Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
File:                     34352e3137382e32312e302f32342d3234203d3e20323639303135.roa (raw, json)
Hash identifier:          Odt0x66o+h74UUHoJWhC5P6ztblLQ33+Ln8lI6FHQes=
Subject key identifier:   2A:CA:3A:85:7A:32:2E:10:01:4A:40:1F:BF:85:D1:02:E7:4C:11:7F
Certificate issuer:       /CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
Certificate serial:       26616880F8F96776FDC8D09618DB9731440321CE
Authority key identifier: 13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa
Signing time:             Thu 01 Oct 2026 14:48:41 +0000
ROA not before:           Thu 01 Oct 2026 14:43:41 +0000
ROA not after:            Thu 30 Sep 2027 14:48:41 +0000
asID:                     269015
IP address blocks:        45.178.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 10:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:61:68:80:f8:f9:67:76:fd:c8:d0:96:18:db:97:31:44:03:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185
        Validity
            Not Before: Oct  1 14:43:41 2026 GMT
            Not After : Sep 30 14:48:41 2027 GMT
        Subject: CN=2ACA3A857A322E10014A401FBF85D102E74C117F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:08:60:f6:b9:ad:7d:ce:6b:85:92:6f:e0:
                    8b:e7:cc:2d:80:c1:56:4e:dd:0e:0f:02:10:63:6d:
                    25:5b:f2:82:03:a5:27:d0:d1:ec:6f:7e:7a:1f:3f:
                    ab:b1:bb:63:6b:93:af:9b:9f:c7:fd:17:d0:34:39:
                    cb:d9:98:df:89:4c:22:04:7d:17:88:4f:1b:12:c8:
                    e2:0d:5c:09:b3:70:55:36:46:6c:5c:86:4e:56:a2:
                    8b:10:cd:50:7d:71:e9:67:45:15:b3:08:2f:30:5c:
                    42:36:76:d5:d1:00:e4:f5:cd:8b:7b:b0:eb:bf:6b:
                    6b:d4:be:a1:a7:0a:7f:7b:4a:a3:14:cf:56:8c:12:
                    2d:81:64:ff:82:61:91:e4:4f:85:49:df:c7:b4:8b:
                    47:74:85:3c:aa:ae:bb:c1:d8:33:ad:66:f1:dc:e2:
                    0c:bb:da:c6:86:15:56:d4:3d:26:18:10:b2:89:6a:
                    c2:57:5b:31:59:e7:a2:5f:03:e6:8a:34:bf:57:06:
                    c8:3e:fd:64:39:bf:04:f9:28:fe:99:8c:8e:39:f8:
                    d5:29:ac:11:7f:21:d0:11:80:75:86:bd:28:94:29:
                    12:35:6e:87:99:19:d0:89:ed:5b:a7:30:8a:a5:55:
                    22:98:27:7d:fb:1d:a0:37:7f:b4:a6:c9:f1:cb:72:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:3A:85:7A:32:2E:10:01:4A:40:1F:BF:85:D1:02:E7:4C:11:7F
            X509v3 Authority Key Identifier:
                keyid:13:DC:DD:1F:DB:5A:E5:67:97:0E:F8:DE:DB:37:8C:1F:DC:E8:41:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13DCDD1FDB5AE567970EF8DEDB378C1FDCE84185.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32312e302f32342d3234203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:60:94:70:9c:1f:4f:c6:e0:ef:5c:e8:3d:12:de:95:47:de:
         22:c6:ab:18:a2:8b:97:24:a9:e3:ca:51:10:3e:a8:51:45:95:
         5d:90:3c:fe:9f:3a:76:9a:77:c2:8c:0c:0b:97:3c:c5:08:57:
         a5:36:76:20:22:04:84:3e:3a:c5:f4:a3:e4:53:77:4a:34:bc:
         04:88:51:a1:4b:98:d2:af:f2:6b:e8:a3:c2:42:c6:62:fc:74:
         b9:37:fd:33:01:68:c2:43:80:b4:f3:90:be:26:64:60:74:e3:
         1f:17:ee:5a:ed:42:5d:d6:11:fa:bd:aa:c1:16:a1:53:0f:51:
         c9:80:e3:69:04:e5:f9:24:b9:7f:ef:ec:67:b5:a0:4e:ef:d8:
         35:f8:d4:75:26:1e:6e:0a:44:2d:68:72:1e:85:30:9b:0f:60:
         d6:21:e7:1d:ff:7c:31:2c:85:e1:66:c4:7e:84:3f:f3:e7:00:
         ca:0e:ce:4d:57:05:fb:aa:31:f0:bc:25:00:fc:a4:9a:32:b4:
         69:d2:63:fe:a6:c3:bf:0a:66:8f:e5:72:3a:8e:fe:66:b5:1b:
         10:bc:58:60:4e:4f:57:42:e3:be:dc:51:26:11:2f:8f:8b:77:
         0d:11:f2:03:16:70:63:65:89:d9:ec:48:f7:6f:ff:f1:eb:5b:
         c7:ce:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:54:45 2026 by rpki-client