Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31352e302f32342d3234203d3e20323638383734.roa
File:                     34352e3137352e31352e302f32342d3234203d3e20323638383734.roa (raw, json)
Hash identifier:          5us2oZa2MhouHLCy/uAVbNZzX6CKDQce8B1KnqTlr40=
Subject key identifier:   63:36:9B:DF:B5:02:94:9D:AD:48:D4:4B:1D:09:21:54:B0:EE:A6:5E
Certificate issuer:       /CN=F469854419848E3547CF0F115AAF87F2365F8C5A
Certificate serial:       B73375BCFC77DF13551114DDC4E8319883B7C2
Authority key identifier: F4:69:85:44:19:84:8E:35:47:CF:0F:11:5A:AF:87:F2:36:5F:8C:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F469854419848E3547CF0F115AAF87F2365F8C5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31352e302f32342d3234203d3e20323638383734.roa
Signing time:             Tue 11 Aug 2026 17:48:15 +0000
ROA not before:           Tue 11 Aug 2026 17:43:15 +0000
ROA not after:            Tue 10 Aug 2027 17:48:15 +0000
asID:                     268874
IP address blocks:        45.175.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/F469854419848E3547CF0F115AAF87F2365F8C5A.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/F469854419848E3547CF0F115AAF87F2365F8C5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F469854419848E3547CF0F115AAF87F2365F8C5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:33:75:bc:fc:77:df:13:55:11:14:dd:c4:e8:31:98:83:b7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F469854419848E3547CF0F115AAF87F2365F8C5A
        Validity
            Not Before: Aug 11 17:43:15 2026 GMT
            Not After : Aug 10 17:48:15 2027 GMT
        Subject: CN=63369BDFB502949DAD48D44B1D092154B0EEA65E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:ee:c1:53:01:09:8f:50:fb:c8:73:37:2a:
                    3e:aa:fb:e1:72:df:9f:ad:e3:c6:fc:2a:c6:53:ff:
                    c4:aa:af:d0:a8:7f:8a:97:95:a5:1f:93:8e:b5:95:
                    b1:b7:23:f3:d1:92:e3:83:68:b6:fa:91:0d:fb:e4:
                    3f:40:86:a0:86:66:25:9f:82:23:63:7b:c4:b3:f3:
                    d5:61:b0:1d:b0:7d:bf:dc:05:24:81:92:8d:a5:af:
                    44:c7:5d:9d:f8:11:77:ed:6a:ed:44:16:80:5d:85:
                    66:63:27:7f:cf:97:09:aa:1e:f3:1c:23:c7:98:eb:
                    ee:62:11:7d:c3:21:23:b6:4b:45:a4:f7:53:d8:5a:
                    e0:2b:16:ed:52:a0:13:f3:7d:39:18:e9:41:59:ff:
                    77:d8:35:48:58:65:41:17:72:f0:f7:6f:2d:fc:fd:
                    65:36:8f:5d:9f:f5:4e:35:79:56:59:23:e9:ab:bf:
                    3b:62:0d:e0:6e:5e:4f:f4:c1:7d:89:57:0e:bc:75:
                    20:7c:d2:ba:6c:38:37:d3:f0:bb:1f:97:ce:5d:96:
                    48:4a:19:d3:2e:2a:ad:51:32:bc:4c:ad:fd:84:e6:
                    44:d0:07:c1:42:ca:87:73:26:c7:99:cf:36:ac:08:
                    2c:27:53:23:6d:d3:01:6f:00:60:dc:ca:be:ff:af:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:36:9B:DF:B5:02:94:9D:AD:48:D4:4B:1D:09:21:54:B0:EE:A6:5E
            X509v3 Authority Key Identifier:
                keyid:F4:69:85:44:19:84:8E:35:47:CF:0F:11:5A:AF:87:F2:36:5F:8C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/F469854419848E3547CF0F115AAF87F2365F8C5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F469854419848E3547CF0F115AAF87F2365F8C5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/34352e3137352e31352e302f32342d3234203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:36:e4:27:0b:d4:bd:2c:e8:4d:0b:e4:bf:49:33:2b:da:
         2c:13:99:73:72:13:c0:c2:a7:51:9a:0b:af:6d:bc:f5:34:89:
         0e:9a:4d:99:77:26:4d:2b:c5:87:aa:dd:9d:85:51:c1:fe:fe:
         59:0a:42:83:7a:32:49:e2:36:4a:b9:a4:9d:45:2e:13:43:18:
         cd:39:5a:93:bc:30:1f:cf:67:81:f5:37:87:bd:72:b5:27:29:
         7a:a5:4c:31:2c:40:94:98:7a:6a:bc:81:8d:bf:52:1e:8f:d5:
         3a:12:13:dd:0b:46:73:e8:3a:32:4c:58:77:20:6c:7c:1a:19:
         9f:1a:ab:8a:3a:c6:f7:9c:86:f6:55:91:43:7e:78:93:6d:14:
         4a:f5:e0:1c:f6:23:1d:ec:6a:2c:c7:09:79:e3:14:c3:7b:0f:
         aa:77:a0:fb:a5:ab:5f:ec:f4:95:b6:26:82:a0:83:50:4b:b1:
         0f:28:16:59:fa:bd:3c:4d:39:a9:75:14:96:ae:41:ac:54:91:
         ec:66:4e:9e:42:ca:df:0b:3f:d5:09:8d:73:cf:be:8d:2d:b9:
         49:73:b0:9f:03:06:0f:b3:7c:82:52:be:90:23:bb:99:c6:98:
         fe:9b:90:09:07:83:c8:8e:56:c3:6b:2b:71:4f:69:2e:cd:d2:
         ae:a4:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:20:17 2026 by rpki-client