Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32322d3234203d3e20323638313838.roa
File:                     34352e3137312e36382e302f32322d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          8iE0hQj0+bAJZpI4oY98TulwDljK1u4bWx6L0gG1Jwo=
Subject key identifier:   5B:41:32:F8:77:A2:CB:83:B6:62:00:02:29:7A:34:40:AB:48:69:1A
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       67EDC82BD6BCD2A75D037B29AA554DE8DB13C522
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32322d3234203d3e20323638313838.roa
Signing time:             Wed 07 Oct 2026 01:07:47 +0000
ROA not before:           Wed 07 Oct 2026 01:02:47 +0000
ROA not after:            Wed 06 Oct 2027 01:07:47 +0000
asID:                     268188
IP address blocks:        45.171.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ed:c8:2b:d6:bc:d2:a7:5d:03:7b:29:aa:55:4d:e8:db:13:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Oct  7 01:02:47 2026 GMT
            Not After : Oct  6 01:07:47 2027 GMT
        Subject: CN=5B4132F877A2CB83B6620002297A3440AB48691A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:cd:43:3e:50:f2:61:d3:de:87:8c:dc:a9:
                    78:7a:a9:c1:06:80:74:ab:12:77:6d:a7:6f:0f:86:
                    3e:8b:37:b6:71:f7:87:5d:96:c9:39:40:ca:b1:c0:
                    ef:65:94:9a:ba:e9:3f:91:be:26:aa:34:58:d8:ce:
                    6b:4c:77:92:84:54:65:f6:69:e4:6c:71:bb:93:d5:
                    b5:cf:b9:f1:97:a3:53:84:9b:d7:87:a9:a4:59:40:
                    08:ca:d5:99:e7:7f:5e:74:4d:1a:3f:0e:20:44:9e:
                    e0:4f:36:41:f3:67:dc:24:e3:90:11:3c:3b:e6:01:
                    68:f2:0b:b1:c1:7d:cf:23:c5:f8:96:7e:5a:16:6c:
                    88:46:e2:2f:9a:bb:6e:67:b4:7e:6b:55:5a:06:93:
                    6f:00:94:da:12:38:bb:52:7b:72:82:33:0d:94:48:
                    fe:e0:19:ce:1b:93:02:bf:c6:46:1b:0a:d6:6c:fa:
                    61:06:cf:a6:e7:b7:c8:ba:fc:cc:06:57:cb:72:ff:
                    fa:34:c8:34:b9:c1:af:e5:e2:70:e6:38:59:50:0f:
                    7a:d5:2d:0a:87:f2:f4:71:c5:fb:ab:06:23:1a:fe:
                    71:6c:d3:b7:4e:1b:10:c7:79:33:09:66:f4:fb:16:
                    62:a3:34:f0:af:6e:1a:9d:e9:a7:d8:f6:22:f9:85:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:41:32:F8:77:A2:CB:83:B6:62:00:02:29:7A:34:40:AB:48:69:1A
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/34352e3137312e36382e302f32322d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:78:b5:d3:e3:17:8b:38:31:eb:e2:b9:b6:08:4d:af:26:55:
         b7:fd:46:f6:11:a8:8e:ca:ae:04:a5:af:fd:94:39:01:d9:fa:
         33:1c:d3:31:18:68:63:f4:0a:82:94:5c:3a:03:f4:2c:26:b0:
         49:28:7d:8e:6d:80:0b:af:01:a5:07:da:f5:5f:c3:f4:39:d7:
         f9:70:84:38:a9:26:dc:4c:92:4d:fe:74:23:ce:90:3a:b2:1b:
         84:fc:02:98:f2:b9:e6:bd:7a:d7:46:2f:7b:74:25:b3:97:1e:
         ec:63:15:64:ab:97:cc:05:4c:00:8a:39:da:7e:9e:31:28:22:
         1b:c8:72:e9:b0:b9:e5:8c:4f:a5:bd:1b:02:f3:22:8b:3d:65:
         a4:28:d7:26:d7:ec:f0:82:51:e9:79:76:84:61:08:df:8b:33:
         69:3a:d8:19:c9:c4:f8:03:c8:fa:c7:e2:a7:71:a9:f0:47:83:
         3d:64:40:fd:54:9b:16:c2:ee:97:46:19:a3:06:12:62:00:f2:
         56:3d:db:e0:b1:92:24:cf:7f:5d:0d:26:13:01:c3:c5:50:7c:
         21:d4:05:c0:32:43:95:f3:ba:e3:32:58:6a:aa:54:1b:04:a6:
         82:7e:a5:23:d6:67:0f:5a:c3:2d:d9:28:69:c7:ca:49:f6:f3:
         26:06:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:44:22 2026 by rpki-client