Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa
File:                     34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa (raw, json)
Hash identifier:          d09bNJkHwiFqr+yD6uNRlNFimfigcVQuzJyVB/c3YRM=
Subject key identifier:   61:CC:28:44:4A:54:B7:87:B1:37:77:26:8A:C3:98:E9:66:30:6F:F4
Certificate issuer:       /CN=C19C559525E01BE6FFDA662BBAE24FF6592AC02C
Certificate serial:       42F294B3BB3ABCCD69A983E5D6484834A4F86B56
Authority key identifier: C1:9C:55:95:25:E0:1B:E6:FF:DA:66:2B:BA:E2:4F:F6:59:2A:C0:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa
Signing time:             Tue 15 Sep 2026 12:04:47 +0000
ROA not before:           Tue 15 Sep 2026 11:59:47 +0000
ROA not after:            Tue 14 Sep 2027 12:04:47 +0000
asID:                     268955
IP address blocks:        45.176.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f2:94:b3:bb:3a:bc:cd:69:a9:83:e5:d6:48:48:34:a4:f8:6b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C559525E01BE6FFDA662BBAE24FF6592AC02C
        Validity
            Not Before: Sep 15 11:59:47 2026 GMT
            Not After : Sep 14 12:04:47 2027 GMT
        Subject: CN=61CC28444A54B787B13777268AC398E966306FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:b2:0c:44:43:35:a9:c8:81:8d:c5:05:12:
                    1d:86:1b:60:12:e7:10:16:65:37:4d:41:51:04:c4:
                    b1:c9:08:53:f0:61:29:98:6e:81:d4:41:0b:88:30:
                    c3:9a:39:b0:69:9a:9e:0e:df:48:26:02:9d:c5:e6:
                    1e:e2:00:f8:a4:21:96:fe:68:2f:5e:a8:a3:22:de:
                    d9:e7:ba:6c:0c:02:09:76:b3:36:a4:fd:62:78:17:
                    b5:1f:e6:81:4a:df:e7:59:c4:f3:57:a2:d1:cb:f9:
                    a5:dc:7a:2f:60:70:0b:44:1c:14:d4:80:d3:e9:35:
                    eb:a8:c7:96:31:1c:64:41:ca:da:9c:3b:81:d3:97:
                    e0:33:32:8a:f2:90:59:3d:97:e6:fd:a6:38:da:00:
                    1c:05:6e:be:1f:80:13:3f:04:45:62:92:df:7f:0d:
                    0c:c8:f8:6a:c6:d1:dd:23:41:4a:2c:86:76:02:52:
                    27:44:11:c6:11:cd:21:2b:81:59:d9:65:9b:aa:77:
                    d7:58:07:d8:6c:c6:3d:9b:e2:ee:ec:0f:38:fa:ec:
                    67:b1:3a:aa:0d:91:85:55:22:87:29:a7:c9:91:8f:
                    d2:43:56:16:69:a7:41:9b:8d:11:24:99:8b:c3:7a:
                    05:0a:60:ba:ac:e1:63:63:38:d5:eb:3d:45:c2:ff:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:28:44:4A:54:B7:87:B1:37:77:26:8A:C3:98:E9:66:30:6F:F4
            X509v3 Authority Key Identifier:
                keyid:C1:9C:55:95:25:E0:1B:E6:FF:DA:66:2B:BA:E2:4F:F6:59:2A:C0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:d2:0c:80:eb:36:03:77:b6:30:db:ad:8e:77:7f:4f:d2:
         e1:ba:bf:e8:55:73:34:7a:4f:22:d6:84:5b:31:4b:8d:a3:8b:
         aa:e4:7b:f9:58:1e:54:48:04:48:7b:55:a0:f8:e1:32:48:10:
         a1:69:c4:d5:57:78:3c:97:94:91:22:db:32:d8:3d:30:41:28:
         d2:a7:db:b5:2e:f7:f2:a8:7a:db:4a:d5:df:19:cf:9d:89:2d:
         5d:28:cd:7a:bc:ca:17:2f:7a:be:25:23:82:c0:bb:25:0a:10:
         87:61:2f:15:34:96:04:f1:d4:c4:17:e0:ca:11:0a:c6:d5:85:
         b0:06:9b:5e:d3:1c:16:64:81:f5:05:2b:5c:45:c6:28:94:8b:
         20:56:89:fc:ea:46:f1:61:19:a6:64:5b:15:cb:cd:12:0d:c1:
         fc:89:56:62:21:d3:14:9d:d8:74:51:17:42:47:c5:d6:96:41:
         e5:2d:44:51:a7:ab:f9:84:da:8c:3c:93:d7:2a:ad:fd:fd:5f:
         a6:a7:1d:d5:87:82:45:16:26:2e:dd:d2:1e:23:e0:47:94:21:
         57:cb:11:36:78:fd:8c:d6:37:ab:79:77:95:ee:28:58:b8:1c:
         6f:cf:3f:f8:34:31:13:dd:f5:12:6b:3c:e8:e8:fe:f7:c6:21:
         90:c6:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:57:50 2026 by rpki-client