Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/34352e3139302e3130302e302f32322d3234203d3e20323639363234.roa
File:                     34352e3139302e3130302e302f32322d3234203d3e20323639363234.roa (raw, json)
Hash identifier:          6KgH9ENR3bKpo9MaTeAwpwDos1JC6AjkUknFQGsbWQk=
Subject key identifier:   91:C9:96:97:F5:F2:E9:79:F2:91:B2:74:0D:38:34:D8:8E:A3:EC:A8
Certificate issuer:       /CN=A51EBE76D981A8F26159293FB44DB3CB2897A82A
Certificate serial:       47354DD92F24C290D88EDA69E3064D8641EB0201
Authority key identifier: A5:1E:BE:76:D9:81:A8:F2:61:59:29:3F:B4:4D:B3:CB:28:97:A8:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51EBE76D981A8F26159293FB44DB3CB2897A82A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/34352e3139302e3130302e302f32322d3234203d3e20323639363234.roa
Signing time:             Wed 19 Aug 2026 13:36:46 +0000
ROA not before:           Wed 19 Aug 2026 13:31:46 +0000
ROA not after:            Wed 18 Aug 2027 13:36:46 +0000
asID:                     269624
IP address blocks:        45.190.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/A51EBE76D981A8F26159293FB44DB3CB2897A82A.crl
                          rsync://rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/A51EBE76D981A8F26159293FB44DB3CB2897A82A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51EBE76D981A8F26159293FB44DB3CB2897A82A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:35:4d:d9:2f:24:c2:90:d8:8e:da:69:e3:06:4d:86:41:eb:02:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51EBE76D981A8F26159293FB44DB3CB2897A82A
        Validity
            Not Before: Aug 19 13:31:46 2026 GMT
            Not After : Aug 18 13:36:46 2027 GMT
        Subject: CN=91C99697F5F2E979F291B2740D3834D88EA3ECA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:f6:f0:9c:81:ff:8f:8b:94:a7:5f:26:7a:
                    8f:73:85:0a:9a:95:e3:7e:42:2b:54:7c:c1:53:a1:
                    48:cc:fa:d2:c9:7c:5f:67:7c:b1:ec:40:de:dc:3b:
                    04:08:e0:46:ad:79:3b:c6:c4:4e:35:79:dd:8b:48:
                    11:1b:4a:f4:29:33:92:e5:e8:1b:8c:92:f6:f3:c0:
                    b8:f7:13:9a:0c:af:15:26:80:0d:1d:1f:d5:68:ca:
                    32:03:24:19:9a:8d:df:56:b3:4f:c6:ca:33:31:1a:
                    52:fa:00:bb:0a:3e:75:20:95:c7:86:02:bf:ae:35:
                    63:a5:ce:ee:01:28:6c:a5:c4:61:4d:77:6e:80:6e:
                    66:86:89:14:53:23:6c:84:53:16:65:e4:eb:38:9f:
                    ce:5f:2d:ca:4c:ae:59:45:64:4e:3a:b5:f2:ed:f6:
                    01:17:59:e1:36:ba:c0:f8:ef:20:42:17:82:98:5e:
                    5c:5f:ba:03:97:85:6e:5b:bc:68:72:a9:4e:e9:e6:
                    45:eb:d6:94:c1:27:ca:56:9e:9d:d5:8f:9a:a4:08:
                    08:61:0e:1c:4a:d2:d2:96:d6:2d:c8:87:fc:ad:3c:
                    8f:ec:23:65:d8:e0:c8:7b:54:a8:82:09:a2:ce:61:
                    c2:30:97:aa:90:cd:6e:b7:b6:05:62:8c:81:d3:da:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:96:97:F5:F2:E9:79:F2:91:B2:74:0D:38:34:D8:8E:A3:EC:A8
            X509v3 Authority Key Identifier:
                keyid:A5:1E:BE:76:D9:81:A8:F2:61:59:29:3F:B4:4D:B3:CB:28:97:A8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/A51EBE76D981A8F26159293FB44DB3CB2897A82A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51EBE76D981A8F26159293FB44DB3CB2897A82A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D44wxfrCwLLuWJs6n1nk3vXcz56tNCWDXd5KxnWJigdC/0/34352e3139302e3130302e302f32322d3234203d3e20323639363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:70:8b:48:d3:6d:ea:52:3f:5b:46:ea:d1:e6:9d:64:fe:e1:
         ac:26:3a:d0:e4:cf:71:42:4b:a6:5e:43:16:77:cc:9f:2d:6b:
         15:71:f8:38:3b:51:e6:ac:b7:77:e7:5f:a3:1f:dc:07:cd:ee:
         f1:ac:36:3e:9b:5c:69:28:84:c2:30:f2:ca:2b:f9:51:b2:be:
         a3:93:dd:8c:27:57:70:af:a0:3f:95:a5:52:74:2d:d4:90:00:
         cf:81:7e:7a:db:ab:de:cb:26:ca:2a:d8:bf:47:35:ac:2a:ec:
         b9:fa:17:53:c2:2f:ac:09:47:fe:2d:4a:2c:f9:88:c8:fe:fd:
         76:aa:22:87:6a:b7:30:55:5a:e1:86:e4:f8:2d:bf:38:04:21:
         47:fc:d0:a0:12:d0:b4:6f:88:6c:52:fc:c7:d3:2a:d0:bb:f0:
         95:26:06:71:af:75:0b:05:0e:e4:30:ad:81:98:c6:21:7b:fc:
         87:dd:c5:32:bc:63:fe:d5:50:ec:1c:7a:34:a0:25:34:6c:5f:
         ad:30:ae:e3:7f:4c:38:e7:4b:21:28:60:4f:d9:2a:42:95:a1:
         7e:3f:96:e0:25:a1:cd:2d:af:fe:bc:c7:67:9d:8d:b6:e5:a6:
         b3:37:67:9b:69:ba:40:03:ce:20:70:91:49:da:2a:f7:41:8b:
         72:82:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:11:27 2026 by rpki-client