Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/34352e372e3232302e302f32322d3234203d3e20323636353938.roa
File:                     34352e372e3232302e302f32322d3234203d3e20323636353938.roa (raw, json)
Hash identifier:          cdsT3culDQ369WWOGL5RVBmfhCNdNmUgKtLUvctU9ac=
Subject key identifier:   CC:79:6D:C2:74:BE:26:B8:CC:5E:3B:0E:87:D2:C3:BA:FA:39:26:32
Certificate issuer:       /CN=452B5E1098D9EA6B24A0A770468191397C53ADBC
Certificate serial:       40C1BEB94849A5F082670A8C41F9B958B4789FA1
Authority key identifier: 45:2B:5E:10:98:D9:EA:6B:24:A0:A7:70:46:81:91:39:7C:53:AD:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/34352e372e3232302e302f32322d3234203d3e20323636353938.roa
Signing time:             Thu 10 Sep 2026 00:07:42 +0000
ROA not before:           Thu 10 Sep 2026 00:02:42 +0000
ROA not after:            Thu 09 Sep 2027 00:07:42 +0000
asID:                     266598
IP address blocks:        45.7.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.crl
                          rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:be:b9:48:49:a5:f0:82:67:0a:8c:41:f9:b9:58:b4:78:9f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452B5E1098D9EA6B24A0A770468191397C53ADBC
        Validity
            Not Before: Sep 10 00:02:42 2026 GMT
            Not After : Sep  9 00:07:42 2027 GMT
        Subject: CN=CC796DC274BE26B8CC5E3B0E87D2C3BAFA392632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:9d:0b:6a:c2:cd:17:76:bc:97:4d:01:fb:
                    cb:22:97:e7:71:06:f4:d4:9f:5f:d3:22:5c:d6:4b:
                    43:39:a5:bb:63:58:1d:c6:97:1a:7f:91:3b:7a:e7:
                    d0:d3:91:6f:7a:8a:f0:03:2e:39:b9:ab:f6:e7:98:
                    72:95:55:f8:3f:31:e4:7d:3e:86:69:42:58:2a:ea:
                    14:b1:49:02:61:a5:8c:a1:12:9a:63:45:26:e7:79:
                    01:ad:24:90:84:03:a8:9b:1a:91:ef:87:c7:b6:50:
                    20:ee:5b:00:59:b4:fb:6c:58:eb:3b:33:73:f2:29:
                    2d:71:70:27:ff:01:71:2c:81:32:a5:78:b2:b4:ec:
                    3c:24:13:88:1c:46:0e:34:c1:f9:3d:64:76:8f:f5:
                    45:0e:d6:19:31:c7:d2:f9:02:10:fd:0c:46:c0:76:
                    9f:dd:09:29:e7:40:80:f4:98:2f:72:fc:81:09:fb:
                    c0:58:c4:75:55:f2:3b:0a:c8:44:09:91:cc:00:e0:
                    b8:4b:8f:9c:c3:db:97:f0:3c:e8:61:28:6a:46:3d:
                    b3:0e:d9:5e:24:2c:48:8a:8b:8b:ab:74:5b:ee:26:
                    04:64:95:79:9c:37:fc:40:03:fe:39:3f:25:6f:00:
                    be:3f:be:6e:15:43:51:25:8f:a3:ea:ab:5c:04:17:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:79:6D:C2:74:BE:26:B8:CC:5E:3B:0E:87:D2:C3:BA:FA:39:26:32
            X509v3 Authority Key Identifier:
                keyid:45:2B:5E:10:98:D9:EA:6B:24:A0:A7:70:46:81:91:39:7C:53:AD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/452B5E1098D9EA6B24A0A770468191397C53ADBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/452B5E1098D9EA6B24A0A770468191397C53ADBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vSEAi3UqNajSHGiNaymFUxVcM51kFZzXa1dVjyqAHze/0/34352e372e3232302e302f32322d3234203d3e20323636353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:70:f3:be:74:b8:b2:f9:65:26:1d:d7:28:01:fd:76:64:9a:
         de:e5:7d:a6:1c:5a:39:61:64:22:d8:e5:38:66:f7:0d:92:3b:
         66:fb:89:91:21:ed:9d:ef:fa:71:10:0c:1a:d4:f3:b3:6d:f9:
         17:3f:e2:2f:1d:94:41:0c:75:87:cf:0f:c7:6a:7b:15:66:3b:
         a0:b7:b9:26:f1:4f:39:e0:d5:fa:4b:e7:03:4f:d4:f2:19:70:
         2e:ce:ce:8c:37:51:78:53:cb:60:bb:5c:ec:34:79:05:8c:3e:
         c6:d6:3c:89:bf:99:61:0b:20:3c:fa:c3:ec:2a:0a:d4:a5:aa:
         4a:66:28:88:96:af:16:3c:54:6b:91:ec:c7:e1:56:57:80:53:
         85:f8:42:83:a8:e1:53:eb:64:4f:09:80:bc:63:6d:79:c7:18:
         ed:f4:c3:ce:e1:99:a3:8d:9b:56:aa:b3:d1:91:65:cc:d0:56:
         44:29:73:69:5f:2c:5e:79:5f:43:f8:12:bd:b8:03:2b:f5:b2:
         8e:d6:60:8c:3d:09:e0:f2:3d:c4:59:81:6f:ff:ca:99:f0:b9:
         c6:af:c8:32:6f:e7:80:e7:1c:b8:91:2b:97:4d:37:92:67:f9:
         19:c7:85:49:7e:a9:1e:b2:fe:46:20:cf:9e:27:73:90:32:d8:
         20:d0:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:41:34 2026 by rpki-client