Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
File:                     34352e3139312e33322e302f32342d3234203d3e20323639363635.roa (raw, json)
Hash identifier:          OUYOSpUoo4q4EnEs2gYXO4zQAWhWf8FFKYo01PI2ks0=
Subject key identifier:   CD:94:A1:F5:58:77:36:AF:23:2C:F0:53:12:30:C8:F9:6F:B2:DA:EA
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       0CB7CD27B526EB0EEA3C59195CA0C823499C053E
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:33 +0000
ROA not before:           Thu 17 Sep 2026 18:32:33 +0000
ROA not after:            Thu 16 Sep 2027 18:37:33 +0000
asID:                     269665
IP address blocks:        45.191.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b7:cd:27:b5:26:eb:0e:ea:3c:59:19:5c:a0:c8:23:49:9c:05:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:33 2026 GMT
            Not After : Sep 16 18:37:33 2027 GMT
        Subject: CN=CD94A1F5587736AF232CF0531230C8F96FB2DAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:0d:6c:01:62:33:dd:e4:f7:25:02:84:68:
                    2c:8f:7c:7f:fb:00:05:61:1a:9b:88:f2:72:64:1d:
                    af:fb:f1:44:a1:2b:44:ff:1f:54:c5:4d:18:1b:8d:
                    7d:d9:11:4c:48:25:92:9d:84:81:12:92:a6:47:55:
                    53:ba:4e:3f:b5:cc:df:03:b9:9c:97:5e:46:31:f9:
                    ce:ac:b2:66:c3:4e:72:f2:f8:bb:72:68:dc:41:19:
                    78:45:b0:79:5d:ea:80:dc:cf:ed:c8:be:d3:71:c5:
                    6f:ce:68:ae:f5:fa:e9:a9:4f:e9:af:36:02:7a:e8:
                    55:ca:63:7b:49:80:52:7b:c0:2f:4c:c9:e0:fe:b2:
                    e0:a0:04:58:03:dd:bf:2a:4d:0b:74:d1:d2:f5:9b:
                    83:40:08:a4:52:ad:47:25:f2:26:06:e2:51:e5:83:
                    90:70:a2:1e:63:d9:52:43:0d:87:7e:54:bd:c0:0f:
                    5f:f9:54:5b:fe:65:26:ad:48:98:da:a8:9b:69:c2:
                    a1:8f:d3:b1:54:1e:58:f7:76:dc:7a:00:93:1d:cb:
                    25:22:f1:9e:11:43:2e:ed:51:fc:25:d5:98:07:89:
                    47:6c:58:3d:27:70:ca:08:c0:25:3f:7a:b5:de:cf:
                    c0:be:b3:4a:5e:1c:59:c1:ec:0a:e1:c5:6c:67:5a:
                    92:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:A1:F5:58:77:36:AF:23:2C:F0:53:12:30:C8:F9:6F:B2:DA:EA
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/34352e3139312e33322e302f32342d3234203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:cd:8c:68:e4:14:e5:27:ad:35:f0:87:c2:7d:89:23:bf:c4:
         38:98:23:88:1e:42:33:dc:23:f1:77:ed:33:21:d5:a6:cb:84:
         4a:44:05:08:64:17:16:c0:04:ee:d5:91:5e:b0:c4:40:12:7b:
         28:83:e4:69:ca:20:1b:9a:b3:dd:a3:68:95:40:40:37:79:f9:
         74:01:34:0f:13:25:39:5e:5b:70:4f:2c:8d:f2:d9:60:4c:7c:
         b9:3e:65:05:20:5a:5a:24:43:85:de:d3:8d:4c:f0:15:db:fa:
         8f:ca:58:4d:2e:d1:f7:cc:97:31:2f:4b:5e:a5:38:96:ad:84:
         98:ed:24:92:57:8f:46:d9:89:08:91:9f:66:49:68:fd:97:a9:
         59:80:84:61:d7:2d:b6:07:83:41:6e:80:c6:a9:88:6f:9a:9d:
         3e:37:74:ea:4b:b8:41:7e:dd:80:89:92:ab:3f:6a:e1:53:9e:
         79:18:5c:50:c3:84:61:e5:b9:89:c7:40:f5:4c:8b:ca:08:72:
         79:28:9b:8b:d5:0d:df:93:ea:84:2f:fd:19:95:d0:19:58:ff:
         e5:54:d8:2f:06:ac:38:cc:e8:9b:d6:60:47:92:d9:a5:91:84:
         a1:0d:7c:63:27:ee:82:11:24:a7:ed:13:16:f5:7b:50:48:fc:
         72:b2:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:10:20 2026 by rpki-client