Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa
File:                     34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa (raw, json)
Hash identifier:          YYSDrus5mg2YKlpfZhcgZw9D9Gd2OdCUPy5HZwg3oQE=
Subject key identifier:   0B:3A:72:EC:73:2D:7C:90:29:9B:31:0C:17:EA:0F:9D:E5:22:05:C7
Certificate issuer:       /CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
Certificate serial:       6D815E25302BE525E14C6470E412E2966300788E
Authority key identifier: E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa
Signing time:             Wed 19 Aug 2026 22:06:31 +0000
ROA not before:           Wed 19 Aug 2026 22:01:31 +0000
ROA not after:            Wed 18 Aug 2027 22:06:31 +0000
asID:                     269041
IP address blocks:        45.178.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl
                          rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:81:5e:25:30:2b:e5:25:e1:4c:64:70:e4:12:e2:96:63:00:78:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F5848D2F1E7564C1201124AD1D8A679DADCDD5
        Validity
            Not Before: Aug 19 22:01:31 2026 GMT
            Not After : Aug 18 22:06:31 2027 GMT
        Subject: CN=0B3A72EC732D7C90299B310C17EA0F9DE52205C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:8a:14:9e:1e:58:fb:2a:f5:ff:22:69:ee:
                    6a:b4:dc:37:ed:13:6b:4c:91:cd:3d:45:5a:05:c7:
                    f3:57:32:d6:1f:a7:06:da:6b:06:21:5a:6d:2d:5e:
                    85:f3:b4:85:55:77:d1:46:83:6e:58:7c:1d:3a:b0:
                    27:ac:73:2b:92:87:d3:07:36:6f:58:3a:c7:27:e8:
                    74:04:d1:5a:15:6e:d7:4c:bc:c7:4f:3a:0b:cb:b9:
                    05:f3:cf:4f:5e:46:89:b4:42:62:2b:1f:56:58:14:
                    df:5b:23:42:58:64:93:fc:32:cd:1c:f4:64:54:a6:
                    fb:cf:7b:4a:14:a6:f1:8a:a3:37:12:73:7f:80:01:
                    e7:7f:76:dd:1a:fe:b3:35:ea:2e:59:5d:8d:be:d2:
                    90:12:2a:b6:38:7a:30:97:0d:cc:36:c3:e1:1a:33:
                    ae:44:3b:41:bc:02:31:ee:28:ea:6b:58:f8:5e:a0:
                    95:59:a8:24:c6:2d:91:1b:1c:d6:00:af:ac:4a:24:
                    21:b9:0c:ed:d3:10:8d:e3:f2:aa:77:d6:40:8d:8d:
                    25:f3:25:a3:b7:c1:99:4e:21:ba:2d:b1:8d:3c:0a:
                    06:1c:d1:c7:24:39:45:0d:aa:d8:7a:88:4e:23:0f:
                    27:49:d7:27:37:02:9c:89:e9:dd:3e:43:a6:0a:a8:
                    f3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:72:EC:73:2D:7C:90:29:9B:31:0C:17:EA:0F:9D:E5:22:05:C7
            X509v3 Authority Key Identifier:
                keyid:E6:F5:84:8D:2F:1E:75:64:C1:20:11:24:AD:1D:8A:67:9D:AD:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5848D2F1E7564C1201124AD1D8A679DADCDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:42:5d:bf:eb:e5:d9:e5:9e:e1:83:98:9d:67:01:4c:08:a1:
         fb:11:9b:49:55:5b:ae:b8:bc:c2:49:27:c3:a5:b7:18:4f:0b:
         66:70:7a:65:c4:c0:7f:a0:b0:92:ee:cb:7e:3b:d2:30:20:7c:
         90:7f:c0:95:ae:47:d6:2e:f3:ed:0b:d1:02:12:ee:5d:6f:cd:
         01:2b:cd:7b:18:68:dd:70:1d:ad:a5:d2:c9:d7:78:b0:18:f8:
         9c:4b:d3:c7:5d:8b:54:6c:e9:d3:9f:3d:5a:ac:43:39:6d:4a:
         03:39:e5:4b:b9:4e:29:28:2f:ad:cf:f7:89:88:fd:77:9c:98:
         37:3b:91:4c:f2:3c:08:bb:d2:02:b9:df:7e:73:cd:a7:d7:5b:
         d7:88:a7:3f:7d:ce:50:fc:41:c2:0e:44:a1:f6:29:87:1d:5b:
         e6:24:30:fa:a3:d5:22:e9:ac:2c:63:fd:bf:62:fa:69:5f:8d:
         f2:54:b5:2b:4a:e0:10:7a:72:98:c1:7b:e9:81:b7:00:56:2e:
         64:ef:6c:31:5f:01:80:f9:72:80:a8:e8:5a:62:16:c5:27:f2:
         04:60:dd:6c:69:83:40:9a:45:53:2d:73:3b:75:92:4d:ba:e4:
         ae:14:7a:f2:44:3c:27:aa:76:40:b1:04:48:16:c0:b6:d2:dc:
         b7:78:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:22:44 2026 by rpki-client