Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3332203d3e20323639353534.roa
File:                     34352e3138372e3231322e302f32322d3332203d3e20323639353534.roa (raw, json)
Hash identifier:          lV3l3rrA4RqvozOQQEAfMQPw3uWDozq4RwTIU3G+dOw=
Subject key identifier:   11:9B:17:A8:A1:4E:87:40:72:12:4F:D6:7B:80:3E:47:58:89:ED:24
Certificate issuer:       /CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
Certificate serial:       281BD370DFF7059DB51D6B980905E776AD1B4A4C
Authority key identifier: 73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3332203d3e20323639353534.roa
Signing time:             Fri 02 Oct 2026 18:29:56 +0000
ROA not before:           Fri 02 Oct 2026 18:24:56 +0000
ROA not after:            Fri 01 Oct 2027 18:29:56 +0000
asID:                     269554
IP address blocks:        45.187.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl
                          rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:d3:70:df:f7:05:9d:b5:1d:6b:98:09:05:e7:76:ad:1b:4a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C99207B0A83999DA30B6A4FCB17DF3A5A3E389
        Validity
            Not Before: Oct  2 18:24:56 2026 GMT
            Not After : Oct  1 18:29:56 2027 GMT
        Subject: CN=119B17A8A14E874072124FD67B803E475889ED24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:91:96:01:9d:7b:dd:5e:02:42:53:04:cf:
                    bf:bd:8c:44:f9:8d:4a:b6:70:47:de:4a:9f:41:9f:
                    cb:60:b3:cc:e9:7a:40:d5:50:6d:a3:f7:e7:39:1f:
                    a4:a8:06:d1:91:fa:6e:01:96:e8:9c:a5:a7:72:97:
                    77:02:ea:83:6e:0c:ab:9c:53:fc:0f:07:c3:c3:92:
                    a4:8e:de:d8:46:76:a8:31:c1:ee:5d:67:1c:ca:9a:
                    07:e8:03:72:f2:3d:98:ba:2b:0f:37:e0:ec:8d:fa:
                    08:f8:36:b4:cf:db:73:4a:d9:e1:32:72:91:79:48:
                    4e:71:69:3e:1a:2a:91:ae:d1:6f:fe:cf:7a:3b:7f:
                    5b:bd:31:66:97:02:7e:98:e4:e9:9a:9b:10:ac:79:
                    af:2a:d9:04:34:41:9b:57:a0:6f:ba:50:27:2e:82:
                    2f:b6:79:87:16:cd:da:d8:d4:c6:78:da:25:e9:ca:
                    f8:f2:2c:6d:76:67:e7:8d:70:a2:b5:b5:66:a2:4e:
                    6c:df:3c:cd:d9:49:72:54:cf:5d:97:05:99:c7:aa:
                    49:84:7a:29:92:b8:d8:85:25:0c:26:57:c4:1e:21:
                    82:03:4a:41:3b:8f:2e:7c:58:80:61:aa:74:a7:6b:
                    f4:b3:cd:9a:a7:af:97:89:52:d2:3d:00:da:4b:9a:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:17:A8:A1:4E:87:40:72:12:4F:D6:7B:80:3E:47:58:89:ED:24
            X509v3 Authority Key Identifier:
                keyid:73:C9:92:07:B0:A8:39:99:DA:30:B6:A4:FC:B1:7D:F3:A5:A3:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73C99207B0A83999DA30B6A4FCB17DF3A5A3E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y1Pv1WE1UdXY1MXnQMGjfoEwvAnepFxGDemQJYdfWjM/0/34352e3138372e3231322e302f32322d3332203d3e20323639353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:08:9f:bb:37:55:63:d3:b0:8c:d5:64:f9:ac:bd:88:43:
         49:a2:a4:d6:75:c5:7d:87:a8:05:e4:6b:1d:ef:60:9d:7f:70:
         42:fc:d0:a0:1c:46:97:bb:5b:39:ca:6f:68:c7:62:d5:b6:37:
         a7:25:d8:4d:1e:5f:eb:14:d5:4c:9e:c1:f6:4e:90:8e:10:ea:
         b8:6d:ad:e4:f2:43:76:35:66:a3:ff:a1:91:b4:46:d1:fc:13:
         8c:cf:99:47:cb:d9:b9:5d:9c:32:27:b3:14:69:9a:a6:6b:2b:
         1d:0e:85:ab:5c:ef:91:d5:2b:49:6a:08:83:ab:6f:23:b5:a0:
         08:3f:ec:6a:d7:a5:44:1e:d9:9a:ce:1c:64:b9:03:2a:e6:6a:
         de:f5:ff:04:01:5f:2e:67:77:43:eb:c9:18:b9:02:0a:bb:4f:
         16:b4:61:dd:a4:14:e9:d3:a2:ce:cd:c5:70:e1:6f:8d:8c:d6:
         29:91:53:9f:3f:c4:d5:aa:8b:58:74:a8:c3:2f:5e:ac:b2:84:
         42:b8:bd:ba:39:5e:ab:a3:7f:79:8f:9c:2a:92:b4:1f:9e:6b:
         d3:df:56:0d:0d:e3:70:d0:35:32:c8:2d:58:23:70:0d:8e:52:
         f4:f3:a5:4d:37:c9:cc:85:e6:70:52:e8:45:ff:29:10:92:59:
         f0:35:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:50:19 2026 by rpki-client