Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e31302e302f32332d3233203d3e20323731333536.roa
File:                     34352e3136302e31302e302f32332d3233203d3e20323731333536.roa (raw, json)
Hash identifier:          W9AkuU+ldNJ1uX3cNkbavGMEX/KYMdCj8QrquNAzVKc=
Subject key identifier:   4F:DD:77:9F:FC:7A:45:E4:12:1F:7C:20:5F:87:4F:8D:EB:6A:3A:15
Certificate issuer:       /CN=2640471686F6E96D321776DCD4142869F9C77A1A
Certificate serial:       260894CAA431DED06D0D0E0D3195B23A4DA64D08
Authority key identifier: 26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e31302e302f32332d3233203d3e20323731333536.roa
Signing time:             Thu 17 Sep 2026 20:11:38 +0000
ROA not before:           Thu 17 Sep 2026 20:06:38 +0000
ROA not after:            Thu 16 Sep 2027 20:11:38 +0000
asID:                     271356
IP address blocks:        45.160.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl
                          rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 18:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:08:94:ca:a4:31:de:d0:6d:0d:0e:0d:31:95:b2:3a:4d:a6:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2640471686F6E96D321776DCD4142869F9C77A1A
        Validity
            Not Before: Sep 17 20:06:38 2026 GMT
            Not After : Sep 16 20:11:38 2027 GMT
        Subject: CN=4FDD779FFC7A45E4121F7C205F874F8DEB6A3A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:3d:24:27:a2:bf:a4:61:94:76:6b:a1:db:
                    2b:2a:10:46:0c:71:02:2e:6e:55:91:f0:6d:e6:5b:
                    a5:84:1f:66:e0:16:d5:06:20:d6:e0:5c:f0:40:53:
                    ec:f1:3a:8a:18:c8:20:2f:2d:6e:04:a4:58:cd:04:
                    a6:a6:bb:f8:43:37:7c:35:1c:f1:9d:d7:b1:19:c1:
                    58:25:41:e2:e2:4f:32:9d:c9:ab:8b:7b:dd:97:5e:
                    fa:c4:72:d3:b7:98:bd:21:74:81:63:84:73:a8:e0:
                    d0:83:d9:60:d7:a7:02:55:3e:73:8d:44:c6:3b:20:
                    c9:61:44:12:d6:48:08:17:72:22:13:b3:ba:47:71:
                    a5:e3:af:41:a7:66:43:ed:fd:2f:c6:fb:d3:db:a6:
                    95:4b:8b:dc:bc:98:db:62:d9:0f:43:27:d9:e1:be:
                    9f:84:46:95:d9:95:e5:b5:5d:0d:c5:9d:c1:6e:c0:
                    d1:21:4c:ef:77:33:d6:d0:b0:1a:99:4c:99:4f:69:
                    41:37:cf:f0:4d:f3:b0:8e:b4:0c:9d:fe:f9:51:02:
                    31:a6:c8:bf:67:e2:ea:cb:50:37:04:8c:33:b2:58:
                    43:a8:1c:1c:cc:96:55:e6:43:a3:fb:df:37:67:47:
                    f5:76:80:41:17:3b:9e:18:c3:a7:85:a7:4d:0f:15:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DD:77:9F:FC:7A:45:E4:12:1F:7C:20:5F:87:4F:8D:EB:6A:3A:15
            X509v3 Authority Key Identifier:
                keyid:26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e31302e302f32332d3233203d3e20323731333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:65:b9:14:2e:db:7c:46:fa:19:3b:08:f8:47:9c:50:8f:74:
         cb:bd:05:b0:d5:e1:3e:59:36:31:db:f0:fe:a6:0f:cb:c1:24:
         0f:86:79:c5:3c:0a:f4:f8:e3:18:09:e1:0c:01:47:b4:4f:cf:
         d1:3b:09:7a:c9:18:de:73:83:8b:23:58:bb:d9:b4:52:34:87:
         ff:42:36:7a:ec:30:7e:af:3d:bb:15:77:b1:d0:1c:0b:4c:5a:
         d6:d9:82:59:c2:89:3f:f1:ad:99:ee:73:6b:35:9a:e7:57:04:
         aa:3a:4c:0b:6c:16:aa:51:44:be:25:9c:45:01:73:bc:f4:d0:
         8a:28:72:74:f1:b7:a3:9a:19:b4:38:29:bc:4c:e2:c9:7d:e7:
         99:81:5f:0d:7e:41:f3:9b:95:9c:b9:35:e6:81:f5:8e:b1:ce:
         55:a2:42:43:70:19:ae:10:5b:3d:eb:63:e4:18:ed:56:f7:2f:
         81:2b:bb:6c:38:ed:33:9b:e7:84:8e:41:2d:71:dc:f5:40:86:
         a0:02:81:dc:85:49:95:33:39:db:2c:f7:64:1f:30:dc:fe:7f:
         37:01:19:03:49:4c:a1:53:68:0e:24:93:4c:04:df:2e:f5:64:
         49:71:f9:89:73:ab:39:99:f3:a6:b0:7f:51:86:e2:75:40:31:
         05:bc:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:16:01 2026 by rpki-client