Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32362e302f32332d3234203d3e20323638303336.roa
File:                     34352e3136382e32362e302f32332d3234203d3e20323638303336.roa (raw, json)
Hash identifier:          +9W7Zr8KAMGY5nnleBvDw+ufmRu8q5PWoPAhMTwrzLU=
Subject key identifier:   06:DC:34:F4:AE:6E:FC:13:9D:57:CF:E0:FF:84:11:8D:28:7F:8F:43
Certificate issuer:       /CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Certificate serial:       3D85C45D6B242EB864B52DC8E4D33A65E1938631
Authority key identifier: 9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32362e302f32332d3234203d3e20323638303336.roa
Signing time:             Thu 01 Oct 2026 14:36:53 +0000
ROA not before:           Thu 01 Oct 2026 14:31:53 +0000
ROA not after:            Thu 30 Sep 2027 14:36:53 +0000
asID:                     268036
IP address blocks:        45.168.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl
                          rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:85:c4:5d:6b:24:2e:b8:64:b5:2d:c8:e4:d3:3a:65:e1:93:86:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
        Validity
            Not Before: Oct  1 14:31:53 2026 GMT
            Not After : Sep 30 14:36:53 2027 GMT
        Subject: CN=06DC34F4AE6EFC139D57CFE0FF84118D287F8F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:53:88:39:ed:34:07:18:7e:8e:35:16:07:
                    21:61:75:8a:dd:81:d7:c8:2d:59:6c:06:29:65:ef:
                    58:78:50:09:98:19:03:08:01:4d:3d:c7:f2:f3:87:
                    c5:56:98:9a:b9:bd:2c:5f:c3:2c:d6:cf:3c:cc:66:
                    5f:fb:7f:b9:fa:0f:49:08:cd:7d:78:e5:39:84:90:
                    cf:cc:79:f0:c8:c8:6d:eb:db:54:bc:66:94:38:0d:
                    78:27:7a:75:a3:d5:c6:4b:8b:a4:d1:e3:6a:1b:7f:
                    8f:29:f2:33:94:28:61:63:fe:92:e9:37:ed:12:8c:
                    31:b4:47:fb:0e:90:ea:73:d7:21:d7:fd:5e:5c:63:
                    21:97:20:f6:be:cc:80:95:a8:ad:a2:61:1c:e9:58:
                    f9:06:eb:5a:7b:67:b6:e1:27:fe:1f:e2:62:95:45:
                    dd:40:ef:87:66:c9:61:fb:80:aa:d4:b6:cd:61:41:
                    47:f2:25:0e:98:2c:b2:86:ed:3b:ad:3e:34:77:ef:
                    01:d1:5a:00:77:73:47:dc:74:bc:8c:f6:9a:e0:44:
                    46:3e:35:9e:3a:b8:79:5f:08:a5:c7:ac:6d:f0:3f:
                    9e:54:d3:d5:b1:a3:02:c8:31:61:73:4d:13:0f:ed:
                    8f:62:46:e3:76:c8:a8:c2:4b:33:ec:a4:a1:ad:3e:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:34:F4:AE:6E:FC:13:9D:57:CF:E0:FF:84:11:8D:28:7F:8F:43
            X509v3 Authority Key Identifier:
                keyid:9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32362e302f32332d3234203d3e20323638303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:78:cd:af:14:92:5a:9c:d2:b1:42:b6:97:eb:99:05:03:
         f1:31:72:e5:d7:28:12:b0:f3:20:79:d3:9a:b5:09:25:43:94:
         60:84:79:d3:b1:c5:ae:49:bb:e0:23:18:bd:43:5e:d7:c7:45:
         31:d2:42:5e:a1:70:e1:c0:d0:a5:cb:80:21:53:27:43:85:9e:
         f8:d8:d1:53:8b:cb:85:f4:80:66:5b:66:01:ed:84:a3:de:c2:
         ad:0d:82:0e:05:4b:57:bd:c0:59:d2:95:cc:e6:0e:1f:3f:48:
         38:c8:29:61:fa:e6:81:3e:cb:0e:4b:0b:53:63:98:a0:d3:1e:
         74:1c:61:6a:a8:ef:37:4b:ce:b8:fb:da:09:a2:e3:28:34:86:
         4e:34:4c:3c:ff:a8:68:3a:6b:c2:3b:cc:d7:23:45:d1:fa:6d:
         f3:d6:90:77:cb:15:9a:d4:cb:b0:10:73:b7:4c:2f:1e:be:72:
         4c:15:3a:7a:3a:26:9a:80:8f:76:04:e6:8e:86:0f:0f:76:c3:
         80:b7:b6:a0:da:50:7a:d3:2b:7e:e6:ad:bf:3c:af:77:a0:45:
         23:42:3b:46:46:ab:30:d3:02:b0:58:c1:0c:1d:0b:ab:f0:d8:
         c6:41:e9:66:ba:cf:c2:1c:29:a8:ce:48:da:fa:93:98:ff:6f:
         f9:95:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:06:10 2026 by rpki-client