Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
File:                     34352e3232342e33322e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier:          qao3LHwE69anI1Q0QiBaOcJLepcfkiX22Ym1BBl2BpI=
Subject key identifier:   4E:60:8E:26:4C:01:26:B7:21:9F:B7:E8:AA:9F:CC:D6:45:7D:93:70
Certificate issuer:       /CN=16149638FCC37EDB923C5F2AFF854155C7486481
Certificate serial:       0773C25F2A59D12D7E4C82E20D69F9E5DFBCFD8B
Authority key identifier: 16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa
Signing time:             Thu 17 Sep 2026 20:18:43 +0000
ROA not before:           Thu 17 Sep 2026 20:13:43 +0000
ROA not after:            Thu 16 Sep 2027 20:18:43 +0000
asID:                     266924
IP address blocks:        45.224.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl
                          rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 04:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:73:c2:5f:2a:59:d1:2d:7e:4c:82:e2:0d:69:f9:e5:df:bc:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16149638FCC37EDB923C5F2AFF854155C7486481
        Validity
            Not Before: Sep 17 20:13:43 2026 GMT
            Not After : Sep 16 20:18:43 2027 GMT
        Subject: CN=4E608E264C0126B7219FB7E8AA9FCCD6457D9370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:60:e6:27:ff:b3:3d:38:3a:e8:6d:9d:bb:
                    e7:53:e6:0c:08:23:ab:51:37:e3:1d:e0:94:3f:63:
                    d6:6f:05:80:1e:09:d0:00:f7:04:81:1f:23:89:2c:
                    85:0d:ff:d5:a0:dc:fd:89:b3:88:e0:b9:bc:e9:97:
                    30:69:6c:43:fe:54:56:ed:b9:1f:68:f7:07:d6:e0:
                    e4:26:ad:ea:e0:d7:2f:37:75:f2:ee:4a:2f:ba:ee:
                    99:0c:22:d6:70:eb:ee:b7:88:4a:19:35:60:ed:66:
                    14:28:79:bc:4a:23:4d:39:df:ce:fa:90:d1:2e:10:
                    b6:00:24:bc:34:ae:8f:55:c7:e7:69:d6:ee:5a:62:
                    47:82:ae:92:f4:74:b1:bd:4f:de:fe:9c:03:da:88:
                    db:23:b0:d7:7c:96:34:b0:e2:02:a0:66:e6:87:32:
                    0e:c3:84:a3:06:4d:04:87:d7:44:b2:c1:e0:5b:fb:
                    d5:97:96:d3:7f:6f:1d:5a:f7:c5:2d:3d:76:4d:19:
                    9f:9e:9d:14:11:6a:db:12:3b:4a:06:13:c1:96:49:
                    3d:ca:cc:20:37:d1:2e:4e:5f:3e:31:4f:f8:bc:b5:
                    e3:98:99:90:2e:ad:01:38:22:38:ab:ad:8f:fa:55:
                    2e:aa:a4:18:29:50:8c:92:cd:90:64:05:dc:4d:af:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:60:8E:26:4C:01:26:B7:21:9F:B7:E8:AA:9F:CC:D6:45:7D:93:70
            X509v3 Authority Key Identifier:
                keyid:16:14:96:38:FC:C3:7E:DB:92:3C:5F:2A:FF:85:41:55:C7:48:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/16149638FCC37EDB923C5F2AFF854155C7486481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16149638FCC37EDB923C5F2AFF854155C7486481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32342d3234203d3e20323636393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:1c:15:78:45:44:c4:d8:4e:6e:31:82:f9:32:81:f1:04:65:
         3c:85:87:ac:b5:5d:4c:1a:7b:ff:bc:82:cf:a2:3d:4c:ba:c2:
         cb:44:47:ea:fa:fa:8f:f9:6e:a9:ee:bb:97:5b:a9:02:0c:f6:
         40:a9:d0:f4:44:55:57:da:9e:c6:55:8b:5e:2b:ab:72:3c:e3:
         df:48:44:a0:83:48:2a:c0:3a:00:23:40:8a:8d:28:3d:f7:ee:
         d0:bd:66:2a:04:4f:85:62:07:af:48:b1:f7:f1:75:06:a4:03:
         47:3f:ff:ba:a5:06:0b:20:78:dd:9e:00:78:db:dc:d9:c0:e8:
         e0:ab:c0:be:2f:46:d9:1b:7e:d4:81:bb:6c:40:05:ad:c5:b2:
         06:e0:7d:75:07:29:e0:66:14:36:1a:b4:1f:e9:74:d8:f4:1c:
         66:d8:cf:d4:74:87:e5:c4:3b:7b:31:f5:14:cb:f9:fa:ee:25:
         80:a7:4c:88:1b:14:19:dd:21:2f:9d:6e:52:a2:95:10:a4:e9:
         d2:b3:bd:a4:2d:d0:63:e3:1a:6b:04:4f:9d:92:d3:19:53:0c:
         2b:18:0a:b1:74:ed:3b:d0:6a:ea:cf:06:a8:24:f5:27:a6:28:
         e5:81:35:0a:14:8f:37:35:77:3d:12:3f:29:56:8c:93:90:8e:
         ec:a2:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:05:46 2026 by rpki-client