Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32332d3233203d3e20323638303339.roa
File:                     34352e3136382e37362e302f32332d3233203d3e20323638303339.roa (raw, json)
Hash identifier:          wZbw8RB9CVc0durOzc5jQ6R7A2pulGJnp4zavK4h4dM=
Subject key identifier:   F4:3B:E4:F3:FA:DE:9B:8F:34:E2:2F:5F:50:FB:93:6E:DF:63:66:A8
Certificate issuer:       /CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
Certificate serial:       2742AD6C8A2AED7822AF524B9F19C05027A66596
Authority key identifier: B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32332d3233203d3e20323638303339.roa
Signing time:             Thu 20 Aug 2026 15:14:18 +0000
ROA not before:           Thu 20 Aug 2026 15:09:18 +0000
ROA not after:            Thu 19 Aug 2027 15:14:18 +0000
asID:                     268039
IP address blocks:        45.168.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl
                          rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:42:ad:6c:8a:2a:ed:78:22:af:52:4b:9f:19:c0:50:27:a6:65:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
        Validity
            Not Before: Aug 20 15:09:18 2026 GMT
            Not After : Aug 19 15:14:18 2027 GMT
        Subject: CN=F43BE4F3FADE9B8F34E22F5F50FB936EDF6366A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:e1:3f:27:7e:9e:10:3a:a7:e7:b9:bb:0f:
                    26:bb:16:b9:6c:85:41:31:af:e5:37:91:36:ea:51:
                    64:ef:43:17:de:57:2d:07:9f:eb:0d:36:6f:89:79:
                    0f:a7:5b:58:ef:9d:60:09:6c:7d:6e:77:e4:2b:ab:
                    b5:27:c0:58:ce:90:83:6b:90:f6:69:56:da:c2:30:
                    3a:ee:4f:4b:53:fa:e7:de:10:5f:f6:02:5a:9b:3e:
                    5e:80:41:50:c2:a9:c6:58:5a:fd:c7:e8:cf:7c:41:
                    2e:41:ad:b7:12:dd:12:12:59:9e:93:5a:cb:2b:10:
                    7c:81:9b:fb:32:48:81:5f:49:b2:5e:80:15:ac:39:
                    9c:3b:3f:f2:aa:98:b4:40:fd:0c:d5:0c:12:e5:61:
                    06:6b:bd:af:e8:fb:75:d2:d7:60:74:62:04:d9:16:
                    8e:3c:74:9d:3a:15:dc:a8:e1:0f:61:98:23:2f:4d:
                    f1:2b:71:50:9d:4b:2d:cc:82:5d:4c:74:42:ba:34:
                    11:0c:55:37:0b:f3:78:77:e0:b5:63:a9:c8:5e:ef:
                    3e:8d:58:b7:13:c6:dc:2b:da:94:2e:89:44:ff:a1:
                    fd:ec:79:88:15:ac:47:9c:1e:a9:78:74:32:e8:a3:
                    a4:1e:60:4c:5f:6c:9f:8c:c5:ed:a6:4b:bf:8e:fd:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3B:E4:F3:FA:DE:9B:8F:34:E2:2F:5F:50:FB:93:6E:DF:63:66:A8
            X509v3 Authority Key Identifier:
                keyid:B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37362e302f32332d3233203d3e20323638303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:3c:52:73:5e:fb:56:45:54:3f:5e:79:30:2e:89:40:84:6f:
         e8:6c:34:a9:b9:51:61:a7:91:ca:cc:ed:e2:95:3f:71:e0:77:
         7e:c7:8c:e6:96:8b:ad:44:68:46:25:ca:3c:38:05:c7:98:22:
         07:f4:05:75:ff:a1:82:f4:18:15:94:ab:67:9c:3f:2f:e7:cc:
         11:d7:7a:40:c6:5e:60:57:01:24:0f:56:c2:ec:a9:81:b3:49:
         2b:84:2e:ef:1b:c8:4f:25:a8:a9:eb:d6:02:7c:a2:ae:e1:9e:
         c4:74:55:95:d4:31:e2:6d:02:ee:f6:93:9f:24:83:e4:91:f7:
         60:d2:44:c7:50:83:3c:36:08:f0:e1:bb:41:cb:5d:37:f6:f5:
         ca:3b:36:d6:52:66:8b:d5:78:97:5d:33:59:19:93:ba:0c:2b:
         8c:a8:15:bd:c3:01:0d:36:05:ae:c4:6a:aa:c2:54:5d:6b:c4:
         a4:ad:28:34:07:c1:25:09:83:59:12:44:93:79:e9:34:4b:35:
         a2:b4:97:a2:a1:c0:f8:17:ca:15:10:b1:ab:e7:38:f1:86:b3:
         7f:6f:c8:43:2a:b0:d1:e9:3a:35:f6:05:25:02:0f:c9:b3:a5:
         a7:68:3c:46:b7:00:bd:ea:8a:a5:08:cb:94:96:d6:89:05:21:
         d1:08:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:42 2026 by rpki-client