Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32342d3234203d3e20323639323435.roa
File:                     34352e3138322e3234382e302f32342d3234203d3e20323639323435.roa (raw, json)
Hash identifier:          NTAgD/6+gVSSdQcuB+2snPx+dXe528hGrlMQpNfDG1s=
Subject key identifier:   DD:40:1C:3A:C5:DD:73:43:93:F2:18:C6:7C:CC:65:C6:A7:68:4C:C0
Certificate issuer:       /CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
Certificate serial:       0C6F1602EFA7054AA5FE3B5CAE81513F8BEAD320
Authority key identifier: 55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32342d3234203d3e20323639323435.roa
Signing time:             Tue 06 Oct 2026 13:09:37 +0000
ROA not before:           Tue 06 Oct 2026 13:04:37 +0000
ROA not after:            Tue 05 Oct 2027 13:09:37 +0000
asID:                     269245
IP address blocks:        45.182.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6f:16:02:ef:a7:05:4a:a5:fe:3b:5c:ae:81:51:3f:8b:ea:d3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
        Validity
            Not Before: Oct  6 13:04:37 2026 GMT
            Not After : Oct  5 13:09:37 2027 GMT
        Subject: CN=DD401C3AC5DD734393F218C67CCC65C6A7684CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:46:ad:03:5d:61:67:4d:06:58:e4:29:f9:
                    64:59:7a:5e:86:8e:b6:59:93:a6:d5:ca:93:bd:0f:
                    52:5e:4e:56:96:01:2c:dc:83:ac:56:2f:fb:25:fb:
                    90:0c:5b:c3:b2:c3:c6:6f:be:d5:82:a0:f5:80:e3:
                    d8:36:89:e9:2e:90:9a:ae:20:89:e1:38:fc:fe:65:
                    37:d7:11:0b:6f:de:02:b6:c4:31:5b:0d:2d:2d:70:
                    a3:b0:e8:88:ff:2e:9a:a6:83:8e:df:06:01:8a:87:
                    43:30:c5:74:38:ea:f7:84:67:98:f0:65:0b:19:aa:
                    14:e9:da:72:40:00:a9:01:7d:58:52:ce:a0:0e:7b:
                    89:b3:88:48:d3:0b:ae:4d:3a:14:0d:c5:71:0c:cd:
                    bf:7a:8f:da:8f:85:c1:f7:41:a9:10:5f:95:c6:fe:
                    44:f7:eb:14:26:48:e2:dd:ed:60:2b:36:c3:4a:b6:
                    53:6f:4f:83:ba:a6:55:9e:07:2c:9f:bc:62:9b:79:
                    13:f8:68:94:ed:14:14:38:b8:e3:d1:82:78:dd:d4:
                    20:91:5c:f8:69:ed:94:b8:49:a5:db:04:74:34:69:
                    85:ec:34:b4:07:1a:10:80:d9:b3:7a:5c:2d:37:21:
                    8f:6b:4e:37:2c:5e:f6:7e:a4:5f:df:2a:de:43:19:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:40:1C:3A:C5:DD:73:43:93:F2:18:C6:7C:CC:65:C6:A7:68:4C:C0
            X509v3 Authority Key Identifier:
                keyid:55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3234382e302f32342d3234203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:de:72:58:b9:ef:88:1d:b5:4e:f9:45:40:07:c0:b7:e3:
         20:96:05:d9:1b:5f:4d:84:a6:21:61:33:35:3c:71:e0:c6:f6:
         97:60:f7:67:92:5c:4a:3f:9d:97:ce:4d:90:22:67:e2:04:77:
         49:98:dd:0e:65:30:3d:c3:27:bf:d0:ef:80:76:a0:7a:5f:03:
         e2:59:14:81:a9:dc:bb:f4:96:40:8c:c4:96:fc:5a:21:90:9f:
         44:01:f7:2e:32:37:63:92:4b:38:48:ae:a1:4a:5a:81:8a:1d:
         2a:a6:5a:c6:40:bf:f3:d7:ab:7b:b4:cb:ad:a8:29:87:e5:00:
         61:15:a6:66:79:8b:38:5e:f4:16:2e:0b:f7:e5:25:b5:41:c6:
         9c:47:d1:69:18:db:a7:02:21:39:ca:2b:6b:5e:b5:c8:58:21:
         40:52:38:e8:31:9e:83:1a:2f:c4:09:94:3b:58:be:d8:a8:27:
         fc:0d:37:9a:bb:21:c7:fe:56:a4:6e:a7:82:b1:36:bd:34:da:
         77:51:da:62:34:37:41:d4:83:e9:49:36:58:1b:4f:a4:a1:8d:
         e2:81:13:87:b8:cc:41:81:40:88:c2:53:b7:5a:18:17:7f:d3:
         93:18:07:2f:93:de:11:40:ce:ab:f3:ed:21:2b:e6:f2:f9:e4:
         2a:07:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:02:21 2026 by rpki-client