Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137392e3130382e34382e302f32302d3234203d3e20323632343638.roa
File:                     3137392e3130382e34382e302f32302d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          q03ZY4p+v1vBB4kV4QrDVMl2HZzWN/NFU0yLo1GaLGQ=
Subject key identifier:   B4:54:04:CF:A5:C9:03:06:84:29:C9:F9:DA:1E:6C:9B:A5:CD:1C:4E
Certificate issuer:       /CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
Certificate serial:       3FC911DEA69916949F2118E801D85C023F0E4A13
Authority key identifier: 40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137392e3130382e34382e302f32302d3234203d3e20323632343638.roa
Signing time:             Fri 25 Sep 2026 17:13:10 +0000
ROA not before:           Fri 25 Sep 2026 17:08:10 +0000
ROA not after:            Fri 24 Sep 2027 17:13:10 +0000
asID:                     262468
IP address blocks:        179.108.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl
                          rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 14:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c9:11:de:a6:99:16:94:9f:21:18:e8:01:d8:5c:02:3f:0e:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
        Validity
            Not Before: Sep 25 17:08:10 2026 GMT
            Not After : Sep 24 17:13:10 2027 GMT
        Subject: CN=B45404CFA5C903068429C9F9DA1E6C9BA5CD1C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:77:57:35:aa:1b:b4:fe:3e:67:d9:c5:c2:
                    17:27:c8:f5:b6:f8:cd:f0:af:36:a2:ec:63:04:d4:
                    1f:ab:ef:a8:49:6c:50:24:f8:74:d4:66:76:d7:17:
                    f5:e6:23:73:43:6c:ab:0c:86:a6:52:79:3d:ae:a7:
                    4a:9a:53:11:4e:aa:b7:14:8b:c8:1b:b2:fb:65:f8:
                    17:15:88:dc:3b:41:35:55:cc:34:57:a0:82:e0:ca:
                    d5:26:46:31:62:f6:6a:cb:38:54:9d:6f:85:5b:73:
                    f3:ac:df:18:3f:3f:d0:4d:03:28:92:79:c9:2c:c7:
                    c9:6a:c9:8b:7a:5a:76:53:71:c1:d7:c5:e5:e9:f7:
                    35:a5:12:8c:7a:d0:a3:60:f4:77:36:ac:83:ce:b9:
                    15:44:0d:ef:50:12:89:ac:84:f0:d0:6b:f3:0d:bd:
                    b2:09:9a:85:7c:5b:71:69:dc:78:44:b4:24:54:29:
                    84:67:1c:27:5e:70:94:4f:44:3a:34:d1:3b:f8:fe:
                    bd:26:57:06:73:75:c4:77:07:51:32:2e:3d:09:c0:
                    48:d3:e0:99:ba:d6:f8:89:a3:a0:42:b4:22:41:b2:
                    d8:47:f8:85:78:65:9e:c4:a0:81:ab:5d:0c:1a:32:
                    f2:a4:5c:3d:c4:88:d8:8e:b7:10:6c:cf:e9:b2:ec:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:54:04:CF:A5:C9:03:06:84:29:C9:F9:DA:1E:6C:9B:A5:CD:1C:4E
            X509v3 Authority Key Identifier:
                keyid:40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3137392e3130382e34382e302f32302d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:83:a5:06:8b:47:b8:02:50:14:30:2f:43:29:b1:82:92:
         6b:5b:3f:4e:cc:e7:97:57:5c:ae:cc:5a:e5:ef:5b:d4:df:c8:
         89:51:6f:69:17:a2:68:c5:bc:01:f0:2c:2e:00:45:89:cd:75:
         45:1d:ba:25:5b:a5:91:4b:b1:fd:fe:3b:07:18:4d:c1:4d:c5:
         1e:3c:22:c4:be:87:23:66:50:93:e4:3e:c6:bc:6b:20:9f:3f:
         2c:b3:76:8c:06:69:b8:bf:1e:bf:56:95:7f:fb:9f:c8:cb:be:
         5a:65:21:bc:a3:f5:7c:95:db:50:10:76:fa:92:a4:93:2a:b3:
         bd:7e:70:fd:39:d4:ec:86:4a:52:85:df:cf:87:e4:43:28:4c:
         de:e2:41:dd:ea:ed:8b:b0:d8:82:f4:22:0f:08:97:55:d2:6a:
         7f:e6:f2:29:fe:fc:89:a1:ba:b9:de:2a:38:2e:3f:d6:1c:ef:
         30:69:ef:07:ef:c6:61:dd:4b:5b:47:0e:a4:98:f0:56:8d:04:
         07:76:f8:0f:5f:6d:b9:2d:ca:2d:42:c9:26:45:20:51:ab:a4:
         64:89:55:ff:d4:f8:b2:dc:91:7d:4d:16:37:21:03:ca:e1:8c:
         51:54:97:4f:09:89:1d:c6:7d:20:c2:0a:98:40:1f:34:bf:a1:
         3d:28:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:36 2026 by rpki-client