Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37302e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          jpXbcg2FbXsloydRvgTCpjDZKMLaMN27JbDPJkHdp9g=
Subject key identifier:   EE:AE:DC:2F:36:43:07:58:5D:41:CD:67:B7:09:AE:84:95:5E:C6:22
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       1880DEEE1E993B2068DBEC3F7F4D6F700B4B900D
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa
Signing time:             Wed 10 Sep 2025 12:48:51 +0000
ROA not before:           Wed 10 Sep 2025 12:43:51 +0000
ROA not after:            Wed 09 Sep 2026 12:48:51 +0000
asID:                     267363
IP address blocks:        45.234.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:80:de:ee:1e:99:3b:20:68:db:ec:3f:7f:4d:6f:70:0b:4b:90:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Sep 10 12:43:51 2025 GMT
            Not After : Sep  9 12:48:51 2026 GMT
        Subject: CN=EEAEDC2F364307585D41CD67B709AE84955EC622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:14:c5:47:55:07:a2:54:a6:b7:3b:6c:85:
                    0b:26:46:1c:75:87:c6:5c:b7:a9:6b:45:6c:0e:6e:
                    62:e9:96:f1:87:7a:8b:25:e3:ae:e6:3d:aa:74:f5:
                    1e:9c:d9:80:7b:91:8d:36:c8:04:4a:7d:e2:22:25:
                    9f:fc:f7:93:f8:3b:2c:79:9b:91:5e:95:5d:77:d1:
                    07:65:d7:9c:1c:fa:1b:9f:b9:8f:66:f8:1e:82:d9:
                    10:f3:a9:b0:5e:00:f1:de:61:68:0c:0a:89:c9:45:
                    bc:7a:89:7c:a2:92:15:4f:4e:70:f2:21:bf:fb:05:
                    ae:19:6b:b3:c9:90:1e:13:2e:f2:be:e5:1b:1b:4d:
                    9b:93:09:4b:b7:f0:b3:f5:66:60:0d:7c:ed:3f:0b:
                    02:bb:47:f6:bd:94:95:6e:ee:d1:4b:0c:b2:79:5e:
                    c5:ca:6e:57:9d:a9:41:1e:37:e8:3b:f6:30:09:56:
                    ff:c9:4a:d5:6c:c5:6c:5e:e3:ec:c5:0b:72:97:b3:
                    d6:a7:f8:36:87:f4:a8:31:b7:2a:75:eb:e2:07:f8:
                    f0:bb:ee:e9:d0:c8:98:de:68:0d:9c:8d:b2:d2:0c:
                    73:5e:0c:6a:fa:0b:db:0d:df:9a:b0:ad:2c:3b:7c:
                    39:6d:66:a7:b9:c3:f7:75:70:cd:83:00:99:cd:7a:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:DC:2F:36:43:07:58:5D:41:CD:67:B7:09:AE:84:95:5E:C6:22
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37302e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:bf:80:d2:d8:97:1c:4d:d8:a4:4e:47:1a:c9:64:50:55:
         6b:51:31:7b:82:76:66:44:4f:7a:86:dd:4b:08:95:b3:e6:ae:
         86:a7:c1:13:ba:ca:be:94:c4:86:74:88:17:6f:b8:a7:6c:82:
         0d:74:c2:4f:b6:2d:ab:24:54:35:2c:de:70:2d:5a:b2:c0:2e:
         29:1e:0f:be:32:83:44:5f:f7:08:97:12:e4:4e:54:2e:a2:2c:
         d8:64:1f:d2:f1:41:c3:d8:ec:ab:77:d0:0b:ce:d4:af:ea:94:
         ed:96:0a:04:6c:d0:a2:2b:da:8c:10:21:c1:c3:94:7c:fe:bc:
         38:a3:4c:90:d0:86:77:44:c3:2f:bb:d4:47:0e:a6:88:b8:38:
         b2:5b:df:8b:30:1e:08:d8:b9:43:6e:8e:4e:cf:97:50:d4:33:
         5e:8b:20:bd:d5:01:23:8e:e1:b3:39:3f:85:ee:86:80:c2:03:
         5d:2b:af:3b:8b:c1:83:41:47:06:13:c7:e2:fe:f6:3d:34:b7:
         7d:a2:76:48:b8:ca:c4:36:cf:ec:fb:5e:95:5f:a4:59:a4:fd:
         05:67:69:4d:79:bd:7d:9a:b2:32:b1:6a:bd:00:77:de:46:95:
         2f:97:06:1e:26:7d:ee:2b:9f:61:44:fc:33:02:29:88:d4:d0:
         a6:7b:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:51:17 2025 by rpki-client