Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
File:                     34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (raw, json)
Hash identifier:          4bapGm0hPgujT51O3s+CUQFfhoQI4X6FvKIb5TWnusY=
Subject key identifier:   F4:18:1D:1C:A2:9E:95:73:1C:C2:27:BA:0A:E3:09:0A:C4:AF:E5:D8
Certificate issuer:       /CN=434F36A7682F1C0B36BEEDA7D466801534075702
Certificate serial:       02C3629E96A65F19760C95256952E46525C92696
Authority key identifier: 43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
Signing time:             Tue 27 Oct 2026 13:11:03 +0000
ROA not before:           Tue 27 Oct 2026 13:06:03 +0000
ROA not after:            Tue 26 Oct 2027 13:11:03 +0000
asID:                     268674
IP address blocks:        45.165.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 13:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:62:9e:96:a6:5f:19:76:0c:95:25:69:52:e4:65:25:c9:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434F36A7682F1C0B36BEEDA7D466801534075702
        Validity
            Not Before: Oct 27 13:06:03 2026 GMT
            Not After : Oct 26 13:11:03 2027 GMT
        Subject: CN=F4181D1CA29E95731CC227BA0AE3090AC4AFE5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9f:07:4f:4e:48:9d:cf:f7:22:d7:43:6c:e2:
                    4f:d5:ee:8f:44:fe:e4:a6:2e:0a:22:b1:09:de:a8:
                    68:e4:84:84:b9:95:b0:39:17:67:42:3e:7f:22:e2:
                    31:24:58:82:2e:48:c9:5a:ae:b7:61:13:4f:9e:68:
                    8c:43:47:6f:4a:74:d5:34:a9:95:22:43:ff:bd:b9:
                    bd:0f:df:96:17:13:ca:72:a0:7c:b6:7f:4e:0d:d5:
                    eb:58:50:e9:2d:1c:48:98:9d:c2:95:13:c0:5d:b7:
                    59:04:28:e7:4d:3a:53:77:b9:90:81:64:7a:05:a9:
                    2d:25:c9:40:0a:1d:fe:f1:93:be:a1:f6:3b:80:78:
                    6e:4a:3e:41:9e:6d:48:82:77:29:bb:28:4c:5a:8e:
                    c0:14:cf:b5:1a:67:77:50:a9:a5:3e:9a:2c:bf:73:
                    a8:fc:ef:71:0d:89:63:53:e4:13:ec:64:21:09:94:
                    be:3d:1a:f8:3c:32:7b:ea:03:43:ea:d8:a4:58:b3:
                    53:5c:a3:de:79:e4:14:23:63:9e:f6:c9:ca:35:ee:
                    9e:ac:44:09:4f:a9:0a:9c:2a:e2:33:76:6e:3c:8e:
                    1d:27:81:86:3f:57:71:c0:1a:c9:83:b1:4d:4a:8a:
                    65:b2:a2:dc:9d:80:34:c9:c1:f6:c7:fb:a3:38:cb:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:18:1D:1C:A2:9E:95:73:1C:C2:27:BA:0A:E3:09:0A:C4:AF:E5:D8
            X509v3 Authority Key Identifier:
                keyid:43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:54:d7:ec:44:8c:11:5b:44:d8:a1:05:2c:2f:e4:44:76:
         a1:5a:7a:36:4c:c8:6a:70:73:44:92:10:9f:0c:4c:b0:f6:a1:
         df:56:0d:7b:e0:80:17:c2:d2:44:82:7c:f5:95:67:a8:51:14:
         61:3f:e8:9f:e9:9a:4e:e0:c6:b9:0b:c9:08:df:0b:14:f5:a2:
         8c:68:cd:0a:ac:df:d1:17:c6:f6:52:2b:d5:6b:41:c8:96:76:
         79:df:e1:04:4f:d4:df:99:a1:9b:11:6e:45:c9:72:60:7d:22:
         3a:92:fa:8e:36:a4:9c:a5:74:83:2d:11:9c:ab:63:d6:7e:6e:
         1f:db:46:c0:ef:e6:e3:34:3e:4a:45:60:15:7c:f6:09:87:90:
         dc:d1:c0:63:7f:fa:45:18:44:ae:21:cf:b0:34:9f:4e:0b:29:
         5f:44:91:dc:b2:c6:8d:98:e2:0c:e2:df:2d:19:47:33:4c:2a:
         e9:99:5d:10:fa:9a:dd:12:2d:cd:6a:59:2f:eb:2d:31:28:89:
         3a:64:02:f9:7a:e0:e2:0a:d6:a8:e8:34:32:89:41:c2:ef:b5:
         cd:56:72:3b:33:a5:d4:7d:f9:07:94:6d:ea:1c:a6:5c:f7:09:
         8b:c5:d0:7a:f3:81:fe:72:e5:4c:6a:1f:2c:6f:af:25:fc:41:
         da:04:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----