Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e31302e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          n31tHipp8YODjP2T2sUuY044xtC7VqiOgDBD9Y4mcn8=
Subject key identifier:   69:B1:8F:7F:24:00:B7:CB:71:2C:9C:2E:BF:98:20:57:02:A3:12:D1
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       7C190BC7A0506E55AE7BCEAFB6FAFD6E75994D40
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:27 +0000
ROA not before:           Thu 17 Sep 2026 18:50:27 +0000
ROA not after:            Thu 16 Sep 2027 18:55:27 +0000
asID:                     269566
IP address blocks:        45.188.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:19:0b:c7:a0:50:6e:55:ae:7b:ce:af:b6:fa:fd:6e:75:99:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:27 2026 GMT
            Not After : Sep 16 18:55:27 2027 GMT
        Subject: CN=69B18F7F2400B7CB712C9C2EBF98205702A312D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:f2:70:47:6a:9b:bc:21:50:48:c4:34:e5:
                    3b:b1:cb:b0:9d:b3:04:55:3a:82:e2:0d:5b:5f:9b:
                    8c:b8:7c:cc:49:c5:1a:1f:2e:86:5c:7b:1e:86:62:
                    14:d1:dc:83:89:c1:8f:a3:40:85:98:64:f5:0e:c7:
                    e3:a8:d6:49:c9:b0:8a:a2:cc:67:9f:65:81:0c:61:
                    67:de:30:63:a9:7a:cc:35:29:90:a5:e5:8f:c7:ab:
                    0f:e8:ec:14:4b:ee:df:85:67:13:65:89:1c:4f:92:
                    aa:1e:9e:6c:5a:16:6d:be:a1:2f:50:85:7d:7d:b7:
                    2b:4b:47:8b:76:c7:6a:92:52:21:3a:be:a9:2d:e3:
                    5d:1a:11:43:76:b4:66:56:6c:91:fe:15:3a:c2:aa:
                    91:7c:34:94:b9:65:e1:db:45:4a:56:db:89:90:a8:
                    0b:7c:ef:46:84:ec:30:71:55:05:de:6c:aa:59:b3:
                    ee:42:a5:33:07:a2:da:45:36:d4:a1:7b:bf:e8:09:
                    82:95:be:af:13:e3:ab:7c:e6:be:00:f7:5f:f1:0e:
                    93:6f:f1:a5:e8:a5:76:b0:ea:23:64:9e:8c:15:12:
                    91:30:90:ae:2b:ab:4a:01:3f:65:b9:32:15:c8:29:
                    80:85:3a:e3:e5:6e:9c:e8:a9:b0:02:59:f3:36:50:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B1:8F:7F:24:00:B7:CB:71:2C:9C:2E:BF:98:20:57:02:A3:12:D1
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e31302e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2b:00:c2:24:fd:28:37:54:4e:30:ec:46:8d:81:52:10:0b:
         60:97:08:1c:4f:e3:d0:0c:03:83:f9:d8:71:e0:ad:88:af:65:
         80:87:c8:9b:4a:ca:de:6d:ff:06:6e:9c:53:40:64:32:44:b5:
         20:03:08:ad:9f:57:ef:af:c8:f9:b8:ae:8f:8d:91:74:66:10:
         44:a3:66:a1:a9:54:e6:57:78:4e:a7:24:c4:29:3c:7a:a2:20:
         f7:95:49:ed:1f:bd:25:f6:b6:56:a9:d9:4a:d9:15:64:9d:04:
         52:03:96:fc:f0:38:a8:7e:f2:af:f7:d2:29:99:4c:8b:e9:cb:
         8b:35:a0:bd:02:25:26:6e:b5:a5:bc:00:ee:b6:8e:1e:34:51:
         4e:eb:89:90:08:0a:41:f1:15:68:4e:06:5b:47:12:43:d4:bf:
         c9:01:b5:c5:73:76:fc:e9:e3:56:38:de:48:d7:84:53:3c:d8:
         a5:eb:a7:7b:c0:3c:d8:e4:54:dc:a9:35:d9:81:f0:2f:a6:9e:
         10:1b:47:67:80:94:19:ed:e8:90:aa:8f:e5:37:f2:2d:31:38:
         36:21:c0:c4:a7:a2:d6:61:c4:9f:30:28:81:e0:86:62:73:1e:
         b0:0a:83:02:d1:9f:2d:a0:db:74:24:9c:79:2f:2d:d2:55:46:
         20:90:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:46:46 2026 by rpki-client