Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133392e302f32342d3234203d3e20323637313238.roa
File:                     34352e3232392e3133392e302f32342d3234203d3e20323637313238.roa (raw, json)
Hash identifier:          OAiHpfwZ6CcXdtXzpu2LMhh3DNVDgWHCkQQaKZ6tI6o=
Subject key identifier:   65:0A:3E:62:55:AA:74:58:88:68:22:4F:44:CA:D2:77:C0:25:70:D0
Certificate issuer:       /CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
Certificate serial:       09289BA92E52DCCB7E2B7A428479EDF213A66FA3
Authority key identifier: 64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133392e302f32342d3234203d3e20323637313238.roa
Signing time:             Sat 12 Sep 2026 14:55:08 +0000
ROA not before:           Sat 12 Sep 2026 14:50:08 +0000
ROA not after:            Sat 11 Sep 2027 14:55:08 +0000
asID:                     267128
IP address blocks:        45.229.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:33:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:28:9b:a9:2e:52:dc:cb:7e:2b:7a:42:84:79:ed:f2:13:a6:6f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
        Validity
            Not Before: Sep 12 14:50:08 2026 GMT
            Not After : Sep 11 14:55:08 2027 GMT
        Subject: CN=650A3E6255AA74588868224F44CAD277C02570D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:30:a3:8f:32:d7:8e:dd:e6:ac:cf:df:55:
                    d8:74:2f:33:df:f8:58:e4:29:74:1b:11:4d:35:82:
                    3e:44:01:d4:2e:5b:f3:64:3f:96:e0:cf:54:86:1e:
                    01:5f:89:85:ec:ba:2a:64:65:92:33:69:a0:e8:9d:
                    b7:43:83:c1:ef:60:3d:7b:6c:6f:a1:54:d9:ae:92:
                    e4:71:89:28:ad:b8:10:d6:76:c9:1a:a5:92:ee:bc:
                    db:26:b5:f5:71:b3:54:65:39:38:26:f4:ff:3e:35:
                    fc:93:3c:35:e9:e1:9c:71:77:0b:5b:e3:5d:a6:e2:
                    2f:f5:7f:39:fc:a8:63:bb:8d:0a:44:29:24:20:32:
                    00:86:60:8d:ad:77:34:7c:e5:33:ea:ef:b9:9d:6f:
                    4a:29:96:eb:f4:e7:6f:45:81:4d:1b:cf:ef:43:f7:
                    bb:21:96:15:0b:5f:c3:a1:34:86:6d:41:b9:ec:ce:
                    70:40:37:56:1b:53:d9:db:ee:5a:d4:02:8a:f7:de:
                    f3:e8:45:c2:c6:02:3e:cc:40:56:00:60:79:a6:98:
                    90:d0:13:0f:32:4b:45:d2:b9:c0:8f:61:34:78:84:
                    f0:8a:d3:40:06:97:8c:dc:d8:27:d9:8d:15:fd:fb:
                    3e:e4:f3:6b:b5:95:77:05:df:cf:28:75:7a:15:77:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0A:3E:62:55:AA:74:58:88:68:22:4F:44:CA:D2:77:C0:25:70:D0
            X509v3 Authority Key Identifier:
                keyid:64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133392e302f32342d3234203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:fc:6a:71:16:7d:d6:a4:2f:29:9c:21:5b:0b:2e:e0:f3:c9:
         fe:55:34:54:51:df:9d:ce:09:52:3a:e8:6a:68:60:fa:24:73:
         0a:65:11:b8:de:22:4f:b4:47:da:77:dc:62:f3:10:96:8e:ae:
         16:e0:ba:61:a8:20:11:4b:8f:a7:7f:5a:34:4b:fd:67:b6:26:
         80:aa:d1:33:b5:65:02:31:64:4e:f2:db:b7:9b:14:9e:6d:c0:
         85:14:ff:3c:ae:59:6f:6f:b7:e6:ca:f7:1f:f7:9d:18:22:9a:
         ea:b7:6e:52:f1:0c:0f:62:eb:52:75:de:ec:25:f2:56:f3:6d:
         e7:9e:27:64:9b:77:9e:e1:a2:c1:22:de:23:a2:17:63:19:c1:
         6e:b6:97:05:75:32:4a:a8:cc:a7:71:2a:08:54:7a:1d:bf:be:
         d4:fd:65:84:7e:e0:5a:bd:58:12:44:6d:7e:94:db:74:79:36:
         d4:96:1d:e6:72:39:b3:a9:30:50:09:8c:c6:fc:ea:f3:df:08:
         4b:57:9f:a4:a4:ba:46:57:f8:4a:96:bc:cf:e8:1b:62:c4:22:
         b1:2e:43:3d:0d:c8:a1:d7:f4:5d:57:cf:55:34:82:e0:bb:05:
         07:f0:f3:f8:89:90:92:fa:3e:b4:2c:bb:b9:57:a9:5d:99:73:
         26:99:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:13:21 2026 by rpki-client