Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          5EvPfGftSdKEk1uedQxj+SCaSoEvqO7dsr/VUUlDkuI=
Subject key identifier:   F2:52:58:6B:8D:BF:6F:7D:EC:24:CC:72:E8:D8:69:C6:F4:43:14:70
Certificate issuer:       /CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
Certificate serial:       50AE03ECA750639554404A234626E2E2F14369C7
Authority key identifier: 80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa
Signing time:             Fri 11 Sep 2026 17:35:49 +0000
ROA not before:           Fri 11 Sep 2026 17:30:49 +0000
ROA not after:            Fri 10 Sep 2027 17:35:49 +0000
asID:                     268173
IP address blocks:        45.170.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:03:ec:a7:50:63:95:54:40:4a:23:46:26:e2:e2:f1:43:69:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
        Validity
            Not Before: Sep 11 17:30:49 2026 GMT
            Not After : Sep 10 17:35:49 2027 GMT
        Subject: CN=F252586B8DBF6F7DEC24CC72E8D869C6F4431470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:9e:78:1e:4b:a9:6f:9a:34:7a:95:88:35:
                    3d:14:cc:4f:c3:f2:60:e9:e6:af:73:3a:49:35:b8:
                    80:8f:97:13:8d:ee:25:90:64:d2:e7:97:80:17:09:
                    e5:6c:e5:dd:06:9b:6e:5f:16:9a:7c:30:3c:df:5b:
                    18:7e:ad:18:48:f9:2f:38:53:cc:c4:38:38:bb:ac:
                    69:26:e5:1c:1f:6f:a6:c8:ce:02:f4:4e:8c:24:16:
                    ab:ce:9d:00:1e:ce:ed:34:c1:f0:f7:16:c4:ba:99:
                    3b:9e:bb:6c:a2:8c:9d:f5:fb:c2:fd:7d:a4:ef:3d:
                    16:08:3a:c9:6c:b6:38:88:1e:9b:1c:f8:85:6d:3c:
                    7c:be:7b:c8:66:19:33:d9:6d:e3:25:e6:3d:06:e2:
                    6a:2d:dc:dc:da:1e:0b:0f:d6:4c:be:c2:53:e7:67:
                    ed:d6:27:97:56:7b:00:4c:a2:93:98:8d:9c:e1:5e:
                    29:d3:64:a7:63:48:2e:2c:a3:b2:7e:45:c4:e1:09:
                    01:d3:c8:2e:9a:3b:5b:c4:07:27:ac:81:08:4c:c1:
                    3e:23:ae:89:02:89:5e:2f:90:04:03:a6:20:77:b0:
                    55:c7:26:75:5c:0e:90:81:b6:56:12:48:b0:6c:19:
                    12:d8:05:78:f1:2f:6b:5c:30:d0:14:62:7a:cc:c2:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:58:6B:8D:BF:6F:7D:EC:24:CC:72:E8:D8:69:C6:F4:43:14:70
            X509v3 Authority Key Identifier:
                keyid:80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231372e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:81:84:14:2e:a7:81:a9:bf:bd:45:75:e7:d3:c7:b7:e1:fd:
         25:ff:84:fe:63:4c:5a:5f:46:08:dc:c3:15:78:80:bc:59:4c:
         5c:2e:6f:a9:3b:4c:fd:2d:01:f1:52:77:9d:d6:95:72:a5:d6:
         08:6b:43:d8:a0:a5:83:6c:21:30:03:cc:59:da:b5:55:9b:70:
         fb:5f:7a:78:1d:b3:9f:16:81:15:da:19:99:a5:0d:73:ac:aa:
         e5:fd:96:f7:08:74:e0:82:33:be:6d:5f:ae:4a:1e:06:07:4b:
         0c:95:4f:b4:09:ba:3a:f3:f4:ef:21:fd:d5:3c:ea:98:48:e2:
         64:9b:55:76:ba:44:85:f7:87:30:eb:f6:ba:61:4c:3f:cd:1a:
         bf:17:0f:a4:3f:b9:19:56:f3:a6:a0:be:49:61:25:09:1b:08:
         8a:cb:c9:a5:99:91:1f:4e:0e:46:ec:e9:9f:08:31:33:1a:74:
         c5:c7:4d:14:ef:00:2c:ff:0e:5f:f8:34:84:04:14:36:97:d8:
         bf:ae:73:0e:a1:b9:4d:73:91:4f:d0:95:0b:1e:89:fa:40:c3:
         4f:6d:d1:43:41:ec:35:95:e7:7f:88:f0:01:f7:4f:70:89:af:
         b6:4c:6a:9e:72:6f:47:a6:92:7d:09:0c:43:16:d5:d1:97:29:
         8a:22:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:58:52 2026 by rpki-client