Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132392e302f32342d3234203d3e20323639343636.roa
File:                     34352e3138372e3132392e302f32342d3234203d3e20323639343636.roa (raw, json)
Hash identifier:          Lbvn/0Jcju+e2yP25GRDdnCV9HrVpxcc0Zpwp7yU9Hc=
Subject key identifier:   0D:14:1E:35:10:19:8E:41:5D:98:6B:33:A7:E8:58:D5:DD:7C:5B:CB
Certificate issuer:       /CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
Certificate serial:       04BF535D2006E942BB760A6B366CD4243B89857B
Authority key identifier: A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132392e302f32342d3234203d3e20323639343636.roa
Signing time:             Tue 29 Sep 2026 00:37:45 +0000
ROA not before:           Tue 29 Sep 2026 00:32:45 +0000
ROA not after:            Tue 28 Sep 2027 00:37:45 +0000
asID:                     269466
IP address blocks:        45.187.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bf:53:5d:20:06:e9:42:bb:76:0a:6b:36:6c:d4:24:3b:89:85:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
        Validity
            Not Before: Sep 29 00:32:45 2026 GMT
            Not After : Sep 28 00:37:45 2027 GMT
        Subject: CN=0D141E3510198E415D986B33A7E858D5DD7C5BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:de:eb:a8:9b:af:b0:42:c3:1c:f9:e9:1c:
                    4d:32:62:aa:80:3c:10:85:db:dd:01:e6:96:94:ce:
                    98:97:ec:9f:6a:f9:f1:b2:71:23:66:60:1c:91:a0:
                    68:17:b5:6f:44:60:ef:16:f6:3e:cc:41:77:63:47:
                    e5:97:57:f3:65:53:42:f9:32:06:3d:64:85:e0:52:
                    2a:cb:23:f2:4e:13:e1:57:66:a7:a0:b1:66:5e:96:
                    ed:c2:c6:9a:d7:78:28:27:af:a3:ae:35:33:cf:9e:
                    0a:d2:f6:16:f1:56:6d:99:9e:b4:81:42:c1:a4:c8:
                    cb:a2:ca:47:0a:ce:f2:bb:d6:2a:20:57:30:13:3c:
                    58:54:e4:38:a3:2e:7c:2c:59:6c:83:e9:c7:e8:6d:
                    e2:c7:73:85:f6:2e:2e:ab:e2:40:e5:e4:1b:48:f1:
                    9d:15:55:48:d1:84:aa:25:ef:16:34:c0:b4:74:16:
                    84:9f:7c:34:e9:9a:c9:c0:d4:c5:b5:67:d4:7c:8b:
                    34:d8:8b:87:78:1c:65:b3:82:78:6f:ae:a9:b3:ed:
                    e4:de:91:76:12:d2:9a:c5:90:f8:81:e1:ba:65:46:
                    97:26:da:c6:b3:47:57:60:bc:59:54:17:85:cd:49:
                    2f:ac:9c:30:0d:58:0d:d5:12:39:78:30:d3:3a:14:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:1E:35:10:19:8E:41:5D:98:6B:33:A7:E8:58:D5:DD:7C:5B:CB
            X509v3 Authority Key Identifier:
                keyid:A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/34352e3138372e3132392e302f32342d3234203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:c1:b4:7a:92:21:b1:18:b0:83:20:64:f8:61:04:fb:11:
         bc:19:e1:e7:af:ba:5a:64:4f:f5:7d:56:4f:6e:40:86:9a:14:
         1f:f9:ae:e7:66:6d:f8:2d:00:59:66:27:a7:8f:14:76:d6:f9:
         84:a8:96:b9:4f:30:d0:e9:24:c9:2a:90:98:02:a9:0e:0f:73:
         ef:74:8e:98:6d:47:31:c8:11:f6:a4:67:69:60:42:72:49:1b:
         ca:ee:53:ba:a4:ad:07:0f:12:58:56:a7:0f:b9:30:72:01:c8:
         a9:c8:22:c2:20:76:53:2c:d7:1f:40:bf:36:47:dc:1c:68:aa:
         c3:a3:da:63:06:c7:02:32:93:86:30:04:a9:be:c2:0f:e4:ef:
         c5:55:e7:d9:4f:4e:b6:cd:59:fb:cc:f9:64:fb:7f:c6:5c:92:
         c8:97:7a:7a:31:e9:24:01:ff:2e:4e:f0:a1:9f:2e:02:8f:5e:
         76:13:c1:1c:88:c8:40:ea:ed:6c:41:db:0a:24:ce:bc:27:0a:
         54:3a:3e:e7:e5:49:27:39:8c:a0:1b:36:26:61:71:f0:a7:1d:
         b3:f4:7b:21:71:86:b1:dd:06:2b:d7:92:2b:42:7a:17:1d:db:
         af:f7:22:ae:98:b9:d2:76:8c:e9:ce:cc:e3:af:72:eb:8a:25:
         5b:12:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:24 2026 by rpki-client