Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37312e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          oUIM+c8i/JcAbqZ+C1ZbyQrZmyHNae5ki2i7egp8U2U=
Subject key identifier:   31:46:A4:FA:CB:3A:20:2A:46:D6:3E:F3:1A:7A:33:3A:EF:FB:35:F4
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       02613DBFAFF1BC893D99C11FF5777504C8B538B6
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
Signing time:             Wed 12 Aug 2026 13:04:15 +0000
ROA not before:           Wed 12 Aug 2026 12:59:15 +0000
ROA not after:            Wed 11 Aug 2027 13:04:15 +0000
asID:                     267363
IP address blocks:        45.234.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 22:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:61:3d:bf:af:f1:bc:89:3d:99:c1:1f:f5:77:75:04:c8:b5:38:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Aug 12 12:59:15 2026 GMT
            Not After : Aug 11 13:04:15 2027 GMT
        Subject: CN=3146A4FACB3A202A46D63EF31A7A333AEFFB35F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:cb:2d:34:df:f4:e0:53:05:2b:df:05:d0:
                    9d:69:b1:9b:26:26:1c:6f:ee:70:de:ee:ae:e6:46:
                    9d:d2:8f:b2:d4:19:db:76:e4:c9:83:32:54:aa:25:
                    c0:f9:ff:dc:a0:c1:27:5a:da:ff:52:98:4a:74:ba:
                    60:f0:03:d0:64:68:a2:35:69:0d:04:80:c7:44:d7:
                    0b:4a:f3:50:d1:35:4c:2b:67:96:0d:7d:72:cb:5c:
                    b0:db:42:6a:86:b2:01:cc:68:71:a7:61:97:fc:94:
                    0e:90:ab:fb:00:dd:60:61:39:39:3f:9f:d8:5f:3f:
                    f4:29:b3:93:ac:d3:ac:32:fd:c1:92:2d:d8:9e:d2:
                    e2:6d:09:97:a0:cb:b8:01:0c:32:02:47:a4:dc:a9:
                    47:73:9e:66:94:16:46:f4:20:23:85:a3:47:33:1a:
                    8b:87:cb:c3:80:10:35:aa:98:b7:28:5d:bf:c7:8c:
                    d0:ad:ba:8a:72:f9:a9:69:d8:2e:3e:2c:73:5e:8f:
                    3e:29:ff:25:af:5c:e4:34:50:fa:0a:0c:a2:94:be:
                    9d:c4:7f:23:51:7e:a7:04:66:2f:31:ad:02:de:46:
                    ed:ff:ba:d3:5d:0e:c7:49:c0:4b:68:dc:d4:2d:06:
                    bd:ea:09:04:b5:b2:0d:7f:77:89:d8:60:00:9f:50:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:A4:FA:CB:3A:20:2A:46:D6:3E:F3:1A:7A:33:3A:EF:FB:35:F4
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7d:7f:ac:c2:d0:63:c6:96:b9:8f:32:19:5a:b6:46:84:fa:
         73:ef:7b:db:e5:ad:57:1c:e7:b4:d2:c1:b4:a3:c8:b3:f0:ea:
         7f:d8:d4:f6:69:d4:77:4d:7c:31:b4:d9:7e:99:2f:57:a4:3b:
         c8:51:fe:7a:9b:73:94:42:9a:78:01:77:6c:0f:fb:bb:4a:07:
         17:77:33:9f:25:3b:9c:62:cb:d7:50:74:ed:9f:df:ce:82:8f:
         b7:f3:fe:66:9e:f8:47:ff:6e:de:c4:2e:0c:0e:32:c9:8e:a4:
         e9:69:b5:7b:d3:1c:86:de:a2:85:78:c8:4b:22:83:8d:21:72:
         6b:62:cd:29:ac:ae:23:67:78:15:07:98:2f:12:17:d1:5f:95:
         a6:6a:62:d6:ed:57:51:39:e4:56:2f:04:42:3a:e9:4d:0f:9c:
         f8:80:8a:c3:ee:31:5c:06:f2:4e:49:a7:f5:7e:9d:d3:8f:0e:
         73:71:de:69:b8:30:5a:d1:42:be:48:9a:15:f6:27:26:e8:9b:
         a7:d6:8c:2a:4f:c8:77:f8:63:2d:13:29:32:f7:7e:dd:37:31:
         66:9d:78:a3:c2:4d:32:3a:77:49:21:85:7d:2a:06:7d:cf:eb:
         06:60:86:27:2d:bc:74:e2:bb:b3:f0:ab:12:99:e1:f6:28:e0:
         9d:a2:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:17:22 2026 by rpki-client