Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
File:                     34352e3232342e32342e302f32322d3332203d3e20323637363336.roa (raw, json)
Hash identifier:          i/fNbDhoFU/+uND2aU03pFOYEnA2oh18FYFnN8+hxBg=
Subject key identifier:   5F:00:CB:8C:FC:EB:AA:46:23:5F:74:30:6F:5D:F8:47:D8:A1:E7:32
Certificate issuer:       /CN=6262236EC1F5D36F583AB71B503487DFB7E6D1AD
Certificate serial:       6C502C6EE25DD42A0736F8DA9CF668439ADAC293
Authority key identifier: 62:62:23:6E:C1:F5:D3:6F:58:3A:B7:1B:50:34:87:DF:B7:E6:D1:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
Signing time:             Wed 23 Sep 2026 12:35:30 +0000
ROA not before:           Wed 23 Sep 2026 12:30:30 +0000
ROA not after:            Wed 22 Sep 2027 12:35:30 +0000
asID:                     267636
IP address blocks:        45.224.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl
                          rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:2c:6e:e2:5d:d4:2a:07:36:f8:da:9c:f6:68:43:9a:da:c2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6262236EC1F5D36F583AB71B503487DFB7E6D1AD
        Validity
            Not Before: Sep 23 12:30:30 2026 GMT
            Not After : Sep 22 12:35:30 2027 GMT
        Subject: CN=5F00CB8CFCEBAA46235F74306F5DF847D8A1E732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:25:91:b3:8c:8e:9a:e3:8e:ea:42:43:c3:
                    4d:1f:42:42:3e:4e:91:41:67:37:1f:d2:85:74:15:
                    17:20:fa:06:1b:65:21:ac:57:4d:57:6d:5f:40:26:
                    ea:e2:fc:33:52:5b:6f:d1:f0:63:de:59:cf:59:46:
                    f8:49:57:da:1b:1f:e0:d6:70:3c:a9:8f:9d:a0:75:
                    5a:95:0b:d0:8c:66:1d:5f:4c:1d:79:83:a7:f1:02:
                    ed:f3:1b:86:f8:c2:93:c6:f6:af:41:25:e5:5e:9e:
                    cd:3a:71:76:ef:95:66:ec:71:85:bb:b7:12:42:60:
                    97:90:57:4c:13:f2:3d:3a:c7:a0:6d:48:7e:3e:8c:
                    37:3a:54:c2:51:cb:ed:bb:a1:04:d8:71:68:a8:78:
                    7a:db:2b:d5:f8:d4:c8:3a:8f:40:bc:08:b2:5f:ba:
                    a8:a2:73:ee:bf:f5:83:b4:93:a5:3d:33:f3:63:48:
                    3d:8f:0b:b0:ad:b8:94:96:2f:d4:b1:15:da:69:a8:
                    a6:c4:69:96:02:cf:3e:d5:fd:1c:e3:7b:be:b5:c4:
                    b9:f1:18:90:70:04:15:a0:57:44:2b:43:d4:fb:a7:
                    47:39:25:85:59:5f:26:e7:8d:ba:aa:d3:33:ed:b3:
                    ba:33:57:51:10:dc:ea:4d:2b:12:48:e2:f7:e4:b6:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:CB:8C:FC:EB:AA:46:23:5F:74:30:6F:5D:F8:47:D8:A1:E7:32
            X509v3 Authority Key Identifier:
                keyid:62:62:23:6E:C1:F5:D3:6F:58:3A:B7:1B:50:34:87:DF:B7:E6:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6262236EC1F5D36F583AB71B503487DFB7E6D1AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:ad:7b:d0:00:95:6a:11:c3:e4:ea:a4:bd:3f:0e:7e:1f:99:
         a3:58:e0:e5:f9:10:2a:27:e5:ab:b0:61:98:a7:4f:6e:7f:1c:
         d8:88:a9:80:9a:8d:bd:e1:bc:b3:b7:84:0b:db:4e:06:e3:bf:
         e1:c8:74:34:93:c4:c9:af:b3:45:30:ca:1b:e8:aa:87:26:83:
         8d:53:43:93:ff:61:f4:d2:20:13:12:a4:04:6d:a9:fb:83:ae:
         14:4c:48:bc:dc:9d:1e:ac:d6:55:a8:ce:26:b5:1b:b7:16:93:
         3d:ff:4d:4b:33:28:52:04:be:d1:37:37:84:c5:d5:88:fa:2a:
         6c:f1:76:45:e6:b2:bd:91:02:8d:ec:df:b9:24:83:45:23:aa:
         3c:76:75:08:97:d5:75:27:fd:e3:c2:01:f1:a4:04:11:16:9d:
         ea:12:d2:d9:c8:fd:78:eb:5f:d4:c4:5b:dd:85:19:f6:58:d7:
         92:c9:fd:65:09:1c:3d:ee:60:bf:52:09:66:78:10:16:bb:41:
         e7:78:6f:66:b2:36:fd:6d:c4:a1:82:64:e6:f7:b9:ba:e5:bb:
         36:9d:55:5c:a8:ae:d2:70:f2:19:23:d5:2b:e7:ff:d0:81:b8:
         bc:66:bd:b2:0d:9d:03:00:2b:5f:39:f7:1d:84:3e:f8:dc:c2:
         fc:df:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----