Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa
File:                     34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa (raw, json)
Hash identifier:          92iebMM2VLcPBWSCdR8FQAEGt8303XYu3d3zWfwIVX4=
Subject key identifier:   42:97:E9:1D:45:12:2C:13:68:28:89:5A:C3:6B:2E:02:68:B6:48:1B
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       7326A7E3F7706C0205C2AC2E8B04965D788DC96B
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa
Signing time:             Tue 08 Sep 2026 11:53:29 +0000
ROA not before:           Tue 08 Sep 2026 11:48:29 +0000
ROA not after:            Tue 07 Sep 2027 11:53:29 +0000
asID:                     263328
IP address blocks:        45.164.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 01:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:26:a7:e3:f7:70:6c:02:05:c2:ac:2e:8b:04:96:5d:78:8d:c9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Sep  8 11:48:29 2026 GMT
            Not After : Sep  7 11:53:29 2027 GMT
        Subject: CN=4297E91D45122C136828895AC36B2E0268B6481B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:2a:86:d3:8f:41:fc:0a:28:00:ef:be:f6:
                    ba:e4:b5:9a:40:dc:0d:2b:31:86:12:ba:9c:59:05:
                    33:0a:ed:ea:f2:12:a8:06:c5:59:35:09:5b:54:77:
                    25:8f:63:31:38:9a:ef:87:90:b6:ce:a7:ca:4e:e3:
                    d8:cc:36:3a:3b:5e:88:4f:63:ee:f4:47:d2:4f:cc:
                    07:aa:7b:e0:a0:1f:fe:f7:bc:d8:0a:10:32:0b:6a:
                    6d:8a:e8:9d:f4:0e:64:ce:25:39:ec:fe:25:86:62:
                    14:e8:39:f6:2c:d4:8f:44:b0:95:58:c2:b0:9c:f8:
                    c9:e1:b7:11:23:e6:c1:42:e7:0d:03:e1:c7:04:3d:
                    25:89:96:e2:c9:b1:10:5e:87:c7:c1:1f:8a:c4:7e:
                    8d:c4:12:41:aa:55:92:bc:f8:0b:7f:6b:06:8c:75:
                    00:03:5e:bf:ce:76:c0:61:d4:f9:60:92:0b:3c:1c:
                    b4:22:16:ed:a3:29:14:fd:97:d0:16:b3:3a:ef:15:
                    5e:68:1a:ab:fa:fd:54:42:aa:3e:d5:37:8b:87:b6:
                    bf:a7:6e:f1:85:0a:31:ea:f8:e7:54:bd:a6:fc:8f:
                    70:9c:8a:49:56:1d:6e:ef:25:af:b2:79:52:34:09:
                    38:c8:d4:bf:94:79:b9:82:96:ea:4c:8f:f6:7e:bc:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:97:E9:1D:45:12:2C:13:68:28:89:5A:C3:6B:2E:02:68:B6:48:1B
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/34352e3136342e3130342e302f32332d3233203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:fe:a7:21:05:2b:cf:12:27:e0:3b:55:59:34:67:c3:d2:
         79:d7:2c:3e:e6:9f:cc:b2:d8:b9:c5:50:e8:2f:ba:07:2e:28:
         18:fa:f3:50:30:6a:97:b2:7f:22:b7:40:dd:40:15:f3:13:4e:
         6b:e0:7b:a7:94:72:a1:fe:4b:79:b4:b1:48:3f:d0:77:ac:ca:
         7a:9a:98:72:54:6c:e9:ab:ed:40:f8:f6:aa:24:4c:e4:d0:33:
         f7:3b:62:a1:a3:db:22:47:4f:e1:94:45:1b:46:5e:a7:87:98:
         ec:34:08:4a:ce:26:35:aa:af:85:3b:0c:b8:e0:2f:5f:70:b7:
         8a:c4:91:eb:fd:5e:73:4a:ba:4e:c4:f3:d6:d2:51:7f:d0:49:
         5e:15:22:06:f6:d2:77:ab:e3:e1:d3:8a:2a:14:7d:1a:bc:1b:
         de:4f:1a:4b:0d:85:33:28:94:5a:66:34:1b:0e:58:0b:21:ce:
         6b:8d:24:2d:75:70:a7:88:9a:70:32:bb:ee:b7:ac:8a:ec:8e:
         0a:2d:e9:b1:a3:9c:57:6a:cf:96:65:c1:17:c7:aa:b9:c1:45:
         a2:09:61:68:94:ac:fc:bc:b5:16:18:eb:d3:f3:96:ce:ae:e8:
         d3:3e:77:8d:3d:5b:8c:6f:dd:45:3a:6f:8b:33:f2:a0:9d:e5:
         6a:5e:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:21:24 2026 by rpki-client