Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32332d3233203d3e20323638323632.roa
File:                     34352e3233372e32362e302f32332d3233203d3e20323638323632.roa (raw, json)
Hash identifier:          W4enDHMa3p38dMwDjdp9I9YN8W91b4YcuAismMQOWRw=
Subject key identifier:   AA:7F:FE:89:55:B3:F1:D5:DE:8D:DD:BA:C9:90:38:36:F9:47:29:9D
Certificate issuer:       /CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
Certificate serial:       1BCA2EAA57FB350A584F8BA4C09504E635CDF068
Authority key identifier: AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32332d3233203d3e20323638323632.roa
Signing time:             Fri 18 Sep 2026 12:38:37 +0000
ROA not before:           Fri 18 Sep 2026 12:33:37 +0000
ROA not after:            Fri 17 Sep 2027 12:38:37 +0000
asID:                     268262
IP address blocks:        45.237.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ca:2e:aa:57:fb:35:0a:58:4f:8b:a4:c0:95:04:e6:35:cd:f0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
        Validity
            Not Before: Sep 18 12:33:37 2026 GMT
            Not After : Sep 17 12:38:37 2027 GMT
        Subject: CN=AA7FFE8955B3F1D5DE8DDDBAC9903836F947299D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:07:50:ab:7f:70:25:5f:17:72:84:a5:5e:
                    d5:93:26:e4:f8:8d:a2:7b:2e:bb:06:83:11:2c:0c:
                    0a:ef:cb:6e:3f:a9:2f:fe:f9:f7:7b:32:36:3c:ca:
                    e3:9b:d8:45:0b:4a:18:31:96:c9:bb:0d:d0:63:70:
                    1e:10:89:ec:04:08:ac:fc:ae:1a:21:bb:b0:3f:c7:
                    9f:ba:1d:91:18:e8:f3:b0:e4:d7:95:cd:cb:c6:13:
                    c9:da:83:1b:5c:5e:bc:42:6b:b8:ff:4a:cb:e4:e7:
                    c0:2a:ba:10:ca:8f:29:24:81:1f:b2:f4:ef:d5:de:
                    4b:7f:f0:cf:88:42:5a:d4:48:b8:54:31:fc:ba:ed:
                    7d:3b:37:95:26:b9:42:bd:96:ad:12:f4:02:44:a1:
                    20:bd:56:1f:8c:a1:82:43:39:88:8e:7e:aa:91:f2:
                    7f:99:88:15:78:73:17:83:bb:df:b8:8a:9e:9b:f1:
                    28:2a:23:2a:90:01:a6:0f:d3:7c:6c:56:65:49:8e:
                    3b:70:99:8d:b7:37:ec:7a:74:5a:9c:f5:29:43:94:
                    0c:6b:36:8a:16:a7:b5:c6:ec:ed:61:81:64:7f:17:
                    51:60:f3:b9:9d:0a:a8:0e:8a:7d:dc:2d:4f:be:df:
                    3f:19:68:88:42:54:b6:75:9e:ad:e4:d4:2f:e1:e9:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:FE:89:55:B3:F1:D5:DE:8D:DD:BA:C9:90:38:36:F9:47:29:9D
            X509v3 Authority Key Identifier:
                keyid:AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/34352e3233372e32362e302f32332d3233203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:08:73:22:a7:34:75:2e:46:30:6a:7e:1b:b1:a5:8d:3f:51:
         af:1d:98:b4:a6:a9:66:ce:45:5c:e0:a9:34:dc:76:d5:53:45:
         c6:54:da:42:9b:01:8e:c0:b9:74:44:a0:61:0f:58:78:1d:6d:
         35:6c:53:d6:68:d3:20:9f:43:9e:90:0e:80:58:7b:43:9a:49:
         9c:bc:a1:3b:80:26:04:3e:a2:47:d2:e0:15:37:d8:5c:54:e1:
         75:42:ac:bc:ba:43:02:44:b1:9b:4e:22:28:37:0b:49:4f:ad:
         01:f8:08:54:6e:ef:c4:e8:2b:df:68:65:7a:1e:fe:ed:26:89:
         77:be:fb:a4:c0:f9:1c:90:f5:56:d8:d1:8f:a7:91:42:79:34:
         13:c4:03:24:d1:90:d8:d1:7e:ca:fb:19:e2:b3:9b:d2:38:c4:
         13:5e:2e:1c:c9:ca:d8:6b:d7:31:e1:32:80:9e:8b:d6:37:d1:
         72:50:dc:f7:b3:44:09:c8:fe:f1:60:86:69:07:74:88:f6:4c:
         49:44:f9:f8:b0:35:6a:00:c3:a4:d5:71:fe:9c:5b:6a:7e:d7:
         fb:c2:43:01:c8:03:14:cf:75:5f:2e:34:ae:eb:95:97:a1:07:
         59:d2:ae:58:10:6b:0c:26:a3:08:fa:41:57:0c:17:e3:82:bd:
         37:0b:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:06:04 2026 by rpki-client