Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130352e302f32342d3234203d3e20323638393937.roa
File:                     34352e3137362e3130352e302f32342d3234203d3e20323638393937.roa (raw, json)
Hash identifier:          Phh5mD9Qdi2uicI63hEAh/V8F4z94iCUiho8FXlAe7w=
Subject key identifier:   9A:9E:BF:4D:35:FA:FF:60:80:4B:0C:5F:06:8E:88:01:5F:E6:A0:16
Certificate issuer:       /CN=CF034C59A12C0749E90E7B6E3ACEBF432822B60D
Certificate serial:       72A25F72F0AD3FAF0487B129E7044F35C1A8F3DC
Authority key identifier: CF:03:4C:59:A1:2C:07:49:E9:0E:7B:6E:3A:CE:BF:43:28:22:B6:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130352e302f32342d3234203d3e20323638393937.roa
Signing time:             Wed 23 Sep 2026 23:10:58 +0000
ROA not before:           Wed 23 Sep 2026 23:05:58 +0000
ROA not after:            Wed 22 Sep 2027 23:10:58 +0000
asID:                     268997
IP address blocks:        45.176.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.crl
                          rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a2:5f:72:f0:ad:3f:af:04:87:b1:29:e7:04:4f:35:c1:a8:f3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF034C59A12C0749E90E7B6E3ACEBF432822B60D
        Validity
            Not Before: Sep 23 23:05:58 2026 GMT
            Not After : Sep 22 23:10:58 2027 GMT
        Subject: CN=9A9EBF4D35FAFF60804B0C5F068E88015FE6A016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:b2:48:3b:56:27:da:a4:0d:81:7f:a2:fe:
                    d8:45:81:cd:c5:c3:9d:4b:52:0f:2e:b5:c1:50:ae:
                    3b:dc:5a:67:e7:d9:84:7a:24:88:11:06:79:e6:32:
                    18:4c:f6:6c:e6:0b:36:82:b7:20:64:1f:62:a2:19:
                    fb:b2:39:ae:9a:22:53:9d:3d:fa:26:d4:48:6a:b6:
                    11:8d:67:8e:fa:de:1f:e7:ca:75:34:2a:10:bc:99:
                    5c:f3:28:c1:21:f1:2a:d4:08:e7:49:bc:ae:22:f1:
                    fb:49:69:ed:84:40:23:22:eb:fd:c0:4b:f0:e1:87:
                    15:33:cc:db:12:df:d0:0a:24:1d:4c:d9:11:49:60:
                    84:83:53:04:c2:8d:b5:ce:92:f4:e3:10:df:92:48:
                    83:4f:fd:75:01:ce:15:bf:ac:b1:8b:24:5e:ac:97:
                    b6:58:65:13:0c:87:d3:b2:ea:69:20:24:9a:15:d6:
                    eb:3e:fd:01:66:49:f0:bb:52:88:b3:d5:81:d3:3d:
                    5d:44:c4:6f:bb:64:7e:ed:d7:33:18:dd:92:cd:2e:
                    74:c3:aa:6e:6f:1c:37:09:e8:6f:01:a9:6e:64:e4:
                    f1:4d:bf:fc:16:3e:a3:9d:58:e3:ac:e4:a7:a2:d2:
                    61:95:e5:82:f9:ab:8b:03:68:c3:71:16:dd:2f:72:
                    04:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:BF:4D:35:FA:FF:60:80:4B:0C:5F:06:8E:88:01:5F:E6:A0:16
            X509v3 Authority Key Identifier:
                keyid:CF:03:4C:59:A1:2C:07:49:E9:0E:7B:6E:3A:CE:BF:43:28:22:B6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF034C59A12C0749E90E7B6E3ACEBF432822B60D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ng55FZEKD4GhRQyMt6bMbbWSLjZtyVn7TqNtssLERCU/0/34352e3137362e3130352e302f32342d3234203d3e20323638393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:71:71:69:eb:6d:3b:cc:0b:e5:9b:5c:76:fb:da:56:fd:
         81:0e:88:bb:cf:21:37:70:4f:26:a2:19:64:9b:34:4a:73:c7:
         8a:c1:d9:3b:da:2a:ce:eb:e3:42:8b:98:e8:d2:22:bf:8b:ee:
         21:ca:87:d4:09:a3:f8:3d:89:f4:b0:a4:a9:1d:62:9e:bf:11:
         8b:c0:15:bd:25:5e:21:39:ae:83:4d:e9:83:b9:77:d4:d8:55:
         67:97:0a:c3:59:bd:c0:e0:89:bd:88:b5:f9:2e:7d:d9:6a:1c:
         d6:30:92:af:3f:46:ae:1a:4b:4c:ff:8a:6a:57:61:68:a0:a2:
         f6:16:1a:da:5a:51:44:4e:9c:08:02:89:66:8c:34:a6:db:ba:
         3d:46:f7:b6:aa:fa:da:99:40:e9:e4:83:25:67:af:c4:e5:05:
         ab:54:10:d2:36:70:15:5f:cd:bc:64:70:fd:cb:be:9a:5b:ef:
         4f:4f:d2:f5:23:84:18:8d:00:04:17:7d:86:ef:6c:f6:42:b0:
         02:f6:4c:a1:62:54:32:8b:1a:ea:b9:a5:b6:ff:fb:95:64:3a:
         f2:81:49:0f:45:71:cb:21:b1:65:b5:68:4d:ca:f4:75:cd:4a:
         f9:9b:1f:84:62:51:b0:b2:a7:7b:5a:cf:92:e7:8f:80:17:ea:
         be:5f:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:55 2026 by rpki-client