Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa (raw, json)
Hash identifier:          4Jnfsqa+x3k7/xk9LUZw7vsHs9D/QrapTbQ37W1aUuA=
Subject key identifier:   1B:E7:DB:21:5D:B5:E6:6A:F6:0F:91:3B:6E:C4:C7:7E:8F:E3:95:D9
Certificate issuer:       /CN=4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280
Certificate serial:       7808C6E348139DA9C8FD19950983D2A6CCD28743
Authority key identifier: 4F:86:DC:C9:2E:C8:AF:73:5F:F8:B3:31:5D:F2:4B:E1:4B:0F:D2:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa
Signing time:             Thu 20 Aug 2026 16:40:42 +0000
ROA not before:           Thu 20 Aug 2026 16:35:42 +0000
ROA not after:            Thu 19 Aug 2027 16:40:42 +0000
asID:                     267675
IP address blocks:        45.224.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.crl
                          rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:08:c6:e3:48:13:9d:a9:c8:fd:19:95:09:83:d2:a6:cc:d2:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280
        Validity
            Not Before: Aug 20 16:35:42 2026 GMT
            Not After : Aug 19 16:40:42 2027 GMT
        Subject: CN=1BE7DB215DB5E66AF60F913B6EC4C77E8FE395D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:21:3a:f5:08:38:cf:95:26:3f:55:12:50:
                    2c:e1:b7:9d:bf:6e:89:29:1f:5c:b9:90:0e:a1:c6:
                    a2:8a:fb:67:f6:2c:a0:e8:ea:5f:ce:79:71:94:c8:
                    84:f1:73:e2:87:f6:52:b6:9f:01:9d:2f:32:ad:ae:
                    7f:5e:26:c1:0c:c3:f5:c9:87:de:2f:2c:f7:c9:0f:
                    3d:0e:06:d5:30:ce:f6:12:47:37:cd:1a:ae:8e:e8:
                    bd:2c:6a:98:2a:44:65:27:72:a3:e0:e6:e4:5c:ea:
                    a0:df:9d:84:2c:f2:0a:67:1d:64:21:e1:13:83:c8:
                    05:95:d4:31:a5:e5:92:01:1e:af:d0:15:c4:a8:6d:
                    95:4d:84:c2:25:63:3a:cc:86:8a:65:81:0c:c5:88:
                    3f:cc:e2:00:dd:f4:91:8a:08:c2:3e:67:47:27:d9:
                    1f:48:b5:57:8b:30:92:40:7e:d4:4d:07:b8:fe:51:
                    fc:05:4e:03:8e:12:9d:dc:87:2d:e4:41:1b:28:24:
                    a2:0f:88:cf:e9:34:2e:1f:78:71:93:f8:f1:a6:d8:
                    2a:43:4e:85:55:06:aa:21:19:c3:05:ff:8c:73:13:
                    04:6a:d0:57:5e:98:b3:02:2e:4a:02:12:dd:24:df:
                    87:7c:02:7d:08:70:9e:86:46:65:a9:27:5a:01:2f:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:DB:21:5D:B5:E6:6A:F6:0F:91:3B:6E:C4:C7:7E:8F:E3:95:D9
            X509v3 Authority Key Identifier:
                keyid:4F:86:DC:C9:2E:C8:AF:73:5F:F8:B3:31:5D:F2:4B:E1:4B:0F:D2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F86DCC92EC8AF735FF8B3315DF24BE14B0FD280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233362e302f32322d3232203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:24:7f:6f:7a:b0:4f:3c:38:15:a9:68:1e:ac:48:04:87:
         e3:6d:60:8c:79:11:1b:e3:66:58:0b:37:da:d1:42:ed:84:ac:
         23:33:8a:91:b2:c9:c8:d8:62:b2:29:44:44:aa:0d:d6:a9:7a:
         44:0b:52:01:fe:a7:54:69:3f:53:cc:e4:4c:24:92:f1:91:da:
         ae:26:26:e1:fa:a2:e2:c1:9e:ab:b5:77:b0:0c:a5:cd:4f:02:
         2d:17:2d:18:da:03:9a:5a:ec:5d:2b:88:df:d2:7c:aa:ca:01:
         f3:03:fa:e1:65:73:53:88:89:12:f8:b3:bc:b1:f6:1b:40:7f:
         5d:e2:69:f9:7b:1c:57:0a:7c:7f:db:1d:9c:23:b7:d9:7a:4e:
         2c:23:6b:89:2e:c1:9d:87:d5:49:49:cb:b0:0b:68:4e:7b:24:
         02:d2:ae:7f:d1:43:25:d3:b4:72:bc:8f:a1:8a:7e:bb:c9:8a:
         16:0b:9d:42:2c:5a:0f:e4:83:2c:d1:5f:28:6a:33:98:93:fa:
         db:aa:52:2e:f2:57:99:51:00:e0:6f:12:de:c2:8a:25:34:4b:
         55:2a:08:80:bb:2c:a9:59:fb:89:3a:f2:64:33:b5:f6:9f:3e:
         c5:e6:f3:3b:56:9c:69:f8:94:e7:80:50:b6:ec:ef:ed:3c:18:
         24:56:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:06 2026 by rpki-client