       464537907DF1993732BF7A5BB02BE1B11CEBDC2E
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa
Signing time:             Thu 06 Aug 2026 14:45:49 +0000
ROA not before:           Thu 06 Aug 2026 14:40:49 +0000
ROA not after:            Thu 05 Aug 2027 14:45:49 +0000
asID:                     268907
IP address blocks:        45.175.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
                          rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 21:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:45:37:90:7d:f1:99:37:32:bf:7a:5b:b0:2b:e1:b1:1c:eb:dc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
        Validity
            Not Before: Aug  6 14:40:49 2026 GMT
            Not After : Aug  5 14:45:49 2027 GMT
        Subject: CN=99B18CF4FDC49CF96FE94F2083A4FDB72822930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cf:b2:0f:26:b5:2a:76:7b:d5:48:cd:90:d7:
                    2e:31:9d:66:df:7a:07:34:b3:9f:0b:2b:c0:f2:a3:
                    35:18:21:64:5a:27:65:0e:91:6d:85:87:9b:af:ed:
                    4d:83:b8:54:50:0b:f0:c5:28:9d:bb:dc:5d:6c:64:
                    8e:85:72:f9:d4:d8:d7:fa:71:67:03:35:34:36:75:
                    b7:c9:d2:cb:45:83:40:c7:94:4a:fd:ae:50:c3:dc:
                    f7:f9:b0:5c:b6:b4:8e:a6:48:4a:7b:3a:76:86:5d:
                    ec:32:3c:1c:5f:fb:cb:25:7f:de:af:23:2e:27:b5:
                    f4:42:d5:71:b7:62:f8:39:6a:f5:80:c4:1d:f0:e5:
                    6a:84:bf:0f:1b:31:5b:e8:23:83:66:53:56:bd:e9:
                    2a:92:83:55:86:d7:da:c1:80:67:b7:b1:e1:77:a8:
                    a8:f8:13:cb:e8:e2:f7:17:6f:5c:df:b2:fe:b3:66:
                    ee:9e:a7:b2:d5:23:fd:56:bc:a6:00:a3:c9:76:f6:
                    08:e5:b7:7f:1d:9e:7c:22:b5:a1:ae:87:3d:97:ea:
                    d8:b8:86:89:9d:d2:f3:a7:2e:ee:24:44:b5:10:cd:
                    26:13:d0:49:b9:ac:30:ad:6c:8d:3b:e9:ef:2d:25:
                    14:79:0b:fa:7d:2a:8f:60:c2:72:ef:4d:76:44:e5:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B1:8C:F4:FD:C4:9C:F9:6F:E9:4F:20:83:A4:FD:B7:28:22:93:0A
            X509v3 Authority Key Identifier:
                keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/34352e3137352e39362e302f32322d3332203d3e20323638393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:b2:27:2f:3c:3f:cb:f7:ab:fc:86:6c:0a:42:05:d7:92:
         59:29:fe:f1:e7:f8:af:fb:15:84:31:52:df:1d:47:a9:b2:54:
         25:b5:04:03:a0:95:08:8f:c2:0c:a8:f4:de:ff:46:05:c9:f6:
         d9:ae:9f:19:db:a7:4f:ff:36:80:3e:cf:cc:a7:74:a8:5c:bc:
         20:d9:8f:ac:c6:9e:44:c3:a0:f3:c3:12:ff:d2:c9:9f:32:5a:
         22:6a:1b:a3:5b:0c:c5:b7:d2:7b:3f:e1:fc:74:1d:53:cb:4e:
         f5:36:41:d6:a3:b5:d2:be:f1:ec:55:1c:10:eb:67:68:a0:f4:
         3f:f0:be:6a:9e:73:a8:8e:39:06:73:55:cd:1a:ed:14:46:32:
         8e:4b:b1:32:d0:20:06:58:78:3e:f3:3d:ce:ae:7b:b5:e6:9f:
         52:52:31:7e:1b:7e:fb:e9:8f:75:ce:3e:d4:04:e9:92:11:d0:
         f4:89:64:6f:7c:df:c4:f9:0c:b9:04:cd:6e:ac:5b:fd:6c:e8:
         bc:dd:a9:a2:81:33:8c:69:ae:4a:b6:56:42:02:6d:55:bc:55:
         53:dd:e5:d3:c5:c9:a5:ea:e0:e5:df:db:8d:08:1d:13:ea:d4:
         20:1a:48:d0:64:23:41:96:2f:78:54:08:58:35:33:55:2c:5a:
         7e:3c:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:29:04 2026 by rpki-client