Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32332d3233203d3e20323637303539.roa
File:                     34352e3232382e3131302e302f32332d3233203d3e20323637303539.roa (raw, json)
Hash identifier:          Di6WO3CVL3oHmRJ8pM00bOnhnIJsN1hnWHeuxCYmriM=
Subject key identifier:   B2:C6:B6:77:4C:C3:DE:D0:5D:39:90:B1:78:FF:E4:02:E0:DC:CB:BD
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       7245E248D11241E26882C74B9257D4A5CD72920A
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32332d3233203d3e20323637303539.roa
Signing time:             Fri 18 Sep 2026 04:35:02 +0000
ROA not before:           Fri 18 Sep 2026 04:30:02 +0000
ROA not after:            Fri 17 Sep 2027 04:35:02 +0000
asID:                     267059
IP address blocks:        45.228.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 23:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:e2:48:d1:12:41:e2:68:82:c7:4b:92:57:d4:a5:cd:72:92:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Sep 18 04:30:02 2026 GMT
            Not After : Sep 17 04:35:02 2027 GMT
        Subject: CN=B2C6B6774CC3DED05D3990B178FFE402E0DCCBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:01:6a:de:c8:fd:5e:3e:5b:2d:ab:de:be:
                    e7:f4:3b:a9:82:a2:18:69:8b:cb:43:56:86:4a:9c:
                    d8:36:7d:d1:6a:d2:0b:0a:94:b1:14:9d:d5:b9:2e:
                    cb:80:08:90:a6:45:cd:e1:e2:4b:7f:d3:99:2e:d9:
                    32:b3:3c:c9:b9:d7:5d:8b:70:6c:9e:dc:af:29:05:
                    e4:7a:d3:4f:00:d4:fb:34:44:c7:27:ce:54:ea:68:
                    57:6c:df:b6:01:b7:35:7e:76:6b:05:18:d3:2f:f9:
                    5b:c9:a3:bf:de:20:de:58:a0:32:7a:6c:ab:d5:c0:
                    9f:61:27:a2:e6:64:a3:c4:12:ba:3a:24:f4:6f:6a:
                    3d:0e:19:27:fc:83:e7:1a:aa:ba:b9:50:7c:a8:f8:
                    30:3d:45:24:90:36:1f:23:62:e9:13:dd:d6:65:b2:
                    2a:e6:79:c2:40:c0:16:c5:69:b0:b0:58:11:c7:21:
                    7b:ce:43:04:4e:6c:be:1e:eb:50:36:7f:94:9a:24:
                    0c:04:3a:9b:f2:5f:40:a7:2e:ae:28:37:14:4d:b4:
                    1a:07:80:ef:24:bd:f5:29:6f:8f:b9:7d:ce:22:81:
                    10:c0:c4:f6:80:6f:1a:03:52:8c:ee:d4:ed:fa:2d:
                    a8:c8:c8:e4:60:ba:39:6f:06:e4:1c:ff:59:c3:0d:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:B6:77:4C:C3:DE:D0:5D:39:90:B1:78:FF:E4:02:E0:DC:CB:BD
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32332d3233203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:70:fd:35:e5:55:2b:c2:97:4c:44:29:5e:cb:05:02:b1:08:
         ec:dc:53:a8:d6:57:dd:0e:79:29:b8:8f:a8:fc:84:ad:a5:2b:
         97:88:85:f5:21:b6:4a:44:fb:48:5a:4e:b8:cf:c9:82:e4:5a:
         22:f9:8b:f0:50:fd:1c:f3:c2:c7:2d:81:6a:eb:9c:bb:af:f0:
         b4:ef:1e:ec:cf:07:b6:e8:ee:f4:6d:5d:de:54:78:1f:67:8f:
         9d:e5:0e:6c:93:e8:6e:f1:5b:e7:47:27:94:f6:46:82:ab:24:
         17:fb:05:fe:14:7e:75:30:48:4e:2e:1d:94:7e:78:56:e9:77:
         61:83:7e:0f:fe:0b:fe:6c:c8:32:1a:20:1a:1e:5e:48:f8:a3:
         d2:17:8c:aa:f9:91:d4:b2:40:d1:a7:74:00:f9:e4:c5:c9:d9:
         1e:54:b6:69:01:51:71:5e:42:b9:b3:9d:42:20:5a:8f:a9:a3:
         3f:b3:98:ec:8c:4a:eb:b6:76:0c:a1:a8:dd:62:5b:91:ee:12:
         9d:31:c0:ff:10:f1:8c:72:db:72:b1:db:62:c6:9d:57:04:26:
         fd:cc:87:a2:7d:26:60:5a:82:2b:2b:90:44:01:13:b3:34:11:
         25:d3:a8:56:17:36:4b:08:42:7e:2b:aa:1b:4a:d0:c0:44:e4:
         f3:67:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:59:15 2026 by rpki-client