Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323733353933.roa
File:                     34352e3233392e3137372e302f32342d3234203d3e20323733353933.roa (raw, json)
Hash identifier:          nuAzGFYRy6XVxWSK8+bF4+vidRnSxQ28PeJmLxroQ/k=
Subject key identifier:   16:49:55:1C:DC:C5:2B:E2:9A:25:73:DD:9D:B4:78:96:C5:68:94:6D
Certificate issuer:       /CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
Certificate serial:       2A14B568FE8E5C6A6A22CC6ACD8E1C4FF9A9521D
Authority key identifier: 98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323733353933.roa
Signing time:             Fri 23 Oct 2026 17:58:50 +0000
ROA not before:           Fri 23 Oct 2026 17:53:50 +0000
ROA not after:            Fri 22 Oct 2027 17:58:50 +0000
asID:                     273593
IP address blocks:        45.239.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl
                          rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:14:b5:68:fe:8e:5c:6a:6a:22:cc:6a:cd:8e:1c:4f:f9:a9:52:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9828F8A8915A72753136825A1F46FECBBF95B7E4
        Validity
            Not Before: Oct 23 17:53:50 2026 GMT
            Not After : Oct 22 17:58:50 2027 GMT
        Subject: CN=1649551CDCC52BE29A2573DD9DB47896C568946D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:da:e5:67:43:86:02:74:d3:ed:7f:23:aa:
                    9b:20:86:40:4c:d2:2b:91:44:1b:6f:1c:62:a3:de:
                    ed:8d:aa:ba:6d:0e:d4:d7:51:9c:30:bd:ee:50:06:
                    6f:ce:a7:93:60:01:b5:f7:cf:da:3b:f1:e4:c0:9b:
                    11:a2:8e:f9:e2:f9:17:13:de:32:a6:d5:94:62:f1:
                    24:6a:8c:29:7e:9c:eb:25:92:ac:92:af:36:e9:78:
                    7a:1f:e4:a5:75:0f:f8:f6:54:15:ea:7f:66:3a:67:
                    3a:3c:5c:16:65:50:4b:5c:9d:a1:8a:24:26:4d:6a:
                    3e:95:00:1c:a0:6d:7a:9d:53:d1:ce:a0:14:77:5e:
                    3f:bb:08:99:08:1d:e3:c9:cd:74:34:85:41:ac:2f:
                    e4:43:db:46:d6:5e:dd:74:03:6b:84:ff:4f:e7:e9:
                    85:14:9e:f7:b5:a7:b4:94:01:0d:ff:51:f9:b8:2e:
                    10:31:b4:e9:ab:11:70:d7:79:db:57:24:0c:82:4d:
                    01:52:44:bd:7f:f1:6a:2b:94:3c:5a:23:60:bf:c4:
                    4b:c3:02:29:56:ce:7d:ee:af:c7:93:52:8b:10:6f:
                    6b:18:e1:18:64:f7:8f:c0:7c:15:d5:7e:e0:ae:2c:
                    4c:db:0c:93:f2:62:a5:87:74:7b:ad:60:f9:6d:9b:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:49:55:1C:DC:C5:2B:E2:9A:25:73:DD:9D:B4:78:96:C5:68:94:6D
            X509v3 Authority Key Identifier:
                keyid:98:28:F8:A8:91:5A:72:75:31:36:82:5A:1F:46:FE:CB:BF:95:B7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/9828F8A8915A72753136825A1F46FECBBF95B7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9828F8A8915A72753136825A1F46FECBBF95B7E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MGvwu4dbnicGLstD2KJzdKfw9kmHNUTzdwSYGHkwYoj/0/34352e3233392e3137372e302f32342d3234203d3e20323733353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:71:e4:59:d4:f1:93:bc:40:45:0f:d5:bf:b4:32:90:9c:02:
         f0:64:62:c9:f6:2d:1f:96:e7:a6:cb:86:5f:c0:ee:61:a3:d9:
         b6:76:16:65:0b:b4:63:6b:46:b9:a8:60:af:55:78:8f:97:d1:
         89:22:d9:ef:60:aa:86:e6:7c:87:fd:dd:80:a4:00:c4:9b:28:
         99:8a:c4:e1:dd:15:ce:1e:f4:12:c4:66:63:1b:c9:97:6b:73:
         2b:d3:fc:66:06:e0:40:e0:7c:5d:32:90:e3:7e:2c:ea:60:9c:
         5d:ed:8c:ec:c1:50:f9:d2:9a:46:e4:1f:d0:c8:88:1f:15:01:
         2e:93:4a:a7:81:5c:f8:21:5a:dc:81:73:9f:ec:02:c8:ad:3b:
         06:58:24:9b:18:62:95:ab:df:19:b5:e8:80:c9:59:9e:39:ec:
         39:b6:ef:b5:a7:fd:1a:f2:88:1e:bf:21:08:bb:16:17:ac:a5:
         bb:25:81:85:d9:cf:c7:da:98:9a:11:60:75:e3:9d:6c:fb:81:
         e0:6e:d5:a5:7e:9e:b2:e8:e2:a1:99:cb:ed:9d:41:dd:ab:be:
         7a:19:80:85:fe:3b:28:75:7a:ef:88:69:7c:64:a7:39:d3:f1:
         ca:04:39:9e:e2:e8:47:3a:a2:94:c1:81:e3:80:3a:83:5a:0f:
         53:a9:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:48:31 2026 by rpki-client