Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e32382e302f32332d3233203d3e20323636313231.roa
File:                     34352e362e32382e302f32332d3233203d3e20323636313231.roa (raw, json)
Hash identifier:          o9uHGD4Y6IGVWybfU2UAAVYAWiIP75a7HrWMpSKmKbo=
Subject key identifier:   3C:B5:81:64:23:85:73:63:A2:A3:5F:F2:80:2E:91:CD:87:63:BE:D3
Certificate issuer:       /CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
Certificate serial:       294E182729596B1F5A8DC0458758F8F307E70D63
Authority key identifier: 44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e32382e302f32332d3233203d3e20323636313231.roa
Signing time:             Fri 18 Sep 2026 13:56:26 +0000
ROA not before:           Fri 18 Sep 2026 13:51:26 +0000
ROA not after:            Fri 17 Sep 2027 13:56:26 +0000
asID:                     266121
IP address blocks:        45.6.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl
                          rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4e:18:27:29:59:6b:1f:5a:8d:c0:45:87:58:f8:f3:07:e7:0d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
        Validity
            Not Before: Sep 18 13:51:26 2026 GMT
            Not After : Sep 17 13:56:26 2027 GMT
        Subject: CN=3CB5816423857363A2A35FF2802E91CD8763BED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:8f:40:fc:bd:5b:05:4d:fc:28:72:b1:f8:
                    48:0d:12:4f:2a:b4:9b:5e:44:8d:96:d2:48:60:70:
                    b8:7e:54:a5:0e:0d:0b:1b:7c:57:1d:66:a5:8a:dd:
                    75:cc:b0:49:be:ee:81:46:3d:f8:71:a5:8a:96:81:
                    d4:fc:94:8c:37:e6:7d:b3:3f:8f:b3:55:a1:bf:13:
                    88:ff:b8:a9:46:91:d0:4d:df:7f:ef:38:f2:2d:b1:
                    71:92:ea:c3:ec:8d:aa:ff:dd:d0:2c:f6:d4:e0:e9:
                    d4:1c:95:29:da:92:55:e8:96:a8:5b:54:da:ee:44:
                    d4:4b:11:cc:a5:b5:5d:77:6e:67:00:ef:d4:2e:70:
                    70:72:c9:81:ba:e5:f6:26:af:39:82:44:70:1e:e7:
                    6b:5d:8d:bc:d8:3d:3e:b0:ed:1a:25:23:52:d3:f5:
                    db:99:a4:70:10:e1:5f:1c:c9:23:e7:2d:a6:23:38:
                    5e:07:8f:62:bf:b8:3b:5f:ba:ea:fb:01:c7:d8:85:
                    34:19:8c:fb:78:de:9d:5d:bc:72:f2:27:63:b9:12:
                    5f:ac:80:41:ec:83:b1:38:30:d1:bc:d8:c1:4d:be:
                    02:38:59:c3:10:9c:7e:42:6d:65:c9:6f:99:41:e0:
                    19:54:9e:30:ca:07:7e:54:ea:a2:dc:9b:9c:b7:13:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B5:81:64:23:85:73:63:A2:A3:5F:F2:80:2E:91:CD:87:63:BE:D3
            X509v3 Authority Key Identifier:
                keyid:44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/34352e362e32382e302f32332d3233203d3e20323636313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:83:b9:83:c8:a4:6e:8f:cc:20:03:0a:a0:bf:4f:79:f6:
         c3:c0:43:83:fd:22:d9:d7:40:58:da:7c:70:50:81:4a:34:f6:
         bb:f6:dd:93:42:57:63:c1:69:af:63:c3:a6:dd:80:83:86:b1:
         38:c6:98:ef:1f:8c:83:76:a6:18:a2:28:3e:d1:b1:92:78:01:
         9a:48:07:3a:75:9a:b9:4d:47:46:be:1f:d6:18:4d:f7:14:35:
         a3:85:5d:96:10:ea:6c:c8:ad:5b:38:1e:67:b1:99:cb:7d:46:
         f5:42:49:2a:e9:bd:fd:6e:e5:01:31:02:7a:a6:9f:6b:9f:5d:
         68:9b:00:ff:3e:d4:cf:0e:d8:9c:66:ed:84:fd:41:15:b8:48:
         2b:99:c6:36:10:56:da:95:37:01:8c:fa:7a:93:74:80:a2:36:
         d5:7f:14:cb:f1:0c:2b:14:3c:75:b6:75:b1:87:7c:e5:86:28:
         d4:3a:1c:a2:49:ea:d9:94:7b:b6:ef:bd:76:13:1a:bf:2f:15:
         e5:31:4f:39:70:1d:fa:cf:84:ea:b1:1d:6c:af:8a:66:01:4f:
         75:e0:06:67:10:b1:41:98:1a:37:e5:10:ca:1a:08:19:3e:23:
         63:94:75:19:e3:c3:15:be:4e:1e:1a:53:b3:77:57:a2:67:3f:
         03:18:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:43:49 2026 by rpki-client