Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39352e302f32342d3234203d3e20323639323830.roa
File:                     34352e3138322e39352e302f32342d3234203d3e20323639323830.roa (raw, json)
Hash identifier:          emNilEAywfZMmJrfXpcKYFHQKyiupp4FGlocBbA6Nfc=
Subject key identifier:   D1:1B:91:8D:E9:00:40:E7:65:30:62:3A:23:D1:9A:7C:7C:C9:42:5C
Certificate issuer:       /CN=0B58E844A7455326509E054B4A28E81E6C01AC01
Certificate serial:       5A96B36F13ABE1BB8D283A3AB37EC8E537565339
Authority key identifier: 0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39352e302f32342d3234203d3e20323639323830.roa
Signing time:             Fri 10 Jul 2026 14:46:15 +0000
ROA not before:           Fri 10 Jul 2026 14:41:15 +0000
ROA not after:            Fri 09 Jul 2027 14:46:15 +0000
asID:                     269280
IP address blocks:        45.182.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl
                          rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:96:b3:6f:13:ab:e1:bb:8d:28:3a:3a:b3:7e:c8:e5:37:56:53:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E844A7455326509E054B4A28E81E6C01AC01
        Validity
            Not Before: Jul 10 14:41:15 2026 GMT
            Not After : Jul  9 14:46:15 2027 GMT
        Subject: CN=D11B918DE90040E76530623A23D19A7C7CC9425C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:89:b9:57:f3:52:41:f9:8b:e8:93:5e:bf:
                    d7:18:df:ef:93:80:bc:50:31:f3:d3:4d:04:7c:c1:
                    91:87:2b:99:77:2a:e7:5f:55:33:45:f8:a3:a2:ab:
                    3f:61:6b:e6:56:c4:57:42:fb:98:05:a4:66:2a:bf:
                    47:25:be:2f:3a:0b:89:a9:84:35:d9:98:bb:e9:d4:
                    36:38:a6:d8:93:1d:5a:23:b2:91:1a:a9:80:69:51:
                    da:e7:80:12:10:16:8e:98:de:45:95:58:0b:bb:0c:
                    7a:1c:0e:f6:dc:08:40:f1:07:7f:f5:37:96:29:7a:
                    4d:3c:30:dd:aa:49:95:6f:e8:64:2c:e1:d4:57:51:
                    8d:ef:1a:91:a5:97:d9:16:cd:9d:30:da:60:16:a0:
                    53:7b:3f:b9:b2:9b:4e:d8:fe:70:e0:37:21:51:17:
                    a6:6c:b2:bd:17:27:10:bb:0f:fe:ad:f4:25:58:76:
                    f9:21:1a:1c:f2:c2:39:b5:d6:cd:eb:4a:a1:87:b8:
                    de:02:07:4c:56:55:c7:d6:c6:ba:4a:5a:ad:bc:9c:
                    b1:56:dc:82:95:52:fb:27:c5:ad:76:71:93:e0:3c:
                    ef:96:8e:ac:1a:6c:a7:78:19:fa:66:29:ed:95:cc:
                    10:54:67:9e:32:7a:90:65:6d:45:34:95:9f:69:6b:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1B:91:8D:E9:00:40:E7:65:30:62:3A:23:D1:9A:7C:7C:C9:42:5C
            X509v3 Authority Key Identifier:
                keyid:0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/34352e3138322e39352e302f32342d3234203d3e20323639323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a0:49:c6:76:33:dc:45:fd:ee:26:8c:3c:aa:b6:91:6f:74:
         71:02:0b:ab:c3:64:c8:4a:8f:82:62:b1:37:b1:e6:86:b6:48:
         19:80:d4:94:b6:0f:20:b2:9e:9d:ff:5b:c5:55:4f:11:d4:cc:
         06:9f:65:0e:ce:66:6d:2d:45:5d:f5:71:bf:a4:31:50:a9:5a:
         b2:e3:55:c8:9c:1d:21:97:40:c0:aa:f1:15:85:9d:4c:5a:d6:
         5b:63:de:da:3e:61:5c:a1:9f:cb:4e:e3:7e:75:06:8f:2e:17:
         6b:f9:f8:de:e7:cc:0a:bc:87:a5:37:3d:20:87:55:4b:96:a8:
         7c:a1:4d:f9:e0:3b:4b:fe:f4:e4:d3:49:65:fe:63:56:8d:4b:
         ea:18:2b:a6:62:bf:b1:35:43:e7:6d:49:81:43:20:ee:6c:1f:
         9b:53:c2:5e:f8:00:c8:19:67:a6:1a:1e:62:f6:a7:a1:a2:dd:
         72:2d:b0:ac:d5:85:78:c3:0c:25:8e:d7:6c:a0:8e:4c:ad:23:
         95:b5:1e:32:fb:b5:f1:aa:57:a2:83:64:f3:02:66:6c:eb:21:
         07:bb:14:d0:51:3e:d3:a8:f4:10:a8:ca:cf:a2:29:2b:db:ea:
         a1:ec:27:8f:4b:31:1d:80:f7:90:75:dd:9a:c4:03:b5:d5:07:
         44:3f:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:34 2026 by rpki-client