Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
File:                     34352e3138372e33322e302f32322d3234203d3e20323639353234.roa (raw, json)
Hash identifier:          tErLgldwovW0fTiCmIY65droY1/nB0JYmtcOX0k3lKQ=
Subject key identifier:   98:DF:9F:91:66:F7:2A:9E:68:8A:BD:28:67:80:20:EA:33:8A:00:09
Certificate issuer:       /CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
Certificate serial:       76F51B192A69020317B00F5582A6CC4D9D6E1749
Authority key identifier: BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa
Signing time:             Tue 15 Sep 2026 14:45:21 +0000
ROA not before:           Tue 15 Sep 2026 14:40:21 +0000
ROA not after:            Tue 14 Sep 2027 14:45:21 +0000
asID:                     269524
IP address blocks:        45.187.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 06:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f5:1b:19:2a:69:02:03:17:b0:0f:55:82:a6:cc:4d:9d:6e:17:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
        Validity
            Not Before: Sep 15 14:40:21 2026 GMT
            Not After : Sep 14 14:45:21 2027 GMT
        Subject: CN=98DF9F9166F72A9E688ABD28678020EA338A0009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:88:5c:1b:ae:a2:ee:50:02:2a:60:b5:74:
                    93:7a:85:80:c7:11:05:c6:83:29:5e:53:f1:f1:a1:
                    4d:6f:d4:c2:01:26:62:73:3d:92:00:02:de:59:12:
                    28:e4:04:ad:f6:6c:00:2e:42:b2:76:dd:66:27:2a:
                    f4:17:ae:56:52:a2:bc:2b:5e:c7:21:7b:19:55:0b:
                    9b:fd:6b:4e:f3:e1:2c:a5:c5:2c:2f:0e:1e:ee:cd:
                    54:41:11:55:ad:87:a3:b5:1c:42:89:df:79:51:3c:
                    c0:64:6b:8b:88:28:c4:6a:ec:75:d2:f5:ce:89:56:
                    3c:7a:f1:6d:fa:7f:ba:b6:72:88:1e:fa:f0:15:f6:
                    a1:b5:9b:7c:87:19:ba:3d:8d:34:78:66:b4:12:8a:
                    24:0f:5f:07:79:f9:d3:cd:76:6e:df:5c:a5:10:55:
                    8f:b0:10:d0:9f:b5:da:7d:97:16:31:22:fb:b0:d2:
                    0f:0a:ec:b0:cc:83:fc:92:44:b1:d0:0f:ac:39:2f:
                    e6:92:a2:17:96:c5:70:80:44:a4:bc:a6:82:b1:9c:
                    2e:6d:ce:28:41:8d:5c:b5:ff:d7:1c:8d:42:08:41:
                    d6:91:90:07:5f:e4:d5:96:71:94:4e:55:7a:b9:ad:
                    f1:9c:0a:34:0e:c9:96:1c:2e:bc:70:79:cd:e7:85:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DF:9F:91:66:F7:2A:9E:68:8A:BD:28:67:80:20:EA:33:8A:00:09
            X509v3 Authority Key Identifier:
                keyid:BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/34352e3138372e33322e302f32322d3234203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:c8:83:46:e6:6a:ca:e3:86:32:a4:08:9b:30:c7:bb:d7:
         83:c9:39:f7:96:5b:92:4c:db:cd:3f:75:81:ea:5a:fc:0f:4a:
         7b:0c:2d:d9:2b:d1:81:25:cc:74:aa:f5:b2:a7:c9:60:f5:b8:
         19:65:56:78:9d:d6:d7:9a:2e:1b:9b:a2:bf:9a:95:d9:a1:41:
         46:cb:88:2f:09:8c:b2:cb:51:e2:0b:dc:a7:69:c4:7e:ee:e8:
         10:a4:6e:fd:50:7c:ce:ec:72:c6:05:24:98:69:c4:ed:57:b9:
         cc:c9:88:80:f6:0f:55:9f:60:cb:90:66:ee:8c:5a:a6:d7:28:
         7f:45:29:eb:4c:d2:b8:dd:ec:8f:ef:62:5b:95:e2:06:2f:41:
         d3:13:87:5d:6f:99:4b:2c:17:00:52:71:79:d2:5a:2e:7c:73:
         99:07:a4:86:b2:58:3c:7d:2e:6d:94:08:5f:be:4f:52:b7:e9:
         1f:b6:67:c1:03:4f:f7:32:75:19:10:46:10:6c:d1:df:e4:a6:
         88:79:f6:60:b2:6b:72:39:06:b1:f5:37:5d:28:f0:10:d1:db:
         7b:7d:b8:41:0e:fd:a8:51:bb:31:db:9c:8a:54:ed:9f:2c:9a:
         ee:24:e2:42:c4:97:ae:19:cf:7c:6b:98:20:ac:1c:f9:59:52:
         f4:e3:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:09:29 2026 by rpki-client