Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637393938.roa
File:                     34352e3136372e39382e302f32342d3234203d3e20323637393938.roa (raw, json)
Hash identifier:          yZMyXq/cdtnOqMWS3eKmnA8ZzawG3YpA5lpKGRrCrYM=
Subject key identifier:   61:37:7F:9E:6B:13:18:30:61:52:77:A2:8E:C5:4E:E3:A6:A3:B4:BF
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       12ED78BF8F5314618C84CF7A2DD3C46917046B3B
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637393938.roa
Signing time:             Tue 25 Aug 2026 21:55:16 +0000
ROA not before:           Tue 25 Aug 2026 21:50:16 +0000
ROA not after:            Tue 24 Aug 2027 21:55:16 +0000
asID:                     267998
IP address blocks:        45.167.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 18:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ed:78:bf:8f:53:14:61:8c:84:cf:7a:2d:d3:c4:69:17:04:6b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Aug 25 21:50:16 2026 GMT
            Not After : Aug 24 21:55:16 2027 GMT
        Subject: CN=61377F9E6B131830615277A28EC54EE3A6A3B4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:e7:9e:e7:5e:9d:be:eb:0b:30:c5:ec:1b:
                    4f:7b:6b:8c:d9:b3:08:f4:c0:66:c4:a0:2b:53:62:
                    78:ed:0d:7d:4d:02:72:ca:6f:df:b1:d1:8c:63:85:
                    6e:b2:c3:f3:f6:eb:a9:86:92:96:e4:6f:0a:29:17:
                    c3:65:f9:64:17:46:5e:e9:a9:08:0e:8b:d1:2c:61:
                    8c:73:ff:c8:cd:66:34:01:97:ea:ec:a7:27:35:79:
                    57:23:87:c8:06:60:bc:fc:47:2d:7f:67:74:bb:76:
                    e6:9c:fe:df:38:62:9e:ef:ee:92:50:f7:4f:68:f5:
                    c6:35:bd:5a:49:08:54:3f:90:13:0a:a9:36:14:3c:
                    19:33:d1:cf:7a:ef:60:e9:0b:73:43:50:00:cb:39:
                    f6:99:49:1e:5c:ff:df:5b:21:64:45:5e:7f:fb:14:
                    f4:20:6b:05:fa:0e:23:8c:d5:37:65:0f:4b:ef:38:
                    24:ea:5b:b7:f1:1e:1a:59:94:c9:dd:1d:be:c9:ce:
                    06:de:43:34:41:56:d3:87:68:34:8b:c0:22:a5:fb:
                    a9:c8:3b:4c:0c:5b:37:3b:7d:5b:96:07:7b:50:a7:
                    a4:f7:ca:0b:21:7a:b3:0a:5c:1d:07:af:76:9f:07:
                    01:7b:4b:a6:66:61:6e:90:23:1c:4f:f8:01:e8:0b:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:7F:9E:6B:13:18:30:61:52:77:A2:8E:C5:4E:E3:A6:A3:B4:BF
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/34352e3136372e39382e302f32342d3234203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:44:6c:18:4c:b2:79:ef:64:7f:ca:25:46:23:ca:c7:05:07:
         3e:a0:86:0d:17:72:63:4d:e0:85:42:3f:f0:e3:54:0f:99:0c:
         ec:02:5e:c3:bf:30:55:1f:44:16:57:32:0a:fb:8c:f1:90:64:
         a7:d7:8e:1c:19:1c:5a:f7:3d:9e:1b:7c:4a:f7:7e:31:72:ee:
         46:b6:0f:69:bf:42:ce:0e:f8:c4:6f:fc:8c:be:3d:a6:dd:d2:
         72:02:4e:f7:a2:d5:45:5f:a6:ab:a8:f0:9c:52:fa:79:47:27:
         53:b3:62:63:3c:bf:95:3a:85:69:04:04:66:1f:f1:18:ca:c6:
         e1:7f:df:b2:62:14:58:f9:14:1e:55:1b:1f:34:e9:f9:1d:bb:
         c6:3b:e9:8b:6d:b2:a4:8e:20:e5:10:98:9d:8e:d2:29:f4:34:
         26:5a:f0:f5:57:80:a1:de:e9:6d:71:b8:b6:b5:5f:b8:ef:2c:
         16:36:6a:ae:08:06:bc:b2:43:b9:0d:54:7e:79:71:d8:b9:bb:
         dd:cd:9c:d5:a0:c5:d8:ee:4e:d7:bf:f8:59:76:bb:da:d0:85:
         77:7a:86:48:c6:f2:bc:52:ac:f4:ac:fa:20:ae:32:b0:d2:e7:
         14:55:78:3c:04:b2:47:c6:1b:9a:d4:e4:11:ff:d9:c5:94:80:
         4e:a6:d7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:21:39 2026 by rpki-client