Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          OO/+52pl0KtMmhc00NTtzRPi42MX4Cv2fuc5mQMEm6U=
Subject key identifier:   DE:FC:4C:A3:54:64:B8:6D:9F:DD:56:00:19:79:F0:EA:09:FB:47:AC
Certificate issuer:       /CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
Certificate serial:       37BB78635002082F0D14A7F718C23FEC6B08E5B7
Authority key identifier: EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa
Signing time:             Wed 02 Sep 2026 12:09:56 +0000
ROA not before:           Wed 02 Sep 2026 12:04:56 +0000
ROA not after:            Wed 01 Sep 2027 12:09:56 +0000
asID:                     269006
IP address blocks:        45.176.148.40/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 15:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bb:78:63:50:02:08:2f:0d:14:a7:f7:18:c2:3f:ec:6b:08:e5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
        Validity
            Not Before: Sep  2 12:04:56 2026 GMT
            Not After : Sep  1 12:09:56 2027 GMT
        Subject: CN=DEFC4CA35464B86D9FDD56001979F0EA09FB47AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:ae:47:62:c5:0c:b1:06:96:0e:ec:67:38:
                    38:31:ac:23:cc:9c:3a:1c:ae:60:36:5d:41:21:d9:
                    1d:ec:50:55:63:fc:81:b2:dc:03:03:3b:2e:ef:38:
                    10:f6:ae:fc:ef:18:0f:73:d1:3d:6d:bf:74:0c:b5:
                    1e:ff:9e:7e:71:13:f6:0b:a8:2f:82:12:cb:eb:e5:
                    de:d5:16:c9:51:8f:d8:c5:a4:41:8e:5c:31:74:1a:
                    ce:73:09:b6:f4:e8:da:f7:19:21:38:15:fa:e7:df:
                    1d:6a:61:ba:f7:4f:67:8b:b2:b5:4f:56:1e:66:e6:
                    2f:d0:bc:12:03:76:bb:cc:2e:23:1a:74:08:ab:7a:
                    38:5e:77:76:db:94:13:b3:9f:71:3e:0c:78:b5:53:
                    9e:2e:ee:a8:cb:08:79:7b:78:48:63:f9:b4:b3:00:
                    27:7c:39:94:9f:e5:64:af:a8:10:86:01:1f:44:ad:
                    58:4b:41:d7:b6:58:55:8d:35:bf:fe:4e:50:62:9b:
                    ba:6a:6d:85:69:01:ed:5f:99:38:d5:77:e3:71:72:
                    0c:75:b3:b1:c3:c1:d8:18:87:54:6f:6c:32:62:19:
                    df:56:c4:87:f3:e1:dc:8f:d9:85:c1:69:d7:dc:db:
                    5d:2a:73:a9:51:9e:83:c5:51:b5:6f:be:fe:89:c1:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FC:4C:A3:54:64:B8:6D:9F:DD:56:00:19:79:F0:EA:09:FB:47:AC
            X509v3 Authority Key Identifier:
                keyid:EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3134382e34302f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.148.40/29

    Signature Algorithm: sha256WithRSAEncryption
         96:76:c1:e6:41:4b:d2:dc:3a:c4:39:d3:9c:a8:a5:6c:48:2b:
         04:df:bd:37:8f:b7:ae:a1:85:c6:15:e8:58:19:39:3c:50:f1:
         98:42:bb:e0:e1:3b:78:b7:18:e8:85:91:02:28:b7:61:6a:f1:
         b9:49:e4:7a:bc:fe:33:f2:de:9a:0b:1d:80:ed:be:e4:60:2d:
         26:f1:ec:7b:ef:6a:6f:1e:02:11:cf:2a:a2:da:a8:ca:2d:f3:
         6f:2b:62:1c:ae:c2:d9:db:61:32:be:be:41:0d:62:42:6e:0f:
         78:c9:aa:47:0b:ac:2a:1f:a3:3b:3d:0b:35:42:6c:da:c9:1a:
         05:44:26:f3:17:b5:34:d6:80:15:f4:81:ab:b7:09:6c:47:0f:
         43:54:88:f3:4c:51:de:b5:1f:9d:bd:31:0b:aa:76:d4:05:e9:
         6a:08:f0:ca:df:2b:40:44:cf:04:58:ab:7d:ba:f9:22:b6:26:
         48:77:91:5f:41:a7:d8:0f:c5:a1:6e:1a:08:6a:b4:a6:d3:11:
         b9:0b:f4:ff:bc:7f:f9:f9:7e:37:02:5c:ca:f5:7d:c7:e0:f3:
         3b:03:ef:5d:f1:c8:8f:a8:41:7b:3a:5b:5e:de:6c:17:ad:6f:
         ac:9a:44:39:22:eb:35:2b:1e:28:0c:37:7c:f1:ed:36:ed:7f:
         f8:31:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:04:18 2026 by rpki-client