Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32352e302f32342d3234203d3e20323638373838.roa
File:                     34352e3137332e32352e302f32342d3234203d3e20323638373838.roa (raw, json)
Hash identifier:          lC72/XZX9wNCuQtJjM0qw9l6ecdAVo+j6AwfV9Nk3gY=
Subject key identifier:   AA:E8:45:67:A1:0B:44:77:36:C8:05:D2:CD:E9:8F:53:68:ED:4A:76
Certificate issuer:       /CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
Certificate serial:       3E4F6A5D37683CE48C02747CD0DF07DA63F11129
Authority key identifier: 6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32352e302f32342d3234203d3e20323638373838.roa
Signing time:             Thu 13 Aug 2026 19:45:43 +0000
ROA not before:           Thu 13 Aug 2026 19:40:43 +0000
ROA not after:            Thu 12 Aug 2027 19:45:43 +0000
asID:                     268788
IP address blocks:        45.173.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:6a:5d:37:68:3c:e4:8c:02:74:7c:d0:df:07:da:63:f1:11:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
        Validity
            Not Before: Aug 13 19:40:43 2026 GMT
            Not After : Aug 12 19:45:43 2027 GMT
        Subject: CN=AAE84567A10B447736C805D2CDE98F5368ED4A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:9c:fc:a3:4b:59:93:6f:3c:47:ce:fb:e1:
                    fc:6a:39:f2:21:93:d1:8d:49:d7:17:0a:a3:c0:91:
                    b0:52:14:d4:bb:d0:df:42:73:7a:6b:71:d6:9f:41:
                    1d:2b:b9:36:2a:08:c0:d2:3b:3c:a6:97:97:ec:33:
                    96:37:b9:4a:e0:e1:37:b3:46:a2:ec:bd:0b:49:9b:
                    09:6c:fa:39:52:94:2d:1b:80:b9:fb:99:5f:e9:59:
                    d3:bb:e5:89:6c:74:c2:55:8a:a0:02:73:53:9b:4b:
                    62:9b:20:1a:f8:18:fb:d7:86:e1:ae:de:41:1a:4f:
                    89:cc:22:50:79:06:a0:d9:75:22:f0:e5:bc:58:7d:
                    64:e0:19:33:9a:c5:f4:c8:32:76:23:d6:32:bc:94:
                    7e:2c:02:99:dc:32:1d:36:3a:22:c2:0a:16:1e:22:
                    51:cf:cc:9b:1f:ea:b7:5a:19:ad:5c:63:4b:57:c4:
                    e0:b1:9d:46:fa:10:db:cb:2a:b2:1c:5c:4d:eb:b9:
                    b4:d6:20:6f:2d:92:81:7b:d6:72:1c:ee:0b:47:31:
                    10:9c:2f:6c:a0:bd:63:6f:df:f0:2d:48:45:4d:bb:
                    c5:9f:ca:ac:ac:87:34:c5:02:80:b1:c9:97:0b:c1:
                    6f:7e:7d:27:92:02:6e:a7:b0:be:38:23:72:59:66:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E8:45:67:A1:0B:44:77:36:C8:05:D2:CD:E9:8F:53:68:ED:4A:76
            X509v3 Authority Key Identifier:
                keyid:6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32352e302f32342d3234203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:17:f9:f4:9d:32:7b:32:aa:6c:fe:45:8a:2b:e3:64:dd:c0:
         b9:94:5e:55:16:64:25:88:38:4f:e6:5d:c5:86:3b:1b:fb:de:
         6a:a6:35:c4:7a:fa:a0:4d:a6:47:cb:74:a6:30:84:48:96:47:
         81:31:7b:6e:79:a1:ad:c8:54:8d:a2:8c:74:29:be:f5:26:8b:
         48:66:f1:85:11:07:c0:23:76:00:30:48:fc:87:85:ae:1a:0e:
         25:e0:80:d8:ab:96:0c:f4:00:2b:6c:0e:9f:91:a6:e8:7d:0a:
         b5:ed:90:d2:ae:f2:da:96:f6:9d:c0:cb:2f:d2:33:57:08:05:
         e3:04:7f:f1:d5:5b:a2:0f:7c:c9:d8:b7:d3:07:4e:cc:e1:dd:
         38:46:21:ef:54:7f:7b:96:91:d3:0d:50:6e:71:5c:c4:94:d7:
         d4:91:41:a2:b9:56:8a:1d:14:e1:fa:10:84:ee:7c:04:a1:9e:
         c7:aa:43:7e:22:b5:e0:b4:63:29:e0:aa:5d:44:92:e1:a2:08:
         36:1c:ec:da:85:c0:4a:e9:75:03:28:20:87:d0:6e:30:9f:59:
         fd:10:25:d7:8e:50:d2:b4:49:70:41:f5:c9:3d:e0:0b:2b:55:
         02:c8:bc:84:4c:47:35:dc:d3:b8:02:a9:43:3c:03:82:c1:ea:
         16:ff:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:17 2026 by rpki-client