Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323033.roa
File:                     34352e3138302e31362e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          lIU0e4nG7D0fuholSp9eG/6JsauI7sC8bItHpqEhH1M=
Subject key identifier:   4C:60:83:6C:1A:28:44:42:B7:C2:FF:D3:53:8F:11:52:72:96:B3:36
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       07C162D752A3FF1FFEDC1E41982156D52CD8E76A
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323033.roa
Signing time:             Fri 11 Sep 2026 13:53:49 +0000
ROA not before:           Fri 11 Sep 2026 13:48:49 +0000
ROA not after:            Fri 10 Sep 2027 13:53:49 +0000
asID:                     203
IP address blocks:        45.180.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Sep 2026 04:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:62:d7:52:a3:ff:1f:fe:dc:1e:41:98:21:56:d5:2c:d8:e7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Sep 11 13:48:49 2026 GMT
            Not After : Sep 10 13:53:49 2027 GMT
        Subject: CN=4C60836C1A284442B7C2FFD3538F11527296B336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:e5:cf:1d:94:7e:20:9d:10:6e:87:0f:70:
                    40:20:ce:7b:ac:a5:7a:ef:84:32:5a:9b:de:10:f3:
                    86:7a:13:f5:a0:0c:2d:ea:3d:d3:94:b4:46:25:d6:
                    e8:c6:36:6a:68:90:56:7d:60:4b:1d:73:9f:55:4d:
                    1c:51:16:be:9e:5e:70:d0:3f:37:fe:ef:ac:6b:c2:
                    75:b6:22:c9:78:2f:eb:d7:13:c2:3e:39:e7:f3:18:
                    9e:fe:d3:46:8c:cb:0a:bf:d6:8c:65:95:26:04:20:
                    b3:19:07:18:d4:d7:05:32:95:ab:70:b8:1f:e9:98:
                    c4:b6:65:1d:51:19:ff:fa:48:2a:3e:5b:82:02:a1:
                    c7:00:59:e3:2c:af:38:be:1d:1b:be:7b:35:fc:8c:
                    a2:68:c7:db:f0:3b:23:ea:fc:95:76:fb:c7:4c:8e:
                    3c:43:26:d8:e5:01:e8:4d:0f:fa:43:91:57:b5:27:
                    8a:41:a4:a8:f8:31:f5:e9:0f:02:f0:b7:06:2a:63:
                    13:9d:f7:3f:2a:1a:d0:b8:83:12:f7:75:b7:ca:b9:
                    9d:f8:7f:a1:23:42:aa:a3:fc:8c:63:8f:e0:eb:f6:
                    43:52:ef:51:aa:c2:7e:62:2f:e1:c5:15:b7:08:65:
                    53:a4:64:6b:98:fd:3c:18:50:c0:46:02:5b:ea:94:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:83:6C:1A:28:44:42:B7:C2:FF:D3:53:8F:11:52:72:96:B3:36
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/34352e3138302e31362e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:68:bd:98:34:9e:09:48:c3:f3:d6:76:f8:ac:0d:f8:06:6a:
         e1:12:07:1f:7d:4d:b5:0e:ae:3d:44:cb:68:08:2a:be:1a:07:
         8f:ce:eb:ce:0d:0a:02:51:5c:1d:2e:a2:59:5c:d4:c8:70:33:
         2a:5e:87:57:26:6a:31:11:82:ab:cf:ae:fe:52:ee:bf:32:35:
         6d:aa:5f:10:cd:14:50:a1:3b:b0:e8:50:eb:1d:bb:19:83:cd:
         3a:2d:7a:d8:36:89:17:7b:b6:30:7f:25:fd:2b:9a:6a:54:ea:
         9e:0a:9c:f2:6c:54:0e:c3:90:5a:c2:ed:c1:e8:2e:f3:1c:50:
         b5:39:81:73:d3:34:d0:f9:f0:fe:ae:81:cd:1f:fb:4e:ce:eb:
         67:ab:ae:c2:ba:62:d4:0d:1b:4a:6c:a3:4f:56:06:c3:90:47:
         e9:97:b1:b7:c5:a1:67:db:7a:0a:a9:0d:cd:4b:0b:84:b7:6e:
         04:1b:71:77:8c:f5:9c:18:69:5a:c3:f6:6d:5e:20:87:06:b2:
         05:ab:59:cd:5f:4e:90:40:2a:93:00:d2:94:0a:a2:45:ab:a9:
         18:9c:4b:c3:8d:c4:37:3c:58:f8:b2:8a:6f:7f:a7:f7:53:21:
         38:a5:3e:ca:30:df:a1:05:6d:9f:29:51:ab:05:c2:41:38:39:
         a4:97:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:17:53 2026 by rpki-client