Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31382e302f32342d3234203d3e20323639303537.roa
File:                     34352e3137382e31382e302f32342d3234203d3e20323639303537.roa (raw, json)
Hash identifier:          jA0WhWKYf4rLx47YAEUa2KVguAesW5HWu0/jSn79NWI=
Subject key identifier:   18:A2:21:34:FF:64:9D:67:35:B0:E3:F8:6C:F2:70:BE:F5:5E:18:98
Certificate issuer:       /CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Certificate serial:       4FD45C575910EE90FD557F32CE1BB6A1408DDD89
Authority key identifier: 23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31382e302f32342d3234203d3e20323639303537.roa
Signing time:             Mon 28 Sep 2026 14:47:40 +0000
ROA not before:           Mon 28 Sep 2026 14:42:40 +0000
ROA not after:            Mon 27 Sep 2027 14:47:40 +0000
asID:                     269057
IP address blocks:        45.178.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
                          rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d4:5c:57:59:10:ee:90:fd:55:7f:32:ce:1b:b6:a1:40:8d:dd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
        Validity
            Not Before: Sep 28 14:42:40 2026 GMT
            Not After : Sep 27 14:47:40 2027 GMT
        Subject: CN=18A22134FF649D6735B0E3F86CF270BEF55E1898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:ad:25:6c:fb:5c:39:3f:d4:28:05:3d:9a:
                    d5:30:23:d3:ff:41:31:07:ba:da:6f:0f:41:76:82:
                    bc:9f:69:46:25:ac:5e:01:a3:34:5f:8e:59:34:3c:
                    72:c4:ea:9d:27:e8:47:7a:99:82:e6:f1:71:0a:d4:
                    92:0e:11:22:be:f4:72:a2:cb:27:fe:c3:89:0d:bc:
                    16:6c:ff:e4:86:05:6c:e9:81:b1:90:2e:1a:fe:77:
                    f7:b0:c1:17:f9:05:92:d7:13:0f:91:ca:05:ab:6e:
                    37:18:0d:89:d8:67:04:95:a0:ff:c0:94:e5:72:17:
                    7d:b4:78:f2:e8:b7:a3:33:1a:49:30:39:b0:67:12:
                    2a:f5:a9:19:3c:4b:27:b7:1e:92:3d:bd:c0:56:14:
                    7e:6f:45:9f:9e:e4:fa:19:a9:ef:85:12:73:2f:d2:
                    32:58:a1:58:6b:c4:c6:c9:4e:69:10:ce:7b:38:30:
                    22:f5:3a:86:c8:7e:38:9f:fd:83:54:c9:ef:b7:53:
                    a1:60:8d:a1:49:88:2e:11:c0:46:e5:9a:eb:6a:3f:
                    8b:7b:5f:b1:20:36:aa:6f:03:13:59:0a:4c:b5:db:
                    ce:00:3a:4f:52:7e:4b:d0:ff:a7:71:5f:a8:76:a1:
                    8c:b4:77:44:bb:dc:cc:b9:02:8f:57:69:fc:87:87:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:21:34:FF:64:9D:67:35:B0:E3:F8:6C:F2:70:BE:F5:5E:18:98
            X509v3 Authority Key Identifier:
                keyid:23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/34352e3137382e31382e302f32342d3234203d3e20323639303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:f0:a1:d1:f1:78:a5:b4:44:ea:89:2a:c3:5a:2d:0e:4c:
         38:f5:ae:35:79:d0:ce:70:d8:fc:58:17:17:df:64:a3:81:8a:
         9d:da:60:cb:8d:79:b6:a3:f2:ef:97:5a:ea:0e:2d:7d:c9:33:
         30:4b:f0:88:9f:81:22:17:41:63:69:2f:41:3a:bd:be:9b:7b:
         26:bc:b7:bb:63:2d:bc:25:cb:f3:42:21:b3:2b:dd:bf:a9:25:
         d2:59:f7:e1:93:e3:b1:5b:9d:38:51:6b:48:60:eb:51:d9:bd:
         6a:79:0f:80:0f:07:e2:43:9d:f1:8a:e0:1d:20:96:4e:5d:98:
         13:1d:f6:f7:7d:b8:91:00:ad:33:03:90:ff:a4:7c:16:e1:fc:
         ab:f1:14:b5:c0:bb:db:4b:d8:af:b7:2c:cb:c8:e7:7b:da:39:
         dc:34:87:c9:66:1f:98:71:cc:cc:46:6a:23:e7:b5:b7:ee:93:
         c1:e9:c9:11:1d:16:af:fb:8e:77:df:8e:ec:16:be:d7:e1:b2:
         90:ce:68:8a:a9:3e:5b:bc:1e:12:7a:14:4c:86:f3:dd:3a:3e:
         43:fb:2a:56:46:51:61:bb:ef:1a:4f:5f:83:20:52:6a:8b:e0:
         84:f1:e7:ec:71:14:20:55:df:ef:2f:1f:04:87:7e:6d:4f:3e:
         6a:a4:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:57:29 2026 by rpki-client