Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37382e302f32342d3234203d3e20323638303339.roa
File:                     34352e3136382e37382e302f32342d3234203d3e20323638303339.roa (raw, json)
Hash identifier:          wVgZqX/XQkFhjjJMhmb+Hu94J66o/R9mZYq//8n9SIQ=
Subject key identifier:   41:80:BA:F3:49:C5:7A:CE:A7:8C:29:91:54:F5:14:00:0D:73:16:CF
Certificate issuer:       /CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
Certificate serial:       204EE5A0B73EF185127DD0A0E16C1846FD0DC788
Authority key identifier: B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37382e302f32342d3234203d3e20323638303339.roa
Signing time:             Thu 20 Aug 2026 15:14:17 +0000
ROA not before:           Thu 20 Aug 2026 15:09:17 +0000
ROA not after:            Thu 19 Aug 2027 15:14:17 +0000
asID:                     268039
IP address blocks:        45.168.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl
                          rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4e:e5:a0:b7:3e:f1:85:12:7d:d0:a0:e1:6c:18:46:fd:0d:c7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D
        Validity
            Not Before: Aug 20 15:09:17 2026 GMT
            Not After : Aug 19 15:14:17 2027 GMT
        Subject: CN=4180BAF349C57ACEA78C299154F514000D7316CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:b6:80:9a:de:5f:d7:f4:97:ab:33:7a:2d:
                    65:37:a3:4c:e2:43:45:a1:d6:27:13:1b:f9:4b:42:
                    68:17:21:de:94:88:07:9b:79:eb:ad:16:8c:1b:03:
                    8a:d8:3e:c9:74:c9:d1:2e:59:3e:fe:a0:bf:01:6a:
                    4a:be:74:ec:9b:d5:9d:2e:28:ca:82:42:e5:1a:33:
                    c6:94:5e:df:4d:49:97:66:a3:49:18:de:68:2d:ed:
                    1e:24:30:e6:6f:11:30:91:89:c1:5c:72:b7:7c:f6:
                    b8:e7:fc:86:3f:00:5c:d2:47:34:ac:dd:8d:a1:1a:
                    7a:21:a6:60:80:82:8b:17:43:23:ba:29:c7:d3:38:
                    e4:51:ca:79:0e:7a:8e:ff:e7:5c:38:8a:c1:52:d5:
                    71:e7:d0:01:52:1f:2d:bd:70:e4:ae:bf:62:73:4c:
                    3b:3a:f4:78:1e:c2:2e:4e:61:c8:5b:88:0f:0a:26:
                    fb:c5:ca:58:91:cc:95:6d:6d:51:7f:11:80:48:2d:
                    27:45:5b:8b:ac:ba:2d:59:90:3c:dd:ec:dd:9e:66:
                    ab:ba:05:b6:6c:70:d4:97:31:6c:c6:6d:e3:f6:b9:
                    de:94:a2:a0:75:82:e4:bd:6d:c8:26:a9:14:dd:4d:
                    5b:33:07:a2:cc:c8:57:fe:e3:9d:34:25:c9:f8:be:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:BA:F3:49:C5:7A:CE:A7:8C:29:91:54:F5:14:00:0D:73:16:CF
            X509v3 Authority Key Identifier:
                keyid:B1:0F:60:5E:0A:7E:07:E8:1F:DF:D9:84:AE:C0:5A:4F:6D:3F:89:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B10F605E0A7E07E81FDFD984AEC05A4F6D3F897D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XiMwoM7Q7GRgZrHFvUEeqdjinSeTPYAsAwnmAkgy78q/0/34352e3136382e37382e302f32342d3234203d3e20323638303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:8e:cc:58:12:fd:14:16:04:89:96:4f:ee:cf:14:50:11:
         34:79:a7:83:ca:13:ac:3f:66:ed:e7:ad:88:e2:06:30:99:bb:
         9f:e5:98:19:85:38:dc:bb:9a:e4:64:ee:31:f1:f0:0c:dd:22:
         4d:de:f4:43:7f:d3:8e:44:67:7a:f6:72:b4:25:0e:cf:39:7c:
         3a:cc:2e:7e:ab:f1:45:ce:d9:b5:a7:63:3b:8b:26:a3:6e:d7:
         74:bf:84:ce:df:80:af:9d:d2:d1:44:f1:ad:51:47:fd:4d:38:
         a6:64:36:5f:96:2d:56:93:4b:4b:97:6e:e2:49:7a:ca:62:ac:
         e7:71:95:62:e5:48:97:8b:77:3a:ca:68:7b:64:cb:67:07:5c:
         a0:96:0f:ff:02:4e:9b:0d:8f:a8:35:83:1e:16:a9:7e:59:0b:
         06:ff:e4:04:f3:be:37:f2:51:27:91:21:ee:09:eb:71:33:43:
         a7:5b:70:e3:a9:a4:ab:83:e0:fd:5a:f0:fb:7a:99:21:82:0f:
         5f:27:8e:a4:60:b7:0f:38:43:f9:24:57:db:2d:ae:e8:3d:a9:
         ec:31:31:70:19:1e:ad:4f:c4:33:1e:3d:a1:ec:6e:15:0e:43:
         01:e4:48:e1:58:f8:69:79:68:0b:7c:9e:04:94:96:ab:da:ed:
         d7:03:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:12 2026 by rpki-client