Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e392e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          5QR0K1WgI+VoVTLAvTE3dXMakfvh45iF9nlt1Zzy7jw=
Subject key identifier:   0E:95:F6:56:BE:48:28:FF:FB:BE:4A:EB:DE:E9:4F:AD:E0:D9:FE:21
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       53197507AC92DBDE1D64FB49B15E6798470E6C65
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:27 +0000
ROA not before:           Thu 17 Sep 2026 18:50:27 +0000
ROA not after:            Thu 16 Sep 2027 18:55:27 +0000
asID:                     269566
IP address blocks:        45.188.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:19:75:07:ac:92:db:de:1d:64:fb:49:b1:5e:67:98:47:0e:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:27 2026 GMT
            Not After : Sep 16 18:55:27 2027 GMT
        Subject: CN=0E95F656BE4828FFFBBE4AEBDEE94FADE0D9FE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:bb:de:ad:3f:59:a7:f9:a0:c8:9c:16:19:
                    f9:5d:9c:27:6e:f6:b1:ae:f8:7d:74:4f:bb:f7:ad:
                    90:27:ec:db:d6:00:55:39:a9:7a:9e:bc:69:55:66:
                    c0:71:01:e0:c2:f5:a0:29:f4:8e:f1:9d:27:e7:6c:
                    75:d9:69:2a:ea:b7:b9:f9:bd:c9:05:81:f0:a1:3a:
                    46:fd:58:04:86:94:5b:26:aa:8b:f6:c2:c7:21:63:
                    68:1e:e9:1f:ed:21:e2:2b:aa:c0:98:8a:94:f4:c5:
                    45:57:67:9e:41:f5:53:46:c8:3b:e1:0d:e1:3d:1f:
                    a2:30:93:fb:48:3c:9c:4a:f1:df:56:6e:01:a4:f9:
                    9f:47:af:fa:96:f2:6c:ae:4c:ed:16:3e:eb:0d:d3:
                    ca:7e:9d:01:bc:24:a5:9a:33:45:3b:4a:5b:ca:c7:
                    4e:90:cb:16:32:16:0e:ee:7b:28:4b:d1:ca:db:9a:
                    ad:15:34:5a:7b:e7:82:f8:8d:3a:65:23:cd:be:30:
                    95:84:90:bb:09:a8:63:2c:4f:b4:91:07:6c:74:c5:
                    cd:bb:a0:54:97:26:07:96:58:d4:de:2d:d1:b9:ef:
                    7a:26:a8:e5:83:60:8e:91:50:7a:63:06:3d:3d:7c:
                    d1:7a:ac:51:54:af:05:d7:d3:fc:51:3e:f0:61:3a:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:95:F6:56:BE:48:28:FF:FB:BE:4A:EB:DE:E9:4F:AD:E0:D9:FE:21
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e392e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:bf:a8:41:a2:ac:98:77:26:a5:a4:ad:bf:cd:39:7d:d1:4f:
         35:1f:4a:dd:3d:45:af:08:f0:bc:e7:f5:41:ad:b3:55:21:d3:
         8a:82:41:54:0c:fe:d3:06:8d:6f:74:0f:42:2e:9a:9d:d0:5c:
         8c:c1:3f:d8:93:99:2a:83:e1:82:a6:01:e5:6f:e5:2f:c0:18:
         9a:f0:62:09:50:47:89:e0:c7:de:71:dc:fe:6a:48:46:1c:17:
         d0:87:5b:9a:04:7b:59:73:c5:8d:f7:12:93:66:22:d4:92:16:
         c7:52:a4:29:0c:0d:f5:32:4f:e5:e6:79:de:be:16:8d:ad:cc:
         1b:95:29:c2:ea:c8:4a:fc:47:81:9b:e5:05:43:5b:c7:a6:94:
         72:7f:94:cf:ba:66:bc:45:2f:09:10:82:43:73:93:11:c3:51:
         79:6c:43:c6:f5:8f:0b:40:6a:fd:16:00:e3:28:5a:de:b7:83:
         94:21:1e:ea:67:99:1b:30:5b:0c:6d:0a:2e:64:21:3b:10:a1:
         bf:bc:03:7b:77:e2:c8:4d:93:8c:4d:03:03:79:e4:10:e8:c0:
         1d:b4:4d:94:a3:6f:96:cf:90:a9:be:1e:e4:b4:db:17:b9:a3:
         6a:df:49:a7:22:cc:cd:59:2e:6d:e4:38:03:f9:50:f4:6c:4f:
         f0:64:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:19:05 2026 by rpki-client