Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (raw, json)
Hash identifier:          arN6aQOrJve+3nKdJcuNgR6pjVCswMXmWziAaC7dWZQ=
Subject key identifier:   C3:7F:41:75:09:6C:FD:F9:9E:E3:D4:21:FF:EF:3B:F7:76:6F:20:02
Certificate issuer:       /CN=E010DB89AD0366754D9DEBBC81CF337A14212BF0
Certificate serial:       3FF2E13BE3BD83D93B36142F5596B6E5961C2273
Authority key identifier: E0:10:DB:89:AD:03:66:75:4D:9D:EB:BC:81:CF:33:7A:14:21:2B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E010DB89AD0366754D9DEBBC81CF337A14212BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa
Signing time:             Fri 14 Aug 2026 13:02:30 +0000
ROA not before:           Fri 14 Aug 2026 12:57:30 +0000
ROA not after:            Fri 13 Aug 2027 13:02:30 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/E010DB89AD0366754D9DEBBC81CF337A14212BF0.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/E010DB89AD0366754D9DEBBC81CF337A14212BF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E010DB89AD0366754D9DEBBC81CF337A14212BF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f2:e1:3b:e3:bd:83:d9:3b:36:14:2f:55:96:b6:e5:96:1c:22:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E010DB89AD0366754D9DEBBC81CF337A14212BF0
        Validity
            Not Before: Aug 14 12:57:30 2026 GMT
            Not After : Aug 13 13:02:30 2027 GMT
        Subject: CN=C37F4175096CFDF99EE3D421FFEF3BF7766F2002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:b9:a9:6a:98:1e:31:9a:90:39:24:22:50:
                    cf:5f:45:53:8c:35:ff:d2:09:ae:67:1d:fd:4f:c9:
                    84:4c:e4:2c:9d:bb:bc:02:f4:6f:cb:54:04:2e:30:
                    04:0d:bf:a0:7f:35:bd:5d:08:d4:78:40:ca:b0:01:
                    93:ae:9a:7c:36:8a:37:9a:cd:29:c8:c6:b5:21:3f:
                    73:50:fa:eb:9a:ab:37:d6:5f:de:e0:bb:d3:c4:d4:
                    3c:1f:d5:63:71:f7:28:77:88:38:23:15:50:67:ec:
                    3f:5a:d6:32:94:a4:92:4b:c2:c4:5b:d0:54:cd:5f:
                    de:a0:61:5a:65:b8:be:f7:0f:45:95:7b:be:52:1d:
                    29:6e:a0:0e:68:a9:05:4b:35:8e:98:25:36:66:1c:
                    6f:dc:c6:1e:86:d4:8b:ef:6a:26:77:c7:ef:bd:44:
                    96:69:9c:52:29:8e:a9:ee:41:c9:f5:9c:af:30:dc:
                    23:a3:fe:1e:2a:3c:65:04:c0:03:c8:08:f4:38:a2:
                    e6:ec:fa:26:bb:61:7a:15:54:b4:d2:2d:e6:2d:f8:
                    dc:90:fa:84:09:d9:5d:a3:a6:ed:8c:69:4a:7b:f3:
                    8c:26:0d:96:61:75:06:6c:bc:0f:a5:99:a6:10:20:
                    de:b6:ed:53:bf:85:b9:bc:df:43:62:a9:71:2c:b0:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:41:75:09:6C:FD:F9:9E:E3:D4:21:FF:EF:3B:F7:76:6F:20:02
            X509v3 Authority Key Identifier:
                keyid:E0:10:DB:89:AD:03:66:75:4D:9D:EB:BC:81:CF:33:7A:14:21:2B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/E010DB89AD0366754D9DEBBC81CF337A14212BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E010DB89AD0366754D9DEBBC81CF337A14212BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3332203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:10:c0:23:3e:7b:7d:c7:e9:ba:65:39:4d:4b:98:b7:c1:
         f1:98:95:c5:84:35:9a:f6:18:c8:80:26:73:59:ca:ff:4a:71:
         7c:b4:cb:b6:94:10:31:33:94:31:ef:24:81:a3:c4:06:79:32:
         ba:4e:86:71:d9:ba:45:df:0f:d6:96:35:68:0a:20:f2:f5:47:
         e0:c5:69:ed:f9:9f:c7:2e:1b:b7:77:92:8f:ef:d4:39:4f:aa:
         aa:bb:bb:40:46:17:02:9d:63:17:cb:12:61:a5:43:b9:e0:10:
         73:f7:f1:8d:af:eb:b6:1f:7f:b5:dc:a4:f7:b3:40:18:92:60:
         f5:cb:65:e4:00:fc:da:fc:ad:6c:43:d9:79:91:e3:6a:ad:6c:
         3c:1c:d6:e6:d1:d2:d9:19:fd:87:3a:25:11:1f:b4:c8:94:bc:
         0f:ad:90:b6:67:2b:e2:87:6b:63:4c:b3:3c:ac:3b:0b:d1:5c:
         3a:98:30:1f:4c:52:a1:e8:eb:7b:7d:47:ad:b4:0c:79:d7:0a:
         2d:aa:f5:4d:d4:7f:ff:e4:0b:37:64:1e:33:3c:10:7f:f5:4a:
         25:47:03:25:0d:23:fe:15:01:33:77:b2:5e:0b:24:da:3c:7d:
         99:89:5e:c1:0a:6a:0a:f4:a8:ed:7b:3b:3f:df:e7:e9:e6:b0:
         03:6e:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:37:49 2026 by rpki-client