Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32322d3234203d3e20323639303234.roa
File:                     34352e3137382e3130302e302f32322d3234203d3e20323639303234.roa (raw, json)
Hash identifier:          nID9YmlA6JZYOWEqPP2CO7rgyjEpVexvyWCtFYWWkYs=
Subject key identifier:   94:B1:94:13:7B:EB:51:7A:BD:5F:C5:B4:54:54:E2:EE:71:C3:3A:C2
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       04B8C8B366CD7CC1C9CA31609FD0D06361A29DFA
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32322d3234203d3e20323639303234.roa
Signing time:             Mon 03 Aug 2026 19:24:37 +0000
ROA not before:           Mon 03 Aug 2026 19:19:37 +0000
ROA not after:            Mon 02 Aug 2027 19:24:37 +0000
asID:                     269024
IP address blocks:        45.178.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b8:c8:b3:66:cd:7c:c1:c9:ca:31:60:9f:d0:d0:63:61:a2:9d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Aug  3 19:19:37 2026 GMT
            Not After : Aug  2 19:24:37 2027 GMT
        Subject: CN=94B194137BEB517ABD5FC5B45454E2EE71C33AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:b5:ae:2e:6c:44:b5:fd:2d:aa:ad:fc:e8:
                    8b:91:fc:b9:e0:39:fa:25:12:4e:8c:0d:47:b2:81:
                    d3:c0:fd:05:b3:45:07:c4:cf:d8:2f:12:4a:0f:15:
                    42:be:cf:bb:3c:be:0d:14:e9:64:1f:4a:31:12:bf:
                    fc:be:72:4c:69:e9:3f:e5:a2:a0:17:b6:a2:31:db:
                    ba:16:1b:c1:17:35:a0:bf:c1:16:fa:6f:01:4e:c8:
                    41:0c:c1:80:fc:e3:27:1e:90:59:e1:e5:ab:20:8a:
                    f6:35:a1:ff:59:24:57:57:23:90:dd:b9:cb:46:9a:
                    c8:b7:b2:0b:2f:a6:9f:48:a6:bd:6f:17:9c:df:b1:
                    e9:5b:c7:08:38:8f:78:38:50:c2:d2:da:4c:4a:ba:
                    6b:9a:6c:9c:c7:ad:58:fe:cf:7c:1e:3d:f8:9f:b8:
                    a3:25:db:31:e5:e3:41:bc:95:e4:a6:a7:5b:e0:9e:
                    b1:ec:5e:cf:15:1c:5b:9c:83:02:20:1e:1f:a5:33:
                    a6:92:e3:ee:46:47:8d:4f:ab:b6:dc:19:eb:c1:7e:
                    7c:7e:4b:56:8b:c6:7f:87:ac:f0:34:54:e1:2c:1c:
                    42:55:91:c1:76:46:16:9c:0a:a9:26:1c:89:e0:e7:
                    fc:6e:a1:06:13:78:cb:74:ab:76:07:44:a7:2e:cd:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:94:13:7B:EB:51:7A:BD:5F:C5:B4:54:54:E2:EE:71:C3:3A:C2
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/34352e3137382e3130302e302f32322d3234203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:89:67:bd:7d:91:75:8d:c8:25:46:f1:d2:2a:2a:30:3e:
         03:68:5f:06:78:13:d2:2f:6e:04:a5:81:e9:a5:86:f0:b5:95:
         27:e7:51:43:65:3c:ab:7d:34:44:b6:1d:73:2d:02:01:19:f1:
         58:bc:85:fb:6d:2f:cf:c7:c9:f1:17:1b:e6:52:7c:b1:f6:e6:
         07:8c:19:12:79:7b:f0:f7:cb:40:7f:8a:4c:3b:a3:9c:c0:8a:
         6d:46:10:64:75:32:0c:f3:27:32:ba:00:3c:3d:5b:fa:f6:22:
         a2:09:f2:c6:9d:06:25:98:79:cc:a1:18:db:72:5d:97:93:cf:
         15:11:e3:4c:f0:de:33:53:6e:05:66:1a:ce:15:62:b1:2a:05:
         77:73:93:26:d1:ba:7d:f8:cf:a7:6f:87:09:aa:f5:e8:4d:ed:
         c6:4f:83:5a:1d:d8:d1:39:50:35:19:1b:5f:8a:29:b6:a5:56:
         68:fb:ec:94:53:67:72:93:e0:15:43:d9:14:4a:62:88:88:ab:
         7b:70:f0:73:a9:7c:94:a2:fc:f3:b1:ae:bf:f3:a6:11:dd:79:
         fb:db:20:c4:20:b2:ba:74:7f:9e:3d:43:86:43:f7:bc:1c:45:
         be:99:65:40:1f:f0:ff:8c:ad:ed:50:b2:c3:80:41:0c:44:e7:
         5f:83:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:09:02 2026 by rpki-client