Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34392e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          uPHWA+438NQpulIaRVx/+k8trB/BEtJKf/l48ied8DE=
Subject key identifier:   AC:43:2D:E6:08:35:D5:56:B4:DF:12:94:7E:3A:51:D3:1B:70:69:EF
Certificate issuer:       /CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
Certificate serial:       496FC56953135A32D73F02C9B84685B25825CB4A
Authority key identifier: 98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
Signing time:             Sat 29 Aug 2026 22:10:20 +0000
ROA not before:           Sat 29 Aug 2026 22:05:20 +0000
ROA not after:            Sat 28 Aug 2027 22:10:20 +0000
asID:                     267256
IP address blocks:        45.232.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl
                          rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6f:c5:69:53:13:5a:32:d7:3f:02:c9:b8:46:85:b2:58:25:cb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C32DA35A01A858C3208E640EEE64F9F85DBC4C
        Validity
            Not Before: Aug 29 22:05:20 2026 GMT
            Not After : Aug 28 22:10:20 2027 GMT
        Subject: CN=AC432DE60835D556B4DF12947E3A51D31B7069EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:82:ea:d7:7e:0d:0c:3f:e3:b1:1e:4a:92:d3:
                    34:f0:6c:fe:38:67:c1:f8:45:22:68:77:54:4a:0c:
                    5e:62:5f:8b:a8:4e:df:a2:36:fc:14:4a:1c:08:6f:
                    cd:31:bf:42:66:1e:68:b5:bf:28:b7:66:1b:26:53:
                    a6:69:f5:8f:12:4b:76:a4:5f:b8:1c:1b:09:b0:45:
                    b8:2f:7a:6c:71:0a:87:40:b4:0f:ca:aa:1f:3d:38:
                    c1:72:9c:d4:2d:73:0b:37:46:f2:59:96:07:27:29:
                    a1:45:2d:25:77:99:3a:21:f5:23:81:e8:d3:51:b9:
                    c7:68:2b:ff:3d:63:c9:3f:f3:e1:0c:4a:e5:73:12:
                    07:5c:a6:8c:95:d5:65:ba:22:ca:94:31:76:60:7a:
                    8e:40:8c:a1:44:11:0f:d6:f9:37:c4:25:6e:64:bf:
                    ad:b4:d0:e4:c3:c5:db:f7:39:16:4f:61:5a:15:5d:
                    e7:c4:2a:36:a1:de:14:24:f6:fb:05:55:c9:66:a3:
                    cd:50:06:c3:77:ef:2a:1e:5f:be:62:af:2f:43:e9:
                    7b:76:a6:a2:95:2c:f0:67:3e:93:40:10:a5:d2:8f:
                    23:7f:e6:77:a5:9c:01:27:61:97:ee:bc:ab:0d:7b:
                    3e:d3:e8:05:4f:ac:f7:25:da:0e:cc:09:63:3f:ac:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:43:2D:E6:08:35:D5:56:B4:DF:12:94:7E:3A:51:D3:1B:70:69:EF
            X509v3 Authority Key Identifier:
                keyid:98:C3:2D:A3:5A:01:A8:58:C3:20:8E:64:0E:EE:64:F9:F8:5D:BC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C32DA35A01A858C3208E640EEE64F9F85DBC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:ae:16:9d:7b:d2:aa:1f:9f:2d:26:dc:45:a2:71:90:83:
         63:6e:c3:fd:01:2b:3c:fe:22:47:00:6c:e6:d9:a8:37:a7:67:
         c7:c9:a4:49:8f:ce:6c:db:5d:47:a8:fb:d7:17:7c:03:51:48:
         d8:d1:cc:cc:3b:7c:8e:28:67:01:0f:af:bb:5c:c3:04:1e:8c:
         0b:63:e1:3f:71:c7:f2:d6:56:7d:5a:83:b7:19:a7:e8:53:dd:
         3b:5b:67:41:9b:cd:bf:6d:83:c1:54:d4:c1:55:ca:d1:4f:3f:
         d0:98:cf:9b:2c:59:89:42:93:dd:b0:bb:d6:c2:49:1a:82:1e:
         27:26:65:a1:dd:ee:0c:91:5f:21:ac:39:26:51:c8:14:57:24:
         ac:17:dc:1e:62:aa:e5:66:f3:05:48:bb:61:40:fb:23:07:a3:
         f3:49:c7:d6:ae:77:f0:29:d6:7e:ab:67:da:65:14:bc:6e:85:
         2e:82:75:7b:1a:ca:b0:66:84:90:68:21:4a:51:c8:85:22:b7:
         96:e6:61:10:03:3e:58:d9:16:ac:e2:1d:6f:06:2d:9c:18:b3:
         fd:62:a5:11:d9:1f:16:26:b3:30:57:b4:93:68:13:e6:11:5a:
         c9:ae:79:b9:6f:41:a4:15:86:a1:ab:c3:3f:3f:b6:fc:b5:b9:
         1a:09:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:19:03 2026 by rpki-client