Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
File:                     34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa (raw, json)
Hash identifier:          ZFxw5FRCcJMuh5DHjF17zULsISyGE7qiLNOAH7ICFZ0=
Subject key identifier:   63:3C:09:11:79:3C:76:CF:65:AE:62:05:2A:70:5C:76:08:A8:8C:4D
Certificate issuer:       /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial:       3452850D7BE1FE6955941FC26CD05673501B47F5
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa
Signing time:             Wed 14 Oct 2026 18:10:54 +0000
ROA not before:           Wed 14 Oct 2026 18:05:54 +0000
ROA not after:            Wed 13 Oct 2027 18:10:54 +0000
asID:                     267373
IP address blocks:        45.234.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:52:85:0d:7b:e1:fe:69:55:94:1f:c2:6c:d0:56:73:50:1b:47:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
        Validity
            Not Before: Oct 14 18:05:54 2026 GMT
            Not After : Oct 13 18:10:54 2027 GMT
        Subject: CN=633C0911793C76CF65AE62052A705C7608A88C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:00:40:f7:ea:70:43:06:9d:2f:86:84:a8:
                    f7:3a:03:27:bb:cf:38:b0:8a:99:85:3f:6d:fd:83:
                    54:da:18:c0:02:25:4d:64:b7:60:bb:74:ba:16:bf:
                    91:d4:0b:3f:f4:a3:c6:9b:b1:0c:f5:4b:3f:d4:46:
                    bc:e0:87:b8:e5:5e:14:d9:e2:f3:19:01:60:f5:25:
                    5f:7c:7d:2a:da:5c:26:43:83:72:99:ad:64:29:81:
                    be:ed:7c:d0:90:13:73:81:09:21:35:7e:b6:e5:1f:
                    83:2a:b8:ff:b3:88:03:b6:66:a2:7a:e7:92:e7:39:
                    34:a2:02:2f:cb:80:12:08:1a:b1:07:0e:b9:67:43:
                    1c:42:64:0b:33:89:77:f2:c8:5f:f0:8b:dd:f5:db:
                    7c:4b:6c:02:89:2c:25:80:fe:d6:c9:7c:55:33:62:
                    3b:19:a1:90:ce:6f:a1:86:6d:88:5b:04:a8:12:f3:
                    d7:fb:15:97:8d:a5:f8:04:ad:91:bf:f9:2d:95:1c:
                    c3:9b:0b:92:dd:f8:c0:78:12:f5:09:9c:aa:13:6d:
                    f7:87:5f:cc:73:22:18:17:a4:08:6b:2a:73:8c:02:
                    3e:ee:b0:06:03:e8:09:13:fe:83:77:71:41:86:0d:
                    33:8b:91:b5:6c:a8:10:b6:b6:2f:a8:6a:09:cf:b4:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:09:11:79:3C:76:CF:65:AE:62:05:2A:70:5C:76:08:A8:8C:4D
            X509v3 Authority Key Identifier:
                keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231322e302f32332d3233203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:b9:ac:79:48:e7:95:6d:91:1b:7e:c3:19:d7:d3:b8:29:
         5e:02:32:d7:f7:fc:a2:94:f0:65:76:8c:d1:b5:2e:18:80:39:
         db:17:4a:7e:c3:0b:80:4c:23:bb:60:c3:6c:b0:48:04:12:6e:
         16:f0:55:bf:4c:44:7d:df:a3:36:40:87:78:27:04:a5:ce:3c:
         02:32:b8:92:05:fc:e2:6c:50:e4:fc:0d:64:3f:17:bb:90:73:
         ef:bb:f6:5d:12:d5:88:b2:95:b8:63:ae:39:14:5c:a3:ac:8d:
         45:55:e3:4a:ac:fe:a8:4c:41:ff:4b:58:1f:e9:f6:80:8d:c2:
         58:0c:83:39:8b:00:32:42:47:86:49:8e:02:b0:2f:8e:43:a0:
         d3:cc:8a:56:80:e9:a5:1b:61:77:51:d1:9c:e1:36:a6:94:35:
         a0:3d:8e:6c:b8:6d:db:b9:70:b1:c7:2c:6d:e7:c1:a1:e6:9e:
         ed:dc:63:c1:15:0d:6b:c1:f7:0c:47:a1:92:4b:66:30:cb:c9:
         d8:c4:4c:e9:9d:bd:47:9c:50:4f:5a:cc:88:12:04:31:68:ba:
         02:94:ee:f7:9b:b4:1a:e0:50:2e:72:8e:cb:b4:29:15:81:e8:
         7e:0e:36:92:ae:23:24:02:2c:03:55:1f:e0:e3:7d:6f:42:a8:
         c4:dc:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 05:28:45 2026 by rpki-client