Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
File:                     34352e3136332e34382e302f32322d3234203d3e20323731363232.roa (raw, json)
Hash identifier:          SQyjWEYuUtuX6TbWZpb0+u9w2wlU+9K7gLm5OuheZjo=
Subject key identifier:   BE:CF:0D:3E:28:72:12:5F:FD:9E:E7:D4:DE:D2:29:11:F7:83:93:88
Certificate issuer:       /CN=8382FC37DD96749FCFC2548CF3020524D7A1B822
Certificate serial:       29AAE3F9F35DA293623BABFA0CE66607B9DC5B0B
Authority key identifier: 83:82:FC:37:DD:96:74:9F:CF:C2:54:8C:F3:02:05:24:D7:A1:B8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa
Signing time:             Mon 19 Oct 2026 04:05:13 +0000
ROA not before:           Mon 19 Oct 2026 04:00:13 +0000
ROA not after:            Mon 18 Oct 2027 04:05:13 +0000
asID:                     271622
IP address blocks:        45.163.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 03:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:aa:e3:f9:f3:5d:a2:93:62:3b:ab:fa:0c:e6:66:07:b9:dc:5b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8382FC37DD96749FCFC2548CF3020524D7A1B822
        Validity
            Not Before: Oct 19 04:00:13 2026 GMT
            Not After : Oct 18 04:05:13 2027 GMT
        Subject: CN=BECF0D3E2872125FFD9EE7D4DED22911F7839388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:f9:dd:e1:42:66:39:0a:ea:9b:47:65:c2:
                    aa:02:6b:7d:a9:bb:cb:17:b4:12:fb:5f:0d:a7:22:
                    9b:61:68:54:ce:3c:64:56:ec:94:8b:6c:30:f8:88:
                    5d:48:21:bf:be:ee:a9:0b:f7:2c:89:39:9b:3c:9b:
                    46:da:1a:60:8d:36:57:03:e8:93:51:99:24:8b:17:
                    a3:f0:54:50:7c:fa:40:f8:61:27:8a:ad:5a:7c:9d:
                    ec:f5:18:ef:e4:d9:35:4c:65:30:82:b1:28:5e:3d:
                    79:25:d3:8c:ce:1f:df:d8:bf:af:f1:f1:2f:34:a6:
                    2b:50:f0:74:e6:aa:1b:0d:1c:76:ae:16:00:6d:0f:
                    71:93:33:55:90:65:88:d2:e4:95:4d:f6:17:64:a1:
                    ce:43:d3:ce:2f:78:39:fe:01:7a:15:17:1f:bd:41:
                    ed:68:62:50:2b:cb:4a:06:9a:23:c1:34:ff:52:c6:
                    c2:db:7f:59:88:e7:a8:15:70:25:0b:ba:58:30:0b:
                    e4:fd:08:c4:2a:02:b4:03:18:13:29:d5:35:e2:1e:
                    47:7c:3b:be:53:88:e0:a5:eb:65:53:67:54:87:07:
                    b4:f6:7d:04:b4:32:ad:59:1a:de:d0:b3:7e:60:ca:
                    7b:2f:b6:bd:76:33:bc:4e:82:33:0e:c6:d7:56:06:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CF:0D:3E:28:72:12:5F:FD:9E:E7:D4:DE:D2:29:11:F7:83:93:88
            X509v3 Authority Key Identifier:
                keyid:83:82:FC:37:DD:96:74:9F:CF:C2:54:8C:F3:02:05:24:D7:A1:B8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/34352e3136332e34382e302f32322d3234203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:98:69:bc:79:6d:fc:bf:b9:34:ad:6d:bb:0e:6d:43:5b:
         96:61:2f:06:2c:f8:40:31:48:0c:98:3d:fa:39:cd:9f:59:70:
         b8:d2:ef:3d:15:e4:a2:a3:f2:65:db:2c:95:5b:be:ef:62:d9:
         b9:d9:e8:48:0e:9e:81:53:4d:d3:e2:a0:5d:a3:d4:95:c5:01:
         93:65:8e:5d:94:60:ed:98:dc:6e:4d:7a:00:53:e5:14:e2:97:
         25:ad:06:f4:e8:de:f3:26:cf:03:49:1f:6c:d9:ba:24:db:a4:
         7d:ac:43:b2:9c:cc:f2:0a:99:fb:90:cb:ac:d5:7b:36:50:f4:
         0c:47:07:b1:b7:b8:54:d2:41:3a:eb:f5:93:6f:98:ba:29:e1:
         18:2f:c1:a7:85:99:40:a3:49:6f:53:f1:aa:10:9a:23:46:f2:
         d4:4b:7c:6c:29:fc:eb:8e:8f:3d:2a:48:b1:f7:fd:15:67:94:
         e5:46:8a:99:ea:a4:c3:4c:2d:1e:2a:71:34:35:24:b7:b4:70:
         e9:03:d6:e8:a3:6d:df:ab:2c:05:35:db:e3:c6:e7:79:03:fe:
         c2:cf:48:12:24:91:b2:b2:47:70:7c:d8:3e:c1:bd:8f:9f:ae:
         e6:f7:b3:d7:85:15:83:7c:0e:26:53:40:0e:32:ac:97:ab:47:
         58:fa:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:54:11 2026 by rpki-client