Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa
File:                     34352e3233322e31312e302f32342d3234203d3e20323637323831.roa (raw, json)
Hash identifier:          Srv+G29QOzIqlK8DA4pvxB0UX5pvhnWf2cY+wBqtW3c=
Subject key identifier:   CB:23:A3:17:AF:E2:81:DD:C1:9A:49:E8:3D:DE:B6:D6:BF:19:BB:25
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       22577F513F0364C23962203976D5F1695789EF0B
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa
Signing time:             Tue 15 Sep 2026 19:26:00 +0000
ROA not before:           Tue 15 Sep 2026 19:21:00 +0000
ROA not after:            Tue 14 Sep 2027 19:26:00 +0000
asID:                     267281
IP address blocks:        45.232.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 20:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:57:7f:51:3f:03:64:c2:39:62:20:39:76:d5:f1:69:57:89:ef:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Sep 15 19:21:00 2026 GMT
            Not After : Sep 14 19:26:00 2027 GMT
        Subject: CN=CB23A317AFE281DDC19A49E83DDEB6D6BF19BB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:75:b1:62:d9:d3:d4:65:f8:19:56:40:d5:
                    65:86:2c:73:9b:07:97:ae:2b:18:1d:5b:b2:a8:96:
                    8c:fd:6e:05:f3:ff:aa:1b:6b:92:14:e8:89:d4:0d:
                    8d:0a:80:fb:b8:27:21:c2:d4:af:05:aa:ee:b5:1c:
                    b5:f0:f8:5d:af:f3:94:b8:e3:e3:01:48:dd:61:cf:
                    86:84:e7:1f:3b:9b:69:8c:0d:9e:d1:e9:6c:d3:b1:
                    09:79:de:67:3b:56:75:53:63:f1:22:84:58:5c:30:
                    4f:be:15:ad:0e:cd:28:d3:ee:02:94:5d:88:53:ea:
                    c2:42:ab:fd:c2:d3:50:ba:eb:eb:58:f4:03:6d:a6:
                    ae:66:07:27:0b:81:4e:b5:21:9d:81:45:94:03:cb:
                    ff:26:35:73:63:7f:11:bd:59:81:4e:1f:2f:ae:49:
                    10:d9:8e:be:a0:bc:3c:5c:b0:fd:bb:74:8b:5e:97:
                    11:5c:0f:38:28:ea:9d:ae:a4:3e:5e:17:93:46:2a:
                    f2:ab:d3:cc:c0:9b:e3:b4:1f:32:c1:a2:30:6c:d0:
                    cd:ce:ef:3c:ef:45:cd:13:1f:26:cc:76:10:87:b1:
                    79:b7:d9:a4:ec:e9:11:b2:70:3b:ad:cd:a4:5a:eb:
                    cd:d5:bb:2e:61:31:cb:63:df:00:82:9f:8b:60:56:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:A3:17:AF:E2:81:DD:C1:9A:49:E8:3D:DE:B6:D6:BF:19:BB:25
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31312e302f32342d3234203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:05:e0:96:09:21:70:9e:21:65:31:01:d9:ce:31:e2:9e:
         d0:a3:ff:d5:b6:bc:05:63:bf:5d:a3:96:70:26:75:f6:11:a7:
         67:fe:55:1c:ef:c0:6b:1c:4b:2d:79:aa:43:90:14:49:e0:5a:
         1b:32:6d:bb:25:e1:61:76:9a:08:9d:79:4c:62:cc:47:4f:59:
         a2:be:e8:26:68:00:8e:2b:26:ad:0e:1f:73:71:e6:cf:f8:d0:
         89:d3:32:c1:d5:ba:a6:58:2d:21:ce:9c:19:03:19:fe:5e:c4:
         c4:55:f0:b9:d6:94:53:cd:3c:b3:47:4e:1e:f3:79:4a:d3:54:
         4d:cc:5f:89:63:22:46:57:49:a7:6f:60:21:31:3b:78:bd:e0:
         cf:23:81:00:74:56:f0:0e:eb:f3:4b:cd:33:17:8c:01:e8:e3:
         10:e8:2b:26:57:87:c8:fd:ed:7d:02:f1:35:ed:47:41:ef:2b:
         b5:4c:5a:b7:02:bc:45:36:3d:df:c9:bf:68:39:6a:21:85:ba:
         bf:b5:24:0e:ea:96:d1:26:6e:6f:51:08:75:6b:e5:61:2f:94:
         a9:3a:ba:f7:d1:2d:fe:fc:3c:95:5b:f6:10:10:b2:70:f2:c5:
         a9:f8:7e:3a:12:0f:dd:ca:8e:e9:d6:51:94:90:19:de:24:b7:
         00:d6:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:24:50 2026 by rpki-client