Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3137382e3138302e302f32322d3234203d3e20323639303938.roa
File:                     34352e3137382e3138302e302f32322d3234203d3e20323639303938.roa (raw, json)
Hash identifier:          MFWJXCS2zgiMwnnfGh2lmCufXDpAeP2w2mvqwth840c=
Subject key identifier:   FE:7B:B9:40:63:C2:3E:BD:7C:9D:1A:10:0E:1F:F1:A6:2A:9F:5D:FB
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       7AB0C5D70E3C455CC3F47B63764B93A8DD26E2C9
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3137382e3138302e302f32322d3234203d3e20323639303938.roa
Signing time:             Wed 09 Sep 2026 19:01:10 +0000
ROA not before:           Wed 09 Sep 2026 18:56:10 +0000
ROA not after:            Wed 08 Sep 2027 19:01:10 +0000
asID:                     269098
IP address blocks:        45.178.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Sep 2026 17:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:c5:d7:0e:3c:45:5c:c3:f4:7b:63:76:4b:93:a8:dd:26:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Sep  9 18:56:10 2026 GMT
            Not After : Sep  8 19:01:10 2027 GMT
        Subject: CN=FE7BB94063C23EBD7C9D1A100E1FF1A62A9F5DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:a4:04:d9:88:d3:ca:f8:f8:16:c5:44:c6:
                    c4:f9:31:05:72:47:47:f0:3d:f7:08:93:5a:a2:09:
                    1e:8e:e3:ed:07:72:3f:33:fe:c3:49:4e:52:a4:fe:
                    bf:5c:30:12:9b:a1:cf:b5:a3:54:7d:b4:a4:48:41:
                    e0:10:77:41:ad:f8:78:bd:b2:20:21:ee:23:a3:bf:
                    ba:05:8b:7b:46:52:db:d0:97:18:1e:c6:ea:9d:b8:
                    f8:7b:3a:06:d8:0b:ee:83:62:ef:51:a8:6b:68:6b:
                    ec:bb:a9:b2:0a:fa:33:88:29:94:11:05:29:3b:57:
                    d2:29:63:4e:9c:1a:1b:c1:fd:2d:32:10:47:a0:4c:
                    9a:fc:19:fa:d5:3b:17:d2:c8:84:c1:ba:96:6f:d9:
                    e0:fb:36:00:6e:62:b1:bb:89:3b:0f:24:71:40:52:
                    48:97:e6:02:5d:a6:fc:b8:5c:c0:2d:bf:96:84:92:
                    d2:13:50:b9:70:3c:b8:99:1f:d6:50:46:a5:8e:ba:
                    07:ba:72:b3:cf:e0:cb:ee:91:78:d4:14:32:86:8e:
                    1b:5a:aa:cc:a2:fa:c6:29:9e:db:0b:5b:5a:ec:10:
                    0f:21:96:39:73:47:b7:20:b0:b2:d0:a6:19:bd:c3:
                    0c:7c:a9:46:12:56:13:b1:1c:62:12:2d:40:6c:c9:
                    67:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:B9:40:63:C2:3E:BD:7C:9D:1A:10:0E:1F:F1:A6:2A:9F:5D:FB
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/34352e3137382e3138302e302f32322d3234203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:ae:ed:91:75:2c:fd:bc:5f:2c:5b:c7:5e:5b:25:01:c2:
         c8:16:a2:ee:12:5b:38:71:65:c4:cf:4c:b3:a6:4c:6c:62:d7:
         1f:95:72:42:1a:f9:0d:b2:c0:3b:92:bf:70:0a:04:6f:a3:f3:
         98:1f:a2:28:d4:c1:01:0c:b2:46:4b:26:7a:f8:77:dc:06:4d:
         1a:09:40:25:a7:f4:5d:3c:12:a2:b3:56:05:7e:44:24:09:2d:
         b6:a8:81:dc:cc:eb:51:b2:ea:2a:c8:7d:03:6f:ca:22:99:a1:
         c8:a8:c6:58:27:16:41:64:2f:65:d7:94:48:fa:db:3d:94:1a:
         ef:aa:5b:80:67:cf:88:c7:35:1f:09:90:c2:e8:13:1a:7a:8a:
         41:14:93:d8:4e:59:cb:14:fc:26:52:cb:d5:63:bc:ad:92:4a:
         84:ad:fb:a7:b0:1f:09:33:a4:49:fd:a7:d3:1e:7d:44:13:08:
         f0:58:ba:3f:09:cb:1f:a3:ac:d4:19:d3:bf:1e:e6:d2:35:48:
         ee:a3:d9:6a:bf:c2:47:89:1f:32:0b:c8:40:cb:fa:b5:f2:e2:
         59:18:c8:32:f3:f2:75:fa:1a:50:0a:50:c4:82:e3:32:82:00:
         f1:a9:30:44:bd:c8:2f:46:55:b4:ee:af:8d:87:06:39:82:52:
         57:49:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:35:21 2026 by rpki-client