Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa
File:                     34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa (raw, json)
Hash identifier:          B/vFR2FfryQsxRZu5Lk681fTKYQ1I53KTzNh7L+O0Pk=
Subject key identifier:   F8:CC:11:B1:27:70:EF:5F:89:8E:D9:AA:F5:33:58:7E:C3:62:59:40
Certificate issuer:       /CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
Certificate serial:       11172B0CE39D343B5B258D998F41709217428C0E
Authority key identifier: EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa
Signing time:             Wed 02 Sep 2026 12:13:09 +0000
ROA not before:           Wed 02 Sep 2026 12:08:09 +0000
ROA not after:            Wed 01 Sep 2027 12:13:09 +0000
asID:                     269006
IP address blocks:        45.176.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:2b:0c:e3:9d:34:3b:5b:25:8d:99:8f:41:70:92:17:42:8c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
        Validity
            Not Before: Sep  2 12:08:09 2026 GMT
            Not After : Sep  1 12:13:09 2027 GMT
        Subject: CN=F8CC11B12770EF5F898ED9AAF533587EC3625940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:a2:07:25:89:7f:7b:42:57:7c:a9:eb:b7:
                    d0:ed:d4:eb:3f:46:7c:46:fe:2c:45:34:ee:e6:32:
                    c8:83:f2:2a:37:f3:ad:a5:a0:3f:1d:c2:90:f6:57:
                    9f:99:ae:c5:b1:f3:55:2b:1e:3c:13:09:d5:1c:bf:
                    05:70:46:c0:09:81:b1:35:03:45:dd:98:19:5f:a8:
                    8a:07:d5:31:01:dc:51:9b:5d:f4:68:37:44:6e:7f:
                    4b:3f:72:bc:2a:09:85:63:20:6f:d4:d5:9e:93:17:
                    67:11:68:90:3c:b2:31:83:52:aa:78:13:59:0b:02:
                    0e:10:6f:7f:49:06:e0:ff:f2:f7:cb:a4:f5:a1:42:
                    77:e0:d3:48:36:50:ae:d7:55:f5:74:12:6d:27:87:
                    f4:26:d9:01:40:46:25:53:8a:72:c4:5b:66:3e:00:
                    5a:9c:ad:f0:c6:58:2b:70:9b:02:fd:58:29:cf:19:
                    a2:41:5f:e8:ac:ed:4c:35:06:9d:aa:94:87:42:5e:
                    d8:eb:c6:15:8f:ba:d9:34:56:d9:54:cc:05:ad:70:
                    b9:e3:75:70:49:15:9f:be:cd:63:b9:05:34:5f:ec:
                    62:86:91:15:b0:da:a9:fc:c5:33:0b:26:17:30:9d:
                    df:b9:70:1e:c1:68:f2:a0:d8:22:50:68:a3:c1:0a:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:11:B1:27:70:EF:5F:89:8E:D9:AA:F5:33:58:7E:C3:62:59:40
            X509v3 Authority Key Identifier:
                keyid:EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135312e302f32342d3234203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:9c:54:d8:f6:20:3e:c5:c8:b1:9c:a2:d5:d6:79:3a:b7:
         9e:72:47:1d:b9:2e:8f:ab:08:e9:f3:81:8f:db:e8:fc:69:79:
         a8:82:d7:1b:35:d6:1a:91:0c:9b:02:14:41:f3:06:0e:a5:cb:
         49:0c:85:b5:7c:24:54:11:d8:79:4a:7a:7c:42:16:a7:dd:e1:
         86:3c:cd:08:4c:96:a9:d2:66:90:56:06:37:07:1f:40:16:76:
         ac:ed:a1:8d:5c:a3:8d:2d:ff:aa:06:28:ad:9b:ce:96:ef:31:
         51:ef:6a:ee:94:e3:f0:63:43:1e:f2:9d:f7:8e:96:f3:29:7a:
         cb:b7:cc:d2:22:1a:f0:f0:08:d2:df:d6:4c:4c:8d:04:ba:e7:
         54:70:36:4b:d5:93:38:81:6e:bf:6e:ed:82:1d:57:72:f2:51:
         2d:f4:e3:93:a5:a4:ff:36:11:ba:61:c0:20:1e:26:8d:be:5e:
         79:b6:27:be:49:c4:b5:a7:4b:2c:a9:97:3c:85:57:64:78:c2:
         c6:6a:f5:f6:af:be:98:1f:75:e5:91:83:63:d0:05:52:1a:f3:
         e3:4c:33:4b:44:74:85:f2:b7:a0:9f:d2:0b:62:80:dd:5d:5c:
         9b:ed:57:a6:9d:b0:28:da:ca:dc:95:fb:7d:c9:3d:b2:0b:b7:
         8f:a2:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:55:12 2026 by rpki-client