Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3234203d3e20323638363237.roa
File:                     34352e3136342e3136342e302f32322d3234203d3e20323638363237.roa (raw, json)
Hash identifier:          7TlzajFNI1gpw00Cu4ZGCt83sTUes68v4NN6JycNfiQ=
Subject key identifier:   36:BA:68:67:F8:D8:BB:6C:32:DD:F6:7C:9C:4B:68:28:6C:4D:8F:C5
Certificate issuer:       /CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
Certificate serial:       20B7C5292ED3F6CA18051CC4E72C0CCDF55D0204
Authority key identifier: AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3234203d3e20323638363237.roa
Signing time:             Fri 28 Aug 2026 23:00:51 +0000
ROA not before:           Fri 28 Aug 2026 22:55:51 +0000
ROA not after:            Fri 27 Aug 2027 23:00:51 +0000
asID:                     268627
IP address blocks:        45.164.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl
                          rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 10:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b7:c5:29:2e:d3:f6:ca:18:05:1c:c4:e7:2c:0c:cd:f5:5d:02:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFDEC226108DFBCC9B88A58C05144360A3B8476
        Validity
            Not Before: Aug 28 22:55:51 2026 GMT
            Not After : Aug 27 23:00:51 2027 GMT
        Subject: CN=36BA6867F8D8BB6C32DDF67C9C4B68286C4D8FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:3d:b9:ce:50:e3:b1:80:b5:61:c5:ef:6b:
                    14:72:5a:9b:a7:61:d9:b0:5a:05:d6:0f:32:a4:fb:
                    c5:d4:9e:b5:0e:31:62:8e:9f:40:c0:01:11:f1:6d:
                    4d:70:35:8b:f6:10:55:39:82:f6:3e:16:3d:2a:1c:
                    38:78:19:7a:c9:00:ec:e0:a7:b1:3e:6b:8e:df:e2:
                    73:f4:c5:2c:4a:19:e4:ac:c2:ad:2c:7c:e2:b4:23:
                    74:ce:f6:45:d8:e9:01:aa:7b:61:6e:0a:d2:c9:47:
                    12:c6:b8:1f:31:45:e6:27:6f:72:c4:19:f5:21:3d:
                    2f:09:a5:0d:76:24:83:1d:0a:32:d2:18:02:5a:c3:
                    70:9c:f0:48:55:93:e6:1d:54:9f:11:4e:66:2c:6a:
                    0a:23:8c:b7:c1:1d:bd:29:02:46:ae:ac:82:57:79:
                    bd:de:ca:1a:f6:d4:fc:d9:e6:4b:6f:f6:ed:57:51:
                    8e:c3:a1:6f:ac:bb:48:72:96:b3:21:5b:75:5d:2b:
                    c8:77:2e:39:6d:02:8c:04:19:31:2a:38:32:11:d4:
                    2e:aa:a1:54:cc:05:ae:a5:31:a8:0b:59:ff:0e:49:
                    08:56:09:70:42:6a:74:f4:ab:82:78:a3:43:11:a5:
                    28:d7:3e:ee:fa:3f:fe:c5:29:a4:06:78:2c:d4:a5:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BA:68:67:F8:D8:BB:6C:32:DD:F6:7C:9C:4B:68:28:6C:4D:8F:C5
            X509v3 Authority Key Identifier:
                keyid:AF:FD:EC:22:61:08:DF:BC:C9:B8:8A:58:C0:51:44:36:0A:3B:84:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/AFFDEC226108DFBCC9B88A58C05144360A3B8476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFDEC226108DFBCC9B88A58C05144360A3B8476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fPpsQdCTHpkaAcq17q9wtdns9gvJ2hbeM4ogy9nRwuD/0/34352e3136342e3136342e302f32322d3234203d3e20323638363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:38:af:01:94:ff:48:93:93:58:9d:d3:e0:63:f4:d6:fc:
         32:c2:a2:08:12:7b:ed:9e:9f:38:90:0b:4b:8d:4b:6d:4d:87:
         2a:eb:6e:ef:45:f0:84:af:a8:ba:1f:86:6d:cd:e1:e1:b0:56:
         dc:5d:c2:5e:e4:20:27:dd:b9:d4:1d:2e:6c:52:15:19:d3:41:
         94:e7:9d:c0:0c:73:af:36:a6:d4:3d:0b:c7:f6:81:18:ff:ad:
         8c:82:fd:31:2c:3f:b7:6f:37:b0:9a:14:55:1b:99:76:7b:95:
         ca:46:c5:36:e7:bc:75:46:48:4d:e3:66:1d:45:8d:a4:fb:bd:
         36:b4:0d:b6:15:84:54:7c:dd:44:f0:d1:51:fb:22:35:09:b4:
         19:d0:18:d9:5f:38:e5:ec:a6:87:9d:c8:f1:c6:68:72:e5:ee:
         77:49:c8:6e:e1:ba:38:72:01:73:cb:ab:70:db:9f:0a:8e:aa:
         84:1d:5a:71:fe:21:d9:54:3c:5b:7c:77:34:2c:e3:05:37:8a:
         9e:ee:d8:81:2c:54:64:cb:7e:cf:f4:c3:c7:df:d7:cc:de:b5:
         ae:cb:64:a2:2c:e2:bd:92:ec:07:e4:f2:dd:81:bd:fc:b7:c3:
         60:bc:97:1b:0c:e3:72:45:1f:b3:21:14:23:7c:9e:ee:fd:99:
         59:94:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:17:42 2026 by rpki-client