Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e382e302f32332d3233203d3e20323731333536.roa
File:                     34352e3136302e382e302f32332d3233203d3e20323731333536.roa (raw, json)
Hash identifier:          K8bcCTlz356Xd+uLiUqCksUlaMzj+D1KVUlbvTnmf3Y=
Subject key identifier:   76:9B:97:09:DF:4A:76:27:E7:06:9B:88:AA:65:71:27:99:AE:2A:13
Certificate issuer:       /CN=2640471686F6E96D321776DCD4142869F9C77A1A
Certificate serial:       5B6D94FFBF618FAF5981A4A3D940B5241A5CF4AE
Authority key identifier: 26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e382e302f32332d3233203d3e20323731333536.roa
Signing time:             Thu 17 Sep 2026 20:11:38 +0000
ROA not before:           Thu 17 Sep 2026 20:06:38 +0000
ROA not after:            Thu 16 Sep 2027 20:11:38 +0000
asID:                     271356
IP address blocks:        45.160.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl
                          rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 18:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6d:94:ff:bf:61:8f:af:59:81:a4:a3:d9:40:b5:24:1a:5c:f4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2640471686F6E96D321776DCD4142869F9C77A1A
        Validity
            Not Before: Sep 17 20:06:38 2026 GMT
            Not After : Sep 16 20:11:38 2027 GMT
        Subject: CN=769B9709DF4A7627E7069B88AA65712799AE2A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:c7:6b:db:4e:3c:66:8f:03:a9:84:7b:f7:
                    14:a2:38:9e:8e:f4:a4:1b:8e:c4:15:d2:94:6d:a2:
                    ce:ac:f3:f6:4c:0d:cf:17:91:d4:ed:55:8c:20:69:
                    61:84:59:7b:af:18:d9:21:37:19:c4:6f:4b:51:d3:
                    11:e4:3e:46:ed:78:6e:c1:35:ad:e3:9e:b2:8e:69:
                    a1:d8:56:bc:e8:af:62:9c:bf:01:10:e8:6c:d3:81:
                    bc:a3:58:5f:20:50:6d:aa:02:fb:94:06:20:46:fc:
                    ad:b6:4a:3d:f8:32:b0:8c:3a:d3:ff:53:6d:7d:9b:
                    00:cb:2f:f8:df:80:1c:e5:31:84:2d:8b:c5:a1:11:
                    40:20:f0:e5:55:9d:9f:02:48:06:2a:6f:bb:67:68:
                    fb:38:bf:bf:f8:ec:77:57:36:25:74:dd:b7:47:b0:
                    37:eb:83:32:fc:c7:58:1a:39:85:72:10:43:0c:09:
                    55:5f:b3:40:5f:c6:3d:80:35:3d:71:b4:8f:86:57:
                    d9:3a:46:a8:fc:3b:e2:07:01:74:7b:35:f3:3a:52:
                    2d:6d:b0:6b:2f:2a:49:2a:c9:b7:30:ca:31:57:e9:
                    26:a1:a8:36:f4:91:30:99:16:58:73:30:ac:70:e1:
                    27:90:aa:2d:ef:84:21:52:c5:55:40:ef:22:3f:aa:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:97:09:DF:4A:76:27:E7:06:9B:88:AA:65:71:27:99:AE:2A:13
            X509v3 Authority Key Identifier:
                keyid:26:40:47:16:86:F6:E9:6D:32:17:76:DC:D4:14:28:69:F9:C7:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/2640471686F6E96D321776DCD4142869F9C77A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2640471686F6E96D321776DCD4142869F9C77A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLm1txCJmYq2GUxsQvmaTygy8hSrUVAja6Q9fsEjrH8x/0/34352e3136302e382e302f32332d3233203d3e20323731333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:68:f2:3a:62:d3:42:2d:96:31:e8:19:ff:cd:22:c1:d4:
         1d:3e:5a:44:dc:96:22:0b:77:ea:63:5c:dd:a0:91:4e:3c:51:
         e2:b4:b8:8e:a3:9f:45:83:ee:f2:16:09:b9:68:59:7e:00:15:
         be:eb:24:1f:6d:31:b1:aa:fe:9a:4d:e7:d5:db:6c:3c:6f:38:
         b7:4b:c1:52:7c:ac:cd:9a:1b:8a:94:54:98:1c:34:b6:0b:d3:
         81:fc:61:ae:6b:21:d0:46:5c:60:f1:52:2b:f3:b1:ae:c5:50:
         10:71:0d:71:a8:78:4e:83:db:6e:39:3d:30:5d:55:f6:4b:5e:
         6e:be:9a:54:26:d8:0a:e1:79:cb:2a:b6:a4:f1:e9:6d:ae:2f:
         2b:35:c1:fb:04:7a:86:9f:e7:88:ba:5f:34:5f:d8:d5:66:d8:
         b6:68:47:05:68:12:48:fa:fc:f5:c3:e4:4a:41:9e:1b:50:c8:
         42:86:7a:ef:7f:d5:1c:0e:07:d9:26:0e:17:0d:b7:8c:4f:e6:
         44:92:48:0d:ec:dc:d4:10:59:bb:20:8c:57:31:48:cf:42:d4:
         d1:0a:a9:3d:4c:4a:ed:f4:ff:be:c9:62:8b:89:e4:0b:1e:b7:
         25:a4:0a:75:4f:94:42:2d:70:98:e5:bb:f2:62:e1:81:79:d2:
         e6:73:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:15:59 2026 by rpki-client