Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa
File:                     34352e3136342e35322e302f32322d3234203d3e20323638353938.roa (raw, json)
Hash identifier:          WZcvOpqJ6VCx46nstgOZL7uBeYT9sdGwHsxYVtePgjA=
Subject key identifier:   0D:D7:FD:39:A6:56:FA:7A:ED:FE:03:43:3D:5F:5A:70:B6:D9:D7:F4
Certificate issuer:       /CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
Certificate serial:       9E314A0F3F19226B64C52FC424BB2F76BD93EF
Authority key identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa
Signing time:             Wed 16 Sep 2026 14:31:22 +0000
ROA not before:           Wed 16 Sep 2026 14:26:22 +0000
ROA not after:            Wed 15 Sep 2027 14:31:22 +0000
asID:                     268598
IP address blocks:        45.164.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl
                          rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:31:4a:0f:3f:19:22:6b:64:c5:2f:c4:24:bb:2f:76:bd:93:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
        Validity
            Not Before: Sep 16 14:26:22 2026 GMT
            Not After : Sep 15 14:31:22 2027 GMT
        Subject: CN=0DD7FD39A656FA7AEDFE03433D5F5A70B6D9D7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:05:14:d6:e0:44:81:4a:b1:e6:9a:11:68:
                    6c:89:c2:81:c3:3b:15:9f:19:95:f1:a5:84:73:f1:
                    82:8c:4a:3c:86:4e:51:38:a8:95:7c:b1:ed:91:f8:
                    d6:03:6f:97:d4:e6:95:e4:3d:03:67:63:22:10:85:
                    5a:0f:bf:56:0d:69:68:34:9e:26:dc:9e:b8:e4:72:
                    88:ae:d5:09:2a:88:f1:e2:29:1e:17:8d:e3:df:b3:
                    9f:2b:64:dc:86:7b:ae:2a:c3:ec:2f:e4:d4:22:d9:
                    77:15:6e:6f:27:32:9d:2a:56:4a:24:a0:89:cb:c0:
                    e1:71:89:e7:86:f2:e5:1f:9b:d0:3a:ba:57:54:7d:
                    2a:a6:82:e5:66:50:0b:ed:44:ea:df:15:02:65:53:
                    07:ba:90:30:17:9d:a7:ff:b0:b9:be:d6:a7:da:9b:
                    92:ea:a8:0a:4e:66:27:38:2c:1d:5f:fe:df:96:77:
                    59:9f:cc:06:7e:c9:f7:d6:c7:84:9e:4c:08:db:ca:
                    8f:99:d4:2b:fd:17:7d:b3:89:a5:b3:3b:ba:fb:0a:
                    71:0d:4f:ae:96:0b:e1:5e:b0:db:5a:76:a8:87:76:
                    bd:f0:93:30:a3:7e:fd:68:8b:84:a1:06:20:00:18:
                    a9:a0:14:aa:a6:48:15:c3:3d:53:c0:1d:a5:4b:50:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:FD:39:A6:56:FA:7A:ED:FE:03:43:3D:5F:5A:70:B6:D9:D7:F4
            X509v3 Authority Key Identifier:
                keyid:35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/34352e3136342e35322e302f32322d3234203d3e20323638353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:4c:94:60:bc:44:73:37:4a:09:8c:a3:e6:31:87:2f:be:
         32:6d:79:25:63:de:c4:a9:a3:8e:d9:44:3a:b5:99:b0:8c:47:
         aa:f2:86:24:98:d1:7e:12:bd:d6:69:9a:cb:af:4a:9e:d8:28:
         d5:ee:2a:42:96:5d:f8:ab:81:d6:1b:f3:f4:a7:c6:e5:e9:92:
         51:12:98:05:28:c6:89:99:82:91:9c:59:b5:cf:4a:bd:29:c2:
         12:d4:5e:c3:c2:91:06:de:93:6e:69:b1:1e:b4:9b:a4:55:47:
         1a:29:5d:6c:ee:3e:0d:66:1c:c4:30:b8:b6:d9:16:cc:c6:8f:
         c9:99:58:e6:d0:af:9b:ae:e5:40:8f:cf:2c:46:ce:06:64:89:
         33:17:0f:53:e5:47:d6:2d:0d:54:bd:e6:aa:b1:6d:7f:9c:1d:
         fc:63:4c:18:ae:32:86:6a:49:1d:5f:35:47:4f:ae:3d:b2:86:
         9d:1d:d6:46:ed:6f:ff:92:04:c5:67:f9:b1:42:27:c2:49:95:
         8d:8e:48:4f:9d:02:b6:99:36:07:f2:99:70:78:d9:7a:63:2e:
         44:54:a7:86:d1:f6:98:aa:db:7d:0c:e6:8c:4b:7d:72:e2:73:
         79:94:0d:0c:bb:88:f3:ed:81:84:36:bf:f6:c2:47:89:d3:5c:
         ae:b9:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:01:19 2026 by rpki-client