Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
File:                     34352e3137342e342e302f32322d3232203d3e20323638393134.roa (raw, json)
Hash identifier:          jDrFE/AGoNQkBqclkhLxHS1zETkqJa/gKkn4hZbW5Ek=
Subject key identifier:   D3:96:8C:39:27:66:7D:3B:2D:0C:3B:B3:7B:F5:8A:1C:E4:21:B8:7F
Certificate issuer:       /CN=EB31CB7DD47DD39945B803D7EB5040C01E2097B7
Certificate serial:       196F5881D1606C520ED9310FEB3A152462C5F375
Authority key identifier: EB:31:CB:7D:D4:7D:D3:99:45:B8:03:D7:EB:50:40:C0:1E:20:97:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
Signing time:             Thu 03 Sep 2026 22:36:30 +0000
ROA not before:           Thu 03 Sep 2026 22:31:30 +0000
ROA not after:            Thu 02 Sep 2027 22:36:30 +0000
asID:                     268914
IP address blocks:        45.174.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6f:58:81:d1:60:6c:52:0e:d9:31:0f:eb:3a:15:24:62:c5:f3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB31CB7DD47DD39945B803D7EB5040C01E2097B7
        Validity
            Not Before: Sep  3 22:31:30 2026 GMT
            Not After : Sep  2 22:36:30 2027 GMT
        Subject: CN=D3968C3927667D3B2D0C3BB37BF58A1CE421B87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:96:0f:38:99:4e:c8:9f:22:28:06:88:e7:
                    74:eb:d0:cd:d7:ff:59:ea:c1:06:6a:8c:b8:14:41:
                    df:b2:6a:46:2b:e3:10:15:bf:3e:e9:cf:76:9b:d9:
                    1e:c1:15:9c:dc:c0:64:7f:d5:b3:03:43:f0:0d:27:
                    f1:d3:61:27:24:58:e7:cc:1b:cb:d5:0b:46:49:65:
                    50:bf:1b:6f:ae:6c:cf:2f:9a:6f:c6:6d:13:bc:f3:
                    5a:63:f9:22:1f:74:55:e8:f9:43:4d:9a:72:16:dd:
                    c7:90:f4:48:cb:a3:a6:64:fb:f4:fd:4b:69:b3:d7:
                    6c:ad:09:46:af:1a:6b:ac:95:b4:d4:8b:36:54:2b:
                    dd:11:28:60:28:4d:e1:bf:2d:e9:30:f1:ef:0c:8b:
                    75:6e:eb:00:d6:d9:2b:66:c4:d7:55:85:b5:d4:91:
                    3e:fe:91:8d:47:f2:18:b6:25:33:05:22:c5:6b:43:
                    69:37:cf:8e:ee:e2:22:fc:16:28:86:62:c7:9d:5b:
                    54:64:db:6e:f8:b1:45:e1:1c:51:e8:56:ad:1b:e6:
                    68:e2:e2:c8:fd:28:d8:9a:7b:f9:91:6f:0d:b2:1c:
                    54:c0:da:06:30:d1:66:4d:8a:aa:31:e4:fb:6c:84:
                    10:a5:f8:8b:c6:9b:65:b1:f4:1d:d0:88:54:08:e9:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:8C:39:27:66:7D:3B:2D:0C:3B:B3:7B:F5:8A:1C:E4:21:B8:7F
            X509v3 Authority Key Identifier:
                keyid:EB:31:CB:7D:D4:7D:D3:99:45:B8:03:D7:EB:50:40:C0:1E:20:97:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/34352e3137342e342e302f32322d3232203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:55:61:0a:ae:02:6f:f5:a0:8a:3e:f7:50:ec:28:a6:e3:65:
         06:fd:d9:60:1c:29:56:ff:7c:c9:de:46:d8:a2:5c:1a:5f:cf:
         61:31:94:d4:58:75:96:00:d8:8f:e8:9b:f8:fe:d3:62:84:bd:
         b5:d6:7e:7b:bd:64:f3:ec:75:75:65:d7:9b:65:03:16:03:15:
         0c:e0:73:4d:b7:92:72:2e:14:86:ce:e3:40:2a:0d:b1:f2:57:
         65:97:e7:b4:9a:d3:ee:fc:8d:95:d4:d2:af:0a:a9:a8:25:4f:
         b4:0b:a4:44:9c:91:a8:2f:9b:77:52:77:d2:64:13:1f:a5:93:
         74:5b:66:b7:9c:61:47:48:40:57:b8:e3:52:47:ee:81:5d:9d:
         64:8d:09:a3:a7:3c:93:d9:d2:cb:78:59:60:76:a7:28:a5:35:
         a7:6a:40:40:26:78:52:42:37:f1:12:ab:6f:ce:3e:b5:16:0b:
         e4:85:6b:64:a4:16:ad:e0:4f:35:4c:aa:2b:2c:46:18:55:b2:
         9d:62:54:9b:3d:71:32:08:dd:3c:45:c3:d7:6f:62:73:9e:2c:
         1f:ef:aa:d6:2c:f8:b1:6e:40:ea:a6:69:aa:66:bb:e7:08:4c:
         65:f2:d5:9e:4d:52:8c:29:f4:2d:4b:9a:dd:2a:fe:db:da:ae:
         d7:84:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:06:01 2026 by rpki-client