Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3232203d3e20323638353738.roa
File:                     34352e3136332e3137362e302f32322d3232203d3e20323638353738.roa (raw, json)
Hash identifier:          OaV2fITc6P5SuVcQlwd8zehebunzLQSxjmyAsBvzPVo=
Subject key identifier:   FB:C8:23:52:76:7A:C7:DD:18:7E:DB:3E:59:55:37:EC:1D:38:15:C8
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       761A9509A7A4EC27C34AB3C7DEC4792DCE22D08A
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3232203d3e20323638353738.roa
Signing time:             Mon 21 Sep 2026 13:37:24 +0000
ROA not before:           Mon 21 Sep 2026 13:32:24 +0000
ROA not after:            Mon 20 Sep 2027 13:37:24 +0000
asID:                     268578
IP address blocks:        45.163.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1a:95:09:a7:a4:ec:27:c3:4a:b3:c7:de:c4:79:2d:ce:22:d0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 21 13:32:24 2026 GMT
            Not After : Sep 20 13:37:24 2027 GMT
        Subject: CN=FBC82352767AC7DD187EDB3E595537EC1D3815C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:5b:bf:e1:87:b2:51:ff:c9:de:f9:e5:f7:
                    ed:62:b0:06:22:c9:d3:02:9f:c9:76:0e:1b:b3:dd:
                    10:3e:d3:36:d1:b9:35:7a:77:55:f3:70:76:ee:96:
                    68:d1:66:4a:2b:20:1d:8a:42:51:ee:61:f5:93:76:
                    b6:ad:cb:ae:a5:7e:b8:05:90:96:e7:14:b2:52:63:
                    ed:81:5a:07:3d:38:57:3c:95:e9:90:9a:80:8e:43:
                    e8:6b:5c:33:57:93:60:be:00:37:f1:38:0f:30:4a:
                    ab:e8:48:8a:1f:4f:1c:4f:84:d6:0c:cb:c5:d8:79:
                    30:0b:ec:94:05:a6:99:e7:a4:cd:17:0a:6c:bf:d5:
                    1a:a9:94:6a:1b:d9:cd:cc:fb:72:0d:60:10:e4:7b:
                    bf:4d:32:d7:89:9d:d3:f5:fb:4f:04:98:29:e1:31:
                    2b:0e:2c:c4:d4:ae:68:e1:83:3d:ed:2f:98:13:9f:
                    69:9b:83:5e:c2:c7:14:5a:33:a1:df:bd:fb:14:2a:
                    15:27:73:91:8e:43:d4:b5:05:9d:70:98:b5:b2:f9:
                    83:2a:dc:5f:63:a8:79:60:c0:d1:cd:ff:8a:98:8e:
                    20:18:66:58:ba:be:4d:53:09:17:30:e5:02:73:91:
                    d8:c1:c1:12:31:5a:a5:71:7d:ae:6e:8d:4f:a2:80:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C8:23:52:76:7A:C7:DD:18:7E:DB:3E:59:55:37:EC:1D:38:15:C8
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32322d3232203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:d4:5d:a0:54:af:b0:2e:07:11:fe:2d:0e:93:8a:f7:27:93:
         0c:9c:d1:d9:bd:4d:36:d7:2e:eb:74:61:ad:b2:d9:d8:bc:ed:
         f6:96:83:bc:93:d4:e7:1c:7d:e2:90:9d:df:ba:16:ef:31:76:
         91:a4:78:40:5f:43:65:26:ca:75:81:0a:f8:7a:f8:1d:2d:85:
         8d:91:30:5d:98:c9:6e:b7:c0:9a:1e:4b:bc:5b:e7:f1:26:80:
         f7:b3:62:63:57:05:68:06:34:ba:67:24:67:b8:84:9a:ac:77:
         8a:e9:ab:72:1b:4a:80:d8:08:a1:d8:ed:9e:d0:a0:66:a9:b1:
         52:ae:77:9a:13:14:91:25:7d:5a:b5:cd:b6:83:a0:37:e7:95:
         e4:c2:ca:7d:39:14:c2:72:20:3c:cb:f3:aa:2b:a1:07:75:b9:
         b8:0d:3b:3a:d2:8a:ed:65:0c:d3:29:c1:5f:ad:db:75:c1:4a:
         4a:9c:46:38:5d:dd:8d:42:3d:0b:30:10:a4:69:fc:45:c4:ff:
         02:4c:8b:5a:04:bb:52:54:42:71:c1:69:b4:e6:58:07:95:ad:
         ee:21:13:5f:72:b7:73:25:8b:f6:be:4d:5b:54:c4:16:6d:5e:
         8c:73:44:3e:3f:19:08:fb:40:40:d4:6a:dd:05:a6:18:bd:a3:
         b2:78:2f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:09:39 2026 by rpki-client