Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
File:                     34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa (raw, json)
Hash identifier:          jwSd1kd7UZbUPhHL1blTDzOodhzl0z1dyYfVzg2k12Y=
Subject key identifier:   CF:AC:19:97:67:70:63:A4:61:4E:B2:43:46:BB:4A:7A:20:A5:7F:25
Certificate issuer:       /CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
Certificate serial:       0BD67FE0017401EDBBC4768976CE168DC8979C4C
Authority key identifier: 4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa
Signing time:             Fri 30 Oct 2026 20:17:02 +0000
ROA not before:           Fri 30 Oct 2026 20:12:02 +0000
ROA not after:            Fri 29 Oct 2027 20:17:02 +0000
asID:                     267321
IP address blocks:        45.232.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl
                          rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 21:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d6:7f:e0:01:74:01:ed:bb:c4:76:89:76:ce:16:8d:c8:97:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C79E3729CF2CCA4F36451F61E86482BE2269626
        Validity
            Not Before: Oct 30 20:12:02 2026 GMT
            Not After : Oct 29 20:17:02 2027 GMT
        Subject: CN=CFAC1997677063A4614EB24346BB4A7A20A57F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:b7:21:b6:1e:4b:c5:73:28:6d:7a:51:6d:
                    73:4b:d4:8a:91:a1:55:cb:42:ff:da:f2:ea:43:d9:
                    87:e5:85:ca:cc:f5:fe:27:5f:8f:8f:2a:ab:7c:0e:
                    44:d4:97:3f:15:8b:92:50:af:c4:3e:e9:5b:f4:dc:
                    0e:ec:13:4d:67:5e:24:20:a3:38:07:64:c2:3f:e8:
                    aa:dc:82:b8:b5:f7:e2:25:b8:e3:7d:11:99:cc:f7:
                    76:b3:f7:94:62:30:28:53:7b:c1:00:21:6b:0f:22:
                    15:12:5a:72:30:7e:17:a8:cc:1b:79:1e:7a:33:48:
                    0b:87:7f:26:c5:fe:7c:1d:22:a0:7e:d3:80:ad:53:
                    3b:6e:b6:96:0a:b6:de:03:cd:67:c1:13:36:22:89:
                    46:27:27:ad:2f:16:ec:d8:3b:5e:66:17:9b:34:4d:
                    03:cd:e4:b1:22:b3:c3:24:d6:6a:c7:d0:43:1f:89:
                    37:54:d1:88:c9:a5:a5:e8:95:02:20:cc:82:18:ad:
                    13:0e:9c:c4:b4:5b:b7:91:41:ad:78:7d:ac:53:47:
                    3c:d3:33:64:8d:63:95:21:4d:dd:ec:88:fa:9d:32:
                    02:eb:d6:6b:6b:2c:98:78:f5:0e:17:c6:c8:a8:7c:
                    cd:18:d2:f1:8a:4d:cd:47:f4:0f:df:f4:b6:0b:41:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:19:97:67:70:63:A4:61:4E:B2:43:46:BB:4A:7A:20:A5:7F:25
            X509v3 Authority Key Identifier:
                keyid:4C:79:E3:72:9C:F2:CC:A4:F3:64:51:F6:1E:86:48:2B:E2:26:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C79E3729CF2CCA4F36451F61E86482BE2269626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8poGNi9of4dkZnzmBjFiW1rriAxH4vFgyx9BjHfFfp1L/1/34352e3233322e3133372e302f32342d3234203d3e20323637333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:6a:41:c4:b4:d4:fc:76:ac:f9:77:8c:9a:15:1f:1b:75:
         2b:c0:b8:77:57:03:74:05:c4:82:1a:04:9f:a4:f7:55:04:ff:
         30:39:60:0f:95:2b:35:82:8a:0a:98:12:3a:24:37:97:65:bc:
         fd:68:0f:d5:8b:14:12:26:05:a3:c5:55:c4:8c:eb:46:ac:db:
         ac:38:e6:3e:2b:e3:78:c9:4d:8b:dc:b5:dd:91:13:c0:d6:9f:
         4d:30:38:ff:48:51:c2:f0:25:13:2f:f0:b4:67:63:4a:ec:48:
         40:7b:be:4b:72:44:59:bd:d7:e5:54:ec:74:1a:7a:c2:09:cf:
         15:30:18:b6:f4:51:bf:dd:19:07:d6:44:ed:ce:d3:f0:9b:0d:
         2e:ca:52:81:6f:19:47:fa:70:a5:ae:ed:b9:16:ae:46:db:e6:
         e0:aa:b5:25:b3:55:07:db:7c:7a:e3:3d:2e:f9:ab:d3:d5:3e:
         96:82:45:70:d6:42:4c:0a:ae:47:ff:49:82:30:d5:f4:ef:cf:
         0d:69:fe:ff:4f:97:4c:14:6d:90:29:6f:83:53:7a:70:2b:73:
         09:77:78:ce:08:35:9b:d7:96:86:28:2d:62:f2:35:3a:45:43:
         f1:de:3d:d0:a0:64:00:68:dc:cf:33:e4:d7:72:ba:e5:72:c3:
         b4:e1:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 13:29:00 2026 by rpki-client