Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32342d3234203d3e20323639323435.roa
File:                     34352e3138322e3235302e302f32342d3234203d3e20323639323435.roa (raw, json)
Hash identifier:          oDB/sNg6XYI9Lnklpa/PwmSSJO47SNWVqdIqfVQ3eQY=
Subject key identifier:   99:49:F9:D1:92:65:A9:0B:C8:7E:A6:15:4F:E8:DF:BE:99:CD:0D:3A
Certificate issuer:       /CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
Certificate serial:       2704C6AEA268BE87913321038D8D497E8039C277
Authority key identifier: 55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32342d3234203d3e20323639323435.roa
Signing time:             Tue 06 Oct 2026 13:09:52 +0000
ROA not before:           Tue 06 Oct 2026 13:04:52 +0000
ROA not after:            Tue 05 Oct 2027 13:09:52 +0000
asID:                     269245
IP address blocks:        45.182.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:04:c6:ae:a2:68:be:87:91:33:21:03:8d:8d:49:7e:80:39:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
        Validity
            Not Before: Oct  6 13:04:52 2026 GMT
            Not After : Oct  5 13:09:52 2027 GMT
        Subject: CN=9949F9D19265A90BC87EA6154FE8DFBE99CD0D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:ab:d8:12:98:cf:e2:d1:07:fe:3f:b6:de:
                    37:e1:93:72:8e:a2:cb:cd:ce:1b:2b:b6:a3:90:2f:
                    11:03:9f:af:a3:01:1c:78:05:a9:32:c3:b3:61:44:
                    a2:da:25:fa:52:28:a5:24:28:1a:b2:84:71:c4:16:
                    1f:88:c6:1a:fe:f9:03:5e:57:a8:17:e4:bb:d2:ca:
                    6a:6b:3b:c5:87:18:3b:ea:99:c2:0d:4a:39:ff:ba:
                    96:26:1d:73:68:b5:ee:90:14:01:41:79:94:09:9f:
                    79:f3:a1:13:7a:ff:1f:dc:6d:a9:7f:e5:74:16:89:
                    c0:7d:64:4f:50:ba:66:56:16:55:a4:63:59:76:f4:
                    4f:21:c8:c5:15:64:bc:f1:8d:97:2c:2b:50:70:ee:
                    16:72:22:d0:02:d5:e3:a8:9a:53:2f:8b:c2:e2:ca:
                    04:a4:ad:93:e5:84:88:00:f5:03:48:ee:e5:44:e4:
                    bc:8f:14:e1:ca:2b:dd:46:ab:05:da:79:ce:9e:2a:
                    c6:d7:0b:b3:5d:e9:48:cc:61:eb:ea:25:3e:1a:1c:
                    c4:46:ff:e6:44:2d:d4:66:a7:2a:5a:c0:01:3e:e2:
                    e3:43:02:ec:5c:8a:e1:8e:64:17:aa:72:7c:ef:29:
                    1d:3b:be:be:49:86:dd:de:7a:44:62:fc:bd:04:2f:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:F9:D1:92:65:A9:0B:C8:7E:A6:15:4F:E8:DF:BE:99:CD:0D:3A
            X509v3 Authority Key Identifier:
                keyid:55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32342d3234203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:85:a6:7c:a8:43:75:7b:ec:1b:4c:ed:45:8e:db:ef:0b:
         af:16:16:8a:21:89:b0:e3:2b:9a:18:81:03:53:da:30:ed:33:
         cf:b5:44:9d:a9:f1:54:8a:5e:88:ca:ed:18:34:30:b2:7c:ad:
         12:25:ee:13:4f:3f:84:f5:64:1c:31:35:09:c0:9a:29:c8:20:
         67:6b:7c:f8:d3:cb:fd:f9:4a:8b:5d:fc:4f:1e:2f:82:f6:e5:
         d9:9a:28:64:58:6d:8f:bf:09:c3:1e:1a:49:a5:41:dd:9c:f8:
         e8:f5:ee:3c:bd:f5:1a:a8:4a:99:4f:da:07:fa:97:e1:97:6c:
         c1:99:36:75:bb:f2:19:d5:c9:9a:72:29:6c:06:7a:84:a7:ac:
         cb:48:73:e7:e0:5a:ec:88:76:75:21:de:d4:3c:f6:3d:61:fd:
         be:91:43:83:9d:af:08:6d:db:d5:15:a0:4e:b4:b1:03:d3:99:
         19:1b:1a:02:7a:6f:2a:2f:0d:be:21:27:6c:41:d4:53:18:ca:
         69:e2:d0:63:86:44:a7:ea:65:57:da:45:1f:52:0a:5a:07:9a:
         5d:ac:ff:7d:c9:5c:1f:ac:42:67:85:b1:ed:aa:68:5b:75:94:
         c2:11:5e:18:c5:8c:6e:13:bf:a9:15:5f:2c:bc:d0:6c:c9:02:
         42:4a:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:46:22 2026 by rpki-client