Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39322e302f32342d3234203d3e20323639323830.roa
File:                     34352e3138322e39322e302f32342d3234203d3e20323639323830.roa (raw, json)
Hash identifier:          xIwD0XQf2ypy30Ey1THkYNM8/7AsQ0Am+bTpcLsFD0w=
Subject key identifier:   FE:72:74:9E:1F:BE:FF:FC:CB:6D:23:3A:9D:B4:F2:8F:70:26:B7:75
Certificate issuer:       /CN=0B58E844A7455326509E054B4A28E81E6C01AC01
Certificate serial:       3EAD5597D6E45DF518DFC289D46FC0ECD7D73349
Authority key identifier: 0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39322e302f32342d3234203d3e20323639323830.roa
Signing time:             Fri 10 Jul 2026 14:46:14 +0000
ROA not before:           Fri 10 Jul 2026 14:41:14 +0000
ROA not after:            Fri 09 Jul 2027 14:46:14 +0000
asID:                     269280
IP address blocks:        45.182.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl
                          rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ad:55:97:d6:e4:5d:f5:18:df:c2:89:d4:6f:c0:ec:d7:d7:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E844A7455326509E054B4A28E81E6C01AC01
        Validity
            Not Before: Jul 10 14:41:14 2026 GMT
            Not After : Jul  9 14:46:14 2027 GMT
        Subject: CN=FE72749E1FBEFFFCCB6D233A9DB4F28F7026B775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:8b:f4:14:a0:90:fd:d9:da:5f:a1:7c:84:
                    fe:08:ad:df:6f:a3:04:35:e9:8f:9e:91:0d:7e:e1:
                    52:64:64:a3:35:78:18:dc:26:9f:f5:0e:ca:ea:5d:
                    57:f9:73:38:a7:ed:fc:7a:87:cb:c0:91:8c:e8:28:
                    2e:3c:2a:bb:1e:c9:43:fd:20:7b:05:b8:86:29:54:
                    89:1e:94:fe:a8:74:e6:a8:3c:6b:a8:ce:3f:c7:2a:
                    91:f6:da:e9:49:93:c9:7d:13:c3:ee:84:66:b9:70:
                    4f:aa:7c:36:bb:10:97:fe:0b:18:58:ca:7b:9a:8a:
                    b1:21:fc:a1:08:44:1d:66:15:a5:1b:75:0e:a4:cc:
                    64:05:4f:d2:17:b6:f0:44:73:83:64:46:89:a3:dc:
                    6c:73:c3:bd:11:c0:4f:5c:f3:1c:b3:de:7b:e6:a0:
                    36:35:1c:fa:c9:f2:d2:db:1c:dc:88:9f:ea:e0:93:
                    6a:fe:26:e3:fb:37:8d:dc:57:c5:a9:67:e5:23:5d:
                    d9:56:82:74:fe:e6:b9:74:b2:2e:62:bd:74:cb:8a:
                    15:bf:42:1b:b3:33:1f:0a:72:1a:8b:fa:69:34:b1:
                    e3:66:73:b5:f3:83:f2:ed:c4:68:64:74:e1:08:a0:
                    96:b1:ed:b7:24:14:81:69:e4:95:dc:26:cc:03:55:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:72:74:9E:1F:BE:FF:FC:CB:6D:23:3A:9D:B4:F2:8F:70:26:B7:75
            X509v3 Authority Key Identifier:
                keyid:0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39322e302f32342d3234203d3e20323639323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:63:bd:0e:ab:bc:c1:0e:f4:8d:4e:bb:91:46:b8:24:a3:
         24:8a:12:75:92:08:a4:7b:23:ec:db:7b:c3:5d:51:74:45:65:
         f9:95:8f:30:8f:35:09:09:ea:cd:58:25:15:93:d7:89:15:77:
         32:55:c6:67:98:27:ca:38:ae:c2:d5:c0:f9:82:f2:ff:47:7d:
         a1:a9:7c:5e:6b:bb:97:13:33:e4:ef:e4:41:97:ea:a1:3c:a9:
         85:8c:ba:ba:b1:9d:2a:22:88:2b:e9:07:8e:a0:69:a3:9e:5e:
         a0:ed:85:76:1f:45:0c:25:7e:ed:fb:c5:f4:cd:09:0a:90:3a:
         e3:61:79:d7:53:cb:aa:43:4c:ea:48:dd:ae:d8:33:d6:2c:26:
         b6:fc:b6:26:33:8e:ac:9c:a0:1a:27:98:4b:fa:53:b8:96:4c:
         5b:30:12:68:13:cc:6c:83:e2:94:d9:4d:a8:4f:d4:58:db:32:
         ac:c4:6a:e8:87:53:10:94:95:c7:95:1e:32:fb:fa:5c:2e:e6:
         5a:61:2f:e8:a8:e6:26:76:42:4b:89:76:8a:88:15:f3:57:af:
         13:9d:1e:7a:61:c5:e0:78:46:93:4b:73:97:7b:10:31:fd:7a:
         8f:53:c6:56:60:f1:ea:89:87:4c:21:b9:a1:d2:d1:44:b6:ed:
         0e:15:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:07 2026 by rpki-client