Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa
File:                     34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa (raw, json)
Hash identifier:          QPfvjO6777FYJN5KQVgpSdDDsHE/m8ORi7jvwuWOP84=
Subject key identifier:   C6:9D:A9:86:25:A9:07:D5:1A:E7:89:EE:15:50:0B:E6:8A:82:3F:7E
Certificate issuer:       /CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
Certificate serial:       565D434336C754F9DB6A9A848E064B1E498F6ABA
Authority key identifier: D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa
Signing time:             Thu 01 Oct 2026 17:43:05 +0000
ROA not before:           Thu 01 Oct 2026 17:38:05 +0000
ROA not after:            Thu 30 Sep 2027 17:43:05 +0000
asID:                     271617
IP address blocks:        45.162.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl
                          rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 03:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5d:43:43:36:c7:54:f9:db:6a:9a:84:8e:06:4b:1e:49:8f:6a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
        Validity
            Not Before: Oct  1 17:38:05 2026 GMT
            Not After : Sep 30 17:43:05 2027 GMT
        Subject: CN=C69DA98625A907D51AE789EE15500BE68A823F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:ca:48:7a:4e:53:5f:10:39:1c:f7:2d:50:
                    75:23:ea:e0:05:60:8c:3c:91:d9:c9:9a:24:2b:dc:
                    84:68:33:79:2a:06:10:eb:9f:cb:40:62:62:5c:f5:
                    e9:df:37:76:13:05:81:a6:02:86:2b:15:45:5c:1f:
                    82:04:34:36:41:af:2a:76:65:bc:db:90:6f:1a:c6:
                    5c:7d:63:eb:f4:79:da:17:3b:43:0c:10:79:10:3c:
                    66:93:97:70:5e:13:fc:d9:fd:78:8a:bb:92:d2:79:
                    91:7c:3a:f1:fc:8c:36:d6:30:e9:93:ec:75:ba:38:
                    42:88:f4:ec:d2:62:1f:31:45:7b:2f:eb:fc:c7:8d:
                    2a:ee:99:86:38:88:e1:00:ca:6b:8c:15:40:fa:70:
                    99:86:ce:f6:ea:97:a3:1b:a7:bc:8e:a0:7c:92:ae:
                    5c:df:c2:d0:b9:13:b7:12:9c:2b:5d:e8:bd:bf:03:
                    a4:88:59:17:4f:49:a5:e8:30:1a:06:b5:f4:76:77:
                    6e:29:74:22:b8:3c:72:71:ac:82:b0:e0:79:3c:21:
                    99:5f:41:92:b1:8f:75:ec:04:25:40:20:6d:d0:1b:
                    63:db:9d:0d:08:22:77:10:fe:8a:b5:37:62:33:62:
                    6f:9e:63:a8:77:e5:2f:70:70:86:0c:34:18:7f:0a:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:A9:86:25:A9:07:D5:1A:E7:89:EE:15:50:0B:E6:8A:82:3F:7E
            X509v3 Authority Key Identifier:
                keyid:D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/34352e3136322e3230322e302f32342d3234203d3e20323731363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:bf:e1:ca:43:fd:04:96:0b:85:48:3c:fd:43:7c:b9:f7:
         2b:d8:fb:84:0c:5c:41:ed:e1:49:59:b3:b3:ca:d6:cb:11:6b:
         17:b8:82:6d:b0:56:9c:08:c1:ab:5e:fb:4c:69:96:c4:1f:c9:
         b7:7c:a6:5f:db:0d:fe:5f:dd:73:f4:54:46:fa:48:b7:42:2d:
         5c:09:19:15:97:f0:3e:fb:e7:33:a4:4e:2d:13:69:81:24:53:
         8a:0f:0c:22:02:c8:3a:5d:24:67:f3:62:36:ab:36:61:1b:98:
         40:21:38:59:90:09:76:aa:43:30:83:4d:8b:c3:93:ee:39:e9:
         07:92:b4:24:d0:e9:26:e3:47:46:0f:7a:5d:24:28:3b:3e:d5:
         6c:8a:7b:0d:b7:f1:83:bd:84:73:85:1d:2c:9f:ac:a8:35:c1:
         d6:83:65:44:42:fe:f8:15:44:23:bc:39:85:0a:d7:6b:e2:f6:
         f1:bf:0a:25:84:d9:a2:7d:fe:c1:8c:6e:23:c6:41:d2:17:78:
         f8:26:ea:85:5b:03:3f:a9:07:03:81:8e:ab:8d:16:eb:4e:56:
         32:a2:fb:79:7e:3a:9e:99:3b:94:d5:85:5f:3d:91:9d:78:e4:
         42:97:fe:c4:ca:55:09:23:d5:f4:1f:bd:65:9c:35:2e:6a:b8:
         f4:7d:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:35:31 2026 by rpki-client