Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3232203d3e20323639363635.roa
File:                     34352e3139312e33322e302f32322d3232203d3e20323639363635.roa (raw, json)
Hash identifier:          EgA0D+HPmUKa93OSWN4tbC9boMKDi+rA4uODsOnB+Ak=
Subject key identifier:   94:52:09:F0:80:1C:8E:5B:62:F5:BF:9B:79:65:A5:A7:51:78:77:F7
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       11E2F9501BCE5EE742BEE66915596FF660A6A9F5
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3232203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:33 +0000
ROA not before:           Thu 17 Sep 2026 18:32:33 +0000
ROA not after:            Thu 16 Sep 2027 18:37:33 +0000
asID:                     269665
IP address blocks:        45.191.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:f9:50:1b:ce:5e:e7:42:be:e6:69:15:59:6f:f6:60:a6:a9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:33 2026 GMT
            Not After : Sep 16 18:37:33 2027 GMT
        Subject: CN=945209F0801C8E5B62F5BF9B7965A5A7517877F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:06:90:ae:c8:28:5c:64:5d:6b:4c:91:be:
                    62:b5:4b:eb:6f:6a:29:55:22:23:78:44:6e:8b:f7:
                    fe:aa:3c:b0:46:10:af:bf:66:42:09:36:95:31:90:
                    4f:86:1d:94:2f:ae:ad:9f:6d:8b:fc:c2:6b:bf:02:
                    67:03:93:f3:0a:6c:44:e5:07:19:94:4d:99:ce:45:
                    61:43:34:32:52:03:ef:a8:b0:da:50:8d:e6:1b:9b:
                    54:31:7f:90:3c:0d:9b:06:7c:80:79:2a:5e:88:27:
                    75:06:88:6f:f1:25:ff:7c:7e:8d:fa:bb:dd:33:af:
                    c6:ff:c2:05:25:39:5e:fb:40:ec:0b:d2:46:96:26:
                    44:12:92:99:0d:59:c8:03:1c:fd:50:be:91:34:91:
                    5b:36:fd:be:c5:db:00:b5:5e:43:1f:8d:86:25:e9:
                    a0:86:0d:a4:b6:10:7c:e1:eb:d4:d0:b4:60:c7:c5:
                    5c:09:fd:00:62:10:4d:fa:56:02:c4:85:7c:87:c5:
                    27:e3:c9:2a:03:e4:bb:8a:58:4a:70:24:0f:56:d5:
                    1f:e0:99:40:0f:74:b5:26:af:4b:68:ca:00:e1:a2:
                    c5:ab:59:d8:90:b0:7a:3f:38:c0:a1:bd:f7:98:d8:
                    4d:51:a5:f4:47:35:92:33:0f:0f:3d:c1:88:e8:0f:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:52:09:F0:80:1C:8E:5B:62:F5:BF:9B:79:65:A5:A7:51:78:77:F7
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32322d3232203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:67:db:29:e6:2b:db:3b:e3:b8:a8:a9:b8:66:47:e0:29:8b:
         ae:d0:94:e0:0d:c9:4b:7d:42:ad:10:79:43:3f:0a:ba:db:d2:
         36:29:4e:b9:e4:09:8a:bd:df:fd:1a:2d:04:35:59:81:95:fe:
         89:ac:e2:95:3f:18:73:c2:60:bf:ee:8b:c5:78:09:d1:ab:7b:
         78:ae:e7:02:f9:88:17:52:e2:10:70:84:38:86:16:df:9d:f3:
         f7:8c:6f:79:3f:59:8c:05:75:e2:17:a4:14:a3:27:9e:a6:f4:
         20:d8:16:da:b4:03:74:d0:9e:91:53:e5:9e:50:c9:86:6b:14:
         d8:8e:42:36:ac:67:e9:8f:0a:dd:7e:70:5a:4f:f6:67:c6:ab:
         78:8c:2e:ed:35:47:08:3c:47:5a:16:97:51:09:03:5c:81:47:
         2f:fb:e0:15:25:b2:de:94:30:0c:b8:34:dc:a4:aa:e8:3f:74:
         4e:88:8b:cf:a5:36:e3:cc:b0:a3:63:d4:01:d9:de:51:43:da:
         91:f5:04:7d:14:c8:bb:36:a9:a3:e4:ee:0a:0f:47:04:a8:23:
         34:97:db:60:0b:d4:3d:16:c3:87:a3:12:2b:fc:04:81:69:1c:
         c6:c2:c2:66:42:9f:b6:53:79:e6:09:6e:7d:db:e6:f2:43:6c:
         a5:03:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:37:44 2026 by rpki-client