Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/34352e3138342e31322e302f32322d3234203d3e203532363036.roa
File:                     34352e3138342e31322e302f32322d3234203d3e203532363036.roa (raw, json)
Hash identifier:          Oiw5nGeTfxGCAUycTrTkduGTLY3qQxa4iwt8sTAz9GA=
Subject key identifier:   E8:D1:47:5A:37:A2:0B:B4:2D:C9:F5:CB:30:19:AD:56:AC:49:40:96
Certificate issuer:       /CN=E23C3D3094CEC27DA3BE7B59BAD1C67237851B23
Certificate serial:       66575C397766471990AB20C6F60BBB5D95A80D91
Authority key identifier: E2:3C:3D:30:94:CE:C2:7D:A3:BE:7B:59:BA:D1:C6:72:37:85:1B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/34352e3138342e31322e302f32322d3234203d3e203532363036.roa
Signing time:             Tue 18 Aug 2026 04:16:36 +0000
ROA not before:           Tue 18 Aug 2026 04:11:36 +0000
ROA not after:            Tue 17 Aug 2027 04:16:36 +0000
asID:                     52606
IP address blocks:        45.184.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.crl
                          rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 18:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:57:5c:39:77:66:47:19:90:ab:20:c6:f6:0b:bb:5d:95:a8:0d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C3D3094CEC27DA3BE7B59BAD1C67237851B23
        Validity
            Not Before: Aug 18 04:11:36 2026 GMT
            Not After : Aug 17 04:16:36 2027 GMT
        Subject: CN=E8D1475A37A20BB42DC9F5CB3019AD56AC494096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:dc:bd:57:ac:24:69:de:19:5d:1c:8e:78:
                    8a:bc:ef:3e:87:5e:ec:63:d1:ca:10:ff:10:a5:bc:
                    30:59:d2:74:d4:a2:4e:d8:22:bd:67:f4:72:c3:72:
                    61:38:a7:d8:57:7b:c7:05:72:a8:2b:87:d7:05:9a:
                    1f:3f:c8:1a:89:1b:36:99:97:bc:f8:4a:72:b2:05:
                    96:9b:71:50:cd:fa:28:7d:16:c2:2f:34:66:51:ec:
                    d1:00:37:4e:4d:b2:0f:5e:14:87:5d:69:84:06:59:
                    88:27:d6:ec:be:5f:35:bc:26:98:90:bf:fe:e0:85:
                    07:b9:d0:57:a1:e2:c0:de:98:9b:74:77:90:f6:75:
                    30:8e:61:6f:af:6c:f3:64:4f:f7:c3:8c:1d:1c:f2:
                    48:3e:f5:e0:a9:eb:19:bd:32:32:27:ca:da:bd:3d:
                    b0:8e:30:79:1b:7d:96:11:de:57:da:1e:75:54:53:
                    ea:bd:04:0b:d4:e0:2b:84:88:3f:22:9e:45:b2:c7:
                    fb:89:23:64:a2:95:57:00:8e:0f:37:8e:0b:17:1f:
                    70:c9:9c:0e:76:fa:ce:a4:79:57:ef:d1:92:3d:bb:
                    a5:1c:cd:42:45:c4:35:6f:fc:58:7a:9c:aa:87:5e:
                    75:c3:33:05:17:ba:4a:e7:50:cf:b5:0b:cc:74:91:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D1:47:5A:37:A2:0B:B4:2D:C9:F5:CB:30:19:AD:56:AC:49:40:96
            X509v3 Authority Key Identifier:
                keyid:E2:3C:3D:30:94:CE:C2:7D:A3:BE:7B:59:BA:D1:C6:72:37:85:1B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E23C3D3094CEC27DA3BE7B59BAD1C67237851B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/34352e3138342e31322e302f32322d3234203d3e203532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:17:e6:9d:4d:8b:2a:ff:7c:d8:26:39:84:13:47:c4:a9:
         c9:b7:02:17:ff:ca:a1:fe:37:fe:db:c3:99:a4:81:34:c2:a0:
         ba:6d:3a:73:20:9d:05:10:72:bf:af:51:b5:ab:b9:ba:34:31:
         ad:75:b1:13:40:98:a0:cf:e4:af:f7:44:15:8c:b6:f6:18:27:
         42:5a:66:75:92:59:9a:f8:d9:70:87:d6:bb:2c:03:c9:c9:f4:
         8e:ea:b8:45:bc:a1:fc:e2:d9:e0:09:cb:bb:1c:f0:55:dc:50:
         d0:2e:14:81:1f:27:d0:d8:16:0b:80:41:04:41:65:47:3a:7f:
         62:c0:23:a1:f3:77:a8:c9:d3:0f:ae:39:99:56:32:6c:c2:be:
         b6:f7:ad:88:0b:76:d8:0a:29:f2:77:67:37:6f:c4:57:f2:89:
         e9:b9:0d:72:7e:12:6c:eb:c7:19:ff:a2:c5:57:af:2a:8a:3a:
         f6:69:f9:5c:a5:8c:f7:c9:ad:0a:60:68:cf:be:3d:1c:9d:ab:
         49:cc:a5:67:2f:08:e2:d0:60:74:7f:a2:d0:9b:b8:99:6b:a5:
         81:44:ac:3f:2a:a8:2e:6f:1c:0a:7f:51:35:3a:11:2c:74:8a:
         93:70:14:c7:f1:6e:f5:70:37:5e:dc:60:b6:38:c4:09:b3:3d:
         df:cf:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:43 2026 by rpki-client