Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e37312e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          d5oG6ZXsGR9pnh6U0ztCD1qQHakn8LWWBmjUD+EDVeg=
Subject key identifier:   94:37:91:12:17:F2:85:CB:9E:45:C4:0E:E6:A6:C6:A7:FC:55:D7:AB
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       2239CA90F2DAC16ECD20ADA32867F5B1722B29FA
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
Signing time:             Wed 10 Sep 2025 12:48:52 +0000
ROA not before:           Wed 10 Sep 2025 12:43:52 +0000
ROA not after:            Wed 09 Sep 2026 12:48:52 +0000
asID:                     267363
IP address blocks:        45.234.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:39:ca:90:f2:da:c1:6e:cd:20:ad:a3:28:67:f5:b1:72:2b:29:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Sep 10 12:43:52 2025 GMT
            Not After : Sep  9 12:48:52 2026 GMT
        Subject: CN=9437911217F285CB9E45C40EE6A6C6A7FC55D7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:b2:60:c8:0c:43:70:99:fb:5c:34:ad:bb:
                    a6:7b:e9:b1:55:bd:3d:45:22:54:8a:5c:d4:31:a7:
                    e9:7c:2d:0d:30:3c:e7:eb:03:c6:36:1f:49:a8:63:
                    9c:af:46:8b:da:00:a9:51:93:f8:d7:ee:a6:0a:0f:
                    f7:b7:62:0c:b4:7f:3d:b0:a0:15:25:57:65:d9:7c:
                    9d:55:f7:6e:b2:16:0a:64:d1:5e:fe:3f:57:e5:9b:
                    71:46:99:84:56:46:39:d4:09:41:a8:da:e4:98:2a:
                    79:ae:cc:62:ab:dc:a9:af:88:02:8d:0f:44:c6:7a:
                    f5:41:da:74:d4:9d:d9:8f:1c:48:f8:e3:65:4f:d3:
                    1f:64:8f:c1:68:2a:2d:ed:9f:c2:65:af:67:4e:9a:
                    4d:1f:ff:a3:f0:ce:ee:f9:99:70:3b:2d:4b:7f:16:
                    b6:2a:86:df:21:62:39:ad:30:79:88:63:74:6d:df:
                    0d:f7:74:c7:f1:4c:3e:26:07:00:2c:fa:71:28:76:
                    02:0a:08:9f:dc:c9:5a:b3:3a:24:80:78:cd:c6:b6:
                    71:73:ee:8a:ed:b7:d9:23:04:61:7c:eb:a1:1b:b9:
                    46:31:f0:3d:33:8a:d0:71:c6:e4:ca:b5:aa:a9:7b:
                    23:d3:de:c7:23:df:48:42:f9:a6:9a:24:0a:dd:f2:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:91:12:17:F2:85:CB:9E:45:C4:0E:E6:A6:C6:A7:FC:55:D7:AB
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:f1:af:f9:e8:d0:94:7f:ad:80:fe:1d:2a:25:b2:ba:9d:
         85:0a:61:2f:20:48:c5:36:e7:a6:bf:79:99:8e:f1:1c:21:1c:
         6d:00:cc:8f:89:69:52:15:c4:a5:e3:bc:5a:d2:72:83:df:bd:
         2d:d1:7c:36:80:03:4b:6d:99:0f:f7:ba:dd:72:9b:2f:b6:8a:
         3a:68:ec:e0:da:27:ac:57:9f:27:4a:ef:b9:74:18:6b:af:47:
         dd:6d:56:36:61:2a:4d:6c:01:32:02:a7:96:8c:b6:d0:4a:95:
         3d:09:7a:33:d9:7b:c4:44:2e:3b:6d:96:4c:80:df:d1:27:ac:
         0f:46:89:41:fc:3a:e0:24:79:2b:26:f3:eb:eb:dc:e7:63:99:
         82:4a:af:f5:fe:20:47:9b:dd:91:73:55:ab:37:9e:17:0f:0a:
         59:5b:db:3f:91:df:f9:bb:b5:5a:75:04:b1:c4:54:6b:5a:7a:
         55:74:bc:36:99:fe:8a:c9:6e:c8:88:c8:ba:49:01:c0:89:c7:
         82:29:13:1b:d8:89:c4:00:52:6f:45:c6:d0:3c:3e:5e:4a:9b:
         23:79:a8:2a:42:18:42:b0:03:b8:0a:72:66:5a:ac:aa:7f:b8:
         35:8f:0f:aa:83:fc:e2:b8:ba:fb:2e:66:ce:4c:af:a3:08:a6:
         f0:63:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:51:13 2025 by rpki-client