Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
File:                     34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier:          TMqtVymNnVZQnDoesvbltGKlzPZonslILIb+/kn6jaM=
Subject key identifier:   76:E7:69:16:6C:0D:A2:EB:AE:8D:DE:FD:5D:D9:E0:19:35:B2:DE:8B
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       1664D7EF71C69DCD7702AD6F0AAA5C5958B2A2E3
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa
Signing time:             Wed 02 Sep 2026 13:21:44 +0000
ROA not before:           Wed 02 Sep 2026 13:16:44 +0000
ROA not after:            Wed 01 Sep 2027 13:21:44 +0000
asID:                     269014
IP address blocks:        45.176.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 05:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:64:d7:ef:71:c6:9d:cd:77:02:ad:6f:0a:aa:5c:59:58:b2:a2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Sep  2 13:16:44 2026 GMT
            Not After : Sep  1 13:21:44 2027 GMT
        Subject: CN=76E769166C0DA2EBAE8DDEFD5DD9E01935B2DE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:fb:ec:17:f0:97:cc:a7:c3:43:ab:56:cd:
                    b5:5f:cf:e4:b8:90:51:ef:c6:36:ed:72:60:87:54:
                    84:90:9a:f7:da:06:d8:39:97:2c:95:26:f5:1b:67:
                    08:5e:30:68:f1:1b:da:0b:fc:ac:d2:e6:10:47:73:
                    21:48:61:41:82:f3:64:7a:54:13:32:9b:a4:d5:be:
                    70:34:71:5c:6a:02:d8:99:0d:69:97:c6:e8:87:b0:
                    a9:3f:4f:5b:86:49:6d:14:be:aa:2d:21:5b:11:6d:
                    93:da:4c:5b:bc:7c:c9:e4:90:35:24:68:be:c6:57:
                    5c:27:1d:74:b5:78:fa:39:d2:24:d3:e3:cd:ec:22:
                    65:02:59:e5:f2:4f:98:4a:82:c9:52:d8:57:73:81:
                    e7:54:48:53:b7:22:e1:f6:03:67:8f:cd:ca:d3:28:
                    2e:58:ae:e5:bb:a2:14:39:33:da:cd:94:6b:8f:cb:
                    6e:c1:12:4d:a0:8d:a5:a1:57:ba:75:1f:20:33:16:
                    c8:b9:14:ab:fe:60:3b:fe:58:2b:bd:0f:ff:2b:e8:
                    91:14:5d:cc:a0:f8:c6:6a:b9:7b:9a:fe:bb:ef:ce:
                    25:f7:c6:b2:3d:79:15:da:ab:50:d4:e6:04:2f:c7:
                    ca:ed:65:32:39:fd:56:85:58:a2:b9:a4:b9:b4:8a:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:69:16:6C:0D:A2:EB:AE:8D:DE:FD:5D:D9:E0:19:35:B2:DE:8B
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:48:f6:d6:24:5f:db:03:07:ac:d5:bd:90:ea:34:e0:c8:
         60:5f:94:1d:0e:ce:af:4d:46:58:ec:87:82:00:b0:50:64:d7:
         eb:99:e3:9e:23:91:b0:cc:3c:60:a8:48:b1:95:eb:96:43:0d:
         c5:e3:49:56:bf:f9:cd:2c:bb:a8:0f:7c:4e:40:ec:9e:a4:a3:
         5c:2b:6d:27:dd:7a:10:aa:ff:c0:7b:e4:c0:6d:a9:f4:20:10:
         d6:0b:53:5b:f5:ce:23:40:62:53:a8:dd:99:77:fb:3d:89:65:
         83:db:cb:2e:fb:c3:83:c1:35:83:bd:14:a0:87:d5:0f:93:a7:
         9a:a6:e1:e8:4d:e4:4f:b6:63:24:05:0d:c5:1b:71:f2:70:56:
         57:c8:b3:16:11:70:b2:4d:df:df:dc:62:60:3e:a7:f0:d6:51:
         e3:53:cd:8c:ad:2c:85:fd:dc:92:0d:ed:6c:65:7e:22:f5:c6:
         8d:d9:bd:ca:6a:2f:d0:0b:e4:a9:6a:32:61:7f:7f:a7:c7:78:
         89:70:0f:b0:1b:67:8c:c8:5e:d7:95:02:45:86:6f:80:a4:51:
         fc:43:c7:b3:75:14:6f:73:67:c6:fc:60:0d:7b:ce:fe:01:fc:
         2f:ea:c9:3b:26:56:bf:30:e2:51:66:e2:06:8e:e0:87:e9:02:
         af:b3:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----