Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa
File:                     34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa (raw, json)
Hash identifier:          hrXqcsIjdeY6ccmAPSC8fzAqlErkueRNB5WskSagbRE=
Subject key identifier:   5D:52:15:D2:38:3E:12:CA:39:E2:71:0C:43:27:82:CD:CA:69:E2:6A
Certificate issuer:       /CN=53836BEB7A42429EEE86341924926CF42BA1E8A4
Certificate serial:       4B5C1745ED74EDDCBBFEF98A94DB8D5C857DE97A
Authority key identifier: 53:83:6B:EB:7A:42:42:9E:EE:86:34:19:24:92:6C:F4:2B:A1:E8:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa
Signing time:             Fri 11 Sep 2026 14:23:21 +0000
ROA not before:           Fri 11 Sep 2026 14:18:21 +0000
ROA not after:            Fri 10 Sep 2027 14:23:21 +0000
asID:                     269044
IP address blocks:        45.178.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.crl
                          rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 23:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:17:45:ed:74:ed:dc:bb:fe:f9:8a:94:db:8d:5c:85:7d:e9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53836BEB7A42429EEE86341924926CF42BA1E8A4
        Validity
            Not Before: Sep 11 14:18:21 2026 GMT
            Not After : Sep 10 14:23:21 2027 GMT
        Subject: CN=5D5215D2383E12CA39E2710C432782CDCA69E26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e7:59:36:f0:0a:d6:b2:e7:e9:eb:6b:45:11:
                    58:1a:74:15:cd:1c:b0:9b:a2:5b:07:a7:d9:a9:aa:
                    85:fb:2c:7b:9d:84:e5:63:ca:c1:c9:fe:57:4f:2f:
                    9c:3a:3f:fa:b6:ec:a5:23:b3:05:03:40:e7:e6:b4:
                    8f:71:58:cc:49:11:8b:9c:3e:f4:70:0b:f0:f3:4b:
                    99:80:0c:4f:5d:66:0e:da:5e:7c:2e:7d:e8:ec:e0:
                    12:79:e4:26:8f:4a:2b:c1:5f:ca:33:0c:05:0a:62:
                    e3:72:99:a1:90:7d:b3:e1:a3:46:3d:d0:3e:b2:14:
                    21:40:08:23:ca:13:46:ba:d3:c4:06:0f:5e:46:8d:
                    32:42:d5:d3:13:09:f2:69:e7:84:e3:f0:23:6f:00:
                    46:b3:bc:59:f4:e5:11:7f:80:51:65:47:e6:ea:57:
                    ac:b2:31:45:e8:95:a5:b0:9d:cb:31:08:c8:49:2e:
                    29:8b:7c:30:dc:31:c2:51:3a:c5:a8:b8:7d:9a:50:
                    71:7c:47:2f:d5:78:19:e7:f7:ed:10:21:f2:a7:1b:
                    79:95:c0:2d:09:d5:ad:e6:c3:17:ec:83:f1:33:20:
                    97:6c:60:ad:5a:b1:64:55:27:fc:b5:61:11:0f:8f:
                    73:86:f7:f5:2b:a4:23:88:fc:a2:32:05:4f:d9:15:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:52:15:D2:38:3E:12:CA:39:E2:71:0C:43:27:82:CD:CA:69:E2:6A
            X509v3 Authority Key Identifier:
                keyid:53:83:6B:EB:7A:42:42:9E:EE:86:34:19:24:92:6C:F4:2B:A1:E8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/53836BEB7A42429EEE86341924926CF42BA1E8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53836BEB7A42429EEE86341924926CF42BA1E8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/34352e3137382e3233352e302f32342d3234203d3e20323639303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ea:e8:2e:90:7e:7a:d4:35:e6:ee:4b:07:99:bb:80:0b:8f:96:
         a2:d7:9d:b7:a5:df:2b:f5:d4:af:06:a9:1a:41:87:8a:ad:9a:
         5b:af:8a:00:ff:c7:f7:0f:01:6d:5a:55:cd:03:04:cc:36:61:
         8f:e9:e6:5b:e0:bb:15:0f:5c:56:c9:df:37:66:f4:c2:e9:29:
         e2:d2:b1:2b:94:15:07:c6:73:fd:36:75:e9:42:0f:a5:90:f8:
         14:a9:0d:74:79:14:6c:b8:88:93:41:1e:97:72:7e:c8:47:59:
         07:f4:4b:fe:f1:ea:6d:03:40:0a:c0:77:c8:fb:8d:e1:9d:95:
         39:7d:6f:f1:fe:ed:46:48:37:e9:25:19:5f:df:04:14:75:63:
         23:b8:90:8a:0a:26:87:90:db:33:94:20:7d:6d:ca:0d:dc:de:
         1f:2a:8b:5a:7d:fb:3c:fc:30:36:6f:b7:40:a4:b3:54:1c:2b:
         95:c2:45:e3:50:4c:84:ae:41:c2:4e:ce:d0:06:bc:f8:32:c5:
         26:67:ff:d3:2a:7f:67:80:0a:7a:f7:dd:a9:0e:3d:61:b5:ed:
         e5:79:2a:5a:9a:32:cc:92:d3:25:10:c4:ec:a8:eb:77:69:77:
         d0:75:46:bf:80:09:4f:fc:79:35:e7:be:60:bc:04:f4:41:88:
         7c:bc:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 07:31:00 2026 by rpki-client