Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37332e302f32342d3332203d3e20323731343738.roa
File:                     34352e3233362e37332e302f32342d3332203d3e20323731343738.roa (raw, json)
Hash identifier:          Uhqtx/ClIYR/R1Q/7oeouulx9j1xqagk+9bWo+nPrI4=
Subject key identifier:   05:2A:34:64:35:CD:CF:19:70:70:C5:32:15:D8:3E:43:7D:C0:7F:DA
Certificate issuer:       /CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
Certificate serial:       04EDDFFCEE10F64DE4DD962BB9AE1AC8090DA35A
Authority key identifier: 0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37332e302f32342d3332203d3e20323731343738.roa
Signing time:             Wed 23 Sep 2026 16:59:55 +0000
ROA not before:           Wed 23 Sep 2026 16:54:55 +0000
ROA not after:            Wed 22 Sep 2027 16:59:55 +0000
asID:                     271478
IP address blocks:        45.236.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:df:fc:ee:10:f6:4d:e4:dd:96:2b:b9:ae:1a:c8:09:0d:a3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
        Validity
            Not Before: Sep 23 16:54:55 2026 GMT
            Not After : Sep 22 16:59:55 2027 GMT
        Subject: CN=052A346435CDCF197070C53215D83E437DC07FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:02:f5:46:cb:8c:da:be:ec:18:c1:06:f9:
                    0e:ed:41:51:9b:68:38:64:e4:77:00:68:8d:aa:33:
                    cd:dc:21:9f:92:4d:f6:e3:3c:0e:b0:3c:ba:12:28:
                    9b:6c:61:51:bf:c1:28:a1:f6:da:c2:f4:32:8b:23:
                    0e:8d:89:77:49:b0:9d:b1:03:21:5d:1b:d0:b0:cb:
                    6d:33:43:b0:c2:0b:a3:3b:46:51:f6:6d:0f:96:d2:
                    a4:d5:25:dc:ae:c6:c1:58:60:73:7b:84:8d:e1:dd:
                    3e:8f:95:72:bb:65:87:90:5e:48:01:24:50:17:eb:
                    2d:b9:fc:c3:6e:8a:9b:0f:12:15:9b:65:75:7f:17:
                    88:fa:45:c0:81:9d:4c:df:95:e9:51:ed:09:85:fd:
                    80:1e:cd:8b:1f:43:6f:b7:8d:50:83:91:7d:33:9a:
                    30:9a:ef:4a:05:97:6c:f3:ba:31:08:39:e2:9c:a1:
                    b8:b0:2b:76:91:0c:d8:9b:db:62:36:99:19:98:5d:
                    0b:05:ff:14:85:e5:1f:48:e8:8e:c9:2b:b6:4f:24:
                    89:a1:06:cc:12:bd:dd:fb:b9:ab:99:52:e1:54:20:
                    2d:5b:69:1d:b4:5d:46:d5:1e:bb:93:8c:a5:75:32:
                    02:1b:f3:f8:cc:13:f2:e5:43:83:f2:59:30:d3:3c:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2A:34:64:35:CD:CF:19:70:70:C5:32:15:D8:3E:43:7D:C0:7F:DA
            X509v3 Authority Key Identifier:
                keyid:0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37332e302f32342d3332203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:cd:8b:f3:88:3c:9e:b0:d0:2d:46:20:6c:a8:07:f5:e2:
         d2:23:55:01:81:c8:c9:0d:fb:cc:c7:d3:f1:b4:bd:a4:19:da:
         f5:78:b7:48:2c:c2:3e:ff:20:68:9e:82:1d:ed:d7:72:59:bd:
         2b:41:b9:b7:e4:90:89:51:7f:0e:b5:d9:2c:44:4c:74:f0:f5:
         2a:9b:ca:0c:34:46:5d:91:09:fe:2a:b0:de:53:7b:b4:6f:80:
         06:f1:99:2a:b6:f0:80:1b:2f:9d:59:5d:47:7f:f7:d1:ac:cb:
         28:1e:85:1d:ad:71:19:f9:07:6b:f9:32:53:5b:d7:98:85:67:
         5e:3f:5e:4f:f0:33:fe:9c:11:72:c0:39:44:63:b4:4d:b2:b8:
         dc:75:9d:91:2a:d1:30:d0:f9:6a:87:5d:bf:ba:1a:d1:31:ae:
         c2:f9:68:97:19:0c:7b:7c:5a:9e:74:4a:5c:46:8b:3d:a4:ca:
         1d:9f:92:5a:b6:cb:50:70:f2:2b:c4:b2:9a:fe:76:c9:58:ac:
         0d:c3:18:de:da:0f:8b:62:96:1d:3b:92:38:10:95:88:3c:17:
         95:81:10:3f:79:12:bc:61:00:6c:aa:ac:e9:5d:39:d8:74:73:
         04:e3:7f:43:62:ad:36:1b:ae:8e:39:f8:14:85:b8:41:34:33:
         2e:70:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:33:05 2026 by rpki-client