Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
File:                     34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa (raw, json)
Hash identifier:          Au3J+S3wUiu3+MBoEecJAhTc4zWL/hyO7toeUlKqRbM=
Subject key identifier:   81:5E:4C:9D:41:87:FE:17:07:5A:74:6C:08:37:BB:9D:B1:43:F3:71
Certificate issuer:       /CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7
Certificate serial:       1FEBB572B690C22490B0C25BD1587B5D5C77C0E3
Authority key identifier: D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa
Signing time:             Thu 15 Oct 2026 18:38:45 +0000
ROA not before:           Thu 15 Oct 2026 18:33:45 +0000
ROA not after:            Thu 14 Oct 2027 18:38:45 +0000
asID:                     267125
IP address blocks:        45.228.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl
                          rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 21:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:eb:b5:72:b6:90:c2:24:90:b0:c2:5b:d1:58:7b:5d:5c:77:c0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7
        Validity
            Not Before: Oct 15 18:33:45 2026 GMT
            Not After : Oct 14 18:38:45 2027 GMT
        Subject: CN=815E4C9D4187FE17075A746C0837BB9DB143F371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:5d:17:3f:1e:21:5e:c7:ac:a5:ad:d5:cb:
                    8e:22:21:80:c5:88:98:01:19:12:a2:83:18:f3:3d:
                    89:9f:58:28:aa:39:bd:24:4f:f3:37:3e:2d:5e:e7:
                    28:3c:07:fa:7f:c8:82:a9:03:66:de:3d:f7:c0:ce:
                    43:c9:db:c7:40:3e:47:a5:9a:ca:0c:5a:55:8c:72:
                    80:95:9a:30:b7:ee:8c:ec:3e:9e:4b:eb:6d:02:78:
                    35:35:4b:79:13:81:85:ec:1b:b4:f3:bf:bb:02:6a:
                    7f:21:a1:8c:15:84:3c:be:7d:60:90:37:07:4c:9a:
                    dc:9f:c1:99:be:4e:85:d9:32:a9:60:a2:8e:dd:e3:
                    e5:22:e3:bf:25:2a:7b:f3:9c:3a:52:3a:55:31:04:
                    62:1a:76:0d:9c:1a:00:8d:9c:8e:f4:30:fc:f1:23:
                    35:0b:bd:91:c2:fa:dd:f1:bf:b5:49:cb:9a:66:95:
                    d7:e1:52:60:bf:89:5c:cd:9f:3c:a9:d5:6a:43:71:
                    51:9f:09:f7:42:df:58:57:cb:a4:e2:01:9a:04:0d:
                    80:9a:82:93:25:d1:53:91:74:08:f3:7d:74:e3:2b:
                    7d:b3:14:16:52:1d:0a:05:7e:4c:4d:fe:5f:2c:d0:
                    d2:43:b6:68:8e:b4:12:be:4b:5e:06:47:4f:12:be:
                    24:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:4C:9D:41:87:FE:17:07:5A:74:6C:08:37:BB:9D:B1:43:F3:71
            X509v3 Authority Key Identifier:
                keyid:D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/34352e3232382e3233362e302f32322d3234203d3e20323637313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:01:47:9d:ec:09:18:4a:dd:4b:89:db:ed:a5:0d:a2:25:
         b5:7c:dd:2e:b5:9a:c2:3b:db:49:33:c7:93:32:95:ba:83:8a:
         9f:e1:f2:f9:81:95:2d:1d:ab:4e:2d:37:7f:34:5e:16:b7:db:
         d6:9f:27:f1:8f:98:56:9c:73:0d:11:85:09:2c:67:05:30:4a:
         aa:9d:f0:0f:fe:7a:c2:f6:78:60:73:98:43:12:c2:4b:03:a4:
         74:e3:e5:21:51:82:32:ba:1a:21:fd:15:68:5d:4d:5b:34:7e:
         5d:4a:10:03:59:c2:bf:52:e4:35:12:68:bb:e9:24:55:02:0e:
         85:34:27:a0:55:21:ed:34:76:e9:f4:20:b8:71:b0:5f:01:d3:
         c5:6a:2d:8f:eb:ae:4b:8e:9c:86:0b:f1:d8:f4:ee:ea:00:ed:
         9e:2d:30:a2:41:3f:a3:30:0b:07:4e:2e:74:07:dc:d6:e2:c7:
         47:14:43:aa:ab:5f:e0:a0:3a:35:51:34:9f:46:23:50:1e:65:
         21:54:07:d3:8c:a3:d8:5e:64:5c:c1:49:ea:72:e9:0d:00:a2:
         54:04:0b:26:e2:43:ff:dd:b7:2a:b0:c8:99:65:74:eb:7f:60:
         26:58:bb:c2:e4:67:68:39:f7:f5:0e:25:a9:b4:7a:02:ff:36:
         0d:16:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:53:07 2026 by rpki-client