Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
File:                     34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa (raw, json)
Hash identifier:          ZLz4jzhlYBeOXlQQQPsjEjuJMV6hK+5I2CQ7Y0FMlSc=
Subject key identifier:   98:20:44:81:9F:DF:5A:30:3D:39:74:15:FF:1B:7C:01:C6:62:7F:D2
Certificate issuer:       /CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
Certificate serial:       315BDBB411FDB593FE8FAC0801EB4AEF26E389C7
Authority key identifier: 74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa
Signing time:             Fri 02 Oct 2026 22:53:40 +0000
ROA not before:           Fri 02 Oct 2026 22:48:40 +0000
ROA not after:            Fri 01 Oct 2027 22:53:40 +0000
asID:                     268307
IP address blocks:        45.237.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5b:db:b4:11:fd:b5:93:fe:8f:ac:08:01:eb:4a:ef:26:e3:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749927ED950BF2413C42E510894A6D14EEF7E5C7
        Validity
            Not Before: Oct  2 22:48:40 2026 GMT
            Not After : Oct  1 22:53:40 2027 GMT
        Subject: CN=982044819FDF5A303D397415FF1B7C01C6627FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:f9:a1:cc:e7:e8:5a:79:f9:c3:34:b6:6b:
                    90:88:50:f8:66:18:3a:de:4a:9d:e1:ae:47:a2:c8:
                    12:22:a3:e3:3d:a2:3c:89:17:75:da:9d:fb:be:62:
                    2a:41:57:b1:e2:6a:00:91:1a:c7:41:61:f8:55:ce:
                    1b:dd:a2:bb:5a:bf:ec:e9:cd:19:9d:50:10:79:3b:
                    ef:0e:86:c1:59:f4:f6:f2:3c:e4:5a:09:0b:28:a6:
                    cd:09:31:f2:5e:54:0e:c5:39:74:a7:e4:04:3d:74:
                    44:5e:23:fd:f6:8d:3d:67:49:1d:d3:5d:0a:53:c7:
                    be:29:cf:56:9b:2f:f6:9f:13:4f:4f:88:91:6e:b2:
                    c3:f0:cf:66:e9:9e:36:67:6d:7c:09:18:59:82:16:
                    3e:21:2a:fa:7e:46:32:fe:d9:44:1a:7b:53:2a:aa:
                    c3:b9:e7:e0:37:1d:a8:31:e2:41:a9:32:7a:92:30:
                    c5:43:e6:58:76:6a:bd:b2:62:9a:68:a6:89:3d:ea:
                    a9:ef:1b:69:65:a5:4c:6f:40:90:91:62:61:a9:c7:
                    4b:4e:83:e8:8f:26:38:cd:c0:3a:47:48:1d:b8:52:
                    50:f4:23:e4:a4:e0:33:5e:35:2d:b5:ce:0a:e2:23:
                    1c:75:dc:7f:ae:ab:9b:96:10:22:5e:6d:e5:fc:52:
                    e9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:20:44:81:9F:DF:5A:30:3D:39:74:15:FF:1B:7C:01:C6:62:7F:D2
            X509v3 Authority Key Identifier:
                keyid:74:99:27:ED:95:0B:F2:41:3C:42:E5:10:89:4A:6D:14:EE:F7:E5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/749927ED950BF2413C42E510894A6D14EEF7E5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749927ED950BF2413C42E510894A6D14EEF7E5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32332d3233203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:b8:b1:3c:df:ff:0d:7d:3f:7e:d0:6f:db:c8:55:c6:f5:
         f3:e5:da:db:8c:35:bd:f9:3d:ba:0c:7c:bf:b7:b5:29:95:df:
         f8:0f:e9:02:d1:6c:c9:01:71:22:b4:7f:f0:7c:7c:f1:4b:6e:
         b0:6d:0d:dc:59:f0:a7:0b:fc:f9:45:b8:7b:07:8b:1c:e6:87:
         e2:1c:43:7d:9f:84:a7:7a:e6:d7:13:49:a4:ca:65:6d:01:5a:
         df:62:6a:9c:01:86:a9:a8:34:e9:90:f7:a0:6d:8a:20:2e:53:
         03:48:07:7a:26:a4:cb:99:51:bc:07:e2:86:8a:86:bc:19:44:
         ab:cd:b7:5f:77:fb:fe:01:b8:68:da:12:d4:7b:9a:26:92:f4:
         73:c2:85:cf:b6:fa:69:63:e8:38:d7:f8:e4:01:1b:04:2c:a7:
         36:7d:fa:24:b6:01:bf:5b:91:14:1d:73:3b:1f:7a:96:90:e5:
         18:da:f7:07:ba:35:3b:a8:c0:de:ed:02:39:95:92:f3:8c:1c:
         0c:2f:74:71:89:42:ec:3b:09:64:68:7e:52:1f:7d:bf:b2:13:
         04:5c:b5:b6:b3:85:18:6a:67:a4:c4:65:d5:e1:38:a9:a5:a4:
         52:b1:ef:17:eb:2e:ba:e3:e8:42:f1:6d:c9:b9:2b:92:7a:60:
         93:2b:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:58:41 2026 by rpki-client