Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa
File:                     34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          O/f12TFogwyA2DqlFLdtaTsjy6oNsEWMVe8Khxsr8Wc=
Subject key identifier:   13:49:68:23:AA:97:A0:52:6E:56:B7:C0:59:C5:E3:66:4C:3F:87:56
Certificate issuer:       /CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
Certificate serial:       09D370E7A2417B3EF179CC02143D6DB65508E281
Authority key identifier: 0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa
Signing time:             Sat 05 Sep 2026 18:45:16 +0000
ROA not before:           Sat 05 Sep 2026 18:40:16 +0000
ROA not after:            Sat 04 Sep 2027 18:45:16 +0000
asID:                     264562
IP address blocks:        45.174.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Sep 2026 00:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:70:e7:a2:41:7b:3e:f1:79:cc:02:14:3d:6d:b6:55:08:e2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
        Validity
            Not Before: Sep  5 18:40:16 2026 GMT
            Not After : Sep  4 18:45:16 2027 GMT
        Subject: CN=13496823AA97A0526E56B7C059C5E3664C3F8756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:5b:fb:38:47:11:aa:1f:c0:e5:a5:f8:d4:
                    c8:28:ca:fe:ef:62:51:1c:ee:84:0b:6f:b9:0d:79:
                    62:fc:d9:4e:de:8a:3e:c7:01:af:b4:6d:4f:94:e2:
                    1f:c2:30:74:83:6c:24:30:31:5d:f0:35:02:5b:0e:
                    80:1e:68:88:63:0d:f9:6a:d8:26:db:ce:fb:08:92:
                    06:2f:bc:4b:a8:4a:e1:14:ee:02:e3:47:2a:61:90:
                    c7:91:7d:8f:17:7f:fc:fb:da:f8:a6:a8:ee:cd:66:
                    f1:43:ac:f7:b5:30:b1:b0:73:d8:43:37:92:63:4c:
                    ba:bc:08:a6:7c:3e:df:67:aa:7b:69:f5:66:29:63:
                    ad:a1:82:60:4d:9b:89:80:4d:bc:af:df:51:a1:3f:
                    3a:ee:2b:d7:79:d6:19:29:04:4e:0d:d5:c7:d2:40:
                    88:df:7d:15:b3:3a:0d:08:be:76:e8:87:d6:84:91:
                    a1:68:29:92:f3:dd:69:36:7d:2e:99:1a:68:d7:1b:
                    de:8e:d6:fc:af:d2:88:37:03:d9:23:0b:80:97:c5:
                    48:4f:25:1b:7a:36:cf:e8:e8:7d:92:2b:16:b7:61:
                    90:8b:23:51:b9:8c:a7:dd:7c:32:10:21:37:9b:1c:
                    26:bc:8b:98:63:13:6c:4c:5c:38:e5:64:80:67:11:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:49:68:23:AA:97:A0:52:6E:56:B7:C0:59:C5:E3:66:4C:3F:87:56
            X509v3 Authority Key Identifier:
                keyid:0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:88:69:cb:74:95:90:b3:99:fe:42:b5:a8:9f:06:c8:13:e6:
         18:31:20:28:ad:3c:df:56:9b:5c:05:58:f7:1f:34:91:60:11:
         3f:f0:09:2f:31:af:3e:2d:5d:2a:83:69:45:f4:f0:5f:51:7b:
         37:0c:ca:9e:5c:de:f1:31:19:8b:53:6b:e8:cb:6c:77:3d:a7:
         a4:13:3b:2f:41:60:fa:db:b0:83:73:4e:3d:a6:fc:95:e1:a5:
         33:ee:2c:4b:1a:4f:bd:51:38:f6:82:aa:1b:b3:53:83:7d:b5:
         29:16:bc:15:5f:45:05:e2:93:1d:67:8e:7d:75:e7:44:0a:88:
         dd:50:6b:3d:2c:8f:51:99:b9:01:b7:6c:ae:3b:72:66:ec:36:
         47:bc:34:af:b1:05:ce:19:83:06:bf:e3:dc:24:28:cf:27:0a:
         02:89:5e:5b:ee:68:db:22:55:df:f2:71:e5:4d:18:da:f0:47:
         76:a3:bb:c0:12:20:8a:6f:7c:2c:44:63:6c:58:cc:ae:89:5f:
         83:1a:d5:b3:c8:e6:7f:21:66:d6:d6:b1:6a:cf:f3:f6:10:e0:
         4a:61:83:c4:7d:90:c5:18:a5:81:ee:6c:78:86:ad:76:21:6a:
         e4:be:c4:3e:1b:8d:2b:6b:bb:de:f0:98:04:b3:52:b6:0a:e2:
         22:4a:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:14:57 2026 by rpki-client