Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/34352e3137382e3132342e302f32322d3234203d3e20323633323736.roa
File:                     34352e3137382e3132342e302f32322d3234203d3e20323633323736.roa (raw, json)
Hash identifier:          7HaHqzVCBl3Rknna9KzXTssy5tQ6VDiXmNgbIA0Djlo=
Subject key identifier:   D9:8F:BD:0C:26:40:31:A5:40:F4:E8:43:8C:94:E2:2B:A8:AA:EB:C1
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       2BE9630EF9FB36AD95B0BAC70A1FF250BE2D51F5
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/34352e3137382e3132342e302f32322d3234203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:02:59 +0000
ROA not before:           Wed 07 Oct 2026 18:57:59 +0000
ROA not after:            Wed 06 Oct 2027 19:02:59 +0000
asID:                     263276
IP address blocks:        45.178.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e9:63:0e:f9:fb:36:ad:95:b0:ba:c7:0a:1f:f2:50:be:2d:51:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:57:59 2026 GMT
            Not After : Oct  6 19:02:59 2027 GMT
        Subject: CN=D98FBD0C264031A540F4E8438C94E22BA8AAEBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:45:30:47:91:13:b4:cf:f8:8d:5b:9e:bc:
                    8b:c3:dc:41:0f:9f:7f:9b:e8:0f:80:78:27:c7:74:
                    4f:39:15:15:12:2f:90:3c:06:61:cd:83:8c:b4:00:
                    36:aa:cb:5e:75:d5:23:dd:a1:df:67:1d:01:6e:73:
                    4c:90:e6:68:f8:9c:48:91:bf:de:2d:a1:d6:ec:c3:
                    02:e4:b0:2d:8f:0b:af:86:92:16:c0:dc:6a:f8:b0:
                    74:90:df:6d:12:1c:9e:4a:97:b7:1e:e1:7e:5f:82:
                    6c:7f:8c:60:78:2a:40:1f:db:86:57:e0:d2:0b:6b:
                    f5:c6:49:5a:37:6d:fa:56:ec:14:f1:4a:8a:29:0b:
                    e4:49:42:3c:0e:1b:34:0f:45:32:c8:7a:b3:f8:9d:
                    3d:d2:f7:ad:93:4c:de:34:dd:78:aa:97:a8:d2:d3:
                    21:d9:73:0f:74:0d:da:14:50:c9:ba:72:fc:65:83:
                    96:54:d9:0d:ea:47:58:9d:ad:08:f7:4b:57:06:39:
                    fa:a6:04:da:ce:f2:5c:6e:0e:a3:8c:d8:6c:e5:d8:
                    06:bb:9f:e9:42:43:08:8d:81:34:1f:a7:40:d7:29:
                    b1:3f:7c:61:32:d0:b3:b2:3b:2d:a5:c9:45:8e:42:
                    78:db:38:ec:19:28:97:e9:17:67:60:ec:fa:73:be:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8F:BD:0C:26:40:31:A5:40:F4:E8:43:8C:94:E2:2B:A8:AA:EB:C1
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/34352e3137382e3132342e302f32322d3234203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:b0:d4:3d:a7:6d:a0:b0:41:b2:c1:24:30:1f:3b:4f:10:01:
         f5:c8:88:68:63:a3:1d:fe:08:b2:80:bb:8b:1e:33:41:5b:70:
         4e:c2:4d:76:ef:7e:d4:4a:d5:b3:a0:66:5a:16:e0:3d:8f:fa:
         70:0d:23:32:16:9f:00:ca:5a:14:4f:e0:cf:e2:41:fc:be:d4:
         8e:0a:e3:52:d6:c2:f6:4d:73:c8:d1:11:f6:c0:df:3e:99:b6:
         4f:cf:a3:78:d3:78:74:5e:62:cd:f2:77:7f:74:3a:dd:3b:a8:
         a1:5c:34:69:40:fa:ea:08:69:8e:c5:d3:5f:f5:cd:d7:be:3f:
         d0:3f:47:9e:13:89:6c:5b:48:59:a2:93:35:04:d9:c9:04:a2:
         4d:bb:d1:96:49:47:e5:8f:10:d9:74:77:54:58:8a:81:ec:78:
         9e:ea:01:d6:39:8a:29:5d:c5:55:68:65:4b:44:11:6c:06:23:
         3a:48:57:83:63:f9:1b:17:1a:28:55:7a:b8:50:f6:61:2a:0f:
         2d:75:05:da:28:83:ce:98:1b:76:4f:00:17:6d:6e:87:8e:f2:
         f2:06:b0:dd:f3:24:aa:9f:c6:25:77:5e:d5:d3:68:0d:3f:17:
         1f:ef:21:22:6e:7d:62:01:b3:d3:a1:49:18:bf:06:a0:9a:24:
         e7:db:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:27:22 2026 by rpki-client