Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa
File:                     34352e3137372e36302e302f32322d3332203d3e20323639303331.roa (raw, json)
Hash identifier:          X+RKaYJ6Pmb36aMm2H53FU60FxR7VgZulX4Vjed7tN8=
Subject key identifier:   5C:B7:88:34:33:DC:92:BF:76:16:08:3A:5B:D3:F2:DE:AB:75:3F:24
Certificate issuer:       /CN=93528104A99E4BCD7A2D6FE569D6EEEE60F7470B
Certificate serial:       384FC0CD54F12491756E87B8BD9F05F5C400C7DE
Authority key identifier: 93:52:81:04:A9:9E:4B:CD:7A:2D:6F:E5:69:D6:EE:EE:60:F7:47:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa
Signing time:             Tue 22 Sep 2026 20:44:09 +0000
ROA not before:           Tue 22 Sep 2026 20:39:09 +0000
ROA not after:            Tue 21 Sep 2027 20:44:09 +0000
asID:                     269031
IP address blocks:        45.177.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.crl
                          rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4f:c0:cd:54:f1:24:91:75:6e:87:b8:bd:9f:05:f5:c4:00:c7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93528104A99E4BCD7A2D6FE569D6EEEE60F7470B
        Validity
            Not Before: Sep 22 20:39:09 2026 GMT
            Not After : Sep 21 20:44:09 2027 GMT
        Subject: CN=5CB7883433DC92BF7616083A5BD3F2DEAB753F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:f7:6f:11:2b:d3:89:76:c4:ee:36:fb:8e:
                    31:02:ea:f7:7e:ce:a9:a3:17:19:84:6f:74:24:43:
                    9e:1a:20:da:27:ef:c2:71:06:9a:aa:7c:01:3b:fa:
                    b2:2e:94:a6:d0:32:e7:29:22:f9:f6:9e:30:4b:bf:
                    e9:a2:80:89:3f:e5:1c:a6:d6:d5:2c:fc:49:eb:a4:
                    a9:dc:53:7c:27:cf:c1:5b:90:52:11:45:ef:96:dd:
                    a2:b8:16:fd:94:98:de:3f:94:d4:00:e3:6a:76:54:
                    77:ff:01:56:b4:b2:57:7b:dd:e0:0e:7f:a8:f9:9b:
                    00:ff:ba:56:d5:58:67:93:49:f2:7a:bb:c1:6e:c4:
                    63:ec:db:9b:6c:0e:b1:a2:84:48:a2:8a:f8:5b:a4:
                    15:cd:db:c4:5d:bd:20:94:93:34:0f:13:5e:93:eb:
                    06:89:5d:28:93:fd:37:e8:15:9f:41:19:55:f1:57:
                    27:b2:90:26:57:5b:0d:20:93:b7:f5:eb:4e:c0:91:
                    f7:4b:3a:d5:47:0e:1d:75:c7:37:41:1f:b7:da:45:
                    27:1b:ae:39:a6:16:69:de:d9:78:48:f1:ad:4d:b8:
                    72:b3:7b:eb:fe:b5:c4:84:53:98:e8:85:5b:e5:17:
                    67:2f:eb:4a:6b:ea:fc:3e:5b:2e:ae:90:2b:3a:5f:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B7:88:34:33:DC:92:BF:76:16:08:3A:5B:D3:F2:DE:AB:75:3F:24
            X509v3 Authority Key Identifier:
                keyid:93:52:81:04:A9:9E:4B:CD:7A:2D:6F:E5:69:D6:EE:EE:60:F7:47:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93528104A99E4BCD7A2D6FE569D6EEEE60F7470B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dMbnvmSwqAtbqdDnr7TxTFdi34vH4i9ru69qGdh8VzD/0/34352e3137372e36302e302f32322d3332203d3e20323639303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:15:c3:af:f5:1b:64:e8:34:c1:67:7f:17:8e:3b:a7:db:
         64:10:9f:ee:e2:7c:85:01:40:3b:f8:8e:ca:1b:f2:79:fa:16:
         f3:0e:ba:00:2f:38:4a:39:cc:f5:01:3c:d3:ee:3e:93:2f:26:
         e7:c0:44:33:f3:28:d1:3d:9a:bc:89:e9:73:92:b8:64:47:da:
         7d:0a:61:71:1f:8b:5b:f6:49:7e:44:fb:a8:c0:31:f9:03:73:
         eb:8b:6e:3a:ca:07:16:6a:23:24:32:ab:99:18:4f:91:ad:86:
         05:4b:31:73:c4:25:ba:26:f0:e6:16:f2:d9:68:d8:eb:54:ad:
         fd:22:d7:80:43:d9:25:7a:b3:80:2b:a1:35:93:27:ce:18:98:
         3e:ae:86:33:b1:ff:b5:c9:18:ba:a5:f8:d6:b6:d2:c5:66:8e:
         8d:f2:b7:11:d3:09:8b:b8:ba:17:dc:f5:8d:6d:ea:ee:7a:37:
         ba:78:ef:7a:95:fe:23:8c:f2:cf:e0:72:93:43:26:04:51:70:
         54:61:1a:14:d4:9f:1d:7c:ca:57:7a:83:c1:0b:59:f3:a0:b6:
         95:f7:60:44:32:d2:1a:8e:7f:0b:c4:7b:28:03:7c:7e:95:06:
         13:25:b5:1e:c4:a5:cf:34:e0:3e:01:9d:c6:b2:43:c4:80:5e:
         3b:1e:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:12:33 2026 by rpki-client