Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa
File:                     34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa (raw, json)
Hash identifier:          7FCh61RSyseb26a/ZtXOpMF9qenRy8WYM/dizhQqb/Y=
Subject key identifier:   94:F4:4C:F9:79:EF:F4:14:CE:C8:AC:69:EF:9C:9F:8D:16:42:EE:43
Certificate issuer:       /CN=F8386F5F717D22354877F3D93AAE710266BF06FD
Certificate serial:       0C87CD4A82F0895B7E4C4B44F750B89F79610CF8
Authority key identifier: F8:38:6F:5F:71:7D:22:35:48:77:F3:D9:3A:AE:71:02:66:BF:06:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8386F5F717D22354877F3D93AAE710266BF06FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa
Signing time:             Mon 21 Sep 2026 12:57:27 +0000
ROA not before:           Mon 21 Sep 2026 12:52:27 +0000
ROA not after:            Mon 20 Sep 2027 12:57:27 +0000
asID:                     268605
IP address blocks:        45.168.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/F8386F5F717D22354877F3D93AAE710266BF06FD.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/F8386F5F717D22354877F3D93AAE710266BF06FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8386F5F717D22354877F3D93AAE710266BF06FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:87:cd:4a:82:f0:89:5b:7e:4c:4b:44:f7:50:b8:9f:79:61:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8386F5F717D22354877F3D93AAE710266BF06FD
        Validity
            Not Before: Sep 21 12:52:27 2026 GMT
            Not After : Sep 20 12:57:27 2027 GMT
        Subject: CN=94F44CF979EFF414CEC8AC69EF9C9F8D1642EE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:cf:ed:4f:c8:0e:15:a7:d8:d1:3a:3d:c9:
                    79:a2:93:57:59:a0:72:73:31:8a:1a:27:d0:b4:6a:
                    7d:8b:6a:97:56:3c:32:29:c9:a3:ba:48:11:52:5f:
                    ba:47:ba:9a:bb:b8:9a:72:e7:2b:8d:b2:07:6f:ae:
                    57:e2:61:45:45:be:cb:62:84:8a:47:48:8e:3a:dc:
                    61:58:ea:6a:ef:12:64:90:28:59:59:df:24:db:ab:
                    80:ba:69:50:e3:79:31:91:d3:84:1c:e3:11:89:94:
                    47:51:86:cd:b3:15:9e:61:06:f3:69:e5:bb:c7:0b:
                    83:1b:f8:d3:c8:65:7b:78:08:78:bb:85:2a:f5:79:
                    8a:4b:f7:cf:cf:4d:e0:44:2d:78:21:76:5a:23:c8:
                    65:e0:53:39:61:1c:b2:bb:33:be:62:bd:04:b1:1a:
                    3c:37:3d:ac:08:ec:00:2c:0f:43:bc:9e:9a:26:b2:
                    8c:62:cd:08:f9:60:f3:18:8c:63:d9:7f:ad:1b:b8:
                    3c:70:24:98:5f:b2:c9:40:af:5f:bb:55:d8:cd:b6:
                    94:f1:dc:6c:de:43:04:47:83:5a:c7:37:2c:ef:0b:
                    67:fc:ea:8e:a2:bd:25:3c:30:1e:f2:1e:9c:eb:ff:
                    45:7b:37:3c:3f:48:44:ea:75:43:ca:f8:56:14:09:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F4:4C:F9:79:EF:F4:14:CE:C8:AC:69:EF:9C:9F:8D:16:42:EE:43
            X509v3 Authority Key Identifier:
                keyid:F8:38:6F:5F:71:7D:22:35:48:77:F3:D9:3A:AE:71:02:66:BF:06:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/F8386F5F717D22354877F3D93AAE710266BF06FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8386F5F717D22354877F3D93AAE710266BF06FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/34352e3136382e3132302e302f32322d3332203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:fd:7b:f8:92:29:90:9c:32:c0:c1:dc:ed:0f:5c:7a:84:
         df:3f:54:5f:7a:fa:ac:90:49:83:f4:94:3d:0f:20:29:a1:ab:
         5e:b9:41:47:fe:fc:bb:7b:b8:ec:20:5c:66:f3:83:85:9a:73:
         b4:da:64:89:20:85:ca:99:76:7c:14:e8:02:4b:cb:84:b7:ff:
         2b:4d:98:11:bf:a0:25:b6:d3:e7:db:e6:eb:c0:7a:75:df:02:
         74:4a:e0:30:7a:3d:fd:33:9e:14:ff:a5:70:23:65:3c:77:9d:
         9b:f1:94:29:3c:b8:80:db:7d:9f:ce:71:f2:39:d5:a8:2d:1c:
         2c:9a:7a:8c:2d:ef:0b:68:3a:fe:5a:66:79:ed:65:65:df:82:
         f0:24:55:b3:0f:99:20:9f:d1:ab:52:08:10:ab:bb:ad:95:45:
         d4:eb:35:ae:ad:65:ae:07:ee:ea:56:66:fe:b9:f4:06:ae:72:
         d4:ad:a6:57:fd:d3:1b:e9:f6:e1:0c:10:6b:52:44:c1:60:6c:
         be:09:f1:5c:31:51:f5:8e:b3:99:4c:b2:89:cb:04:36:0e:70:
         54:8f:83:66:51:65:0f:4a:ea:c4:71:2c:5c:8f:b0:7d:a0:2d:
         76:83:10:74:12:a3:69:05:fe:39:dc:dc:8b:a0:74:88:d1:50:
         95:84:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:43:53 2026 by rpki-client