Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
File:                     34352e3233342e36392e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier:          ZG2VJyQNmhssL8zE86YolINrxNq750W6gUWu0LobGFg=
Subject key identifier:   7B:ED:99:8B:B0:D2:A7:65:A8:FE:79:D1:C4:55:BB:06:AA:A7:88:4B
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       6ED2AC6A41A9AE7B77F84CC97836FE6A712489D0
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
Signing time:             Wed 10 Sep 2025 12:48:52 +0000
ROA not before:           Wed 10 Sep 2025 12:43:52 +0000
ROA not after:            Wed 09 Sep 2026 12:48:52 +0000
asID:                     267363
IP address blocks:        45.234.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:ac:6a:41:a9:ae:7b:77:f8:4c:c9:78:36:fe:6a:71:24:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Sep 10 12:43:52 2025 GMT
            Not After : Sep  9 12:48:52 2026 GMT
        Subject: CN=7BED998BB0D2A765A8FE79D1C455BB06AAA7884B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:7d:d5:54:95:a5:2b:86:7f:5f:b0:23:95:
                    4d:b5:4b:05:13:c9:66:db:bd:e3:8f:b8:cc:54:70:
                    a7:5a:52:da:18:79:14:3d:2c:41:fe:c3:4e:29:e3:
                    7f:6f:ea:b5:15:ce:2b:81:21:73:b4:24:34:5b:ef:
                    2b:0c:21:af:c9:2a:aa:32:e0:64:d1:a6:df:04:e8:
                    c4:7d:41:8d:08:64:23:db:8a:15:ec:43:51:34:af:
                    e0:bb:03:96:70:11:38:83:15:dd:1e:9a:04:b8:e8:
                    83:6c:58:a7:17:17:a0:40:81:17:27:63:a8:c2:ac:
                    b2:ad:bd:77:9c:0a:a2:ed:02:b8:4a:e2:ef:d0:a9:
                    16:b3:0b:d2:7d:31:14:5b:fe:ab:1e:2c:e5:5a:a5:
                    e4:1d:90:a7:c3:43:15:2e:63:f7:cf:a6:dc:0d:b8:
                    19:34:6a:42:6e:4f:78:d6:ab:a3:d4:2e:7d:a7:dc:
                    c9:e3:c3:95:03:5d:e9:71:9e:4f:e1:32:b9:3d:14:
                    76:d3:3c:81:02:bd:ff:49:a1:df:a0:bb:f8:96:68:
                    cb:45:0a:e4:ac:bb:5d:42:46:c5:af:90:39:bc:92:
                    30:4a:28:28:f2:7f:46:95:fa:ac:d8:68:a5:4d:26:
                    24:a8:07:68:57:7c:a2:22:fa:bb:3d:dd:ea:0a:dc:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:99:8B:B0:D2:A7:65:A8:FE:79:D1:C4:55:BB:06:AA:A7:88:4B
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:08:af:e3:fc:67:c7:ca:f0:a8:00:db:fc:b5:85:f8:5e:
         4e:a4:92:dc:5b:8d:df:fd:87:e6:0e:28:93:aa:7f:7f:2d:7c:
         a1:bc:aa:23:e7:0f:58:1b:3e:09:a7:89:08:c9:76:bb:f1:48:
         f0:ac:c3:86:ae:37:35:c0:60:af:51:13:6a:e0:4f:5e:f3:41:
         ae:38:3a:4e:09:4c:ed:47:32:54:ac:c0:42:87:31:51:a6:ad:
         ad:fe:d9:95:96:5f:96:4d:f3:62:f5:8b:55:6d:e6:77:3a:33:
         4c:0c:28:13:7b:b0:7f:f5:cb:a9:9a:c3:a5:eb:76:2a:2f:95:
         86:46:7e:10:6c:59:03:e3:e0:60:ba:04:74:ce:86:4c:f6:5e:
         24:eb:87:da:41:36:7a:45:bc:39:c7:25:32:c6:10:db:c2:d1:
         f9:99:c6:4c:2e:c3:ac:0f:d6:5d:e7:6f:ff:37:20:66:ee:25:
         86:8d:34:1a:6a:db:c8:5b:8e:32:9b:6e:6e:5e:04:67:55:69:
         ed:df:29:c0:17:9c:bd:5d:c9:90:c3:54:8a:89:d3:88:ea:d8:
         b4:e5:20:19:47:6e:7a:9a:62:67:47:6e:39:e3:10:c0:01:e6:
         80:e1:06:fd:ae:7d:d9:38:8f:f3:dc:4c:f6:ec:7d:08:b6:8e:
         29:7c:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:38 2025 by rpki-client