Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa
File:                     34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (raw, json)
Hash identifier:          0E8fNMDMM1CuHV7tkh5/8o99anRv2lXz3cAeEO1A/uY=
Subject key identifier:   87:AB:28:F5:DC:33:53:62:2E:10:2F:66:7D:66:C6:44:04:4B:66:90
Certificate issuer:       /CN=494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7
Certificate serial:       24ACC703B87E56C1043038B7132E77FA393547F1
Authority key identifier: 49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa
Signing time:             Mon 05 Oct 2026 22:12:13 +0000
ROA not before:           Mon 05 Oct 2026 22:07:13 +0000
ROA not after:            Mon 04 Oct 2027 22:12:13 +0000
asID:                     268088
IP address blocks:        45.168.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.crl
                          rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ac:c7:03:b8:7e:56:c1:04:30:38:b7:13:2e:77:fa:39:35:47:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7
        Validity
            Not Before: Oct  5 22:07:13 2026 GMT
            Not After : Oct  4 22:12:13 2027 GMT
        Subject: CN=87AB28F5DC3353622E102F667D66C644044B6690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:03:64:57:2d:39:02:04:f9:a3:af:d2:22:
                    c6:69:3a:12:f4:99:81:61:2f:8f:b8:42:49:8f:cd:
                    92:7c:50:a6:02:64:b4:32:be:3f:f2:90:79:70:dc:
                    b4:6e:a6:f4:b1:37:f7:9e:c4:8b:05:7f:37:14:45:
                    b9:a4:1a:6a:1c:36:74:f1:2f:6b:20:17:c7:b3:d9:
                    5b:3f:92:75:13:1c:51:e9:b9:69:fd:1d:7a:f1:e8:
                    c3:9e:8f:98:61:1e:1b:e5:1a:ff:8e:35:33:35:b8:
                    c9:cd:74:0a:a3:fb:af:34:52:41:24:ea:be:5d:3c:
                    d9:85:7d:46:50:9d:50:7d:6c:39:e8:a6:db:22:ad:
                    6e:ca:d9:15:8e:16:8b:7a:4d:84:f6:57:53:72:6f:
                    69:b3:21:43:dc:da:85:2b:58:3e:c1:ef:18:9f:9f:
                    b3:72:40:f1:66:53:c1:39:88:b3:e7:91:66:61:15:
                    12:98:ed:1f:ac:1e:c6:fb:df:d7:c8:8c:f5:c7:ed:
                    c5:93:02:5f:59:2d:16:1d:00:2d:bc:ec:da:76:98:
                    22:55:2b:a5:4b:19:0c:7f:72:fa:fd:c6:cd:28:fe:
                    39:60:fe:ed:8f:2a:8a:6c:99:ce:73:1a:4b:4f:10:
                    92:e5:86:3b:ff:88:d6:37:a2:30:04:c8:50:bf:a0:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:28:F5:DC:33:53:62:2E:10:2F:66:7D:66:C6:44:04:4B:66:90
            X509v3 Authority Key Identifier:
                keyid:49:40:69:E5:7B:43:B0:EF:0F:AF:4C:C7:D3:98:9B:C9:18:9B:A9:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/494069E57B43B0EF0FAF4CC7D3989BC9189BA9E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:9a:10:53:40:b7:72:e0:e3:e6:75:02:e7:21:a7:46:0a:
         b4:63:fe:e2:79:f3:04:1b:af:c2:36:ad:cd:2f:20:f9:a9:3d:
         d1:22:cf:7d:4b:74:6d:a9:de:73:2f:e5:5d:c1:28:16:60:53:
         1c:cc:87:3d:a8:9e:1f:75:72:4e:4d:87:e7:d8:24:c1:71:07:
         c4:58:df:d7:ec:99:ac:0b:de:1f:bb:d9:dc:07:66:e2:e6:93:
         be:a2:a8:c9:b0:ec:a4:5e:ee:bd:be:58:42:ec:52:0d:c9:8d:
         c1:03:d3:c0:12:b0:28:b8:63:73:d4:dd:19:fe:ce:41:38:f5:
         b5:af:5b:88:fc:f1:18:0f:a1:b8:b0:ff:40:4c:2f:55:b8:af:
         86:65:15:dc:0c:2d:f3:d5:58:ad:de:8e:94:02:d2:88:8a:b4:
         80:68:1c:fb:79:a0:ba:dd:dd:46:2f:37:06:24:f8:20:03:40:
         3f:85:31:f0:b8:12:b6:3f:7b:54:cc:bf:b7:08:bd:40:bd:59:
         2a:0d:0d:9b:04:0a:c8:14:8e:ec:de:9c:67:86:09:0f:62:9b:
         a2:74:e8:22:13:5d:f5:14:51:f8:67:2c:76:a8:f7:22:78:91:
         0e:34:26:fe:fc:79:0d:30:df:04:f9:01:c9:d9:7e:21:44:b3:
         00:8d:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:28:00 2026 by rpki-client