Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
File:                     34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa (raw, json)
Hash identifier:          xufxTHAGQbs4UJjTOljhWJlrlyEbMkhWmcPlvJ5OeKM=
Subject key identifier:   97:7B:55:DB:4F:12:EB:37:FE:9C:D4:60:EB:7B:DE:7A:5C:07:28:4F
Certificate issuer:       /CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
Certificate serial:       4FFA9D0EBDC9836A10E8B92925AB5B56B827FD2D
Authority key identifier: 80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa
Signing time:             Fri 11 Sep 2026 17:35:49 +0000
ROA not before:           Fri 11 Sep 2026 17:30:49 +0000
ROA not after:            Fri 10 Sep 2027 17:35:49 +0000
asID:                     268173
IP address blocks:        45.170.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl
                          rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 19:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fa:9d:0e:bd:c9:83:6a:10:e8:b9:29:25:ab:5b:56:b8:27:fd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802E0BC837FEF4F0485256CF4BF40BFF5551D33C
        Validity
            Not Before: Sep 11 17:30:49 2026 GMT
            Not After : Sep 10 17:35:49 2027 GMT
        Subject: CN=977B55DB4F12EB37FE9CD460EB7BDE7A5C07284F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:27:da:a7:67:a8:db:71:84:dd:29:8b:4a:
                    f1:b8:ec:09:4f:53:26:db:90:0e:c4:26:7f:37:89:
                    ea:70:b6:6c:f7:96:d3:4b:32:40:8a:56:b7:0e:bb:
                    8d:22:c6:eb:a7:74:53:68:4a:65:9f:5f:d3:38:03:
                    60:fc:b7:fc:72:62:37:d5:37:9b:bf:98:d5:35:de:
                    17:34:7a:5e:56:20:d4:71:fb:a6:c1:0b:c3:06:01:
                    bb:4a:5f:7e:fc:29:af:1b:6a:ac:a4:42:da:d0:60:
                    86:07:64:a0:51:27:b5:ba:63:d7:c8:a9:8d:ec:49:
                    fb:06:9b:a9:af:13:66:9e:ca:e6:d3:a1:56:09:93:
                    08:51:40:2d:33:2c:b7:29:f5:7d:9c:41:58:10:93:
                    7c:55:ee:77:38:41:5d:19:3c:4c:54:da:b6:b5:28:
                    9f:6f:83:c0:4a:38:a2:b9:73:93:c7:ae:9b:60:d5:
                    44:05:b8:44:e4:c5:f8:d0:32:6b:32:55:11:b5:08:
                    19:72:a7:cf:33:25:74:75:58:cd:6c:b0:90:9c:77:
                    8a:75:39:8e:bd:9c:71:cd:1a:86:d7:6f:b3:ae:e2:
                    82:9e:b1:26:9d:03:fa:24:ad:2f:1c:80:d0:1a:07:
                    38:7f:df:f9:f1:80:33:7a:e5:fb:23:67:dc:f1:0a:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:55:DB:4F:12:EB:37:FE:9C:D4:60:EB:7B:DE:7A:5C:07:28:4F
            X509v3 Authority Key Identifier:
                keyid:80:2E:0B:C8:37:FE:F4:F0:48:52:56:CF:4B:F4:0B:FF:55:51:D3:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/802E0BC837FEF4F0485256CF4BF40BFF5551D33C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaBVyicnq715hLf9AekWSYccRaimfQLxbHpPZKwAUF8R/0/34352e3137302e3231362e302f32342d3234203d3e20323638313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:43:ff:b5:50:08:72:9d:51:3e:a9:78:4b:52:16:70:2f:70:
         9b:08:64:8f:97:ab:4a:b7:a6:3c:df:16:71:bc:f3:7a:31:60:
         48:65:cf:21:9d:6a:ed:a2:43:88:b2:6f:bc:63:70:bf:a0:4e:
         80:45:de:d3:8d:4f:5e:4b:93:19:1f:d2:d2:14:f8:bb:03:8b:
         24:2b:ea:5d:af:8f:47:6b:38:af:d3:48:e5:d5:78:a1:d1:7a:
         e3:d2:a1:17:2d:a4:cd:ce:b0:13:39:a8:3b:72:89:f8:ea:58:
         90:c2:6c:e9:de:43:42:02:b4:f6:a4:1d:7a:13:d6:04:3a:59:
         35:00:88:36:62:24:dc:ba:53:f8:d2:d8:7a:ad:c5:80:3e:e8:
         12:ea:0c:84:b8:4b:32:3c:3d:f5:87:78:16:34:c3:33:31:e5:
         a1:80:e8:0c:aa:62:4c:31:94:64:9a:88:3d:75:ff:30:73:4e:
         d1:23:b8:00:36:0d:9a:7b:c5:9d:7a:0e:c8:76:14:09:6e:86:
         14:85:88:95:ce:64:79:2e:61:ab:43:23:9b:de:f1:1f:49:a2:
         88:4d:22:22:ea:da:d4:d6:75:78:ba:18:b2:62:41:64:e5:3b:
         54:00:f9:0c:66:4d:3d:fe:f2:22:1a:8a:8b:76:fb:e5:d8:37:
         a5:f0:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:47:23 2026 by rpki-client