Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
File:                     34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (raw, json)
Hash identifier:          Igpr/eEDfpr2S2NRVoVT0jP4LmdueC4WB3IqFVZTd2E=
Subject key identifier:   AF:FB:41:41:DF:73:65:D3:D9:02:14:8D:F3:B1:F1:A8:25:03:9C:B7
Certificate issuer:       /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
Certificate serial:       2D8C29AD105D54C4FD7B3C2EF2EF8213C197B0B4
Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa
Signing time:             Thu 22 Oct 2026 20:24:58 +0000
ROA not before:           Thu 22 Oct 2026 20:19:58 +0000
ROA not after:            Thu 21 Oct 2027 20:24:58 +0000
asID:                     268084
IP address blocks:        45.168.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl
                          rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 13:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8c:29:ad:10:5d:54:c4:fd:7b:3c:2e:f2:ef:82:13:c1:97:b0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA
        Validity
            Not Before: Oct 22 20:19:58 2026 GMT
            Not After : Oct 21 20:24:58 2027 GMT
        Subject: CN=AFFB4141DF7365D3D902148DF3B1F1A825039CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:57:48:d8:fd:e4:99:d8:48:12:53:66:f7:
                    e4:b0:45:e5:bf:92:fb:ef:a8:12:65:8f:62:17:e9:
                    00:90:f9:bd:b3:c4:08:6e:d7:07:f5:e7:6e:31:8e:
                    41:f3:2b:9a:23:cb:d7:bf:ee:73:1c:2f:cc:93:fc:
                    de:43:bb:f7:a1:b5:03:26:66:58:1b:95:44:03:7d:
                    e4:1e:68:93:49:5e:dd:e4:cc:42:bb:b3:69:25:fb:
                    34:f7:b3:d4:34:d6:0a:b9:00:3f:83:21:e1:c6:72:
                    12:31:ea:cb:32:df:22:00:8a:c9:21:43:70:5c:48:
                    54:dc:a0:ff:a0:d7:22:24:8b:0e:28:ae:4e:36:fa:
                    23:08:02:1f:82:13:69:ad:91:44:53:b7:a5:58:ac:
                    13:c2:6b:7d:c6:62:f7:95:a4:10:a7:0a:48:c1:5c:
                    12:0e:61:1f:03:c4:6d:e2:49:60:c8:8f:07:90:6f:
                    7b:16:22:72:4c:88:49:b1:11:88:c4:15:1b:db:98:
                    69:b8:ff:69:11:6d:6b:50:75:17:6c:56:fd:ed:fe:
                    86:1d:a1:28:dc:fe:fe:f6:4a:76:ac:47:e1:6d:f4:
                    4f:f9:fd:49:5d:45:7e:90:67:d2:b1:3a:cd:06:50:
                    18:14:d2:2e:c6:d7:14:86:3b:f3:4e:8e:25:32:d6:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FB:41:41:DF:73:65:D3:D9:02:14:8D:F3:B1:F1:A8:25:03:9C:B7
            X509v3 Authority Key Identifier:
                keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:97:2f:0c:01:03:eb:a1:c0:27:a3:1b:8c:5b:bd:b0:b3:
         8e:42:e5:90:94:bc:7f:a2:03:7e:8d:b3:66:a4:4d:fb:54:5d:
         52:a0:47:13:db:2c:de:90:78:15:52:50:5f:22:6c:a0:4e:bc:
         7d:17:b9:c8:8e:9d:5d:a3:64:76:c2:4c:01:0d:06:48:af:6d:
         8f:58:2b:16:48:41:ff:6c:fa:83:4e:fd:b6:ec:1e:fc:cb:69:
         e7:b3:82:86:f7:02:09:8e:fb:b7:54:e4:de:06:29:e6:3a:57:
         67:67:fb:4b:2c:14:59:90:f0:5d:02:97:0a:e8:05:a5:15:e7:
         ca:a9:01:40:16:ba:c3:7f:dd:a2:22:23:14:e7:69:51:e6:89:
         30:05:19:fb:e1:6f:a8:9f:9e:71:92:b2:74:12:85:13:14:e2:
         b5:ef:83:f0:86:c9:08:5d:44:3a:c0:67:7e:51:fa:e0:c5:d3:
         5d:00:8c:72:61:f5:fb:96:a1:8d:f5:17:8b:f0:d3:48:ac:86:
         4f:6b:39:b4:00:a3:e1:9c:16:a6:49:4b:ca:40:8d:28:ed:af:
         79:7b:75:15:44:57:46:ab:fb:b5:06:cd:8b:5a:10:fd:2d:e8:
         4c:15:6e:36:2a:f8:92:c8:c7:39:19:15:08:b3:2a:57:01:c7:
         37:47:c4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:41:36 2026 by rpki-client