Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233382e3235322e302f32322d3234203d3e20323638333637.roa
File:                     34352e3233382e3235322e302f32322d3234203d3e20323638333637.roa (raw, json)
Hash identifier:          cUg+9yytPnor+7i7YqEJIYfV6Icmzqt4R42QCSzMYg8=
Subject key identifier:   D9:18:CC:0D:87:CF:23:D9:ED:F5:2D:C0:B4:09:F6:5F:92:03:DB:70
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       49AC01F8098D6BD1FF9C57B4AA8B058F3788C34B
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233382e3235322e302f32322d3234203d3e20323638333637.roa
Signing time:             Thu 17 Sep 2026 00:27:44 +0000
ROA not before:           Thu 17 Sep 2026 00:22:44 +0000
ROA not after:            Thu 16 Sep 2027 00:27:44 +0000
asID:                     268367
IP address blocks:        45.238.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 02:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ac:01:f8:09:8d:6b:d1:ff:9c:57:b4:aa:8b:05:8f:37:88:c3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Sep 17 00:22:44 2026 GMT
            Not After : Sep 16 00:27:44 2027 GMT
        Subject: CN=D918CC0D87CF23D9EDF52DC0B409F65F9203DB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:af:8a:83:10:21:30:77:a6:80:f9:c4:97:
                    06:17:49:bd:78:1c:7b:0f:ba:dd:7b:a5:b9:0c:2f:
                    99:ed:89:3f:39:ef:10:f8:df:b8:56:04:c9:45:c7:
                    89:9f:f4:b3:25:79:2f:fb:f9:0f:0b:f5:a3:38:37:
                    cd:d2:14:29:9a:77:11:9a:05:75:55:18:a5:7f:f0:
                    21:e3:d3:f7:fc:ee:fa:68:68:8e:97:7a:16:83:dc:
                    cd:b5:04:37:bd:5d:4f:6a:a3:be:7e:f7:cc:26:a3:
                    09:a7:34:ab:f3:30:7b:1e:8f:cb:8e:4d:02:fe:cf:
                    23:0c:bf:ab:59:25:8b:04:a9:84:ce:74:2d:48:d5:
                    27:e7:75:41:85:27:87:fc:11:19:78:cb:de:d9:49:
                    bf:66:71:ca:86:9d:2f:1d:3d:65:75:79:75:46:89:
                    32:d3:1c:eb:c7:5e:d5:ac:81:02:a9:e7:3a:51:aa:
                    e9:a9:35:1f:14:a0:1c:97:c9:7e:59:76:94:18:99:
                    a9:47:dd:93:e2:a4:a8:fc:59:18:78:9a:c4:70:3b:
                    63:eb:02:5d:4f:fa:63:fc:38:76:ae:f5:48:db:c6:
                    f9:1a:7b:b0:5f:2c:1a:27:55:a6:25:2b:5b:d5:eb:
                    2e:f9:ce:7e:fa:fe:69:f0:8a:f6:11:7d:63:8a:2d:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:CC:0D:87:CF:23:D9:ED:F5:2D:C0:B4:09:F6:5F:92:03:DB:70
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/34352e3233382e3235322e302f32322d3234203d3e20323638333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:35:64:a2:94:9e:c8:55:0a:ae:2f:31:78:a0:85:a8:6e:
         c6:b2:32:9a:2a:44:4b:be:9a:61:ba:28:63:28:cb:1e:bd:cd:
         6e:be:ed:52:9b:d7:de:d3:84:16:71:38:03:77:d7:54:ed:e6:
         5b:e9:06:da:65:19:29:d4:ab:8c:a4:ae:2e:7c:88:50:bd:ac:
         62:ef:b3:d7:ab:96:c7:b5:7d:d0:e2:ee:3d:f8:40:fa:36:cb:
         1e:ab:18:76:79:1b:43:ee:78:b9:65:ef:89:56:32:13:7a:f6:
         c3:9c:bf:c4:71:1f:d9:3f:0b:ff:8a:bf:11:93:f0:68:ce:5d:
         70:ed:20:d7:7b:75:da:be:fd:a2:8a:ae:a4:d9:9b:3a:e7:25:
         ba:cf:cc:51:74:5c:e6:91:ce:fc:14:b7:30:ab:e9:f4:84:11:
         6e:b3:da:af:d2:47:49:03:af:61:6e:b5:dd:69:1d:67:d5:30:
         01:f0:59:58:2d:c4:89:8e:bb:f6:9c:3f:cf:e1:f3:80:19:37:
         75:95:f0:9b:bd:72:bd:ab:d4:24:2e:a9:43:fc:bb:dd:c5:0c:
         75:99:4d:98:bb:ee:1c:32:48:c8:21:ad:8a:83:dd:3c:82:af:
         06:d2:cc:65:64:d5:1e:56:d0:60:d5:85:16:33:6d:2b:f5:cd:
         2b:ff:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:01:49 2026 by rpki-client