Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/34352e3138342e3230302e302f32322d3234203d3e20323639333534.roa
File:                     34352e3138342e3230302e302f32322d3234203d3e20323639333534.roa (raw, json)
Hash identifier:          oAXGiLpn0aQhtL1ykQlBFOgR8SytjRvwX65eG/AK+EY=
Subject key identifier:   FB:17:EA:FF:0F:19:63:CB:A3:19:E3:6B:A4:09:6E:0D:E7:2D:9A:CD
Certificate issuer:       /CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
Certificate serial:       78F018310179E2BCE93EA51579B36C8A4443C0F7
Authority key identifier: 39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/34352e3138342e3230302e302f32322d3234203d3e20323639333534.roa
Signing time:             Wed 16 Sep 2026 13:54:36 +0000
ROA not before:           Wed 16 Sep 2026 13:49:36 +0000
ROA not after:            Wed 15 Sep 2027 13:54:36 +0000
asID:                     269354
IP address blocks:        45.184.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl
                          rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:18:31:01:79:e2:bc:e9:3e:a5:15:79:b3:6c:8a:44:43:c0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
        Validity
            Not Before: Sep 16 13:49:36 2026 GMT
            Not After : Sep 15 13:54:36 2027 GMT
        Subject: CN=FB17EAFF0F1963CBA319E36BA4096E0DE72D9ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:29:57:73:b6:f2:e6:88:9a:38:ac:ad:bd:
                    44:cc:e9:5e:17:c6:f4:37:d4:e7:27:a8:80:5b:dd:
                    2c:ef:42:c7:93:fb:70:4e:7e:c8:0c:6c:80:26:2e:
                    b8:64:88:13:f5:50:f1:c7:8e:48:c3:05:85:bf:a6:
                    0a:bc:5a:da:97:33:9c:8c:ad:e7:93:93:2e:27:4d:
                    6a:fa:c5:03:24:14:8e:84:cd:3b:72:4c:cc:22:b3:
                    c8:48:34:6c:e5:b3:55:d5:13:eb:4c:fd:ba:b0:43:
                    60:59:cb:b1:22:2e:68:b7:e1:e6:a8:46:52:24:41:
                    90:31:e5:91:f4:99:6e:14:4b:a2:c9:a3:b6:15:91:
                    5a:fb:64:bd:d7:89:02:59:27:ab:ba:bf:5e:a9:e9:
                    2e:f2:d0:25:7d:9e:4c:8f:87:d6:63:5d:04:e0:13:
                    02:c4:99:5c:37:2a:b9:94:f3:15:10:2c:26:a3:c4:
                    10:07:76:4e:7c:13:17:d6:e7:44:3e:b9:7e:eb:a0:
                    6e:19:67:ee:7f:56:7d:5a:90:0e:3b:d1:c2:88:02:
                    af:7c:4f:22:92:b8:87:d9:45:6b:32:82:e5:be:6c:
                    55:2f:a9:99:60:fd:b0:07:59:9e:27:dc:73:bc:d0:
                    0f:f1:a9:bc:41:25:3d:b6:e7:db:d4:30:fb:b7:ba:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:EA:FF:0F:19:63:CB:A3:19:E3:6B:A4:09:6E:0D:E7:2D:9A:CD
            X509v3 Authority Key Identifier:
                keyid:39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/34352e3138342e3230302e302f32322d3234203d3e20323639333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:e2:72:37:08:30:b4:cf:4c:6d:6e:f7:3f:08:de:e9:0a:
         4c:84:3c:d8:87:78:5e:bf:29:0a:25:5c:1d:82:6a:5f:51:a5:
         be:33:72:19:d3:26:47:f7:ad:a8:8d:eb:3a:e7:e2:12:56:d2:
         4d:ae:9e:08:dc:c3:9e:b7:20:25:d0:fd:df:2c:4d:81:49:33:
         a6:6d:1f:4e:a0:3c:2f:41:98:33:b6:c3:2e:74:7c:4d:cb:a7:
         14:5f:dd:39:54:a0:70:83:e0:78:21:cc:8e:5c:7c:44:6d:36:
         29:e5:b6:25:d9:d7:35:ca:14:ca:b8:9b:e8:3e:2f:38:5a:5d:
         8a:cd:df:0b:49:0f:03:a7:b6:86:fb:cf:fe:29:f2:ae:14:44:
         ac:a0:8a:d4:56:cf:d9:3b:9d:d8:f2:a7:c0:68:51:05:16:41:
         3d:2d:da:6e:56:e7:d3:50:e8:b9:db:17:c5:a8:ec:89:6b:bd:
         eb:ab:47:67:a0:97:f1:c3:7c:d0:eb:aa:10:90:d1:53:da:3a:
         4f:62:3d:35:f0:bf:8b:cb:c6:66:61:e5:b8:6f:93:68:3d:74:
         31:8d:5b:7b:1a:d3:4d:86:f7:27:21:12:29:82:95:d9:c2:42:
         7a:33:cd:c3:48:80:20:f9:d1:01:ab:d0:8d:91:66:e8:1e:b5:
         e6:5e:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:19:09 2026 by rpki-client