Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e31362f32392d3239203d3e20323639303036.roa
File:                     34352e3137362e3135302e31362f32392d3239203d3e20323639303036.roa (raw, json)
Hash identifier:          zR8XWtgWqklbjAuYVfdbSUNpf3fO79KtpioeqSd9Eyo=
Subject key identifier:   8D:F2:40:29:9B:28:68:E2:CB:C9:26:F8:74:FC:6A:69:E7:41:DB:D4
Certificate issuer:       /CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
Certificate serial:       2956E7DB5363D53B72B8C90528C6023F4CA87373
Authority key identifier: EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e31362f32392d3239203d3e20323639303036.roa
Signing time:             Wed 02 Sep 2026 12:12:19 +0000
ROA not before:           Wed 02 Sep 2026 12:07:19 +0000
ROA not after:            Wed 01 Sep 2027 12:12:19 +0000
asID:                     269006
IP address blocks:        45.176.150.16/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl
                          rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:56:e7:db:53:63:d5:3b:72:b8:c9:05:28:c6:02:3f:4c:a8:73:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6600AD31A8FADB23274EDCA4EC7587097788F9
        Validity
            Not Before: Sep  2 12:07:19 2026 GMT
            Not After : Sep  1 12:12:19 2027 GMT
        Subject: CN=8DF240299B2868E2CBC926F874FC6A69E741DBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:32:47:30:dd:c2:a3:17:1e:88:44:d0:3f:
                    7a:f4:d4:7c:38:3b:8f:a3:f8:93:8a:ab:47:11:df:
                    4e:7e:8e:04:d5:84:1b:03:41:cc:fa:1a:4b:f8:94:
                    57:18:34:89:80:de:cb:92:6b:d8:78:f2:48:22:f0:
                    3a:8c:d6:a2:30:6b:ec:bc:21:ad:91:9c:a4:d2:ad:
                    9b:0e:49:5d:f6:8b:8a:87:65:75:87:89:e9:89:f7:
                    ac:76:27:af:82:e4:da:5b:82:14:73:91:6e:f7:53:
                    e8:57:fe:4b:82:90:6d:06:af:8e:5e:66:2f:b1:49:
                    9e:c3:ce:33:9c:f9:5f:87:5b:94:16:64:ad:e2:c8:
                    b3:6a:12:12:d9:39:72:c2:54:3a:f2:a7:ae:be:dd:
                    2b:f5:f6:19:5d:d9:9b:e7:cc:30:65:46:27:de:7d:
                    8e:eb:ad:c4:31:ad:24:e6:f3:f6:b2:a4:b2:30:33:
                    ad:e1:e1:cb:6d:da:ad:54:b6:a4:56:83:c7:74:c3:
                    49:db:06:8c:72:88:e3:d4:2c:be:40:b5:08:9e:fe:
                    a1:38:5d:24:58:80:44:76:58:69:c3:ff:6a:d8:c4:
                    13:53:43:e7:d0:b0:7e:71:91:63:f0:46:4e:28:6d:
                    71:de:7f:b1:95:0d:d9:a2:f7:a8:21:96:e0:33:df:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F2:40:29:9B:28:68:E2:CB:C9:26:F8:74:FC:6A:69:E7:41:DB:D4
            X509v3 Authority Key Identifier:
                keyid:EC:66:00:AD:31:A8:FA:DB:23:27:4E:DC:A4:EC:75:87:09:77:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/EC6600AD31A8FADB23274EDCA4EC7587097788F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6600AD31A8FADB23274EDCA4EC7587097788F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZSf7RFYvVFzP87WnVPuThWvFyj1pBcmPik6kPHEVP7Q/0/34352e3137362e3135302e31362f32392d3239203d3e20323639303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.150.16/29

    Signature Algorithm: sha256WithRSAEncryption
         6d:df:ca:30:95:10:96:b0:18:b7:c8:54:5e:47:25:5f:2e:39:
         9c:d2:89:5b:9f:79:7d:b1:45:b9:96:b3:1a:d9:c1:05:aa:b7:
         24:4e:e0:52:8f:27:25:be:a7:37:d2:31:11:8a:ed:b0:05:ba:
         54:48:5b:fa:b0:97:50:05:d2:d2:54:8b:a8:26:99:bf:63:52:
         e1:e8:77:0d:a1:80:ef:0f:51:41:0c:d6:49:ba:ec:87:54:ad:
         a8:f2:64:fa:51:8c:8b:99:75:da:ff:e2:c8:dd:69:6c:5d:2f:
         e3:2a:81:1b:05:10:bc:a9:5f:77:e6:fb:f7:a2:00:de:b8:87:
         45:c0:fa:07:94:df:14:24:d0:62:fc:33:88:f5:ba:06:2b:a0:
         8d:1e:f9:41:a7:ca:af:2e:04:dd:a5:c2:d0:57:97:35:2c:a0:
         d1:5f:24:29:f0:a3:22:a8:af:07:06:e4:4b:9a:6c:4a:e3:db:
         ad:0e:19:2a:80:27:47:17:ac:19:bc:85:fa:7b:8a:e9:e9:3d:
         3d:5e:f8:06:27:0e:ec:63:e2:89:09:f1:27:ca:0e:f7:dc:fb:
         b9:ad:99:84:2c:bd:c1:25:43:76:ed:32:a0:c6:a8:53:64:74:
         ac:86:4b:73:62:f8:47:57:56:96:86:86:de:b1:9f:ac:59:7c:
         eb:ca:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:28:21 2026 by rpki-client