Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
File:                     34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa (raw, json)
Hash identifier:          Xc9xjXdJWnC/EwkLyGzFNcwy5enAD545f4Z3H5rjfXQ=
Subject key identifier:   CF:EF:0D:78:E8:6C:44:32:50:CE:FD:8A:8C:3B:25:84:E2:BD:8E:23
Certificate issuer:       /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial:       6C8A73F95A212192A7992554F72910278B98803B
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa
Signing time:             Wed 14 Oct 2026 18:10:55 +0000
ROA not before:           Wed 14 Oct 2026 18:05:55 +0000
ROA not after:            Wed 13 Oct 2027 18:10:55 +0000
asID:                     267373
IP address blocks:        45.234.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8a:73:f9:5a:21:21:92:a7:99:25:54:f7:29:10:27:8b:98:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
        Validity
            Not Before: Oct 14 18:05:55 2026 GMT
            Not After : Oct 13 18:10:55 2027 GMT
        Subject: CN=CFEF0D78E86C443250CEFD8A8C3B2584E2BD8E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:69:88:87:dd:bf:8e:16:28:70:1b:1d:97:
                    46:db:6a:90:ad:3b:13:ff:4d:12:03:b1:10:07:b9:
                    65:83:ff:df:0d:e1:7b:b1:c0:fd:ee:63:60:1d:ca:
                    08:3f:33:35:9b:ae:6b:87:a1:39:b5:f4:d5:13:3a:
                    e0:74:53:3b:12:05:1c:c9:74:86:5a:13:57:f1:c1:
                    62:ad:b1:00:4d:25:04:81:ed:7c:e0:54:3f:73:1e:
                    67:73:76:5f:85:49:1a:84:78:d9:7a:da:c4:c1:47:
                    cf:15:12:c7:db:0b:89:59:cd:c4:93:3d:f7:cc:c6:
                    09:05:76:e2:cd:a2:f8:86:22:0b:9d:86:ed:3a:35:
                    cd:1e:a4:9c:3d:cb:c6:e2:c3:d4:e8:5c:92:f9:c0:
                    a2:6b:08:b8:73:8c:3e:bc:73:c1:7d:ff:fe:13:f1:
                    f8:4d:ad:94:b6:88:e8:1d:2a:bf:d3:ba:dd:63:07:
                    8d:59:e1:83:25:d8:55:ab:72:23:6c:8a:28:45:70:
                    2c:7a:d6:3e:34:d2:f0:af:a7:dd:54:a9:77:fb:cf:
                    62:26:c7:e7:37:f1:8e:3d:38:b3:1c:9f:b8:0e:34:
                    36:e5:fc:65:fa:88:af:17:ff:61:80:d8:96:67:85:
                    eb:1a:37:c8:70:2c:1c:24:3c:28:25:f4:3a:a1:4b:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:0D:78:E8:6C:44:32:50:CE:FD:8A:8C:3B:25:84:E2:BD:8E:23
            X509v3 Authority Key Identifier:
                keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/34352e3233342e3231332e302f32342d3234203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:81:95:7d:cc:4b:60:51:4f:22:60:49:43:9b:8b:61:16:da:
         fc:00:bb:92:54:b5:cc:9a:03:6b:9d:d3:16:ea:8a:fc:37:96:
         6e:d8:4a:67:73:0b:0d:f4:f0:b6:fe:eb:d5:cc:f2:b1:e4:1a:
         26:ef:d7:da:3b:78:1a:a0:22:48:9f:1c:3c:cb:ee:90:cd:00:
         66:14:c1:fd:0b:7e:28:3a:ef:db:00:eb:93:6d:2b:36:e8:a7:
         e8:27:a3:2b:ad:fc:76:9c:14:59:9a:81:20:9f:95:de:65:0d:
         ad:90:7f:c8:62:27:fb:95:26:0d:9d:25:e0:29:f0:8e:ec:31:
         c9:46:df:8c:82:3f:1f:53:dd:e7:3b:4b:76:a7:2d:22:ef:da:
         91:42:cf:73:9f:12:6e:76:f3:7a:1e:ae:24:a1:3e:05:14:4c:
         e3:b3:d9:4b:29:9d:5f:29:94:ad:57:f8:ff:27:02:58:d3:9c:
         de:3b:45:e8:a7:72:76:12:3a:44:96:e9:01:01:68:bb:30:72:
         24:9c:a3:fc:36:3c:41:7c:bf:a4:8c:6f:5e:61:0a:f2:3e:88:
         be:3f:34:4b:dc:a5:66:cb:6d:4b:d0:20:ed:1a:f8:19:dd:f3:
         c8:94:fc:e5:82:22:78:66:7d:ef:8f:81:e6:fc:20:28:99:e6:
         1a:0a:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:35:53 2026 by rpki-client