Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa
File:                     34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa (raw, json)
Hash identifier:          JhIueiqan3WdTar7AIQecqnf0tBaTA9y+E3s/1TQUGE=
Subject key identifier:   0A:75:21:C2:82:8E:D2:4A:AA:D4:B5:22:86:34:95:1E:D8:CE:B8:A2
Certificate issuer:       /CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
Certificate serial:       6C65781249982D472F009B99BE5EF7558B07AC51
Authority key identifier: 6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa
Signing time:             Thu 15 Oct 2026 19:32:39 +0000
ROA not before:           Thu 15 Oct 2026 19:27:39 +0000
ROA not after:            Thu 14 Oct 2027 19:32:39 +0000
asID:                     267119
IP address blocks:        45.228.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl
                          rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 23:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:65:78:12:49:98:2d:47:2f:00:9b:99:be:5e:f7:55:8b:07:ac:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F
        Validity
            Not Before: Oct 15 19:27:39 2026 GMT
            Not After : Oct 14 19:32:39 2027 GMT
        Subject: CN=0A7521C2828ED24AAAD4B5228634951ED8CEB8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:14:e4:a8:1f:53:bb:c8:09:21:af:7d:bd:
                    2a:4f:9a:b1:6e:21:b0:a2:e0:a5:07:96:f0:20:b1:
                    b5:ac:09:5a:24:a2:4d:29:06:7d:63:8e:71:46:43:
                    36:aa:2b:1b:9f:76:73:9d:cf:73:4c:6c:ed:09:86:
                    cb:ca:1c:eb:ca:b2:f5:9b:d9:ea:a3:0a:43:f3:0d:
                    2e:d2:10:1f:97:4b:a0:14:2c:de:c7:5a:ea:81:38:
                    82:e9:72:73:b3:e5:58:c3:69:f3:6e:69:0b:fa:dd:
                    83:61:60:ed:0a:f1:6d:19:7a:3f:01:49:a8:42:a0:
                    e7:21:cc:e8:28:c1:08:b5:8e:62:00:55:20:a9:d1:
                    76:20:03:1b:61:59:cc:9e:e1:03:36:5f:d8:61:17:
                    30:91:f4:c4:3b:6b:0c:78:59:4f:87:4a:07:a4:25:
                    32:46:dd:86:53:ab:7e:3b:db:5f:2c:69:53:85:7b:
                    4a:0b:67:e4:4f:00:d6:7c:17:58:31:54:bc:97:11:
                    10:58:7e:3d:11:7e:2e:c0:3a:1d:21:3a:d1:5f:f2:
                    d2:2b:a1:bc:8e:8f:c6:dd:53:f2:f6:c2:fb:1f:14:
                    43:e6:e5:c5:05:94:a3:90:70:62:a7:35:c9:45:90:
                    12:50:e8:45:f3:18:71:f0:0d:54:7c:46:7b:0d:17:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:21:C2:82:8E:D2:4A:AA:D4:B5:22:86:34:95:1E:D8:CE:B8:A2
            X509v3 Authority Key Identifier:
                keyid:6A:29:FE:34:BA:EB:EE:07:DC:52:96:1E:4A:30:B3:43:69:A2:EF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A29FE34BAEBEE07DC52961E4A30B34369A2EF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uCvEJxaknMAixEmAEAAi9jmjyM3zL4fKqHfTVcanJHU/0/34352e3232382e3231382e302f32342d3234203d3e20323637313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:75:0e:6e:da:27:48:f5:96:41:37:fa:8b:8a:72:8f:ac:12:
         c4:f6:4b:cf:40:0f:04:50:b9:60:5e:56:62:19:fb:98:aa:6c:
         05:21:55:70:f3:b3:a3:ef:8b:39:16:28:84:7c:57:3a:73:fd:
         9d:76:5b:b4:98:af:85:de:12:29:d6:0f:f8:93:4b:b4:29:dd:
         d8:f7:81:be:fe:d1:f1:61:f8:72:73:9d:af:1d:9a:64:ee:a1:
         1e:4a:95:ee:50:fd:47:17:ef:cf:d4:df:54:0e:1d:b5:08:f8:
         33:01:79:be:e3:62:c1:86:fd:b2:2d:cb:cf:6e:43:08:03:ab:
         0d:07:2b:00:ad:12:99:ca:32:c6:3d:83:1a:d5:5c:6e:db:d0:
         c9:ce:c1:0a:e0:d3:e9:71:9d:6f:af:60:54:e6:40:23:d8:2f:
         e3:97:ac:8e:9f:ef:e2:c0:46:e6:91:cb:0b:43:fa:4d:d0:0c:
         47:e9:81:3d:00:9e:f1:94:e4:45:6c:73:d9:b7:42:cc:6a:20:
         09:cd:1f:de:c4:cc:b9:a6:93:34:52:30:38:e3:06:b9:88:2c:
         90:2b:c1:3c:33:75:cb:4d:f1:1e:2d:90:6d:65:39:24:0b:1f:
         3d:74:52:ec:b7:23:93:1d:a0:67:85:4a:eb:ca:34:06:9e:20:
         84:f0:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:03:47 2026 by rpki-client