Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31362e302f32332d3233203d3e20323639303537.roa
File:                     34352e3137382e31362e302f32332d3233203d3e20323639303537.roa (raw, json)
Hash identifier:          qEF2VifhxELkFdu+d8ITJ/esj9k+Z0rib96NsjJFBPI=
Subject key identifier:   44:6B:01:AE:A8:11:DC:F6:F8:90:03:7D:E5:6D:48:F5:6E:B9:40:E1
Certificate issuer:       /CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Certificate serial:       18FD6B34EA36B459140F4040EBBA2237B06589FF
Authority key identifier: 23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31362e302f32332d3233203d3e20323639303537.roa
Signing time:             Mon 28 Sep 2026 14:47:31 +0000
ROA not before:           Mon 28 Sep 2026 14:42:31 +0000
ROA not after:            Mon 27 Sep 2027 14:47:31 +0000
asID:                     269057
IP address blocks:        45.178.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
                          rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 11:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fd:6b:34:ea:36:b4:59:14:0f:40:40:eb:ba:22:37:b0:65:89:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
        Validity
            Not Before: Sep 28 14:42:31 2026 GMT
            Not After : Sep 27 14:47:31 2027 GMT
        Subject: CN=446B01AEA811DCF6F890037DE56D48F56EB940E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:2d:93:70:73:b4:f7:a1:6d:ad:43:16:21:
                    03:3e:a4:ac:14:ae:c8:58:af:55:83:05:3d:09:26:
                    55:17:63:90:85:6b:7a:80:03:f3:63:85:08:8b:34:
                    81:a5:5f:20:4b:64:cc:eb:fe:30:23:7e:d5:c6:56:
                    fb:d0:ec:68:fb:70:46:e0:9b:62:b0:14:aa:ff:94:
                    ce:2f:97:67:01:c1:03:0f:83:2a:e0:ec:7b:43:88:
                    60:7d:0a:0d:dd:bb:64:87:08:e1:0e:7c:84:62:c6:
                    d5:00:53:79:a3:63:99:67:50:62:62:64:fb:31:ce:
                    1e:46:7f:28:89:de:32:c9:70:fd:6b:83:a2:1f:d1:
                    50:15:fd:cb:40:cf:46:0e:7b:1d:f9:d1:e2:05:82:
                    f0:04:6f:51:62:a9:9f:0e:9a:18:77:e5:d7:bb:6b:
                    05:c8:d8:2e:c6:2e:8e:e5:2c:79:8c:4e:50:35:78:
                    bb:18:5a:e3:43:1c:ff:bd:6f:38:d6:6e:d5:36:c0:
                    a8:3e:33:d6:f7:59:2d:b5:d3:ff:bc:ae:15:06:2a:
                    6b:6a:b3:71:4a:ee:b6:96:d2:38:d8:e8:30:4b:b4:
                    d0:43:fe:0c:4a:56:63:5a:5b:b1:7d:b7:2c:26:8e:
                    2e:fc:fd:45:89:c8:2b:35:42:16:fa:d6:64:9f:91:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:01:AE:A8:11:DC:F6:F8:90:03:7D:E5:6D:48:F5:6E:B9:40:E1
            X509v3 Authority Key Identifier:
                keyid:23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31362e302f32332d3233203d3e20323639303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:8e:21:66:2d:88:82:45:a1:ed:f6:ca:30:a7:ab:27:8d:
         8d:48:55:2d:80:14:ce:b0:42:90:ab:da:0e:43:b3:00:82:61:
         c5:66:e4:b0:4f:1e:8b:2f:5e:a9:7c:94:3a:fb:15:ab:f5:d2:
         85:b1:6b:8f:4a:d8:fc:55:ae:01:62:a2:43:0c:4e:19:41:f5:
         d3:63:6c:61:b3:08:3c:ca:b2:ba:f0:a8:ad:27:32:f0:63:2c:
         9d:55:7b:66:30:62:53:ea:e0:42:92:a3:90:bb:b1:28:e3:4a:
         96:86:40:a9:67:15:02:1b:c4:5c:68:a0:34:4e:0d:5f:cd:96:
         42:0c:c9:bd:73:5f:d2:dc:4c:50:d6:31:87:6e:93:f1:87:ea:
         ee:77:9a:dd:64:49:0c:c3:fe:a4:6c:a1:64:7c:8a:0a:0b:9e:
         90:38:53:d2:e8:c5:f1:41:77:14:4f:21:39:b5:b3:b7:6c:48:
         a0:42:a9:93:8c:94:70:f3:55:cf:70:6a:35:09:f3:c0:14:50:
         c0:bc:f5:36:70:f1:f6:80:75:8d:e8:48:39:fa:ef:81:c9:0b:
         99:8e:f0:a7:21:f7:e8:79:ca:73:ae:18:28:48:33:19:c6:68:
         72:2c:b5:50:91:44:7a:a7:54:91:56:84:6c:25:82:3f:ab:c4:
         64:ec:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:11:06 2026 by rpki-client