Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
File:                     34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa (raw, json)
Hash identifier:          QmQ8SkWQZfQczJwLgzaW8G+5GhkdBOwS1bg/mQIN/7g=
Subject key identifier:   09:64:18:58:82:B8:13:5A:D7:1C:5F:C8:F3:60:3E:23:4B:02:13:2F
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       3D721657574274F76B565D594FA7338C4AE18424
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
Signing time:             Mon 26 Oct 2026 02:38:23 +0000
ROA not before:           Mon 26 Oct 2026 02:33:23 +0000
ROA not after:            Mon 25 Oct 2027 02:38:23 +0000
asID:                     267203
IP address blocks:        45.231.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:72:16:57:57:42:74:f7:6b:56:5d:59:4f:a7:33:8c:4a:e1:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:23 2026 GMT
            Not After : Oct 25 02:38:23 2027 GMT
        Subject: CN=0964185882B8135AD71C5FC8F3603E234B02132F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:89:e2:88:ab:c1:b4:06:57:2e:b3:a2:25:
                    ae:27:d2:e7:7b:88:f3:a2:8d:85:eb:c7:2f:0a:60:
                    3b:51:22:8c:9d:24:86:29:56:93:a5:5c:a7:b4:c0:
                    d2:78:77:1d:58:f5:62:45:6c:e5:3e:36:ee:56:d9:
                    ee:99:5e:91:10:5c:fe:11:b2:72:e9:b3:2d:45:8b:
                    d3:ab:f1:c2:1f:5a:cc:c8:ae:70:c3:30:74:3d:be:
                    b6:48:48:fa:dd:2e:a0:52:3b:b8:b4:9e:8a:9f:88:
                    06:a3:48:69:8b:7d:62:68:c8:18:fe:5d:32:37:02:
                    f9:48:2e:e8:5b:83:2b:59:7a:37:c8:a4:35:03:b6:
                    c0:47:e8:5f:63:a0:f1:c6:18:11:af:a8:91:3d:4e:
                    b9:59:d5:96:b1:9c:c3:6a:21:50:cc:c4:21:2e:5a:
                    7c:d7:54:00:c0:27:e4:83:ba:99:a4:61:b0:a6:92:
                    63:04:82:9c:06:78:9d:01:ab:34:56:02:ab:f2:6c:
                    94:f8:4e:31:09:2b:24:11:a9:c8:11:3e:8e:f4:dc:
                    10:a9:4a:d9:7c:d2:28:1e:57:8c:01:5b:5f:1c:34:
                    6c:2f:3f:ed:f9:5a:29:51:f8:e3:1c:54:6d:32:87:
                    a5:f4:bc:14:22:d5:05:f9:5e:cc:81:fe:61:cf:f1:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:64:18:58:82:B8:13:5A:D7:1C:5F:C8:F3:60:3E:23:4B:02:13:2F
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:9e:51:ae:b4:f6:69:19:f5:25:f6:02:8a:9f:a7:38:4f:
         91:ba:39:8a:93:b0:2b:5e:fc:b8:3b:65:39:9c:ef:40:0c:df:
         69:a8:01:bd:f0:96:77:ce:51:93:63:40:18:f6:9a:8e:30:5a:
         28:67:40:30:81:a3:a1:27:2c:0c:d4:20:44:66:9d:25:14:31:
         5f:0f:2a:85:e6:80:b8:51:f8:b8:d7:f5:8a:86:6f:52:21:fb:
         11:56:50:68:50:c6:1f:44:f5:95:1d:10:8c:66:12:4e:07:71:
         89:d9:52:ae:d7:74:91:57:58:85:c8:86:e1:0c:d0:49:16:5c:
         a9:13:39:c3:d9:09:d2:ed:6d:83:5b:e4:42:35:44:b0:e2:90:
         7c:b4:bf:a7:a3:49:10:41:50:75:7a:d7:46:d9:2c:71:5c:61:
         98:fb:4e:2a:c3:7b:20:1b:59:76:e9:86:0e:6f:f7:db:33:52:
         36:07:9f:d7:9a:b9:57:fd:1e:58:ff:bf:8b:e4:88:39:51:5f:
         5d:f1:9e:47:e5:22:6e:df:d9:b7:9b:32:40:9b:05:2d:62:6a:
         54:cd:cd:a9:a2:c5:1e:cf:1d:06:f7:2e:ce:0a:d1:8e:77:6c:
         e2:e7:67:b2:6e:ec:15:6d:2f:61:c2:c7:ec:43:95:16:b8:64:
         69:ed:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:03:22 2026 by rpki-client