Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
File:                     34352e362e3136312e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          LuevCc4urdTmm/gEfrqSsEBv8SO47H0EfDb1Scv9pAY=
Subject key identifier:   95:28:A4:60:EA:D8:53:03:92:79:7D:55:C4:AE:B7:EE:8F:38:09:DA
Certificate issuer:       /CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
Certificate serial:       2A7848D7B26FA3F14A4D36B399D796FC562B2FB2
Authority key identifier: BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa
Signing time:             Thu 20 Aug 2026 12:55:06 +0000
ROA not before:           Thu 20 Aug 2026 12:50:06 +0000
ROA not after:            Thu 19 Aug 2027 12:55:06 +0000
asID:                     266196
IP address blocks:        45.6.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:78:48:d7:b2:6f:a3:f1:4a:4d:36:b3:99:d7:96:fc:56:2b:2f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
        Validity
            Not Before: Aug 20 12:50:06 2026 GMT
            Not After : Aug 19 12:55:06 2027 GMT
        Subject: CN=9528A460EAD8530392797D55C4AEB7EE8F3809DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:3d:21:7f:af:45:ce:0f:32:3e:57:0e:ed:
                    34:2e:59:57:ef:d9:ab:7d:41:3a:e4:5d:27:f8:45:
                    e7:e2:32:8d:0c:26:65:d6:e0:1b:50:7e:25:27:1e:
                    8c:3a:50:97:77:ed:19:d8:7a:80:19:63:d6:91:bb:
                    38:21:5a:db:04:f1:bd:66:e5:81:e1:48:91:6a:22:
                    3d:dd:c6:98:bc:68:f0:91:bf:02:44:7f:00:76:fb:
                    41:4c:33:ac:47:3e:72:77:1c:29:d2:ea:32:f7:68:
                    96:39:b0:d2:98:27:0b:33:c8:f0:20:aa:d6:32:70:
                    e4:bc:e9:f1:e7:42:b2:3e:0e:4b:28:30:f0:58:92:
                    e3:ee:b1:8e:bc:e3:53:56:de:95:e3:7d:9f:58:81:
                    ed:8a:55:07:de:fd:b9:18:29:99:f9:64:d3:a6:7c:
                    f7:30:f2:bf:4d:f5:d6:32:7b:4c:8d:e4:a0:a8:03:
                    62:f1:e3:be:e4:63:ec:0e:26:b3:01:3f:d2:49:40:
                    28:7e:71:b2:a6:36:80:f2:e5:f5:3c:00:ed:41:e6:
                    45:7b:e5:37:cf:45:5a:d9:23:ed:b0:7f:a5:8e:80:
                    42:37:48:57:58:f9:c2:3d:1f:93:75:24:18:e2:56:
                    04:d8:07:4d:ed:77:78:ee:f9:df:a6:b1:45:d1:c6:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:28:A4:60:EA:D8:53:03:92:79:7D:55:C4:AE:B7:EE:8F:38:09:DA
            X509v3 Authority Key Identifier:
                keyid:BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136312e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:d7:88:84:c8:ba:1c:a8:8b:34:39:8a:ec:2a:46:7b:0f:
         5f:8c:0a:e9:5d:7d:08:32:c3:b3:a8:d0:89:24:c3:6f:ac:eb:
         cd:17:da:82:fe:bf:67:db:c4:eb:71:62:5f:ac:56:9e:5a:a3:
         92:3e:1e:96:eb:01:dc:01:dd:fe:41:b3:a7:14:eb:fb:65:15:
         87:4d:b9:d4:59:46:a9:25:e4:86:4a:6b:08:f3:9a:d2:4d:0b:
         8a:da:a6:2c:c1:e5:4c:70:aa:21:d9:02:d8:7f:55:d0:85:38:
         59:be:44:bd:1e:d3:30:8e:64:53:58:d6:f2:9f:c6:a3:1f:d1:
         b8:40:86:e9:fa:69:a5:39:cc:7d:18:dc:99:1a:ed:52:75:ff:
         c3:42:0f:bb:27:a2:9d:10:9c:7e:0f:e2:f3:29:d4:25:f1:e0:
         87:05:ef:32:b9:96:1c:d9:b4:ae:c6:0f:e3:2b:c9:3a:29:b0:
         dd:5e:26:f4:ac:80:67:f5:cd:0a:fe:15:24:13:9c:c3:bc:ac:
         3b:96:8d:5f:58:4c:04:2a:2a:b8:6b:75:5d:96:7d:a4:df:12:
         c8:39:f3:49:05:25:b8:ee:aa:7d:47:68:f8:93:01:13:ef:50:
         b7:27:28:59:a6:7a:98:a2:d4:8c:d8:95:e5:dc:dc:47:d0:0d:
         8d:29:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:25:03 2026 by rpki-client