Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
File:                     34352e3138372e36352e302f32342d3234203d3e20323639353238.roa (raw, json)
Hash identifier:          RE8b8xUnVqM92yjHW13/w/dNWr3KbJMhj+X0ETv0sok=
Subject key identifier:   C9:25:C4:3E:FC:8F:44:3A:60:D5:67:1F:FD:C0:94:0B:0A:B2:4B:64
Certificate issuer:       /CN=0536254B395E744767A170B2A9041042916EF407
Certificate serial:       0F8BE2369C7CBB2FF6748BD2C1A1331AF0BB4DBA
Authority key identifier: 05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa
Signing time:             Fri 14 Aug 2026 21:46:50 +0000
ROA not before:           Fri 14 Aug 2026 21:41:50 +0000
ROA not after:            Fri 13 Aug 2027 21:46:50 +0000
asID:                     269528
IP address blocks:        45.187.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:e2:36:9c:7c:bb:2f:f6:74:8b:d2:c1:a1:33:1a:f0:bb:4d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0536254B395E744767A170B2A9041042916EF407
        Validity
            Not Before: Aug 14 21:41:50 2026 GMT
            Not After : Aug 13 21:46:50 2027 GMT
        Subject: CN=C925C43EFC8F443A60D5671FFDC0940B0AB24B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5b:a6:3d:f4:f8:cf:ce:ba:fa:60:80:b8:2c:
                    a5:fa:ef:7b:bf:b8:d8:e5:4c:e5:d8:d2:6f:36:42:
                    8f:66:10:12:95:85:8a:c2:90:c8:3f:62:1f:47:6d:
                    88:f4:33:6f:df:24:19:70:80:1f:82:e7:89:67:70:
                    c9:33:cf:a1:56:82:1b:9e:36:4d:2e:2e:d3:ac:83:
                    8f:cf:19:55:e3:47:ac:4a:2c:b5:28:13:e9:37:12:
                    bf:fe:26:00:bd:fe:56:d2:6d:72:d6:7a:2a:29:ce:
                    b3:b1:3f:ea:4d:ee:ca:0b:12:62:46:bc:55:44:06:
                    2b:de:3a:a8:90:b6:46:e1:68:be:44:a5:24:d7:b5:
                    10:aa:9d:28:22:bf:fd:80:c3:c5:41:98:dd:5b:64:
                    1b:f9:74:90:5a:58:35:c9:16:92:c9:11:0f:cf:8b:
                    e3:97:c1:e9:f9:22:9f:cb:d3:05:5f:30:2b:96:7a:
                    16:fc:dd:8e:27:60:1d:ac:71:fe:e3:f6:07:b5:3b:
                    e1:22:7d:c5:85:98:cf:20:89:eb:90:ef:83:46:bd:
                    90:c5:d9:5d:a6:9b:42:8d:dd:df:3c:a7:b7:07:b9:
                    9a:35:cb:78:42:55:07:5c:87:7f:64:a9:63:40:44:
                    4f:03:ad:0c:38:67:d2:b8:73:b9:f9:a0:0b:bd:f6:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:C4:3E:FC:8F:44:3A:60:D5:67:1F:FD:C0:94:0B:0A:B2:4B:64
            X509v3 Authority Key Identifier:
                keyid:05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/34352e3138372e36352e302f32342d3234203d3e20323639353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:7c:68:7b:bc:90:4c:38:ad:42:38:15:72:ac:da:4d:ce:
         27:16:78:e0:e3:7d:2f:c4:29:84:94:b2:3b:7a:34:a3:5b:50:
         14:f3:d8:ac:5f:45:9b:86:c9:7b:0c:95:28:fb:b3:4e:ce:ab:
         35:ed:c7:64:5d:a7:24:16:66:5d:d0:20:b6:cf:48:d4:3b:d5:
         4a:56:5c:6f:6d:88:54:72:26:8c:62:20:32:3f:39:6b:98:8d:
         07:1d:a4:0d:e2:e3:fa:ef:7e:3d:7e:82:12:d9:47:44:a9:ca:
         f5:70:d4:7a:21:90:41:65:9a:56:b8:08:17:29:53:9c:15:06:
         ec:81:ca:90:8c:cb:fc:59:cb:ff:40:5c:18:c1:b6:cc:20:21:
         b9:f2:20:83:ef:b1:be:5b:62:fb:b8:a3:4e:d0:b6:17:ca:ad:
         68:a4:0e:e5:55:c9:66:53:7b:3e:f7:32:11:51:f2:fc:32:db:
         13:2b:7c:c0:e8:7e:2e:be:ad:7c:64:1f:57:55:8d:d0:f0:2c:
         b3:44:7c:d5:37:98:c7:30:45:a7:16:bd:9c:ae:cb:68:94:2e:
         23:97:68:3e:da:9b:bc:fa:8d:aa:eb:7f:df:74:8f:c5:7a:95:
         b5:f3:aa:24:d5:f1:9a:10:c7:c0:e2:2d:e0:bc:43:85:2b:81:
         8d:30:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:48:31 2026 by rpki-client