Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3239203d3e20323639313032.roa
File:                     34352e3137382e3233362e302f32322d3239203d3e20323639313032.roa (raw, json)
Hash identifier:          3tKmagEiDviXDx9PDosg/rW/b7b6w9o6stnMLm0qPvA=
Subject key identifier:   87:72:99:FB:51:91:03:C6:A5:64:8B:52:B9:A2:53:86:55:A5:00:98
Certificate issuer:       /CN=D1D8BCDC482D8045038E09F36F4A74E5113436BB
Certificate serial:       03970A1CFF106B84D991F6257F6291449398FA12
Authority key identifier: D1:D8:BC:DC:48:2D:80:45:03:8E:09:F3:6F:4A:74:E5:11:34:36:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8BCDC482D8045038E09F36F4A74E5113436BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3239203d3e20323639313032.roa
Signing time:             Fri 04 Sep 2026 11:26:52 +0000
ROA not before:           Fri 04 Sep 2026 11:21:52 +0000
ROA not after:            Fri 03 Sep 2027 11:26:52 +0000
asID:                     269102
IP address blocks:        45.178.236.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D1D8BCDC482D8045038E09F36F4A74E5113436BB.crl
                          rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D1D8BCDC482D8045038E09F36F4A74E5113436BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8BCDC482D8045038E09F36F4A74E5113436BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 15:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:97:0a:1c:ff:10:6b:84:d9:91:f6:25:7f:62:91:44:93:98:fa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8BCDC482D8045038E09F36F4A74E5113436BB
        Validity
            Not Before: Sep  4 11:21:52 2026 GMT
            Not After : Sep  3 11:26:52 2027 GMT
        Subject: CN=877299FB519103C6A5648B52B9A2538655A50098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:ae:a3:66:93:b1:b9:b6:7c:25:ff:6d:0c:
                    80:cc:81:64:c7:89:5d:bd:ba:92:e4:ae:17:33:ea:
                    53:25:81:f3:7d:5f:fa:94:fb:b3:ec:92:fd:1d:e6:
                    ba:b1:3c:f7:e5:f4:a8:15:e5:ec:6e:c8:dc:1b:ae:
                    5a:1a:81:1f:b8:04:6b:49:51:dd:50:6a:23:7a:c0:
                    22:c7:d6:5a:bf:92:e3:7c:83:d3:cc:6d:f0:95:94:
                    4e:f4:93:0e:d9:38:13:61:19:59:e2:df:d7:10:20:
                    33:b5:f3:46:f6:70:f8:dc:cb:f9:17:d9:54:62:0f:
                    64:59:21:15:b5:8d:02:24:a2:d4:94:d4:2b:bd:1f:
                    56:5e:08:01:1d:d1:43:88:92:46:c1:2b:d9:09:95:
                    e1:de:48:7f:67:d1:ce:50:f3:36:0c:07:2d:5d:86:
                    2c:a3:6f:b2:bf:d4:0c:48:0d:e9:44:ca:f5:20:37:
                    f3:e3:c4:7f:9e:e0:29:3e:2d:85:4a:6a:4c:50:4b:
                    5b:c9:b2:ed:a5:09:7b:be:40:ce:38:c6:6e:93:6e:
                    f5:2c:b3:93:c1:c5:a8:d9:ce:03:17:8a:28:ce:c5:
                    56:7d:13:fe:d1:e4:be:a5:e3:01:2e:e1:63:63:ba:
                    34:63:bb:47:d2:f8:4c:0e:10:14:4f:e1:0f:67:15:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:99:FB:51:91:03:C6:A5:64:8B:52:B9:A2:53:86:55:A5:00:98
            X509v3 Authority Key Identifier:
                keyid:D1:D8:BC:DC:48:2D:80:45:03:8E:09:F3:6F:4A:74:E5:11:34:36:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/D1D8BCDC482D8045038E09F36F4A74E5113436BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8BCDC482D8045038E09F36F4A74E5113436BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KfQ1rV1XWfaa2N9f5s29cLnnYgHYjowv3iQeR9Rd5vQ/0/34352e3137382e3233362e302f32322d3239203d3e20323639313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:d7:de:8e:d9:96:0c:4a:9e:57:e2:29:17:68:39:60:88:
         95:32:b3:2b:41:ae:dc:c1:bb:eb:7a:55:11:ad:2e:6b:2b:9e:
         b6:62:53:8d:cc:08:bb:c6:e0:5a:27:b3:f5:8f:93:4d:a9:e7:
         cd:83:7a:5c:ba:1d:3c:53:c1:7c:59:69:8d:05:39:e9:4e:6a:
         71:04:d2:8f:8b:15:10:0d:9b:4c:45:33:de:b7:d2:27:f5:2a:
         06:97:f2:2f:0f:a5:c6:33:d9:30:77:59:4b:e5:cc:8c:60:02:
         ba:8a:1c:54:69:a7:3c:ea:17:b3:5a:66:23:00:35:1b:d4:47:
         2a:a2:42:95:f6:7e:02:ae:5f:d9:af:c4:31:a9:b8:59:65:5a:
         37:5b:00:d6:9c:78:aa:07:87:c4:c2:ba:16:82:8f:b1:63:f8:
         72:bf:c4:3b:59:be:16:b7:d2:b6:6e:21:c1:ae:32:16:fd:30:
         78:ba:9f:9d:c7:12:6a:11:1a:78:01:61:89:9d:55:49:29:b9:
         04:18:4f:38:58:77:5b:fd:a6:6a:fc:62:45:e0:60:99:83:55:
         ad:d0:9d:df:ad:0d:98:61:17:86:a3:c2:a8:45:84:0a:37:9b:
         3a:d8:f1:44:57:19:29:e8:21:d7:92:5c:a7:39:a2:6d:53:42:
         9c:f1:96:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:27:14 2026 by rpki-client