Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa
File:                     34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          WWgqO7iHzxaWTbRUEtfiYmrYnByitu87lf/BOIqFbro=
Subject key identifier:   AA:A4:1C:85:3A:EA:A9:2B:B4:9B:6A:87:60:DD:FC:60:E0:6D:65:88
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       533668AED7F75527404752277937D0A63F25FB3B
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 12 Sep 2026 14:33:40 +0000
ROA not before:           Sat 12 Sep 2026 14:28:40 +0000
ROA not after:            Sat 11 Sep 2027 14:33:40 +0000
asID:                     263347
IP address blocks:        45.162.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 12:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:36:68:ae:d7:f7:55:27:40:47:52:27:79:37:d0:a6:3f:25:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 12 14:28:40 2026 GMT
            Not After : Sep 11 14:33:40 2027 GMT
        Subject: CN=AAA41C853AEAA92BB49B6A8760DDFC60E06D6588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:65:6d:15:6c:95:bd:52:f4:f8:14:cc:d0:
                    52:02:c4:6b:9b:a8:26:f9:fb:59:62:40:b2:ab:06:
                    b7:26:48:ba:bc:88:4a:6b:cb:32:ac:2e:b1:4b:93:
                    e0:30:00:9c:b8:a6:84:d0:a3:61:73:16:f4:02:bc:
                    29:06:22:c1:ff:0d:8a:1f:eb:3b:c6:84:0d:71:86:
                    96:c6:62:b3:33:be:36:65:97:54:fa:c0:74:57:68:
                    73:f8:1a:0c:dc:0b:57:7c:0f:9e:9a:e8:ff:d3:43:
                    3a:9b:b5:f9:b8:b9:0a:13:f7:5d:09:5d:eb:25:7b:
                    dd:4c:f8:e5:7c:f2:5b:6d:4c:d0:05:5e:b5:b9:7c:
                    cf:fc:aa:d6:4b:f2:29:5a:f7:ce:98:df:04:14:86:
                    b3:06:b5:9a:e1:2a:22:5d:43:aa:fb:43:8d:ce:ce:
                    04:3e:74:c8:01:14:b6:61:91:47:0f:94:e4:1e:20:
                    40:2f:cc:d9:86:46:fd:17:f9:6f:36:93:d9:f0:75:
                    a4:59:78:66:c1:af:e8:13:39:6b:18:0d:72:9b:de:
                    62:2e:bb:30:ac:10:97:05:7d:f9:55:c1:5b:0a:20:
                    28:86:e1:dc:68:f0:d3:a3:8d:f9:67:63:ab:90:7e:
                    6b:96:3d:0e:4b:36:65:15:a3:b9:bc:2d:36:5d:1d:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A4:1C:85:3A:EA:A9:2B:B4:9B:6A:87:60:DD:FC:60:E0:6D:65:88
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/34352e3136322e3135322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:00:b4:f0:7c:36:d5:c1:48:74:12:4a:e2:77:4c:d7:56:
         99:5c:58:2a:14:46:d9:25:20:11:c1:b9:5f:6a:2c:e8:41:62:
         49:d8:22:2f:52:7e:e3:52:d1:d3:77:75:cf:e8:33:28:55:0e:
         a2:57:ca:c2:45:ac:a8:c6:4d:72:86:ad:d5:7e:8a:d1:14:98:
         fb:fb:31:8c:e4:81:f6:db:0d:2b:49:d8:12:5b:c8:dc:bd:04:
         12:ad:9e:ab:d5:69:ca:e5:cb:2f:f3:2f:fb:74:c0:a7:30:81:
         3c:c8:8b:32:f0:fb:fe:d4:e7:33:97:ad:3a:67:bd:67:4a:1b:
         28:5c:1e:d1:73:ee:b0:5b:ff:b4:ce:1f:e2:52:07:0b:5f:ea:
         72:d4:ee:72:7b:1a:04:41:dd:a3:fd:12:72:cd:b6:76:3f:4e:
         f2:49:13:eb:75:b8:b5:d0:ef:1e:63:9a:3b:9c:2d:04:eb:10:
         38:d2:95:82:ad:c6:09:fd:c2:4d:6e:ff:6c:05:91:96:af:d0:
         c2:c9:c2:a8:e2:d6:48:02:b4:75:e6:e2:b4:1d:a1:d0:7b:e2:
         98:68:10:86:88:1d:b1:20:ad:6f:40:bf:9b:2c:59:04:5a:bc:
         1d:ca:0b:6e:b1:25:c6:85:97:a9:96:01:9a:cc:b8:47:1f:c8:
         2f:51:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----